Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    18/10/2026, 17:51

General

  • Target
    PXPlay_Windows_setup_v3.1.0.exe
  • Size 345.8MB
  • Sample261018-wfeylssxes
  • SHA256 d6975e4a5fca4d6cee3bac23c2f163db17acc12f2cf23f8f29287be4f9a9c696
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 6 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Checks processor information in registry 2 TTPs 15 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 4 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PXPlay_Windows_setup_v3.1.0.exe
    "C:\Users\Admin\AppData\Local\Temp\PXPlay_Windows_setup_v3.1.0.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3816
    • C:\Users\Admin\AppData\Local\Temp\is-HWA0SJKA0U.tmp\PXPlay_Windows_setup_v3.1.0.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-HWA0SJKA0U.tmp\PXPlay_Windows_setup_v3.1.0.tmp" /SL5="$801E0,360930700,1446912,C:\Users\Admin\AppData\Local\Temp\PXPlay_Windows_setup_v3.1.0.exe"
      2⤵
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:3776
      • C:\Program Files\PXPlay\PXPlay.exe
        "C:\Program Files\PXPlay\PXPlay.exe"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:448
        • C:\Program Files\PXPlay\jre\bin\javaw.exe
          "C:\Program Files\PXPlay\jre\bin\javaw.exe" -version
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Checks processor information in registry
          PID:4636
        • C:\Program Files\PXPlay\jre\bin\javaw.exe
          "C:\Program Files\PXPlay\jre\bin\javaw.exe" --module-path=libs -noverify --add-modules=javafx.graphics,javafx.controls,javafx.fxml,javafx.base,javafx.web,javafx.media --enable-native-access=ALL-UNNAMED,javafx.graphics,javafx.web,javafx.media --add-opens=javafx.base/com.sun.javafx=ALL-UNNAMED --add-opens=javafx.graphics/com.sun.prism=ALL-UNNAMED --add-opens=javafx.graphics/com.sun.prism.ps=ALL-UNNAMED --add-opens=javafx.graphics/com.sun.prism.shader=ALL-UNNAMED --add-opens=javafx.graphics/com.sun.prism.impl=ALL-UNNAMED --add-opens=javafx.graphics/com.sun.scenario.effect.impl=ALL-UNNAMED --add-opens=javafx.graphics/com.sun.scenario.effect.impl.prism=ALL-UNNAMED --add-opens=javafx.graphics/com.sun.prism.impl.ps=ALL-UNNAMED --add-opens=javafx.graphics/com.sun.glass.utils=ALL-UNNAMED --add-opens=javafx.graphics/com.sun.glass.ui=ALL-UNNAMED --add-opens=javafx.graphics/com.sun.prism.es2=ALL-UNNAMED --add-opens=javafx.graphics/com.sun.javafx.geom.transform=ALL-UNNAMED --add-opens=javafx.graphics/com.sun.prism.paint=ALL-UNNAMED --add-opens=javafx.graphics/com.sun.javafx.scene.layout=ALL-UNNAMED --add-opens=javafx.graphics/com.sun.javafx.scene=ALL-UNNAMED --add-opens=javafx.graphics/com.sun.javafx.sg.prism=ALL-UNNAMED --add-opens=javafx.graphics/com.sun.javafx.tk=ALL-UNNAMED --add-opens=javafx.graphics/com.sun.javafx.tk.quantum=ALL-UNNAMED --add-opens=javafx.graphics/com.sun.javafx.geom=ALL-UNNAMED --add-opens=javafx.graphics/javafx.scene.image=ALL-UNNAMED --add-opens=javafx.graphics/com.sun.javafx.util=ALL-UNNAMED --add-opens=javafx.graphics/com.sun.javafx.application=ALL-UNNAMED --add-opens=javafx.graphics/javafx.geometry=ALL-UNNAMED --add-opens=javafx.base/com.sun.javafx.logging=ALL-UNNAMED --add-exports=javafx.graphics/com.sun.javafx.stage=ALL-UNNAMED --add-exports=javafx.graphics/com.sun.javafx.scene=ALL-UNNAMED --add-exports=javafx.graphics/com.sun.glass.ui=ALL-UNNAMED --add-opens=javafx.graphics/com.sun.javafx.stage=ALL-UNNAMED --add-exports=java.base/jdk.internal.misc=ALL-UNNAMED --sun-misc-unsafe-memory-access=allow -Dprism.forceGPU=true -XX:+UseZGC -XX:+UseCompactObjectHeaders -XX:AOTCache=libs/PXPlay-windows-x64.aot --add-opens=javafx.graphics/com.sun.prism.d3d=ALL-UNNAMED -classpath "C:\Program Files\PXPlay\PXPlay.exe;lib\ceffx-core-1.0.0-20260902.215847-76.jar;lib\ffmpeg-8.1.3-1.5.13-windows-x86_64.jar;lib\ffmpeg-8.1.3-1.5.13.jar;lib\jamepad-3.0.0.0-SNAPSHOT.jar;lib\javafx.graphics.jar;lib\javacv-1.5.13.jar;lib\opencv-platform-4.13.0-1.5.13.jar;lib\openblas-platform-0.3.31-1.5.13.jar;lib\javacpp-platform-1.5.13.jar;lib\openglfx-lwjgl-4.2.2.jar;lib\openglfx-4.2.2.jar;lib\grapl-gl-2.3.13.jar;lib\grapl-2.3.13.jar;lib\kotlin-stdlib-jdk8-2.1.0.jar;lib\kotlin-stdlib-jdk7-2.1.0.jar;lib\remoteplaylib-1.0.0-optimized.jar;lib\portmapper-1.0.0.jar;lib\okhttp-jvm-5.4.0.jar;lib\okio-jvm-3.17.0.jar;lib\kotlin-stdlib-2.2.21.jar;lib\mvvmfx-1.8.0.jar;lib\libplacebo-jni-java-1.2.jar;lib\libconsistency-java-1.0.jar;lib\jcodec-0.2.5.jar;lib\jnigen-loader-3.1.2.jar;lib\oshi-core-6.4.4.jar;lib\jna-platform-5.13.0.jar;lib\libstreamutils-java-1.5.jar;lib\hid4java-0.8.0.jar;lib\jna-5.13.0.jar;lib\gson-2.8.9.jar;lib\json-20240303.jar;lib\core-3.5.4.jar;lib\tinylog-impl-2.7.0.jar;lib\tinylog-api-2.7.0.jar;lib\lwjgl-glfw-3.4.2.jar;lib\lwjgl-glfw-3.4.2-natives-windows.jar;lib\lwjgl-openal-3.4.2.jar;lib\lwjgl-openal-3.4.2-natives-windows.jar;lib\lwjgl-opengl-3.4.2.jar;lib\lwjgl-opengl-3.4.2-natives-windows.jar;lib\lwjgl-stb-3.4.2.jar;lib\lwjgl-stb-3.4.2-natives-windows.jar;lib\lwjgl-vulkan-3.4.2.jar;lib\lwjgl-3.4.2.jar;lib\lwjgl-3.4.2-natives-windows.jar;lib\disruptor-1.2.21.jar;lib\opus-jni-java-1.0.0.jar;lib\javafx-fxml-25.0.4-win.jar;lib\javafx-web-25.0.4-win.jar;lib\javafx-controls-25.0.4-win.jar;lib\javafx-media-25.0.4-win.jar;lib\javafx-graphics-25.0.4-win.jar;lib\javafx-base-25.0.4-win.jar;lib\opencv-4.13.0-1.5.13.jar;lib\opencv-4.13.0-1.5.13-windows-x86_64.jar;lib\openblas-0.3.31-1.5.13.jar;lib\openblas-0.3.31-1.5.13-windows-x86_64.jar;lib\flycapture-2.13.3.31-1.5.9.jar;lib\libdc1394-2.2.6-1.5.9.jar;lib\libfreenect-0.5.7-1.5.9.jar;lib\libfreenect2-0.2.0-1.5.9.jar;lib\librealsense-1.12.4-1.5.9.jar;lib\librealsense2-2.53.1-1.5.9.jar;lib\videoinput-0.200-1.5.9.jar;lib\artoolkitplus-2.3.1-1.5.9.jar;lib\tesseract-5.5.2-1.5.13.jar;lib\leptonica-1.87.0-1.5.13.jar;lib\javacpp-1.5.13.jar;lib\javacpp-1.5.13-windows-x86_64.jar;lib\annotations-13.0.jar;lib\slf4j-api-2.0.7.jar;lib\typetools-0.6.1.jar;lib\doc-annotations-0.2.jar;lib\jnigen-commons-3.1.2.jar;lib\openglfx-natives-core-win-4.2.2.jar;lib\openglfx-natives-core-linux-4.2.2.jar;lib\openglfx-natives-core-macos-4.2.2.jar;lib\protobuf-javalite-4.35.1.jar;lib\bcpkix-jdk18on-1.85.jar;lib\bcutil-jdk18on-1.85.jar;lib\bcprov-jdk18on-1.85.jar;lib\disruptor-4.0.0.jar;lib\jerasure-jni-java-1.0.0.jar;lib\jstun-1.0.0.jar;lib\jdk-jsobject-25.0.4.jar;lib\grapl-natives-gl-win-2.3.13.jar;lib\grapl-natives-gl-linux-2.3.13.jar;lib\grapl-natives-gl-macos-2.3.13.jar;lib\grapl-natives-core-win-2.3.13.jar;lib\grapl-natives-core-linux-2.3.13.jar;lib\grapl-natives-core-macos-2.3.13.jar" com.grill.psplay.Launcher
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          • Reads the TCP/IP host and domain name from the registry
          • Checks processor information in registry
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:764
          • C:\Program Files\PXPlay\jre\bin\javaw.exe
            "C:\Program Files\PXPlay\jre\bin\javaw.exe" -Xmx64m -XX:+UseSerialGC -XX:TieredStopAtLevel=1 -XX:-UsePerfData -XX:-CreateCoredumpOnCrash -Djava.awt.headless=true -Dstdout.encoding=UTF-8 -Dstderr.encoding=UTF-8 --enable-native-access=ALL-UNNAMED -XX:ErrorFile=C:\Users\Admin\AppData\Roaming\PXPlay\Logs\d3d12_check_hs_err_%p.log -cp "C:\Program Files\PXPlay\PXPlay.exe;C:\Program Files\PXPlay\libs\libstreamutils-java-1.5.jar" com.grill.psplay.video.desktop.renderer.GraphicsApiSupportCheck D3D12 C:\Users\Admin\AppData\Local\Temp\streamutils-jni6508276893008163435\libstreamutils-native-64.dll
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Checks processor information in registry
            PID:4772
          • C:\Program Files\PXPlay\jre\bin\javaw.exe
            "C:\Program Files\PXPlay\jre\bin\javaw.exe" -Xmx64m -XX:+UseSerialGC -XX:TieredStopAtLevel=1 -XX:-UsePerfData -XX:-CreateCoredumpOnCrash -Djava.awt.headless=true -Dstdout.encoding=UTF-8 -Dstderr.encoding=UTF-8 --enable-native-access=ALL-UNNAMED -XX:ErrorFile=C:\Users\Admin\AppData\Roaming\PXPlay\Logs\d3d11_check_hs_err_%p.log -cp "C:\Program Files\PXPlay\PXPlay.exe;C:\Program Files\PXPlay\libs\libstreamutils-java-1.5.jar" com.grill.psplay.video.desktop.renderer.GraphicsApiSupportCheck D3D11 C:\Users\Admin\AppData\Local\Temp\streamutils-jni6508276893008163435\libstreamutils-native-64.dll
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Checks processor information in registry
            PID:3724

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        PXPlay.exe

        • Path C:\Program Files\PXPlay\PXPlay.exe
        • Size 23.2MB
        • SHA256 735090c0cf2f8fa366d2c859abdff9fa64df81d1719d1d305ec94151b5b2e0a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        java.dll

        • Path C:\Program Files\PXPlay\jre\bin\java.dll
        • Size 115KB
        • SHA256 637f6d56924d6998c8e2129ab9a6edaed36ca8b5c751c3cdf373cd49d2d71056
        • MD5 SHA1 SHA512 SSDEEP TLSH

        javaw.exe

        • Path C:\Program Files\PXPlay\jre\bin\javaw.exe
        • Size 179KB
        • SHA256 37459c084559f679eed594d0272b6e261e82baa7216e4fe461f3862ddaa59460
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jimage.dll

        • Path C:\Program Files\PXPlay\jre\bin\jimage.dll
        • Size 34KB
        • SHA256 0299cb2113bb644df2e9bb26582cc85c46f84b8e1548f7a7fe2056f79d3b00ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jli.dll

        • Path C:\Program Files\PXPlay\jre\bin\jli.dll
        • Size 86KB
        • SHA256 5c6d4ec4eac9f321e4630c6333dbd5a4426656e99c86c0dc91165e6098ccb506
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp140.dll

        • Path C:\Program Files\PXPlay\jre\bin\msvcp140.dll
        • Size 561KB
        • SHA256 a4c2229bdc2a2a630acdc095b4d86008e5c3e3bc7773174354f3da4f5beb9cde
        • MD5 SHA1 SHA512 SSDEEP TLSH

        net.dll

        • Path C:\Program Files\PXPlay\jre\bin\net.dll
        • Size 59KB
        • SHA256 d2f0690364e3407d5f993aac47ef3afabf2cedd2b6e1a6c66c16a6150d3b77d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nio.dll

        • Path C:\Program Files\PXPlay\jre\bin\nio.dll
        • Size 80KB
        • SHA256 0e4deb8c1f9701c12c8281bf125ab8f82bff8819332ca25c8c5633931bd05513
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jvm.dll

        • Path C:\Program Files\PXPlay\jre\bin\server\jvm.dll
        • Size 14.8MB
        • SHA256 1f05128f5e312e6cf1d92cea66942f9b0770c41c5175292c8e1f6de118047ebe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140.dll

        • Path C:\Program Files\PXPlay\jre\bin\vcruntime140.dll
        • Size 117KB
        • SHA256 02c6aa0e6e624411a9f19b0360a7865ab15908e26024510e5c38a9c08362c35a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140_1.dll

        • Path C:\Program Files\PXPlay\jre\bin\vcruntime140_1.dll
        • Size 48KB
        • SHA256 7dd9aa02e271c68ca6d5f18d651d23a15d7259715af43326578f7dde27f37637
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zip.dll

        • Path C:\Program Files\PXPlay\jre\bin\zip.dll
        • Size 81KB
        • SHA256 b50acda9d56d6e51f91bd8f3bdc874f6b38e1789590387364c37b66001199f47
        • MD5 SHA1 SHA512 SSDEEP TLSH

        java.security

        • Path C:\Program Files\PXPlay\jre\conf\security\java.security
        • Size 74KB
        • SHA256 8f42977f80b73ed19f941a1e2886de91d61e2c799b22f3e8e370d54c1ce99365
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-291RRWTI2Q.tmp

        • Path C:\Program Files\PXPlay\jre\conf\security\policy\unlimited\is-291RRWTI2Q.tmp
        • Size 146B
        • SHA256 758b930a526fc670ab7537f8c26321527050a31f5f42149a2dda623c56a0a1a9
        • MD5 SHA1 SHA512 TLSH

        jvm.cfg

        • Path C:\Program Files\PXPlay\jre\lib\jvm.cfg
        • Size 29B
        • SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
        • MD5 SHA1 SHA512

        annotations-13.0.jar

        • Path C:\Program Files\PXPlay\libs\annotations-13.0.jar
        • Size 17KB
        • SHA256 ace2a10dc8e2d5fd34925ecac03e4988b2c0f851650c94b8cef49ba1bd111478
        • MD5 SHA1 SHA512 SSDEEP TLSH

        artoolkitplus-2.3.1-1.5.9.jar

        • Path C:\Program Files\PXPlay\libs\artoolkitplus-2.3.1-1.5.9.jar
        • Size 25KB
        • SHA256 a981d290d14ab130bb21541483a307d87c04a4acec5d9561a4cbc2c4f94281ba
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bcpkix-jdk18on-1.85.jar

        • Path C:\Program Files\PXPlay\libs\bcpkix-jdk18on-1.85.jar
        • Size 1.3MB
        • SHA256 c9f82b2d4e99c4bbdfccf684e52cc06ea06a0b567bfd0d08f9c5a3f417055996
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bcprov-jdk18on-1.85.jar

        • Path C:\Program Files\PXPlay\libs\bcprov-jdk18on-1.85.jar
        • Size 9.8MB
        • SHA256 20af26bf6060bb8005cc2389916812c1e0e998dc48d2ced7131b89461b54cff7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bcutil-jdk18on-1.85.jar

        • Path C:\Program Files\PXPlay\libs\bcutil-jdk18on-1.85.jar
        • Size 701KB
        • SHA256 590f55ed5d68529239898a4a5c4f730b6e37f45d1cfa3fbe51f8485abe32c42d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ceffx-core-1.0.0-20260902.215847-76.jar

        • Path C:\Program Files\PXPlay\libs\ceffx-core-1.0.0-20260902.215847-76.jar
        • Size 199KB
        • SHA256 8192ddf321ff2e463a60a30e4bbe0e5875bcba678e84a32a2ae76224018d6802
        • MD5 SHA1 SHA512 SSDEEP TLSH

        core-3.5.4.jar

        • Path C:\Program Files\PXPlay\libs\core-3.5.4.jar
        • Size 596KB
        • SHA256 71de5d89341b5fcf5dd89da7f44e84d825d0e084cdf3ec77c9abe26b0f0ceb13
        • MD5 SHA1 SHA512 SSDEEP TLSH

        disruptor-1.2.21.jar

        • Path C:\Program Files\PXPlay\libs\disruptor-1.2.21.jar
        • Size 128KB
        • SHA256 ce5305ebb5acc23094392007538df63ded8e6b0fdc2bbe981bf746480a8a51f7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        disruptor-4.0.0.jar

        • Path C:\Program Files\PXPlay\libs\disruptor-4.0.0.jar
        • Size 83KB
        • SHA256 c2ba80841541272bc815bcadab910d2d716aa563eca15762450ab4c889440505
        • MD5 SHA1 SHA512 SSDEEP TLSH

        doc-annotations-0.2.jar

        • Path C:\Program Files\PXPlay\libs\doc-annotations-0.2.jar
        • Size 4KB
        • SHA256 625e54d2d403606d21743fcf6d8b07243ef284443da4dc2fa41294417df81a5c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ffmpeg-8.1.3-1.5.13-windows-x86_64.jar

        • Path C:\Program Files\PXPlay\libs\ffmpeg-8.1.3-1.5.13-windows-x86_64.jar
        • Size 29.9MB
        • SHA256 9707dfeed8a9c7f2578318ca2ae59575192efc97a99de4bc0f4d85a30b1ec933
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ffmpeg-8.1.3-1.5.13.jar

        • Path C:\Program Files\PXPlay\libs\ffmpeg-8.1.3-1.5.13.jar
        • Size 270KB
        • SHA256 503bcdefaa9f44d5f4420b1ecb88a62016bcff6c1bb95310a432f0880e1bbcf9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flycapture-2.13.3.31-1.5.9.jar

        • Path C:\Program Files\PXPlay\libs\flycapture-2.13.3.31-1.5.9.jar
        • Size 135KB
        • SHA256 5ec13444de21369733ffdba57416921b4fa2fbc77f2302ea59342a120610e201
        • MD5 SHA1 SHA512 SSDEEP TLSH

        grapl-2.3.13.jar

        • Path C:\Program Files\PXPlay\libs\grapl-2.3.13.jar
        • Size 183KB
        • SHA256 c33bfb41abb272162e16dbd5c33eb1996a8c70d226576ffbfe9adb05dbeccef9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        grapl-gl-2.3.13.jar

        • Path C:\Program Files\PXPlay\libs\grapl-gl-2.3.13.jar
        • Size 69KB
        • SHA256 bca1c76aef02674bc98d8eb940fa9cae4323f678b1d0ab840d5646e0d25f4709
        • MD5 SHA1 SHA512 SSDEEP TLSH

        grapl-natives-core-linux-2.3.13.jar

        • Path C:\Program Files\PXPlay\libs\grapl-natives-core-linux-2.3.13.jar
        • Size 30KB
        • SHA256 27ad5364bf1971ea5be647dc4f809f15a2da1621cfbb4ae6d0ff2602599d8376
        • MD5 SHA1 SHA512 SSDEEP TLSH

        grapl-natives-core-macos-2.3.13.jar

        • Path C:\Program Files\PXPlay\libs\grapl-natives-core-macos-2.3.13.jar
        • Size 39KB
        • SHA256 e7d23fe71398ad4702f74e8eebc117cd06b7297e125882ce4b12ef54f7c0fce1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        grapl-natives-core-win-2.3.13.jar

        • Path C:\Program Files\PXPlay\libs\grapl-natives-core-win-2.3.13.jar
        • Size 128KB
        • SHA256 5920b654b54eb5e9e5b50b81874a46b9e26b0f3de1f91c709655f1d882df970b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        grapl-natives-gl-linux-2.3.13.jar

        • Path C:\Program Files\PXPlay\libs\grapl-natives-gl-linux-2.3.13.jar
        • Size 15KB
        • SHA256 12a13da5b8a589b5b2f6a07a77caff3f7a15601bfff1ec5050a2b42338fbee00
        • MD5 SHA1 SHA512 SSDEEP TLSH

        grapl-natives-gl-macos-2.3.13.jar

        • Path C:\Program Files\PXPlay\libs\grapl-natives-gl-macos-2.3.13.jar
        • Size 11KB
        • SHA256 33163a16d99fbbc60455607e868fee1b46e79c26a241a1e4ac097bd8c74cfb4d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        grapl-natives-gl-win-2.3.13.jar

        • Path C:\Program Files\PXPlay\libs\grapl-natives-gl-win-2.3.13.jar
        • Size 123KB
        • SHA256 6f8b5e4d69a4caebbf9d9cec58d52bdd3631815c07633dd63ac9f07dc627c5e0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gson-2.8.9.jar

        • Path C:\Program Files\PXPlay\libs\gson-2.8.9.jar
        • Size 252KB
        • SHA256 d3999291855de495c94c743761b8ab5176cfeabe281a5ab0d8e8d45326fd703e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hid4java-0.8.0.jar

        • Path C:\Program Files\PXPlay\libs\hid4java-0.8.0.jar
        • Size 923KB
        • SHA256 ce812669b6d58cbaee26ff4cd1633dea4b1cee1adfe4927519d8fd67ae2fa954
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jamepad-3.0.0.0-SNAPSHOT.jar

        • Path C:\Program Files\PXPlay\libs\jamepad-3.0.0.0-SNAPSHOT.jar
        • Size 5.7MB
        • SHA256 ba6c4d2959eb1edbc28cc8fe1fe18a4968c7d79505e95a884d99c3a46878a845
        • MD5 SHA1 SHA512 SSDEEP TLSH

        javacpp-1.5.13-windows-x86_64.jar

        • Path C:\Program Files\PXPlay\libs\javacpp-1.5.13-windows-x86_64.jar
        • Size 1.9MB
        • SHA256 fb507face6be4ad342d57ca1cf7b23487f5bfb90e2854314663b8f726b7d3e4e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        javacpp-1.5.13.jar

        • Path C:\Program Files\PXPlay\libs\javacpp-1.5.13.jar
        • Size 514KB
        • SHA256 077f27d663cc928adce43e912a90ec06f97f92f120ca02d414735ae0fb1c743c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        javacpp-platform-1.5.13.jar

        • Path C:\Program Files\PXPlay\libs\javacpp-platform-1.5.13.jar
        • Size 6KB
        • SHA256 192f8b4aaeed3e8636c2a47dce9d8226b372b8df59d34384f015e8fc9f3d714f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-console-l1-1-0.dll
        • Size 22KB
        • SHA256 59d78aec2611cc356702b3836cd6bc66575c594b458b7830877001a89a767547
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-2-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-console-l1-2-0.dll
        • Size 22KB
        • SHA256 5cd07f83247cbe9cfbc0932b6499ec5230b2163ec12421911eb5ee261462b33f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-datetime-l1-1-0.dll
        • Size 22KB
        • SHA256 78f6c8078b69676497ad76b9ccc337a61f3020bca618ab0141f10972903b1bde
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-debug-l1-1-0.dll
        • Size 22KB
        • SHA256 1f5b7d47e991a1dc056f2f50cc62d4f77a51a590c56379f6fa4ecb5455f9b6f2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 22KB
        • SHA256 a1d3ec684400c79d2ec827ddb6d52f4121591694cf464dd653d6b239d136b0bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-file-l1-1-0.dll
        • Size 26KB
        • SHA256 3a1cf66477892df44b9f451c8f947cac1329bc1f02399ca63621574154b51538
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-file-l1-2-0.dll
        • Size 22KB
        • SHA256 ba215618e8cc09ff2eaa664abbb0732b07db0e4661e16b04d170fc6668694304
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-file-l2-1-0.dll
        • Size 22KB
        • SHA256 75b953a6a99b9491244fa56c68ade516119ac473b8e8c64c152fdfd09df11bdc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-handle-l1-1-0.dll
        • Size 22KB
        • SHA256 bd24621589d33a765542e6a109def69f61156bcd1cdc4a0c2e954ffb58de0432
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 165c0c680b9ad7cf0d10cb02a6dbba897205bb27f7adfb00dfb0cefeb49a40c0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 22KB
        • SHA256 697c2de8a219c586869df7b70198aa9d93831b907a2151841bc63943b42e4816
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 22KB
        • SHA256 5c4d953db991d849c22782419a8b436d6fc639c5412c34ea672a0c8891b6ca13
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-localization-l1-2-0.dll
        • Size 22KB
        • SHA256 16256dfc26826296c8c88471b176f98d3e7ad9a4afacdc5350d0fdd470f40909
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-memory-l1-1-0.dll
        • Size 22KB
        • SHA256 beb72ed3c23a5227523bbf9077c57e36540fac0c422c30ec3b63599e4edd2f9a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 22KB
        • SHA256 a44c1d24b3c342fb32ae2836ef890777c1950333c1c167d76383dcf093c8e8c3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 22KB
        • SHA256 bf79af5629a7e2df040ea1a26e3f74137f782f378ee2cedaca49db1fb4957800
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 22KB
        • SHA256 ffe2375e1d29d541659aa47aead5636afee8c17162e1b47dd7afb46ed52a78b3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 22KB
        • SHA256 9de901ebf9dac5e9fad669a065cc2c8c06c2b02d74bcdaf472f02497538d5797
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-profile-l1-1-0.dll
        • Size 22KB
        • SHA256 69f5ed9328ff5fdbc14fff88c41184bfe7e8d0ef5d93f5fb467dd6c263b0d51f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 22KB
        • SHA256 acb9c973980ab441226b30e3647a334ea31c1604d84c6a0aebc2ea4993358901
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-string-l1-1-0.dll
        • Size 22KB
        • SHA256 c6372337c9ce1dd2a521d9390fbc867d7445b44d360af8a56e2c0a860297da3f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-synch-l1-1-0.dll
        • Size 22KB
        • SHA256 7e0eb833be2378f0686f958a74edb3fd44cc902c27d597f4ed3cfd7f206255f3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-synch-l1-2-0.dll
        • Size 22KB
        • SHA256 3ba58aecb8e9e6d6620b98e0d8252a005f2bc350e79d1b182cb59883abe277cf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 22KB
        • SHA256 e40f7232de970478d9244ba4d8279c4e3bf30079b072e13298c663b529cb0787
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-timezone-l1-1-0.dll
        • Size 22KB
        • SHA256 54a9178b6df11f2024e2b38761136d24d8ba0586b2cb4ee2c4722da8d6037b8e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-core-util-l1-1-0.dll
        • Size 22KB
        • SHA256 a8c4b20070cd6c9346024b97ef15269d71bfb37796bccc5b439cbd3a3e5c3d9c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-conio-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-crt-conio-l1-1-0.dll
        • Size 22KB
        • SHA256 963ea14aba2ecfd7c61bb0d796292fff22ace2da5968d8b1db314345ae28cf4a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-crt-convert-l1-1-0.dll
        • Size 26KB
        • SHA256 b88f98bcb692c6c5b4438767308f44adefda590710941eaa5c4af204f24f4321
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-environment-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-crt-environment-l1-1-0.dll
        • Size 22KB
        • SHA256 a87560fd7d1bafb9e5519443253e0493e399d1081246b8f29a57e5e7346cd7bc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-filesystem-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 22KB
        • SHA256 0d9a3d6106d280e6918a10051cdbf01f7425a9a92cffa070fd4b73fa8aa937bb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-heap-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-crt-heap-l1-1-0.dll
        • Size 22KB
        • SHA256 a564f90def67228e35a29ee1f11492c97be7a094ac151e93c03b1a6969cbbc25
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-locale-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-crt-locale-l1-1-0.dll
        • Size 22KB
        • SHA256 6365a6acc38115f1b3ff099e918906b2edc46262a8b9c203d1768d0f4f0ee1b3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-math-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-crt-math-l1-1-0.dll
        • Size 30KB
        • SHA256 f35e6b89190265a41b449bbb91d6004be673be313e60cceff4bb39e408aab46e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-multibyte-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-crt-multibyte-l1-1-0.dll
        • Size 30KB
        • SHA256 9a0db1e28ed4fe59cd930892511810628b2f36c3cba4f98403f17618619baa60
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-private-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-crt-private-l1-1-0.dll
        • Size 74KB
        • SHA256 553e11871e01f94d331be5e21138418d5e34023c6531d79f46f62fc47798e5c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-crt-process-l1-1-0.dll
        • Size 22KB
        • SHA256 05b29818af66f0b76903792ba37dc088ff330209e0de6b2cc8edbd518cc999d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-runtime-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 26KB
        • SHA256 659a5d57d7235e0892e6162828c5b144ee911f0c9c92844c1eab0961b88b1172
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-stdio-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 26KB
        • SHA256 55397a894ca181e23dc0f67d857f83a73b293c16ef2854f9c3dc939835f03c2f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-string-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-crt-string-l1-1-0.dll
        • Size 26KB
        • SHA256 3dc14795df69a59fab83339e5e9d627aa66605f5e45adeb8b1ebdb92f36f6c67
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-time-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-crt-time-l1-1-0.dll
        • Size 22KB
        • SHA256 5fd56ad9d9a8df953edd9796335071fd8cd5202644a094185bbd9e494e46c64a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-utility-l1-1-0.dll

        • Path C:\Users\Admin\.openjfx\cache\25.0.4+2\amd64\api-ms-win-crt-utility-l1-1-0.dll
        • Size 22KB
        • SHA256 4d90d577248b381608f6a336a7fb5d7af10a0eb1723987704bd90979d147115f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        trusted-roots.p12

        • Path C:\Users\Admin\AppData\Local\PXPlay\trusted-roots.p12
        • Size 143KB
        • SHA256 5aca37984437711407cca6e96bd6f8fde8e59b4d312490be66cbe112a23cebb7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PXPlay_Windows_setup_v3.1.0.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-HWA0SJKA0U.tmp\PXPlay_Windows_setup_v3.1.0.tmp
        • Size 6.6MB
        • SHA256 7da0e76ea03dea09c7a1331a4182515475e09dd122ba5dbc7725ba46827d7e91
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jerasure-jni-native-64.dll

        • Path C:\Users\Admin\AppData\Local\Temp\jerasure-jni9133485903106815439\jerasure-jni-native-64.dll
        • Size 262KB
        • SHA256 26269bf79c687a6b12ee4613537e95fb3d486b45e060d5408161d40c6b2a4d8b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jna11816125697724072596.dll

        • Path C:\Users\Admin\AppData\Local\Temp\jna-63116079\jna11816125697724072596.dll
        • Size 248KB
        • SHA256 13b2cac3f50368ab97fa2e3b0d0d2cb612f68449d5bbd6de187fc85ee4469d03
        • MD5 SHA1 SHA512 SSDEEP TLSH

        opus-jni-native-64.dll

        • Path C:\Users\Admin\AppData\Local\Temp\opus-jni13492695863602254272\opus-jni-native-64.dll
        • Size 571KB
        • SHA256 0c1731064f0de7018109c8a254806d2acc7d5daa49f0b848d066faa283cf1db3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libplacebo-jni-native-64.dll

        • Path C:\Users\Admin\AppData\Local\Temp\placebo-jni15868605566233396963\libplacebo-jni-native-64.dll
        • Size 45.6MB
        • SHA256 52be7952a1e7988884af227e6f32009684d2b522d113b27c24c28530f987ead5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libstreamutils-native-64.dll

        • Path C:\Users\Admin\AppData\Local\Temp\streamutils-jni6508276893008163435\libstreamutils-native-64.dll
        • Size 11.9MB
        • SHA256 fef85dc04fb46366d375903b83ea76cd84e0dd8463ef6a0a69ef794e91cfb62e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        prefs.json.tmp

        • Path C:\Users\Admin\AppData\Roaming\PXPlay\Data\prefs.json.tmp
        • Size 289B
        • SHA256 8ef61151f9b59f7f3cf6c07553001f7dc498b1c63d09c95a1184f447f3081322
        • MD5 SHA1 SHA512 TLSH

        secure.json.tmp

        • Path C:\Users\Admin\AppData\Roaming\PXPlay\Data\secure.json.tmp
        • Size 189B
        • SHA256 0ae56deacee6f8687a7f6976995664597e3bb80942bf42ad7bb5cab70edf605c
        • MD5 SHA1 SHA512 TLSH

        status.json

        • Path C:\Users\Admin\AppData\Roaming\PXPlay\integration\status.json
        • Size 78B
        • SHA256 6adc83b5f11323dcd0913f7f839ef0027959520fe51336e41eb7e0c5829756a9
        • MD5 SHA1 SHA512 TLSH

        status.json

        • Path C:\Users\Admin\AppData\Roaming\PXPlay\integration\status.json
        • Size 78B
        • SHA256 9ce9e37277e68384947b03ff9d555bf7d96db971ae555be027ac142793019c45
        • MD5 SHA1 SHA512 TLSH

        memory/448-709-0x0000000000400000-0x0000000000442000-memory.dmp

        memory/764-1202-0x00007FF8780F0000-0x00007FF878984000-memory.dmp

        memory/764-1201-0x0000000061F00000-0x00000000620D8000-memory.dmp

        memory/3776-635-0x0000000000A30000-0x00000000010F0000-memory.dmp

        memory/3776-580-0x0000000000A30000-0x00000000010F0000-memory.dmp

        memory/3776-636-0x0000000000A30000-0x00000000010F0000-memory.dmp

        memory/3776-5-0x0000017719690000-0x0000017719691000-memory.dmp

        memory/3776-96-0x0000017719690000-0x0000017719691000-memory.dmp

        memory/3776-53-0x0000000000A30000-0x00000000010F0000-memory.dmp

        memory/3776-479-0x0000000000A30000-0x00000000010F0000-memory.dmp

        memory/3816-46-0x0000000000740000-0x00000000008B7000-memory.dmp

        memory/3816-637-0x0000000000740000-0x00000000008B7000-memory.dmp

        memory/3816-0-0x0000000000740000-0x00000000008B7000-memory.dmp

        memory/4772-800-0x000001CE2B980000-0x000001CE2B981000-memory.dmp

        memory/4772-807-0x000001CE2B980000-0x000001CE2B981000-memory.dmp

        memory/4772-806-0x000001CE2B980000-0x000001CE2B981000-memory.dmp

        memory/4772-805-0x000001CE2B980000-0x000001CE2B981000-memory.dmp

        memory/4772-799-0x000001CE2B980000-0x000001CE2B981000-memory.dmp

        memory/4772-808-0x000001CE2B980000-0x000001CE2B981000-memory.dmp

        memory/4772-810-0x000001CE2B980000-0x000001CE2B981000-memory.dmp

        memory/4772-809-0x000001CE2B980000-0x000001CE2B981000-memory.dmp

        memory/4772-811-0x000001CE2B980000-0x000001CE2B981000-memory.dmp

        memory/4772-801-0x000001CE2B980000-0x000001CE2B981000-memory.dmp