Analysis

  • max time kernel
    601s
  • max time network
    608s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/01/2024, 12:59

General

  • Target

    PolyMC-Windows-Setup-6.1.exe

  • Size

    35.7MB

  • MD5

    5bb2a28bb44d9033b2faa48f32da0808

  • SHA1

    30b5f1936b77874ec3cf698e0427164d67da48bc

  • SHA256

    a24c03e63449db0f994c715115c7648e88182888305be3554ef8f9a9215a0501

  • SHA512

    3f05d74741a5fc69f58ab33499ded5760c9af3ebd6d8b531259b5c45b51c9273e3a09c6a1fa12a3b0d8caa54476d212aa7bdda3f8a41bc987beef5255747bab5

  • SSDEEP

    786432:rO6WYUESAnXNJrFIwY/p/bMVrRYdi3UsGYBniW890Ker:rlWYIAn9AwYR/wVrRYM33G2ni9iX

Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 64 IoCs
  • Modifies file permissions 1 TTPs 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Kills process with taskkill 1 IoCs
  • Modifies registry class 39 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 24 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PolyMC-Windows-Setup-6.1.exe
    "C:\Users\Admin\AppData\Local\Temp\PolyMC-Windows-Setup-6.1.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2004
    • C:\Users\Admin\AppData\Local\Temp\nsv87DE.tmp\nsDA16.tmp
      "C:\Users\Admin\AppData\Local\Temp\nsv87DE.tmp\nsDA16.tmp" TaskKill /IM polymc.exe /F
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:4028
      • C:\Windows\SYSTEM32\TaskKill.exe
        TaskKill /IM polymc.exe /F
        3⤵
        • Kills process with taskkill
        • Suspicious use of AdjustPrivilegeToken
        PID:2944
    • C:\Users\Admin\AppData\Local\Programs\PolyMC\polymc.exe
      "C:\Users\Admin\AppData\Local\Programs\PolyMC\polymc.exe"
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • Modifies registry class
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:988
      • C:\Program Files\Java\jre-1.8\bin\javaw.exe
        "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar C:/Users/Admin/AppData/Local/Programs/PolyMC/jars/JavaCheck.jar
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:464
        • C:\Windows\system32\icacls.exe
          C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M
          4⤵
          • Modifies file permissions
          PID:392
      • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe
        "C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe" -jar C:/Users/Admin/AppData/Local/Programs/PolyMC/jars/JavaCheck.jar
        3⤵
          PID:4060
        • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe
          javaw -jar C:/Users/Admin/AppData/Local/Programs/PolyMC/jars/JavaCheck.jar
          3⤵
            PID:4908
          • C:\Program Files\Java\jdk-1.8\bin\javaw.exe
            "C:\Program Files\Java\jdk-1.8\bin\javaw.exe" -jar C:/Users/Admin/AppData/Local/Programs/PolyMC/jars/JavaCheck.jar
            3⤵
              PID:4588
            • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe
              "C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe" -Xms512m -Xmx4096m -jar C:/Users/Admin/AppData/Local/Programs/PolyMC/jars/JavaCheck.jar
              3⤵
                PID:2496
              • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe
                "C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe" -jar C:/Users/Admin/AppData/Local/Programs/PolyMC/jars/JavaCheck.jar
                3⤵
                  PID:2952
                • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe
                  "C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe" -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump -Xms512m -Xmx4096m -Duser.language=en -Djava.library.path=C:/Users/Admin/AppData/Roaming/PolyMC/instances/1.20/natives -cp C:/Users/Admin/AppData/Local/Programs/PolyMC/jars/NewLaunch.jar org.polymc.EntryPoint
                  3⤵
                    PID:692
              • C:\Users\Admin\AppData\Local\Programs\PolyMC\polymc.exe
                "C:\Users\Admin\AppData\Local\Programs\PolyMC\polymc.exe"
                1⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                • Suspicious behavior: AddClipboardFormatListener
                • Suspicious behavior: GetForegroundWindowSpam
                • Suspicious use of WriteProcessMemory
                PID:3796
                • C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe
                  "C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe" -jar C:/Users/Admin/AppData/Local/Programs/PolyMC/jars/JavaCheck.jar
                  2⤵
                    PID:1620

                Network

                MITRE ATT&CK Enterprise v15

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\Qt6Charts.dll

                  Filesize

                  128KB

                  MD5

                  6a3551517ec3d8ef505e23589f78ba15

                  SHA1

                  1e2a9485bc88fb3f68ad15153ce3bbd0b4b41bf6

                  SHA256

                  31517c7ed6c5a198a17ea6cf605bc8de384ff46bba7b5339f8d0f29f430f8267

                  SHA512

                  8f26a05385afed7e5f1f3854eb20839c7ec0a3962a5ff37c62a021223247cefa3283b01274355455f07a6e0955520480bb89718d545ff1e2b30ede5e5f537afa

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\Qt6Charts.dll

                  Filesize

                  288KB

                  MD5

                  6a38939cf5554c6bd16956bb0cb71450

                  SHA1

                  d7d08d042cb775a2c61dacf20633ee6fdc21a75d

                  SHA256

                  f76cddefbc3db933892be19930feaad0133cfb2988709cc4c5ea05bdb8d26b5b

                  SHA512

                  6960ed9c2c095a51fc7ed605a683e2db7d8b92e9bd836d12132da571225ef60ca06de46d44894f95a304297546ed7bbdad2620bea1f8b1ac2ac192dda1989232

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\Qt6Core.dll

                  Filesize

                  1.2MB

                  MD5

                  e08ea22be008bfb8b58ff0b259c7d773

                  SHA1

                  ee6e678ca8e020156c538dd0f975fbae8403252b

                  SHA256

                  ab963612e900fa78e1677fad876d0f980fea186b4f0fd6736660e77ccc651b55

                  SHA512

                  aa620c829e28df600c03e43c5d9a4ea15ada1193654c997634dbfb41215cebeb9a04a75681f5df598278a79031c1b95cc3fc795e6084061f4caaedc93e0f7e47

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\Qt6Core.dll

                  Filesize

                  1.1MB

                  MD5

                  0f39767fb15a410fc86cffabe6f1f11c

                  SHA1

                  3c19dbd1949192f59c91476c4e55baf4f367f3c1

                  SHA256

                  8fe2855d0882f1748d4c4825b069cece60c4eec1b784e5a5bd529992cbce15ae

                  SHA512

                  56f20e173dc9d0fc6c4cd391471c6fd706d73d5bccb9752a9c0ce7fa59cdc3ccefb736e13006a6f661805b76ba93f985df7bd0514ec859a7468a447fa5ef9d0e

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\Qt6Core5Compat.dll

                  Filesize

                  14KB

                  MD5

                  d55e90180f129d2315a592ea497bed8b

                  SHA1

                  d672a81a3901aedf023487a99eb4631b9d0b8257

                  SHA256

                  1900096efc220d81ebb1da32979dbb18922a93091eeaca8632e349d5065c18b8

                  SHA512

                  353a9103d7ca5aa396c35e7239679db299982cd7c8154015d7b25dd45a60d8b075620f042dd33e7c167f8984a31912a9bcf3bb668c346c7c744be295ea3719fd

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\Qt6Core5Compat.dll

                  Filesize

                  345KB

                  MD5

                  7ecde6292e58c3d8d92384f30ddac51b

                  SHA1

                  1165303ae1ea2393cf0f24b104c6fa8b8bce6875

                  SHA256

                  966d7ce2b40b404bb2bd30576e04400aabab9e4e2b099c74c40b492c966c5ca5

                  SHA512

                  9947651ef044dd2a8a7c19a07dd56baca3a0e3e8a5697f1fc51522d2f504b5a80d997abb6ae2a5e22d29800b5599de4bf79195bd91411f469c50b175a6b806bc

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\Qt6Gui.dll

                  Filesize

                  917KB

                  MD5

                  771b2936493c939de8702b740143b1cc

                  SHA1

                  d39fb870037de9cc3bc7466e217279f4361a7372

                  SHA256

                  cfcc2749f015f9a072b63951ecf91a5cd0ad1aeacfe56b02c454f1bdf9acdbba

                  SHA512

                  962aa5f42c596cad4e1cbe0a27456104ddc076906a7005c34e326d6adeffc8f29b684a42d11e54de4c94902ae432f84fc324452ec092ac578dd6f2729f1ff8f1

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\Qt6Gui.dll

                  Filesize

                  316KB

                  MD5

                  8d64796d30e8422d4f92fa4c102aac5d

                  SHA1

                  a65796434d9f7908a85b3b75f1b1d607d3806a39

                  SHA256

                  266d9eff62665233c897b401bb0805faf6b3a1ac2b27e31df83ef1d9f1663210

                  SHA512

                  41e709b18e8d7a54c66c3a1d3dbdf37cc8a4c929d573ea0d44dfad636764c658029ea1b92612add193183c01c0d0338317fe6da2a77827643bbd60b7caed7115

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\Qt6Gui.dll

                  Filesize

                  153KB

                  MD5

                  e2f08772fe5914a7f5e7b6ce425ee22f

                  SHA1

                  684dc225192cd21ce40a136e989e24e21542d2db

                  SHA256

                  f639a93a02f46206857496155909aabfb034f3db702d0307707484a3c2dc5f5f

                  SHA512

                  bc5381aad63c86d273af52e35d8d34d7e384a15e3a463f91dc94e9a3c21775af777caa774a1e1981736c2af12b1fbc53de58bc7cad39c9548eae0bdd7a8f150c

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\Qt6Gui.dll

                  Filesize

                  183KB

                  MD5

                  417582f30a1db554b78a4ae9b140bb1f

                  SHA1

                  f77c3fb9d65e85edbf18dc180f5e75f1a147e9e9

                  SHA256

                  09fb2e182d1504a4dd795b658ee4df68c60f259d5030e910015b0871b7a59885

                  SHA512

                  c1f8b242204e04401ac9808c905e077ddb2409da7acca67ca0eeb30674e03183ad4384b03c62a82bb37204742709edd03d2e246a03a68d611ce6be7c6cc15eb2

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\Qt6Gui.dll

                  Filesize

                  149KB

                  MD5

                  8e562aefcf024fe681f45612c2b46cab

                  SHA1

                  77a40a6094f076f3959cb81d084b0a93dabf4195

                  SHA256

                  0581ea09887e5534f9528f1ee4aad494569f6898cba7f901323b43b9797a5a37

                  SHA512

                  1254dfd91c026aced6375a36115080beb7db20d4ec06febbd79e23eb41c0f2736e13049ab0a0678252072c2fc3ba5a827dd3eaa600babe79bdb346ffac67b480

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\Qt6Network.dll

                  Filesize

                  782KB

                  MD5

                  2e59ebcee6f0ec566ce0fcbd336b040b

                  SHA1

                  c0869cca264a4a41262ec9875eb714f4331a0e6d

                  SHA256

                  8fa2dd7b9aed1c944983e7efcf7696c0e5312c6336f58e34b7d5193315af5253

                  SHA512

                  01723b9e059672a4ba691f22fdf75f35de09f08f1e52100dba530af326f3a1e37a562de977bfda5ac3c8f6697e8586a5376a6eea9cb488b1f93ae04b8962c9ce

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\Qt6OpenGL.dll

                  Filesize

                  566KB

                  MD5

                  000c9e8c4da190fcf222d5a21e11d1d1

                  SHA1

                  716b18303865ac9b4d057095d7ba7c179f81968b

                  SHA256

                  6936d92141fe7b9fa701d13860fabb70a6c4926666cdf58a304d6054451624fb

                  SHA512

                  d641fd19e5020040f77ef7ea60eb92f13af47f2652befd519fad469c9e44958f4075e1f816d469f646a44abcb88c0d1b9554c6577316f7e603bc618dcd64558e

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\Qt6OpenGLWidgets.dll

                  Filesize

                  60KB

                  MD5

                  7322189443b2a0127636c8b20e509eeb

                  SHA1

                  59f840eca774cbcf0ac2aff1de505281e15253e1

                  SHA256

                  86ffea496cd1516af6071b08049ca15462ccd0b4fb4be5e4e27f39627797e146

                  SHA512

                  e82dcf915091516c2530b6d6f1aa70624b4e7a529b028976090ad26a54981cbd7651133094d8066e2ffe18a1faf925d6fba7a2be79f4b04e3568aa71eb86726c

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\Qt6Widgets.dll

                  Filesize

                  266KB

                  MD5

                  3b56b1723845be3f5859cfd0ba0dbf11

                  SHA1

                  a120b7e5794a1341cdf9f81677ff26d8bf906ead

                  SHA256

                  b0faf991a9f6fe6c05b1c86f22494b3848828807a5e01c69977ecdf8cd96c788

                  SHA512

                  a8d3ecfde9bf093c43090cf19becf3f142625db29b064a53bced691a08689bb2d896cd577bdaaa0640b6f57722546ef2298e002397b9230b7dc7409637909a7f

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\Qt6Widgets.dll

                  Filesize

                  861KB

                  MD5

                  25e318ff11f8eb331ae2962874a67525

                  SHA1

                  c308e490d33163ef0d617fd3a54db8d67fd135ed

                  SHA256

                  8ab729b47951db10047b7b0255cfcbf645cbd92c1e4c3c95ad1b72e47764cae2

                  SHA512

                  cb3dfe731a6aedce8640fa9073ceef1b8de6c3bf036aea3aea3a33f5518578c26cc817c36d3e281eb12dcf91c08d022b3fb9270e7437d4c2d02fc2d7ccb9c301

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\Qt6Xml.dll

                  Filesize

                  141KB

                  MD5

                  9e0c3650a3ff9d199afcd3642b7356fa

                  SHA1

                  799596e6694276a50e2d5b3953d9240525bc1193

                  SHA256

                  6b75c4753dbed79398970e93aebcebe9d920d8a2b45a98d1a7c702fdf8ad8824

                  SHA512

                  dd1a49ad0cf8522f961e91161a490c5a75460a0f638c020951e0752ec15d6b396df4756064e1b315fc3ebbaa0254904f75190a45e231bf0a6e5858f879c568f8

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libb2-1.dll

                  Filesize

                  33KB

                  MD5

                  db2059841e2b7be00607dd20b3eabc7f

                  SHA1

                  b5853cc3716a55ce69faaf8b84365ddbcc1c85ea

                  SHA256

                  7fb8418a1172042dab5227fcd466b1bf293737f5b5cf35359e851516227f109c

                  SHA512

                  ac582b3d5ecb891892fcfe5e0647233058312be04b16f46cd2e4bd0b2c72cb341f48aeda83998688ae1804ba2e6fa10cdfd1db83c072238b6dcfcf5014c3f401

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libbrotlicommon.dll

                  Filesize

                  140KB

                  MD5

                  d8663f9a347755f11f2c67cddcfb37b3

                  SHA1

                  56cd42ca876a2601b5f488daffa78357239c6a52

                  SHA256

                  62f363f6aac0d54ce7b115c0412b19e0fe5480f4e6fc1254f663b0ab6868e46f

                  SHA512

                  c3c92ca4d3ca0dac0c0d125e7b9a358bd2a9a45d1e779a7ae7b014a20e07540142f9a16c6231e744bb5c3da4db688ccebf79185a3ed2caa55ecb367e53cce71f

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libbrotlidec.dll

                  Filesize

                  58KB

                  MD5

                  8616fe7148a27752d73b7f8c72c6fb3d

                  SHA1

                  090a9ec3b201a3c80ee77fd2e0569e41f52d0b5a

                  SHA256

                  7d6c0f954b6f2db1c1c5fd5904886ae055859a02ca31b6dde5f96f6b0259d23f

                  SHA512

                  ced8f709d2372341153c1571eeb93d4146325be6bb7f23eb5a65258ba4925c0957f01ad89d004416c5390fb234aa687cae774c68f19cc919eab9e40384768931

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libbz2-1.dll

                  Filesize

                  98KB

                  MD5

                  981dac0b4d9eb1da0be9f51024d5649a

                  SHA1

                  bd47b357caeaf24bed207b379da8f961f901dea9

                  SHA256

                  b79cd3a7102e359ef6324e98966a67939e58ec2b651ae2847cae84a4dfa453f7

                  SHA512

                  89be623acfae7ce840509462d8c142626c7b3a3c2fad90f2d8fc0d5b5465d5203bbb2423a781c5e7004c55ec2d52e5239c709a85d64767fb0df811423911d8e1

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libdouble-conversion.dll

                  Filesize

                  70KB

                  MD5

                  39fba801753d680cefa21b7f1dff4582

                  SHA1

                  831c0ef18e969a03a478975eda217c52d779a49a

                  SHA256

                  e7f82f105503d961d2f83b92c05fff29e6e788c185f8acf7cdbdda20fc14247b

                  SHA512

                  f5fa92aa58c8776891f4a62666a4af68546d881a5610d6df745fea4286ca1a5eeb35e835aefc4e6e8b9d1a52d00fdec4c632e435e1f865f06d6f14228400eb93

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libfreetype-6.dll

                  Filesize

                  106KB

                  MD5

                  de50c8f207935ca28382b2063afe80dc

                  SHA1

                  9b2d78fc111b57341ace6e9a6d4f77b24b0ee89c

                  SHA256

                  399c9850c7f3bf565eb892f3a732cf31f3ddf4d7a64e9733b7fd840235391404

                  SHA512

                  ce8f60cb8625f8ccbf1e768ca629965d7c5bf4e1f2defab3026eb2d4826cb9cf53cb9e9701218c5d4ac00b12414a098b43e00f68f9aa6a72ed6563591fae5499

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libfreetype-6.dll

                  Filesize

                  265KB

                  MD5

                  d27092ed16395b12765d8f94b80b1f53

                  SHA1

                  677f261b58e5792cf705bc840214b158bda15cfc

                  SHA256

                  5df122bbfb0bcc83288e52d08a6b45f6011e20aa4d355b7992cd5cc307cc251a

                  SHA512

                  a371c7f0d9146cb2aa4437b3cb44c7fc4b1169ed65b2678760214b43e303ba4bf99b667db7cc4df88bf0fe752588bcd37e26e0f20d0e94e0ed76588a30a16ea3

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libgcc_s_seh-1.dll

                  Filesize

                  114KB

                  MD5

                  609093820211d9c7e62983121a13949e

                  SHA1

                  da36700df5ff67c6f65176f5896489651fd2235c

                  SHA256

                  96ff53193839f5fbbb15b14cc9fe1885e24cf7cc27e939150706368650702222

                  SHA512

                  ad6921bfc79714e6a4199d7ca7e5878659161a3fd416a20f2b731c000000e6a85bef6611f283adb8c117b19063490fd812ff21eaf3497beccd88c8abf38c5ccd

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libharfbuzz-0.dll

                  Filesize

                  156KB

                  MD5

                  4efdf117839e6ec452440c7c4de408d5

                  SHA1

                  2d0a4a2ef7149ebb9719806e9c5aefa0821e87b7

                  SHA256

                  4b40d832e99bbcaabdf07ef34f583b5c6e4f882a6b3bcf66ca74e395aa340b62

                  SHA512

                  9a68ac17b93e6755d9cbcdaebe157164139751e3f214401e972db36c4a5a16ac69b8689dab65f7ca7b219f63356004f1297a3fbf8003700f41fd1161c16f73f8

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libharfbuzz-0.dll

                  Filesize

                  242KB

                  MD5

                  110931c9cf8059de6ee64b827b7e06d5

                  SHA1

                  6c9c16a0f8838ea0b419700e70010ad44336a8b2

                  SHA256

                  9ecb4117c4cd34fb34b1b8efa6660483b9911e6d19d82246d7f2dc58ae82edf8

                  SHA512

                  c4b7412cbe06a17c57f26e0f899196bdfdd2689b575c7b7ca8b8f1e6fd0b718c10edf847cabf4207d714e1b1ec576aee60efa1a7ea48540612b1110a2dd41fdf

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libicudt74.dll

                  Filesize

                  821KB

                  MD5

                  9a3acd09ca6f1c9825656883e6be8a82

                  SHA1

                  51d7e357395f9bc82d624289a471d5d1617dcf24

                  SHA256

                  84d7e72868ce63418cae792f3951f42704c6241c818995742d7dfd9cae781002

                  SHA512

                  d8d90a94fe7cb394f0f490afa9880294d878fb9c17bf1250584ad055dfeb96410aa12fcca2e95e7e7ced22f681ab924ade6f3395c014ef81a5ba10b8ca949ffd

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libicudt74.dll

                  Filesize

                  146KB

                  MD5

                  69de84592dd953ae1897a9c381e6ff7b

                  SHA1

                  2a8682d5cbeeb90d6a0ee88d69ba2c1f953f0d13

                  SHA256

                  b11576a9203f3034ac009412e3ca779fc08c0cbc93890d674e56148edab9528f

                  SHA512

                  bb6d37a1a0f9609c9a26b71392d99040a0f5c50e8d6bfaa210cc5187744d8faf4eec3a577164ca91bbd361f90c39d84cf7a2f8b1327b2424b1e6651398abdc7e

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libicuin74.dll

                  Filesize

                  598KB

                  MD5

                  6ac7ae33be4d0e1ffc4c0d240c1e7faa

                  SHA1

                  42bcffc8a99bfd4662802d2a919f0a9634f4729a

                  SHA256

                  fabd08a6d51e363f1064a8f169278b6bf865289302242baa0e291ec3d65fdc52

                  SHA512

                  ab96abd051c70122410edc77b9d561cb0d021c6fe3d3fe4e77a8bed8ffbca3f46dfdcb26580d3ef3e64dc79ac9d43946ab64a85f9aaec417fdb87e5699519a45

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libicuin74.dll

                  Filesize

                  799KB

                  MD5

                  f33b288214217dea1859bb0359e03b06

                  SHA1

                  5f6afd7195b03396526e62413a8c1203e22cb628

                  SHA256

                  49e5610fe89e9318193fa829532148eb3f958657ca619f123798fc37b2e61521

                  SHA512

                  bac8ae54a98d785daed4b6c9b5dbd9c3eafcb9c6a98bf680c9f63db0d40ace4d5cc502ba279fd1d8331c3396ae4c14d877569b4c50efb23a56704012df236a2a

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libicuuc74.dll

                  Filesize

                  194KB

                  MD5

                  afab1f82624d7f80fc7790dd050cf1d1

                  SHA1

                  381d31cca8b2c9043097202841d54687f73771ae

                  SHA256

                  ce3becb17d4f3f3e00a6cdd8251d154ac882306b1e6c1c3f0188fd467fbd84a3

                  SHA512

                  47fd1ddccdf50c4a14015bdba9cba2993ecff4537e70df38897d5f4ad9a304973e8175a1ce58bdd4c8f5784cb359bf5d82a119aa1c6f7d65ee9c25c32032828c

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libicuuc74.dll

                  Filesize

                  836KB

                  MD5

                  878ea0abd9a496e559308b787d868263

                  SHA1

                  a51c40ab21dfb3ea1c94503e6af1cac1476bc0e3

                  SHA256

                  a310403fce7762a8da959c0cdb51dffcc18f19bfc7caff1e1ce1c72c7536f5cf

                  SHA512

                  a57740505b29858b0d162c85d8a8fcff3607340895f46ec990ce3da47e0d8048565d186a9800b18ef12238fac9b8dcd4eb04530aa6e6ba0be48593cd9ac56e1e

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libmd4c.dll

                  Filesize

                  81KB

                  MD5

                  d3e1ab6cc45c1cdbca7c6a7c9e7903a6

                  SHA1

                  7e85d710a35b194ee30091588a349aee7c7d4b5a

                  SHA256

                  fa52a65abdf3edf7bee915d69513439f3a62ab9fff418bf868c89ca1b75428d3

                  SHA512

                  38f90bae14c6a0890c3c6517e1f2dbf5486c705007cc9aef25f3e89bc02f1224325b58fb45ce0937092d42935a4a6d7f82c2104f865a4f39f74bbd5671240a9c

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libpcre2-16-0.dll

                  Filesize

                  222KB

                  MD5

                  8d695cd2c479e2350b70858f9c15c5ec

                  SHA1

                  a5f2fcba1a21c7b358c9a9c6b747ae642f554f47

                  SHA256

                  680c96625a3ffa8c5aeee5645be7a01fe7e970dce590adc9118ddefc5e6e8e47

                  SHA512

                  de3081fa3a34c8bc6df0fd1b17c55d221e1cf832c0c574418e2a2876ab592da56a3a93bc51fbc74f9354345c7bda7331ea9add9e222f11041c58e5ad1d3ffda5

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libpcre2-16-0.dll

                  Filesize

                  201KB

                  MD5

                  746068787ce27c8c1344340549a07045

                  SHA1

                  12a04ecb8782e3758085ff32cf584af487227591

                  SHA256

                  c5e4637de0bc2b71e8cbdb985ab8070aa877f42bc52edb79185bed10ff0129c4

                  SHA512

                  59bf9c2d97f13ca58c74762a56c9a2012e5e482588031130c104c3f95f4a81ab792948462b5ea5164d3dfe1a4fa2fa204f833cdd0a723c0f6b020822fc71dd6f

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libpng16-16.dll

                  Filesize

                  186KB

                  MD5

                  f006ede89a600d694244223b769f5231

                  SHA1

                  f45e629894739359c50c5aeaebfb79f4e63167b7

                  SHA256

                  3e299aea61bcef3d23200a56da86594310ec900fb367998a8db1708d85b16128

                  SHA512

                  a7add60884e4e787890dbe2c36aa3102a1b06117cd402f81e020d88e537b1bff4a742eb08bd52b5a476c266e0db43d5e84c79c9537700025d6b38eec4b5aeb3d

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libquazip1-qt6.dll

                  Filesize

                  240KB

                  MD5

                  5dd8944f810d95f1cd288daf68fba7ef

                  SHA1

                  37d7ce36d3cba4a014d07f1d6342992118aa5b8f

                  SHA256

                  edc55a0c7a427cc57aecbec59f85322fba798bfc76bc10a5381f76d03642394d

                  SHA512

                  f5ae7c4cb40d39cb7893d03a70c870834cacf1c06f17ec15d93b8ab159ba9bec91eee65e0b8186d27447cb02ca0f732e0108550f63e4a4880d2b9df4c7eca68b

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libquazip1-qt6.dll

                  Filesize

                  220KB

                  MD5

                  2172eeb48b5ff4b74548749eba6ff9c9

                  SHA1

                  0be45dc7d9f5223861ec0511fe81850743ab9a6f

                  SHA256

                  15b12ea21d687faabab0fb8548a2df0bf76de71b0bd00ef4530e6fb55a6de730

                  SHA512

                  d110190f3243f7a3709f2a84e3aa679f11cd17d243137eaadcf71d635507ce9d42d80c41cffcfd1f231957cb12f4abbf3a0db71cb995dbde06470062aaf7dbbb

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libstdc++-6.dll

                  Filesize

                  1.1MB

                  MD5

                  9d40cbdf3c66453352d0dabd61304be2

                  SHA1

                  a07f4f297e994832c332cccf4c8e30537ff5df54

                  SHA256

                  d081c3517dcb817c65cb7c8b375c3e2e4858c0a6d9e28327ef6d69dd6ffb9921

                  SHA512

                  94a212e50fcd024d1f1a51629e8f6e2aabdbf503fb4bbb3825e41dce552cbc691941cf6451b80f145f30f757563752f5698ffee323d48d64eebb7a31627caf2d

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libstdc++-6.dll

                  Filesize

                  1.2MB

                  MD5

                  e6106aa5ffe29bc569d8edab18b15f9b

                  SHA1

                  165d20d313c9cae0ce8b9ddbb926651c63eec9e5

                  SHA256

                  87255f5779887e7f9c1cd611f323a223e8f1c8ae17db2fe27bbf49bb6ed09ed6

                  SHA512

                  b8ecfb75e4ef2202cdbb99a98f9a21501d849178e337694f10f646bbe1a90e2a9731ff2577ea46335e33c6bddf0b4dc638d92dc029aba68d8716ada50733c105

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libwinpthread-1.dll

                  Filesize

                  59KB

                  MD5

                  9910d4fa44619fb945fb95bd105e49f6

                  SHA1

                  6ba87de7bc32895766f3aa50b6a3ba439bbaabbf

                  SHA256

                  9c3b1f3a73dfc9d92c322c5b168b1747e0aef92f18727a7bd29a0331ce227388

                  SHA512

                  087f4958f74be4be782f22777ed3f5c2a70d42fa3c8db6e4bbaa3615236ae3459afb272286268b02fe89cbaf1a402af85609cafdc9edfbfa3657631afb6c45ab

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libzstd.dll

                  Filesize

                  602KB

                  MD5

                  de4e1ae91823b8a6721ea5684ccb090f

                  SHA1

                  3e5cba247494d56574ac2919ffd8d2a0dd00f8ae

                  SHA256

                  b5eaf674d8177c4f0c0ac609e6b72adc2641f9a571228fb503680b4b1f19f15c

                  SHA512

                  cc33acf99060208b664254fd7f9164dfe5d95a23c6326ee8f8b1146ad8d6cc406c5f01e7ca3c5a12eb589ed301ac9a35a3f1e1a0c26fff576b883d36f654a1a4

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\libzstd.dll

                  Filesize

                  609KB

                  MD5

                  719e69d84c310a3690520697119da630

                  SHA1

                  34423ba175e1998335aae15abf515f663f2be9b9

                  SHA256

                  1fc38342712d1c1f14fe97b5020e3036caa003c993809c2899a5719010ef5d1a

                  SHA512

                  143c44760aafc21d856c7af67863bd0856d7f0aa112d1e21e64333c94edb9e45824aaf6ffc18c2e43ef2943a2e1f0b1a5ca6fe89eb9b3c2f9fd702b8f8e363c3

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\polymc.exe

                  Filesize

                  448KB

                  MD5

                  642fab3bd5208ccd8d3bb60eb0628d37

                  SHA1

                  7e70670f361ccc20db1ea0c68bbbd25880690667

                  SHA256

                  bd141ce0d394ffc66f03bc2fbb405a02530c20843dd4148eb8f5ed9434b76cb3

                  SHA512

                  e99df14c3452a46a9565583ecce6564cb8b9b988365d3c1b485835032a0570183681c9cea3bbe147f64935b400a6487a77edc4d5226bbaa8bdc744a4bc62144c

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\polymc.exe

                  Filesize

                  384KB

                  MD5

                  00a2601b0a236d0844dedcf6a79790f0

                  SHA1

                  c6272a423890a645f58b8cd1bdab01f53667a9d6

                  SHA256

                  d686a4d09b816a030328b551c81c148ecc395cbdf115693e8cc4de206c653e7f

                  SHA512

                  d4cb137179d4c3b8f4cb4ead0097d121f6ad4a3f6af046bd3084d01cccf1f6c14ec1e7e0af858e76ba9dec2da9f3f95496b3dc5ec4cb57804f608d379177d77c

                • C:\Users\Admin\AppData\Local\Programs\PolyMC\zlib1.dll

                  Filesize

                  117KB

                  MD5

                  5e14e5dc82041df0f2274183cdc72106

                  SHA1

                  e41c7680266d2653e16412e30b6dfec18abfd31c

                  SHA256

                  83ee0ff920144edb2c2f4ea10130f55443493290886985a63233fa2431e450f9

                  SHA512

                  0f9a64b2ea07c65dfb6a46b804caf1d9d9c6dfe8af4c8dd471f26a2af745ff10f45ca722c944ea69fd434ccb158b2eb68175ed07799568652db212bcd591a45f

                • C:\Users\Admin\AppData\Local\Temp\nsv87DE.tmp\System.dll

                  Filesize

                  25KB

                  MD5

                  853d33d653fb8622e5fd1aa862d07aa0

                  SHA1

                  310561cc0f30657974ab627a2341adfcec84ab92

                  SHA256

                  dbeb911118606a36e430e8d8be39e944b80167fb81ccd11c56afafb25747e633

                  SHA512

                  6d944929b0a4350aba32b28ef9f26d6c8f1a7c44aade158587829101a110ac7d892a9c5ca4ce60945c8cbd63eb0df63c3e8785c871e85ad22635f0ac80dba70a

                • C:\Users\Admin\AppData\Local\Temp\nsv87DE.tmp\modern-wizard.bmp

                  Filesize

                  25KB

                  MD5

                  cbe40fd2b1ec96daedc65da172d90022

                  SHA1

                  366c216220aa4329dff6c485fd0e9b0f4f0a7944

                  SHA256

                  3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2

                  SHA512

                  62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63

                • C:\Users\Admin\AppData\Local\Temp\nsv87DE.tmp\nsDA16.tmp

                  Filesize

                  11KB

                  MD5

                  0d35158cad33cd0ad3191f0655001100

                  SHA1

                  b68a901b71e78c6f3797d10dcafafdc0a08b9172

                  SHA256

                  f51cb324b319e6561aca7c0472555ebe0417252b2f0cd8e756eb7c5dab5c61d5

                  SHA512

                  c3c7f4bf4d5a7b0a8ace238c8998672aaf436c6731fee746001ecaef873b8c725ac661ede364f0d9d1501ccdf625986affcb5a180e62c713f5c8c12f334e5663

                • C:\Users\Admin\AppData\Local\Temp\nsv87DE.tmp\nsDialogs.dll

                  Filesize

                  14KB

                  MD5

                  cf1d851a552068aaa0515ecbff6f40d2

                  SHA1

                  e2cb25ac6cee0712486c8c2a7e00250a89554ca5

                  SHA256

                  38192df38514cabdd22e08cba2b3d27aac774ac8090a0f326d441718f47a82c6

                  SHA512

                  b76b86b8866c5b5556c361878b128e1ff5010585c79b733df4548ee7344cdde409d647afb1e50cdf8d33d74595bc2b8fa971ba4b80e78d00670d085a1871d832

                • C:\Users\Admin\AppData\Local\Temp\nsv87DE.tmp\nsExec.dll

                  Filesize

                  11KB

                  MD5

                  d9624f8a2014d31c4f114b78e20ad6b3

                  SHA1

                  0c1b5761bc42372778ab5af27165cc52666924c4

                  SHA256

                  1822b4b0c0111e82361ddf3d603d14392d80908c17d51d187bd2aa8d48e104e9

                  SHA512

                  db2015d2f2783b1734a8b92154d9fe454d212ff586b66fb235986872b0ee5dc6c6e7d8498fe000097b3fa11aff2f6136dd28b618408d85995602e2664b941c01

                • C:\Users\Admin\AppData\Roaming\PolyMC\instances\1.20\instance.cfg

                  Filesize

                  1KB

                  MD5

                  bd55385a052c656c7f0e2cbe74c8a768

                  SHA1

                  4eec10114f0201527caa0e6e8bbcbb273959910e

                  SHA256

                  68320968e6a4a00d45ebdf62d00c99f9f3747f72785d215f28bbe63d22e0043d

                  SHA512

                  04e3936985ce550ce184a693de9e0e09ad4cd7d9ecd1913e14a86ec73ab07b30a3a02fe2bb96c1e0deec70f1ed347791f9de7f29657b67ac8ba36a1af91da58b

                • C:\Users\Admin\AppData\Roaming\PolyMC\instances\1.20\mmc-pack.json

                  Filesize

                  171B

                  MD5

                  e95894440fcedd79e8c41b79ac8e5b7e

                  SHA1

                  43c8fc81904c02bdbee5ccf5e2576fa3abfca08e

                  SHA256

                  1ec4cfe3b185d629a7f03ddf951110305fc86109390043fcbf2fc5342f7d15d6

                  SHA512

                  9042e3f68db8888d63370a322625937a9218e8643cc3b3cf8234bc1cc74cecc2632789b7eb110360f29894ad7e9045abb0c11ac198b43f80f32c87eaa3dae1da

                • C:\Users\Admin\AppData\Roaming\PolyMC\polymc.cfg.XecprM

                  Filesize

                  1KB

                  MD5

                  24befa779c5203acae22114527397a4c

                  SHA1

                  1dc85d564afe081fdfe45ad8536114d5705a7f8a

                  SHA256

                  bf3094414e72223c8808fd8df5cf4bb6c5269a41003942d7278cccd4daca6c40

                  SHA512

                  6b5693889ec4a510c483d650148303c7102f7f1fae61796249f1f977bb22372a833cf434ae5f20c9874c2d58911d3c725225bc280f50edd40229f0241aa52a3c

                • C:\Users\Admin\AppData\Roaming\PolyMC\polymc.cfg.vAaNkn

                  Filesize

                  1KB

                  MD5

                  3890ac9dacc1ff16840407f2767922e3

                  SHA1

                  b805bb225d846a4ce64149a452253fc178fa4f0f

                  SHA256

                  091a5c7d7039ee904f2a418c1f05a4d18e500f49776f7ae900b55c7820f024f8

                  SHA512

                  e7249c040d6e866952e290c2491da122463cd0eafcbf9752f19b27a8b47ea79eb6858b6dca6ffa02b6171fbc775f4592d173f0bb66dcb46f11cbae6c6069cec5

                • C:\Users\Admin\AppData\Roaming\PolyMC\translations\index_v2.json

                  Filesize

                  15KB

                  MD5

                  3d0c22d27136931c17569388bbc52a97

                  SHA1

                  ca3918a357f64f92fbfe7f0f75b2b7a463f6c312

                  SHA256

                  3b46f2ef124d1832d3151ef9ec794d038b141ddd4132ff2274b30a2c02b19324

                  SHA512

                  aab5ac8d3506bebb0362bc1b4a7e9bb5e7279710a52af1c2081b7e31e30cb20824257f7c0c056f4bcc2eb5a8b31f64cdb7ea4207cd1cb7bed6c4a740a0aa95b4

                • memory/464-426-0x000001F744E30000-0x000001F7450A0000-memory.dmp

                  Filesize

                  2.4MB

                • memory/692-2068-0x000001ECB7300000-0x000001ECB7570000-memory.dmp

                  Filesize

                  2.4MB

                • memory/988-285-0x00007FFC9E4B0000-0x00007FFC9E4CD000-memory.dmp

                  Filesize

                  116KB

                • memory/988-258-0x00007FFC9F840000-0x00007FFC9F864000-memory.dmp

                  Filesize

                  144KB

                • memory/988-239-0x00007FFCB2840000-0x00007FFCB286C000-memory.dmp

                  Filesize

                  176KB

                • memory/988-238-0x00007FFC9F6F0000-0x00007FFC9F706000-memory.dmp

                  Filesize

                  88KB

                • memory/988-280-0x00007FFC9EBB0000-0x00007FFC9EBDC000-memory.dmp

                  Filesize

                  176KB

                • memory/988-281-0x00007FFC9A7E0000-0x00007FFC9A8A4000-memory.dmp

                  Filesize

                  784KB

                • memory/988-282-0x00007FFC9A6A0000-0x00007FFC9A7DD000-memory.dmp

                  Filesize

                  1.2MB

                • memory/988-284-0x00007FFC9A500000-0x00007FFC9A52C000-memory.dmp

                  Filesize

                  176KB

                • memory/988-237-0x00007FFC9E530000-0x00007FFC9E6F8000-memory.dmp

                  Filesize

                  1.8MB

                • memory/988-287-0x00007FFC9A470000-0x00007FFC9A4A4000-memory.dmp

                  Filesize

                  208KB

                • memory/988-286-0x00007FFC9A4B0000-0x00007FFC9A4F3000-memory.dmp

                  Filesize

                  268KB

                • memory/988-289-0x00007FFC9A2E0000-0x00007FFC9A347000-memory.dmp

                  Filesize

                  412KB

                • memory/988-290-0x00007FFC9A170000-0x00007FFC9A275000-memory.dmp

                  Filesize

                  1.0MB

                • memory/988-292-0x00007FFC9A2B0000-0x00007FFC9A2D1000-memory.dmp

                  Filesize

                  132KB

                • memory/988-246-0x00007FFC9A2B0000-0x00007FFC9A2D1000-memory.dmp

                  Filesize

                  132KB

                • memory/988-256-0x00007FF79DC00000-0x00007FF79E42D000-memory.dmp

                  Filesize

                  8.2MB

                • memory/988-259-0x00007FFC9F2B0000-0x00007FFC9F4DE000-memory.dmp

                  Filesize

                  2.2MB

                • memory/988-262-0x00007FFC9E700000-0x00007FFC9E897000-memory.dmp

                  Filesize

                  1.6MB

                • memory/988-261-0x00007FFC9EC00000-0x00007FFC9EDBC000-memory.dmp

                  Filesize

                  1.7MB

                • memory/988-267-0x00007FFC9E530000-0x00007FFC9E6F8000-memory.dmp

                  Filesize

                  1.8MB

                • memory/988-271-0x00007FFC9F6F0000-0x00007FFC9F706000-memory.dmp

                  Filesize

                  88KB

                • memory/988-274-0x00007FFC9D140000-0x00007FFC9D263000-memory.dmp

                  Filesize

                  1.1MB

                • memory/988-275-0x00007FFC9CE70000-0x00007FFC9D140000-memory.dmp

                  Filesize

                  2.8MB

                • memory/988-273-0x00007FFC9F290000-0x00007FFC9F2AA000-memory.dmp

                  Filesize

                  104KB

                • memory/988-272-0x00007FFC9F6A0000-0x00007FFC9F6B1000-memory.dmp

                  Filesize

                  68KB

                • memory/988-276-0x00007FFC9EBE0000-0x00007FFC9EC00000-memory.dmp

                  Filesize

                  128KB

                • memory/988-270-0x00007FFC9F7C0000-0x00007FFC9F7D7000-memory.dmp

                  Filesize

                  92KB

                • memory/988-269-0x00007FFC9EAA0000-0x00007FFC9EB32000-memory.dmp

                  Filesize

                  584KB

                • memory/988-268-0x00007FFC9D270000-0x00007FFC9D8B0000-memory.dmp

                  Filesize

                  6.2MB

                • memory/988-266-0x00007FFC9F710000-0x00007FFC9F751000-memory.dmp

                  Filesize

                  260KB

                • memory/988-265-0x00007FFCADED0000-0x00007FFCADEF4000-memory.dmp

                  Filesize

                  144KB

                • memory/988-264-0x00007FFCB2840000-0x00007FFCB286C000-memory.dmp

                  Filesize

                  176KB

                • memory/988-263-0x00007FFC9D8B0000-0x00007FFC9DE76000-memory.dmp

                  Filesize

                  5.8MB

                • memory/988-260-0x00007FFC9F7E0000-0x00007FFC9F83E000-memory.dmp

                  Filesize

                  376KB

                • memory/988-277-0x00007FFC9B100000-0x00007FFC9CE69000-memory.dmp

                  Filesize

                  29.4MB

                • memory/988-293-0x00007FFC99F10000-0x00007FFC99F6B000-memory.dmp

                  Filesize

                  364KB

                • memory/988-257-0x00007FFCA56E0000-0x00007FFCA56F6000-memory.dmp

                  Filesize

                  88KB

                • memory/988-278-0x00007FFC9E4D0000-0x00007FFC9E52E000-memory.dmp

                  Filesize

                  376KB

                • memory/988-279-0x00007FFC9A8B0000-0x00007FFC9B0FC000-memory.dmp

                  Filesize

                  8.3MB

                • memory/988-283-0x00007FFC9A530000-0x00007FFC9A695000-memory.dmp

                  Filesize

                  1.4MB

                • memory/988-288-0x00007FFC9A350000-0x00007FFC9A469000-memory.dmp

                  Filesize

                  1.1MB

                • memory/988-291-0x00007FFC99F70000-0x00007FFC99FA0000-memory.dmp

                  Filesize

                  192KB

                • memory/1620-2874-0x0000025AD6210000-0x0000025AD7210000-memory.dmp

                  Filesize

                  16.0MB

                • memory/1620-2386-0x0000025AD6210000-0x0000025AD7210000-memory.dmp

                  Filesize

                  16.0MB

                • memory/2004-17-0x00007FFCAE290000-0x00007FFCAE29F000-memory.dmp

                  Filesize

                  60KB

                • memory/2004-184-0x0000000140000000-0x0000000140206000-memory.dmp

                  Filesize

                  2.0MB

                • memory/2004-18-0x0000000140000000-0x0000000140206000-memory.dmp

                  Filesize

                  2.0MB

                • memory/2004-15-0x0000000140000000-0x0000000140206000-memory.dmp

                  Filesize

                  2.0MB

                • memory/2004-16-0x00007FFCB2840000-0x00007FFCB284D000-memory.dmp

                  Filesize

                  52KB

                • memory/2496-455-0x00000227B1760000-0x00000227B19D0000-memory.dmp

                  Filesize

                  2.4MB

                • memory/2952-2008-0x0000022400000000-0x0000022401000000-memory.dmp

                  Filesize

                  16.0MB

                • memory/2952-2226-0x0000022400000000-0x0000022401000000-memory.dmp

                  Filesize

                  16.0MB

                • memory/4028-44-0x0000000002240000-0x000000000234B000-memory.dmp

                  Filesize

                  1.0MB

                • memory/4028-41-0x0000000001F10000-0x000000000203A000-memory.dmp

                  Filesize

                  1.2MB

                • memory/4028-46-0x0000000002350000-0x0000000002450000-memory.dmp

                  Filesize

                  1024KB

                • memory/4028-45-0x0000000001D40000-0x0000000001DDD000-memory.dmp

                  Filesize

                  628KB

                • memory/4028-37-0x00000000017A0000-0x000000000184C000-memory.dmp

                  Filesize

                  688KB

                • memory/4028-33-0x0000000000CF0000-0x0000000000CFA000-memory.dmp

                  Filesize

                  40KB

                • memory/4028-43-0x0000000001E10000-0x0000000001E3B000-memory.dmp

                  Filesize

                  172KB

                • memory/4028-42-0x0000000001DE0000-0x0000000001E02000-memory.dmp

                  Filesize

                  136KB

                • memory/4028-40-0x0000000001CA0000-0x0000000001D3B000-memory.dmp

                  Filesize

                  620KB

                • memory/4028-35-0x0000000001400000-0x00000000016C9000-memory.dmp

                  Filesize

                  2.8MB

                • memory/4028-38-0x0000000001850000-0x00000000019F1000-memory.dmp

                  Filesize

                  1.6MB

                • memory/4028-36-0x0000000000D60000-0x0000000000DF0000-memory.dmp

                  Filesize

                  576KB

                • memory/4028-47-0x0000000001E80000-0x0000000001EB0000-memory.dmp

                  Filesize

                  192KB

                • memory/4028-39-0x0000000001C00000-0x0000000001C9E000-memory.dmp

                  Filesize

                  632KB

                • memory/4028-34-0x0000000001340000-0x00000000013FE000-memory.dmp

                  Filesize

                  760KB

                • memory/4060-425-0x000001A3C4780000-0x000001A3C49F0000-memory.dmp

                  Filesize

                  2.4MB

                • memory/4588-420-0x0000022121C40000-0x0000022122C40000-memory.dmp

                  Filesize

                  16.0MB

                • memory/4588-891-0x0000022121C40000-0x0000022122C40000-memory.dmp

                  Filesize

                  16.0MB

                • memory/4908-427-0x0000026427E90000-0x0000026428100000-memory.dmp

                  Filesize

                  2.4MB