Malware Analysis Report

2024-10-10 07:25

Sample ID 240611-q5k82azbmk
Target https://www.curseforge.com/minecraft/mc-mods/simple-voice-chat/files/5358779
Tags
discovery persistence evasion
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

Threat Level: Shows suspicious behavior

The file https://www.curseforge.com/minecraft/mc-mods/simple-voice-chat/files/5358779 was found to be: Shows suspicious behavior.

Malicious Activity Summary

discovery persistence evasion

Registers COM server for autorun

Loads dropped DLL

Executes dropped EXE

Checks installed software on the system

Enumerates connected drives

Adds Run key to start application

Drops desktop.ini file(s)

Legitimate hosting services abused for malware hosting/C2

Drops file in System32 directory

Resource Forking

Drops file in Windows directory

Enumerates physical storage devices

Suspicious use of SendNotifyMessage

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

Enumerates system info in registry

Checks SCSI registry key(s)

Modifies registry class

Suspicious use of SetWindowsHookEx

Suspicious behavior: EnumeratesProcesses

Suspicious use of FindShellTrayWindow

Uses Volume Shadow Copy service COM API

Modifies data under HKEY_USERS

Suspicious behavior: GetForegroundWindowSpam

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-11 13:50

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-11 13:50

Reported

2024-06-11 14:07

Platform

win10v2004-20240426-en

Max time kernel

962s

Max time network

963s

Command Line

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.curseforge.com/minecraft/mc-mods/simple-voice-chat/files/5358779

Signatures

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Desktop\BeamNG-Techdemo-0.3-setup.exe N/A
N/A N/A C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\getD3DXVer.exe N/A
N/A N/A C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\dxwebsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\getD3DXVer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Windows\system32\regsvr32.exe N/A
N/A N/A C:\Windows\system32\regsvr32.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Windows\system32\regsvr32.exe N/A
N/A N/A C:\Windows\system32\regsvr32.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Windows\system32\regsvr32.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Windows\system32\regsvr32.exe N/A
N/A N/A C:\Windows\system32\regsvr32.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Windows\system32\regsvr32.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Windows\system32\regsvr32.exe N/A
N/A N/A C:\Windows\system32\regsvr32.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Windows\system32\regsvr32.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A

Registers COM server for autorun

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{c60fae90-4183-4a3f-b2f7-ac1dc49b0e5c}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{54b68bc7-3a45-416b-a8c9-19bf19ec1df5}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{962f5027-99be-4692-a468-85802cf8de61}\InProcServer32\ = "C:\\Windows\\system32\\xactengine3_1.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{b802058a-464a-42db-bc10-b650d6f2586a}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_2.dll" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4c5e637a-16c7-4de3-9c46-5ed22181962d}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2139e6da-c341-4774-9ac3-b4e026347f64}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_5.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{e48c5a3f-93ef-43bb-a092-2c7ceb946f27}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_6.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{cd0d66ec-8057-43f5-acbd-66dfb36fd78c}\InProcServer32\ = "C:\\Windows\\system32\\xactengine2_7.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{e180344b-ac83-4483-959e-18a5c56a5e19}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{074b110f-7f58-4743-aea5-12f15b5074ed}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{bc3e0fc6-2e0d-4c45-bc61-d9c328319bd8}\InProcServer32\ = "C:\\Windows\\system32\\xactengine2_4.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3a2495ce-31d0-435b-8ccf-e9f0843fd960}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6f6ea3a9-2cf5-41cf-91c1-2170b1540063}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_0.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{03219e78-5bc3-44d1-b92e-f63d89cc6526}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{d06df0d0-8518-441e-822f-5451d5c595b8}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6a93130e-1d53-41d1-a9cf-e758800bb179}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_7.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3b80ee2a-b0f5-4780-9e30-90cb39685b03}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9cab402c-1d37-44b4-886d-fa4f36170a4c}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_3.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1138472b-d187-44e9-81f2-ae1b0e7785f1}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{5a508685-a254-4fba-9b82-9a24b00306af}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_7.dll" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{f4769300-b949-4df9-b333-00d33932e9a6}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{f4769300-b949-4df9-b333-00d33932e9a6}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_1.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0977d092-2d95-4e43-8d42-9ddcc2545ed5}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{cecec95a-d894-491a-bee3-5e106fb59f2d}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6a93130e-1d53-41d1-a9cf-e758800bb179}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3a2495ce-31d0-435b-8ccf-e9f0843fd960}\InProcServer32\ = "C:\\Windows\\system32\\xactengine2_6.dll" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{cac1105f-619b-4d04-831a-44e1cbf12d57}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{c0c56f46-29b1-44e9-9939-a32ce86867e2}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_0.dll" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{c1e3f122-a2ea-442c-854f-20d98f8357a1}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{5a508685-a254-4fba-9b82-9a24b00306af}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{c0c56f46-29b1-44e9-9939-a32ce86867e2}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{629cf0de-3ecc-41e7-9926-f7e43eebec51}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{629cf0de-3ecc-41e7-9926-f7e43eebec51}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_2.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{bcc782bc-6492-4c22-8c35-f5d72fe73c6e}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{bc3e0fc6-2e0d-4c45-bc61-d9c328319bd8}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{e21a7345-eb21-468e-be50-804db97cf708}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{074b110f-7f58-4743-aea5-12f15b5074ed}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3eda9b49-2085-498b-9bb2-39a6778493de}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{bcc782bc-6492-4c22-8c35-f5d72fe73c6e}\InProcServer32\ = "C:\\Windows\\system32\\xactengine3_7.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{cac1105f-619b-4d04-831a-44e1cbf12d57}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1138472b-d187-44e9-81f2-ae1b0e7785f1}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{343e68e6-8f82-4a8d-a2da-6e9a944b378c}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6f6ea3a9-2cf5-41cf-91c1-2170b1540063}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{e21a7345-eb21-468e-be50-804db97cf708}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_1.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{d3332f02-3dd0-4de9-9aec-20d85c4111b6}\InProcServer32\ = "C:\\Windows\\system32\\xactengine3_2.dll" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0aa000aa-f404-11d9-bd7a-0010dc4f8f81}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{343e68e6-8f82-4a8d-a2da-6e9a944b378c}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{65d822a4-4799-42c6-9b18-d26cf66dd320}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6f6ea3a9-2cf5-41cf-91c1-2170b1540063}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{629cf0de-3ecc-41e7-9926-f7e43eebec51}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{e48c5a3f-93ef-43bb-a092-2c7ceb946f27}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{fac23f48-31f5-45a8-b49b-5225d61401aa}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{fac23f48-31f5-45a8-b49b-5225d61401aa}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_0.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{962f5027-99be-4692-a468-85802cf8de61}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{c1e3f122-a2ea-442c-854f-20d98f8357a1}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3eda9b49-2085-498b-9bb2-39a6778493de}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{bc3e0fc6-2e0d-4c45-bc61-d9c328319bd8}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0977d092-2d95-4e43-8d42-9ddcc2545ed5}\InProcServer32\ = "C:\\Windows\\system32\\xactengine3_4.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{248d8a3b-6256-44d3-a018-2ac96c459f47}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{54b68bc7-3a45-416b-a8c9-19bf19ec1df5}\InProcServer32\ = "C:\\Windows\\system32\\xactengine2_5.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{cd0d66ec-8057-43f5-acbd-66dfb36fd78c}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{cecec95a-d894-491a-bee3-5e106fb59f2d}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_6.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{b802058a-464a-42db-bc10-b650d6f2586a}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{f5ca7b34-8055-42c0-b836-216129eb7e30}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup0 = "rundll32.exe C:\\Windows\\system32\\advpack.dll,DelNodeRunDLL32 \"C:\\Users\\Admin\\AppData\\Local\\Temp\\IXP000.TMP\\\"" C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\dxwebsetup.exe N/A

Checks installed software on the system

discovery

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Windows\assembly\Desktop.ini C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\assembly\Desktop.ini C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\M: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\N: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\O: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\S: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\T: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\H: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\I: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\K: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\V: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\W: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\X: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\Y: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\J: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\L: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\Q: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\A: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\P: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\R: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\U: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\Z: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\B: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\E: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\G: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\SysWOW64\DirectX\WebSetup\Jun2007_d3dx9_34_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\system32\SET8662.tmp C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\SETAC27.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\SysWOW64\XAudio2_2.dll C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\SysWOW64\d3dx9_27.dll C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\SysWOW64\D3DCompiler_34.dll C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\SETB239.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\SysWOW64\SETBB6F.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\dxupdate.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Aug2009_d3dx11_42_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Nov2007_d3dx9_36_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Jun2008_d3dx10_38_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\SETCDD6.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\SysWOW64\d3dx10_37.dll C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\SETB0FF.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\system32\SETB66B.tmp C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\SETC58E.tmp C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\directx\websetup\SETA28.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\SysWOW64\SET99AE.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\system32\x3daudio1_2.dll C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File created C:\Windows\system32\SETAA94.tmp C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\d3dcsx_43.dll C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\SysWOW64\SETD1A4.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Mar2009_xaudio_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\SysWOW64\SET9D5C.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\system32\SETA42B.tmp C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\XAudio2_4.dll C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File created C:\Windows\system32\SET8410.tmp C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\SET92B1.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\system32\SETBBCA.tmp C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\D3DCompiler_40.dll C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\SETAF97.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\SysWOW64\SETB84D.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Oct2006_d3dx9_31_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Mar2008_x3daudio_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\SET9E78.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\SysWOW64\SETAECB.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\system32\SETA227.tmp C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File created C:\Windows\SysWOW64\SETA642.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\system32\SETAE7C.tmp C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File created C:\Windows\SysWOW64\SETB4CE.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Mar2009_d3dx10_41_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Apr2005_d3dx9_25_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\SET972A.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\system32\SET9FB6.tmp C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\SETB712.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\system32\SETBBCB.tmp C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\SETC97A.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\system32\SETCD00.tmp C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\SETD2BF.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\system32\SET9343.tmp C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File created C:\Windows\SysWOW64\SETADA0.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\SysWOW64\XAudio2_0.dll C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\system32\d3dcsx_42.dll C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\SETB2E2.tmp C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\SETB3F1.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\SETB8DB.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\system32\XAudio2_5.dll C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Mar2009_d3dx9_41_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\SysWOW64\SET8336.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\SysWOW64\d3dx10_35.dll C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\system32\SETB1C7.tmp C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File created C:\Windows\SysWOW64\SETCF30.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\SysWOW64\d3dx11_43.dll C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\msdownld.tmp\AS64FC58.tmp\Mar2009_xaudio_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS6520D8.tmp\Feb2010_xaudio_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS65286A.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\assembly\ngenlock.dat C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File created C:\Windows\msdownld.tmp\AS64049B.tmp\Aug2007_d3dx9_35_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS6410D0.tmp\Mar2008_d3dx9_37_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS651E58.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS640EBC.tmp\Nov2007_d3dx10_36_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS64AB0C.tmp\Aug2007_xact_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS651129.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3D.xml C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS6407D7.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS64DD38.tmp\Aug2008_xact_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS6514F1.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS65228E.tmp\Jun2010_d3dx9_43_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File created C:\Windows\msdownld.tmp\AS64B57C.tmp\Nov2007_xact_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS64337B.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS651407.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS63EB37.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS643918.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS644751.tmp\Jun2010_d3dx11_43_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS6536E1.tmp\MDX_1.0.2903.0_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS63ED4A.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS643918.tmp\Aug2009_d3dcsx_42_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS64767F.tmp\Oct2006_d3dx9_31_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS64D289.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS63FDF3.tmp\Apr2007_d3dx10_33_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS649DED.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS64E277.tmp\Nov2008_x3daudio_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS65286A.tmp\Jun2010_d3dcsx_43_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File created C:\Windows\rescache\_merged\2229298842\3297363826.pri C:\Windows\system32\LogonUI.exe N/A
File created C:\Windows\msdownld.tmp\AS63F866.tmp\Dec2006_d3dx9_32_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS644E65.tmp\Feb2005_d3dx9_24_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS646C1F.tmp\Apr2006_xact_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS649206.tmp\Apr2007_xact_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS64C124.tmp\Mar2008_xact_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS644964.tmp\Jun2010_d3dcsx_43_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS6494E4.tmp\Apr2007_xact_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS64D911.tmp\Aug2008_d3dx10_39_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS64FB6E.tmp\Mar2009_xact_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File created C:\Windows\msdownld.tmp\AS63F3D2.tmp\Apr2006_d3dx9_30_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS646808.tmp\Apr2006_d3dx9_30_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS64965B.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS64B80C.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS64E517.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\assembly\tmp\3MZSQYLG\Microsoft.DirectX.Direct3DX.dll C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS63F866.tmp\Dec2006_d3dx9_32_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS65478A.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS64D0C4.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS643705.tmp\Aug2009_d3dx11_42_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS64DC4D.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS64F9B9.tmp\Mar2009_x3daudio_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS6525D9.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe N/A
File created C:\Windows\assembly\tmp\T0SHZK8Q\Microsoft.DirectX.DirectInput.dll C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS64049B.tmp\Aug2007_d3dx9_35_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS64C589.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A

Enumerates physical storage devices

Checks SCSI registry key(s)

Description Indicator Process Target
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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 C:\Windows\system32\vssvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 C:\Windows\system32\vssvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters C:\Windows\system32\vssvc.exe N/A
Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters C:\Windows\system32\vssvc.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr C:\Windows\system32\vssvc.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentColorMenu = "4292311040" C:\Windows\system32\LogonUI.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColorBalance = "89" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationBlurBalance = "1" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationGlassAttribute = "1" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133625874893604938" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = a6d8ff0076b9ed00429ce3000078d700005a9e000042750000264200f7630c00 C:\Windows\system32\LogonUI.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglow = "3288365271" C:\Windows\system32\LogonUI.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\StartColorMenu = "4288567808" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\AccentColor = "4292311040" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColor = "3288365271" C:\Windows\system32\LogonUI.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglowBalance = "10" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\EnableWindowColorization = "154" C:\Windows\system32\LogonUI.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3b80ee2a-b0f5-4780-9e30-90cb39685b03}\ = "XACT Engine" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6f6ea3a9-2cf5-41cf-91c1-2170b1540063}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{e48c5a3f-93ef-43bb-a092-2c7ceb946f27}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{074b110f-7f58-4743-aea5-12f15b5074ed}\InProcServer32\ = "C:\\Windows\\system32\\xactengine3_5.dll" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0aa000aa-f404-11d9-bd7a-0010dc4f8f81}\InProcServer32 C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f1b577e-5e5a-4e8a-ba73-c657ea8e8598}\InProcServer32\ThreadingModel = "Both" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{77c56bf4-18a1-42b0-88af-5072ce814949}\ = "XACT Engine" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{d3332f02-3dd0-4de9-9aec-20d85c4111b6} C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0977d092-2d95-4e43-8d42-9ddcc2545ed5}\InProcServer32\ = "C:\\Windows\\system32\\xactengine3_4.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{03219e78-5bc3-44d1-b92e-f63d89cc6526}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f1b577e-5e5a-4e8a-ba73-c657ea8e8598}\ = "XACT Engine" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1138472b-d187-44e9-81f2-ae1b0e7785f1}\InProcServer32\ = "C:\\Windows\\SysWow64\\xactengine2_3.dll" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{c1e3f122-a2ea-442c-854f-20d98f8357a1}\ = "AudioVolumeMeter" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{e48c5a3f-93ef-43bb-a092-2c7ceb946f27}\InProcServer32\ThreadingModel = "Both" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{5a508685-a254-4fba-9b82-9a24b00306af}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_7.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{bc3e0fc6-2e0d-4c45-bc61-d9c328319bd8}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5a508685-a254-4fba-9b82-9a24b00306af}\ = "XAudio2" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{e180344b-ac83-4483-959e-18a5c56a5e19}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{e48c5a3f-93ef-43bb-a092-2c7ceb946f27}\InProcServer32 C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{c1e3f122-a2ea-442c-854f-20d98f8357a1}\InProcServer32\ThreadingModel = "Both" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{f5ca7b34-8055-42c0-b836-216129eb7e30}\InProcServer32\ = "C:\\Windows\\SysWow64\\XAudio2_2.dll" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{629cf0de-3ecc-41e7-9926-f7e43eebec51}\InProcServer32\ThreadingModel = "Both" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8bb7778b-645b-4475-9a73-1de3170bd3af}\InProcServer32\ThreadingModel = "Both" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{c60fae90-4183-4a3f-b2f7-ac1dc49b0e5c}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{f4769300-b949-4df9-b333-00d33932e9a6}\InProcServer32 C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{e21a7345-eb21-468e-be50-804db97cf708}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{94c1affa-66e7-4961-9521-cfdef3128d4f} C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2139e6da-c341-4774-9ac3-b4e026347f64}\InProcServer32\ThreadingModel = "Both" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0aa000aa-f404-11d9-bd7a-0010dc4f8f81}\ = "XACT Engine" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{f4769300-b949-4df9-b333-00d33932e9a6} C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4c9b6dde-6809-46e6-a278-9b6a97588670} C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4c9b6dde-6809-46e6-a278-9b6a97588670}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_5.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{5a508685-a254-4fba-9b82-9a24b00306af}\ = "XAudio2" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{54b68bc7-3a45-416b-a8c9-19bf19ec1df5}\InProcServer32 C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{962f5027-99be-4692-a468-85802cf8de61}\InProcServer32\ = "C:\\Windows\\SysWow64\\xactengine3_1.dll" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{e180344b-ac83-4483-959e-18a5c56a5e19}\InProcServer32\ = "C:\\Windows\\SysWow64\\XAudio2_3.dll" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{c7338b95-52b8-4542-aa79-42eb016c8c1c} C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{77c56bf4-18a1-42b0-88af-5072ce814949} C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{074b110f-7f58-4743-aea5-12f15b5074ed}\ = "XACT Engine" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{c60fae90-4183-4a3f-b2f7-ac1dc49b0e5c}\InProcServer32 C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{bc3e0fc6-2e0d-4c45-bc61-d9c328319bd8}\InProcServer32\ = "C:\\Windows\\SysWow64\\xactengine2_4.dll" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{d3332f02-3dd0-4de9-9aec-20d85c4111b6}\InProcServer32\ = "C:\\Windows\\system32\\xactengine3_2.dll" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9cab402c-1d37-44b4-886d-fa4f36170a4c}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{6a93130e-1d53-41d1-a9cf-e758800bb179}\ = "AudioReverb" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1138472b-d187-44e9-81f2-ae1b0e7785f1}\InProcServer32 C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{77c56bf4-18a1-42b0-88af-5072ce814949}\InProcServer32\ = "C:\\Windows\\SysWow64\\xactengine2_8.dll" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{d3332f02-3dd0-4de9-9aec-20d85c4111b6}\InProcServer32\ = "C:\\Windows\\SysWow64\\xactengine3_2.dll" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{03219e78-5bc3-44d1-b92e-f63d89cc6526}\InProcServer32\ThreadingModel = "Both" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8bb7778b-645b-4475-9a73-1de3170bd3af}\InProcServer32 C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{cac1105f-619b-4d04-831a-44e1cbf12d57}\InProcServer32\ThreadingModel = "Both" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{c60fae90-4183-4a3f-b2f7-ac1dc49b0e5c}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{bc3e0fc6-2e0d-4c45-bc61-d9c328319bd8}\InProcServer32\ = "C:\\Windows\\system32\\xactengine2_4.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{e21a7345-eb21-468e-be50-804db97cf708}\InProcServer32\ThreadingModel = "Both" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{bcc782bc-6492-4c22-8c35-f5d72fe73c6e}\InProcServer32\ = "C:\\Windows\\system32\\xactengine3_7.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{629cf0de-3ecc-41e7-9926-f7e43eebec51}\ = "AudioReverb" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{c7338b95-52b8-4542-aa79-42eb016c8c1c}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_4.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3a2495ce-31d0-435b-8ccf-e9f0843fd960}\ = "XACT Engine" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{d3332f02-3dd0-4de9-9aec-20d85c4111b6}\ = "XACT Engine" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{cd0d66ec-8057-43f5-acbd-66dfb36fd78c} C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4c5e637a-16c7-4de3-9c46-5ed22181962d}\ = "XAudio2" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0aa000aa-f404-11d9-bd7a-0010dc4f8f81}\InProcServer32\ThreadingModel = "Both" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{e21a7345-eb21-468e-be50-804db97cf708}\ = "XAudio2" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{b802058a-464a-42db-bc10-b650d6f2586a} C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4c9b6dde-6809-46e6-a278-9b6a97588670}\ = "XAudio2" C:\Windows\system32\regsvr32.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Users\Admin\Desktop\BeamNG-Techdemo-0.3-setup.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\system32\LogonUI.exe N/A
N/A N/A C:\Windows\system32\LogonUI.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2852 wrote to memory of 5072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 5072 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3780 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 4892 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 4892 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2852 wrote to memory of 3728 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.curseforge.com/minecraft/mc-mods/simple-voice-chat/files/5358779

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xd8,0x100,0x104,0xe4,0x108,0x7ffd9eb4ab58,0x7ffd9eb4ab68,0x7ffd9eb4ab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1612 --field-trial-handle=1848,i,653979600683209150,5967895286554578645,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1848,i,653979600683209150,5967895286554578645,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2236 --field-trial-handle=1848,i,653979600683209150,5967895286554578645,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3056 --field-trial-handle=1848,i,653979600683209150,5967895286554578645,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3064 --field-trial-handle=1848,i,653979600683209150,5967895286554578645,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3928 --field-trial-handle=1848,i,653979600683209150,5967895286554578645,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=4488 --field-trial-handle=1848,i,653979600683209150,5967895286554578645,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=4628 --field-trial-handle=1848,i,653979600683209150,5967895286554578645,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4804 --field-trial-handle=1848,i,653979600683209150,5967895286554578645,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4308 --field-trial-handle=1848,i,653979600683209150,5967895286554578645,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffd9eb4ab58,0x7ffd9eb4ab68,0x7ffd9eb4ab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1720 --field-trial-handle=1976,i,15112900892676511786,15792631135642463605,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1928 --field-trial-handle=1976,i,15112900892676511786,15792631135642463605,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2240 --field-trial-handle=1976,i,15112900892676511786,15792631135642463605,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3040 --field-trial-handle=1976,i,15112900892676511786,15792631135642463605,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3092 --field-trial-handle=1976,i,15112900892676511786,15792631135642463605,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4344 --field-trial-handle=1976,i,15112900892676511786,15792631135642463605,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4200 --field-trial-handle=1976,i,15112900892676511786,15792631135642463605,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4508 --field-trial-handle=1976,i,15112900892676511786,15792631135642463605,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4780 --field-trial-handle=1976,i,15112900892676511786,15792631135642463605,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4844 --field-trial-handle=1976,i,15112900892676511786,15792631135642463605,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5032 --field-trial-handle=1976,i,15112900892676511786,15792631135642463605,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4592 --field-trial-handle=1976,i,15112900892676511786,15792631135642463605,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=3100 --field-trial-handle=1976,i,15112900892676511786,15792631135642463605,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4836 --field-trial-handle=1976,i,15112900892676511786,15792631135642463605,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3208 --field-trial-handle=1976,i,15112900892676511786,15792631135642463605,131072 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x2f8 0x4b8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4984 --field-trial-handle=1976,i,15112900892676511786,15792631135642463605,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2452 --field-trial-handle=1976,i,15112900892676511786,15792631135642463605,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1088 --field-trial-handle=1976,i,15112900892676511786,15792631135642463605,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1512 --field-trial-handle=1976,i,15112900892676511786,15792631135642463605,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xfc,0x100,0x104,0xe4,0x108,0x7ffd9eb4ab58,0x7ffd9eb4ab68,0x7ffd9eb4ab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1664 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1872 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2260 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2896 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2904 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4368 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4520 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4680 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4900 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4972 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=4292 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=1912 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=844 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4712 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=3456 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=5196 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=5200 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=2960 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5868 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=6128 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=6276 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=5624 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=6484 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=6512 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=5632 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=7032 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=7024 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=7352 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=7580 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=7736 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=7708 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=8064 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=8096 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=5688 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=7888 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=8768 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=8780 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=7760 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=8548 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=8480 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --mojo-platform-channel-handle=5480 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=9016 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=9160 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --mojo-platform-channel-handle=9336 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=9492 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --mojo-platform-channel-handle=9528 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --mojo-platform-channel-handle=9544 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=7932 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --mojo-platform-channel-handle=9980 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --mojo-platform-channel-handle=9988 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --mojo-platform-channel-handle=10000 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --mojo-platform-channel-handle=9992 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --mojo-platform-channel-handle=10036 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --mojo-platform-channel-handle=10052 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --mojo-platform-channel-handle=10068 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --mojo-platform-channel-handle=10084 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --mojo-platform-channel-handle=9148 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --mojo-platform-channel-handle=9368 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --mojo-platform-channel-handle=9816 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --mojo-platform-channel-handle=10232 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --mojo-platform-channel-handle=10268 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --mojo-platform-channel-handle=10112 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --mojo-platform-channel-handle=10128 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --mojo-platform-channel-handle=10148 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --mojo-platform-channel-handle=10196 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --mojo-platform-channel-handle=10184 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --mojo-platform-channel-handle=8340 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --mojo-platform-channel-handle=10500 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --mojo-platform-channel-handle=11216 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --mojo-platform-channel-handle=9708 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --mojo-platform-channel-handle=9412 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --mojo-platform-channel-handle=10840 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --mojo-platform-channel-handle=10476 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --mojo-platform-channel-handle=9940 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --mojo-platform-channel-handle=9124 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --mojo-platform-channel-handle=7604 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=9360 --field-trial-handle=1960,i,15190809877728222046,16957535512619853285,131072 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files\7-Zip\7zG.exe

"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\BeamNG Techdemo v1\" -ad -an -ai#7zMap29005:98:7zEvent14366

C:\Users\Admin\Desktop\BeamNG-Techdemo-0.3-setup.exe

"C:\Users\Admin\Desktop\BeamNG-Techdemo-0.3-setup.exe"

C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\getD3DXVer.exe

"C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\getD3DXVer.exe"

C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\dxwebsetup.exe

"C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\dxwebsetup.exe"

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\srtasks.exe

C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx9_24_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx9_25_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx9_26_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx9_27_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx9_28_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx9_29_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XACT_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_0.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx9_30_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XACT2_1_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_1.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe xinput1_1_x64.inf, Install_Driver

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XACT2_2_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_2.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe xinput1_2_x64.inf, Install_Driver

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XACT2_3_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_3.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx9_31_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XACT2_4_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_4.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx9_32_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx10_00_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XACT2_5_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_5.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XACT2_6_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_6.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx9_33_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx10_33_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XACT2_7_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_7.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe xinput1_3_x64.inf, Install_Driver

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx9_34_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx10_34_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XACT2_8_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_8.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx9_35_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx10_35_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XACT2_9_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_9.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx9_36_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx10_36_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe X3DAudio1_2_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XACT2_10_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_10.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe D3DX9_37_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx10_37_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe X3DAudio1_3_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XACT3_0_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_0.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XAudio2_0_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_0.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe D3DX9_38_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx10_38_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe X3DAudio1_4_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XACT3_1_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_1.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XAudio2_1_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_1.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe D3DX9_39_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx10_39_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XACT3_2_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_2.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XAudio2_2_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_2.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe X3DAudio1_5_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XACT3_3_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_3.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XAudio2_3_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_3.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe D3DX9_40_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx10_40_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe X3DAudio1_6_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XACT3_4_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_4.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XAudio2_4_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_4.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe D3DX9_41_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx10_41_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe D3DX9_42_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx10_42_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx11_42_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dcsx_42_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe D3DCompiler_42_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XACT3_5_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_5.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XAudio2_5_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_5.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe X3DAudio1_7_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XACT3_6_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_6.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XAudio2_6_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_6.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe D3DX9_43_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx10_43_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dx11_43_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe d3dcsx_43_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe D3DCompiler_43_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XACT3_7_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_7.dll

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe XAudio2_7_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_7.dll

C:\Windows\system32\LogonUI.exe

"LogonUI.exe" /flags:0x4 /state0:0xa38e6855 /state1:0x41c64e6d

Network

Country Destination Domain Proto
US 8.8.8.8:53 www.curseforge.com udp
US 104.17.30.3:443 www.curseforge.com tcp
US 104.17.30.3:443 www.curseforge.com udp
US 8.8.8.8:53 challenges.cloudflare.com udp
US 8.8.8.8:53 228.249.119.40.in-addr.arpa udp
US 8.8.8.8:53 3.30.17.104.in-addr.arpa udp
US 8.8.8.8:53 10.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 105.83.221.88.in-addr.arpa udp
US 104.17.3.184:443 challenges.cloudflare.com tcp
US 104.17.3.184:443 challenges.cloudflare.com udp
US 8.8.8.8:53 184.3.17.104.in-addr.arpa udp
US 8.8.8.8:53 2.159.190.20.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 183.59.114.20.in-addr.arpa udp
US 8.8.8.8:53 198.187.3.20.in-addr.arpa udp
US 8.8.8.8:53 3.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 196.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 apis.google.com udp
GB 172.217.16.238:443 apis.google.com tcp
US 8.8.8.8:53 195.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 238.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com tcp
US 8.8.8.8:53 clients2.google.com udp
GB 142.250.187.206:443 clients2.google.com tcp
US 8.8.8.8:53 46.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 206.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 youtube.com udp
GB 142.250.200.46:443 youtube.com tcp
GB 142.250.200.46:443 youtube.com tcp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.179.238:443 www.youtube.com udp
US 8.8.8.8:53 46.200.250.142.in-addr.arpa udp
GB 142.250.200.22:443 i.ytimg.com tcp
US 8.8.8.8:53 accounts.google.com udp
NL 142.250.27.84:443 accounts.google.com tcp
NL 142.250.27.84:443 accounts.google.com udp
US 8.8.8.8:53 238.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 22.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 202.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 99.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 84.27.250.142.in-addr.arpa udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 172.217.16.226:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 8.8.8.8:53 rr3---sn-5hnekn7z.googlevideo.com udp
GB 172.217.169.74:443 content-autofill.googleapis.com tcp
GB 172.217.16.226:443 googleads.g.doubleclick.net udp
NL 74.125.100.104:443 rr3---sn-5hnekn7z.googlevideo.com tcp
NL 74.125.100.104:443 rr3---sn-5hnekn7z.googlevideo.com tcp
GB 142.250.187.196:443 www.google.com udp
NL 74.125.100.104:443 rr3---sn-5hnekn7z.googlevideo.com tcp
NL 74.125.100.104:443 rr3---sn-5hnekn7z.googlevideo.com tcp
NL 74.125.100.104:443 rr3---sn-5hnekn7z.googlevideo.com tcp
NL 74.125.100.104:443 rr3---sn-5hnekn7z.googlevideo.com tcp
US 8.8.8.8:53 226.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 74.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 104.100.125.74.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
US 8.8.8.8:53 static.doubleclick.net udp
GB 142.250.200.10:443 jnn-pa.googleapis.com tcp
GB 216.58.213.6:443 static.doubleclick.net tcp
GB 142.250.200.10:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 10.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 6.213.58.216.in-addr.arpa udp
GB 172.217.169.46:443 play.google.com udp
GB 172.217.169.46:443 play.google.com udp
GB 142.250.200.46:443 www.youtube.com udp
US 8.8.8.8:53 suggestqueries-clients6.youtube.com udp
GB 172.217.16.238:443 suggestqueries-clients6.youtube.com tcp
GB 172.217.16.238:443 suggestqueries-clients6.youtube.com udp
GB 172.217.16.238:443 suggestqueries-clients6.youtube.com udp
GB 142.250.200.22:443 i.ytimg.com udp
US 8.8.8.8:53 yt3.ggpht.com udp
US 8.8.8.8:53 lh5.googleusercontent.com udp
GB 172.217.16.225:443 lh5.googleusercontent.com tcp
GB 142.250.180.1:443 yt3.ggpht.com tcp
GB 142.250.180.1:443 yt3.ggpht.com tcp
US 8.8.8.8:53 225.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 1.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 yt3.googleusercontent.com udp
GB 142.250.179.225:443 yt3.googleusercontent.com udp
US 8.8.8.8:53 rr2---sn-5hne6n6l.googlevideo.com udp
NL 74.125.8.167:443 rr2---sn-5hne6n6l.googlevideo.com tcp
US 8.8.8.8:53 225.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 167.8.125.74.in-addr.arpa udp
NL 74.125.8.167:443 rr2---sn-5hne6n6l.googlevideo.com udp
GB 142.250.180.1:443 yt3.ggpht.com udp
US 8.8.8.8:53 25.73.42.20.in-addr.arpa udp
GB 142.250.179.238:443 www.youtube.com udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
NL 142.250.27.84:443 accounts.google.com udp
US 8.8.8.8:53 google.com udp
US 142.250.69.3:443 beacons.gcp.gvt2.com tcp
GB 142.250.178.14:443 google.com tcp
NL 142.250.27.84:443 accounts.google.com tcp
US 8.8.8.8:53 14.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 3.69.250.142.in-addr.arpa udp
GB 172.217.16.226:443 googleads.g.doubleclick.net udp
GB 142.250.179.238:443 www.youtube.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
NL 74.125.8.167:443 rr2---sn-5hne6n6l.googlevideo.com udp
GB 142.250.200.22:443 i.ytimg.com udp
US 142.250.69.3:443 beacons.gcp.gvt2.com udp
NL 142.250.27.84:443 accounts.google.com udp
GB 142.250.178.14:443 google.com udp
US 8.8.8.8:53 beacons2.gvt2.com udp
BR 172.217.162.99:443 beacons2.gvt2.com tcp
BR 172.217.162.99:443 beacons2.gvt2.com tcp
BR 172.217.162.99:443 beacons2.gvt2.com udp
US 8.8.8.8:53 99.162.217.172.in-addr.arpa udp
GB 142.250.179.238:443 www.youtube.com udp
US 142.250.69.3:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 beacons4.gvt2.com udp
US 216.239.32.116:443 beacons4.gvt2.com tcp
US 216.239.32.116:443 beacons4.gvt2.com udp
US 8.8.8.8:53 116.32.239.216.in-addr.arpa udp
US 142.250.69.3:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 www.youtube.com udp
GB 142.250.179.238:443 www.youtube.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.200.54:443 i.ytimg.com udp
US 8.8.8.8:53 54.200.250.142.in-addr.arpa udp
GB 142.250.179.238:443 www.youtube.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com udp
GB 172.217.169.46:443 play.google.com tcp
US 8.8.8.8:53 clients2.google.com udp
GB 142.250.187.206:443 clients2.google.com udp
US 8.8.8.8:53 consent.google.com udp
GB 142.250.187.238:443 consent.google.com tcp
US 8.8.8.8:53 238.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 98.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 www.beamng.com udp
DE 116.202.226.165:443 www.beamng.com tcp
DE 116.202.226.165:443 www.beamng.com tcp
DE 116.202.226.165:443 www.beamng.com tcp
DE 116.202.226.165:443 www.beamng.com tcp
DE 116.202.226.165:443 www.beamng.com tcp
DE 116.202.226.165:443 www.beamng.com tcp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 8.8.8.8:53 media-cdn.beamng.com udp
US 8.8.8.8:53 media.beamng.com udp
DE 148.251.47.138:443 media.beamng.com tcp
US 2.22.144.11:443 media-cdn.beamng.com tcp
US 8.8.8.8:53 content-autofill.googleapis.com udp
DE 148.251.47.138:443 media.beamng.com tcp
GB 172.217.169.74:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 165.226.202.116.in-addr.arpa udp
US 8.8.8.8:53 14.24.17.104.in-addr.arpa udp
US 8.8.8.8:53 11.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 138.47.251.148.in-addr.arpa udp
US 8.8.8.8:53 www.mediafire.com udp
US 104.16.114.74:80 www.mediafire.com tcp
US 104.16.114.74:80 www.mediafire.com tcp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 the.gatekeeperconsent.com udp
US 142.250.69.3:443 beacons.gcp.gvt2.com udp
US 172.67.199.186:443 the.gatekeeperconsent.com tcp
US 8.8.8.8:53 btloader.com udp
US 8.8.8.8:53 privacy.gatekeeperconsent.com udp
US 8.8.8.8:53 www.ezojs.com udp
US 172.67.170.144:80 www.ezojs.com tcp
US 104.22.75.216:443 btloader.com tcp
US 8.8.8.8:53 static.mediafire.com udp
US 104.21.42.32:443 privacy.gatekeeperconsent.com tcp
US 142.250.69.3:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 download2391.mediafire.com udp
US 8.8.8.8:53 blog.mediafire.com udp
US 8.8.8.8:53 fast.io udp
US 104.16.113.74:80 blog.mediafire.com tcp
US 8.8.8.8:53 mediafire.zendesk.com udp
US 8.8.8.8:53 twitter.com udp
US 104.16.113.74:80 blog.mediafire.com tcp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 g.ezoic.net udp
FR 15.188.219.54:80 g.ezoic.net tcp
US 8.8.8.8:53 www.mediafiredls.com udp
US 8.8.8.8:53 api.btloader.com udp
US 104.26.2.173:443 www.mediafiredls.com tcp
US 130.211.23.194:443 api.btloader.com tcp
US 8.8.8.8:53 translate.google.com udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
GB 142.250.187.238:80 translate.google.com tcp
US 8.8.8.8:53 74.114.16.104.in-addr.arpa udp
US 8.8.8.8:53 104.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 186.199.67.172.in-addr.arpa udp
US 8.8.8.8:53 144.170.67.172.in-addr.arpa udp
US 8.8.8.8:53 74.113.16.104.in-addr.arpa udp
US 8.8.8.8:53 32.42.21.104.in-addr.arpa udp
US 8.8.8.8:53 216.75.22.104.in-addr.arpa udp
US 8.8.8.8:53 54.219.188.15.in-addr.arpa udp
US 8.8.8.8:53 173.2.26.104.in-addr.arpa udp
US 8.8.8.8:53 194.23.211.130.in-addr.arpa udp
US 104.16.79.73:443 static.cloudflareinsights.com tcp
US 8.8.8.8:53 cdn.amplitude.com udp
DE 18.245.86.4:443 cdn.amplitude.com tcp
US 8.8.8.8:53 api.amplitude.com udp
GB 172.217.169.74:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 cdn.otnolatrnup.com udp
US 34.212.97.52:443 api.amplitude.com tcp
US 8.8.8.8:53 go.ezodn.com udp
US 104.16.52.110:443 cdn.otnolatrnup.com tcp
US 104.21.87.79:80 go.ezodn.com tcp
US 104.21.87.79:80 go.ezodn.com tcp
US 104.21.42.32:443 privacy.gatekeeperconsent.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
FR 15.188.219.54:80 g.ezoic.net tcp
US 8.8.8.8:53 ad-delivery.net udp
BE 74.125.71.157:443 stats.g.doubleclick.net tcp
US 172.67.69.19:443 ad-delivery.net tcp
US 172.67.69.19:443 ad-delivery.net tcp
US 172.67.199.186:443 privacy.gatekeeperconsent.com udp
US 8.8.8.8:53 4.86.245.18.in-addr.arpa udp
US 8.8.8.8:53 110.52.16.104.in-addr.arpa udp
US 8.8.8.8:53 14.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 79.87.21.104.in-addr.arpa udp
US 8.8.8.8:53 52.97.212.34.in-addr.arpa udp
US 8.8.8.8:53 6.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 157.71.125.74.in-addr.arpa udp
US 8.8.8.8:53 19.69.67.172.in-addr.arpa udp
US 8.8.8.8:53 73.79.16.104.in-addr.arpa udp
US 8.8.8.8:53 g.ezodn.com udp
US 130.211.23.194:443 api.btloader.com udp
US 104.21.87.79:443 g.ezodn.com tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
GB 142.250.200.34:80 securepubads.g.doubleclick.net tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
US 8.8.8.8:53 translate.googleapis.com udp
US 8.8.8.8:53 bshr.ezodn.com udp
GB 216.58.201.106:443 translate.googleapis.com tcp
US 104.21.87.79:443 bshr.ezodn.com tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.187.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 otnolatrnup.com udp
US 104.21.87.79:443 bshr.ezodn.com udp
US 8.8.8.8:53 analytics.google.com udp
BE 74.125.71.157:443 stats.g.doubleclick.net udp
GB 142.250.187.206:443 analytics.google.com tcp
US 8.8.8.8:53 translate-pa.googleapis.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 34.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 106.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 194.187.250.142.in-addr.arpa udp
US 104.21.87.79:80 bshr.ezodn.com tcp
US 8.8.8.8:53 tags.crwdcntrl.net udp
DE 65.9.66.97:443 tags.crwdcntrl.net tcp
US 8.8.8.8:53 ad.crwdcntrl.net udp
IE 52.48.212.10:443 ad.crwdcntrl.net tcp
US 8.8.8.8:53 bcp.crwdcntrl.net udp
IE 54.72.245.162:443 bcp.crwdcntrl.net tcp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 97.66.9.65.in-addr.arpa udp
US 8.8.8.8:53 10.212.48.52.in-addr.arpa udp
US 8.8.8.8:53 162.245.72.54.in-addr.arpa udp
US 104.21.87.79:443 bshr.ezodn.com udp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 ghb.adtelligent.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 8.8.8.8:53 prebid.smilewanted.com udp
US 8.8.8.8:53 onetag-sys.com udp
FR 15.188.219.54:443 g.ezoic.net tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
GB 142.250.187.194:443 googleads.g.doubleclick.net udp
US 104.22.30.209:443 prebid.smilewanted.com tcp
US 104.22.30.209:443 prebid.smilewanted.com tcp
US 104.22.30.209:443 prebid.smilewanted.com tcp
US 104.22.30.209:443 prebid.smilewanted.com tcp
US 104.22.30.209:443 prebid.smilewanted.com tcp
NL 147.75.84.158:443 prebid.a-mo.net tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 172.64.151.101:443 htlb.casalemedia.com tcp
NL 185.64.189.112:443 hbopenbid.pubmatic.com tcp
GB 185.239.172.170:443 ghb.adtelligent.com tcp
US 172.67.75.241:443 script.4dex.io tcp
DE 51.89.9.252:443 onetag-sys.com tcp
DE 52.222.236.4:443 hb.yellowblue.io tcp
US 172.67.75.241:443 script.4dex.io tcp
US 8.8.8.8:53 cadmus.script.ac udp
US 8.8.8.8:53 ghb1.adtelligent.com udp
US 172.64.151.101:443 htlb.casalemedia.com udp
US 8.8.8.8:53 248.64.124.3.in-addr.arpa udp
DE 51.89.9.252:443 onetag-sys.com udp
US 8.8.8.8:53 158.84.75.147.in-addr.arpa udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 209.30.22.104.in-addr.arpa udp
US 8.8.8.8:53 151.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 101.151.64.172.in-addr.arpa udp
US 8.8.8.8:53 170.172.239.185.in-addr.arpa udp
US 8.8.8.8:53 112.189.64.185.in-addr.arpa udp
US 8.8.8.8:53 4.236.222.52.in-addr.arpa udp
US 8.8.8.8:53 241.75.67.172.in-addr.arpa udp
US 8.8.8.8:53 252.9.89.51.in-addr.arpa udp
US 104.18.22.145:443 cadmus.script.ac tcp
GB 185.83.69.58:443 ghb1.adtelligent.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 1b5f30488bafc698c161cfe081828506.safeframe.googlesyndication.com udp
GB 172.217.169.65:443 1b5f30488bafc698c161cfe081828506.safeframe.googlesyndication.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
FR 15.188.219.54:80 g.ezoic.net tcp
FR 15.188.219.54:80 g.ezoic.net tcp
FR 15.188.219.54:80 g.ezoic.net tcp
FR 15.188.219.54:80 g.ezoic.net tcp
US 8.8.8.8:53 cdn.ampproject.org udp
US 104.21.87.79:80 bshr.ezodn.com tcp
US 8.8.8.8:53 adssettings.google.com udp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
US 8.8.8.8:53 145.22.18.104.in-addr.arpa udp
US 8.8.8.8:53 58.69.83.185.in-addr.arpa udp
US 8.8.8.8:53 65.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 193.187.250.142.in-addr.arpa udp
GB 142.250.187.206:443 analytics.google.com udp
US 104.16.52.110:443 otnolatrnup.com udp
US 199.91.155.132:80 download2391.mediafire.com tcp
US 199.91.155.132:80 download2391.mediafire.com tcp
US 8.8.8.8:53 132.155.91.199.in-addr.arpa udp
GB 216.58.201.106:443 translate-pa.googleapis.com udp
US 104.16.52.110:80 otnolatrnup.com tcp
US 104.16.52.110:80 otnolatrnup.com tcp
US 8.8.8.8:53 woreppercomming.com udp
US 3.161.82.124:443 woreppercomming.com tcp
US 8.8.8.8:53 www.ovardu.com udp
US 172.67.174.4:443 www.ovardu.com tcp
US 8.8.8.8:53 id.a-mx.com udp
US 8.8.8.8:53 gum.criteo.com udp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 id.hadron.ad.gt udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 id.crwdcntrl.net udp
US 8.8.8.8:53 match.adsrvr.org udp
DE 3.75.62.37:443 ups.analytics.yahoo.com tcp
DE 162.19.138.119:443 id5-sync.com tcp
US 8.8.8.8:53 visitor.omnitagjs.com udp
US 52.223.40.198:80 match.adsrvr.org tcp
NL 79.127.227.46:443 id.a-mx.com tcp
US 172.67.23.234:443 id.hadron.ad.gt tcp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 csync.smilewanted.com udp
FR 185.255.84.152:443 visitor.omnitagjs.com tcp
US 8.8.8.8:53 cm.adform.net udp
DK 37.157.2.230:443 cm.adform.net tcp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 124.82.161.3.in-addr.arpa udp
US 8.8.8.8:53 4.174.67.172.in-addr.arpa udp
US 8.8.8.8:53 198.40.223.52.in-addr.arpa udp
US 8.8.8.8:53 119.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 37.62.75.3.in-addr.arpa udp
US 8.8.8.8:53 234.23.67.172.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 172.64.149.180:443 js-sec.indexww.com tcp
US 8.8.8.8:53 ads.us.e-planning.net udp
US 8.8.8.8:53 ads.pubmatic.com udp
NL 193.3.178.3:443 ads.us.e-planning.net tcp
GB 2.21.188.239:443 ads.pubmatic.com tcp
US 8.8.8.8:53 www.opera.com udp
US 8.8.8.8:53 eb2.3lift.com udp
DE 3.120.50.71:443 www.opera.com tcp
US 8.8.8.8:53 c3.a-mo.net udp
US 13.248.245.213:443 eb2.3lift.com tcp
NL 79.127.227.46:443 c3.a-mo.net tcp
US 8.8.8.8:53 assets.a-mo.net udp
US 8.8.8.8:53 secure.adnxs.com udp
NL 185.89.210.82:443 secure.adnxs.com tcp
NL 185.89.210.82:443 secure.adnxs.com tcp
US 104.19.158.19:443 assets.a-mo.net tcp
US 8.8.8.8:53 gum.aidemsrv.com udp
US 8.8.8.8:53 player.aniview.com udp
US 104.17.43.93:443 gum.aidemsrv.com tcp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
US 8.8.8.8:53 sync.mathtag.com udp
US 2.22.144.12:443 player.aniview.com tcp
DE 18.157.153.25:443 rtb.mfadsrvr.com tcp
US 8.8.8.8:53 ssc-cms.33across.com udp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
US 216.200.232.253:443 sync.mathtag.com tcp
BE 104.68.78.171:443 secure-assets.rubiconproject.com tcp
US 67.202.105.23:443 ssc-cms.33across.com tcp
US 8.8.8.8:53 cdn-production-opera-website.operacdn.com udp
US 8.8.8.8:53 www.googleoptimize.com udp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
GB 172.217.16.238:443 www.googleoptimize.com tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
US 8.8.8.8:53 eus.rubiconproject.com udp
NL 81.17.55.171:443 ssbsync.smartadserver.com tcp
US 8.8.8.8:53 152.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 230.2.157.37.in-addr.arpa udp
US 8.8.8.8:53 180.149.64.172.in-addr.arpa udp
US 8.8.8.8:53 3.178.3.193.in-addr.arpa udp
US 8.8.8.8:53 239.188.21.2.in-addr.arpa udp
US 8.8.8.8:53 71.50.120.3.in-addr.arpa udp
US 8.8.8.8:53 213.245.248.13.in-addr.arpa udp
US 8.8.8.8:53 19.158.19.104.in-addr.arpa udp
US 8.8.8.8:53 93.43.17.104.in-addr.arpa udp
US 8.8.8.8:53 82.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 171.78.68.104.in-addr.arpa udp
US 8.8.8.8:53 12.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 25.153.157.18.in-addr.arpa udp
US 8.8.8.8:53 253.232.200.216.in-addr.arpa udp
US 8.8.8.8:53 23.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 dis.criteo.com udp
US 8.8.8.8:53 x.bidswitch.net udp
NL 178.250.1.9:443 dis.criteo.com tcp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
FR 217.182.178.233:443 rtb-csync.smartadserver.com tcp
FR 217.182.178.233:443 rtb-csync.smartadserver.com tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 8.8.8.8:53 www-static.operacdn.com udp
US 8.8.8.8:53 match.sharethrough.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
GB 142.250.179.226:443 cm.g.doubleclick.net tcp
DE 18.158.126.136:443 match.sharethrough.com tcp
US 8.8.8.8:53 bh.contextweb.com udp
US 8.8.8.8:53 b1sync.zemanta.com udp
US 8.8.8.8:53 token.rubiconproject.com udp
NL 208.93.169.131:443 bh.contextweb.com tcp
US 70.42.32.31:443 b1sync.zemanta.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
US 8.8.8.8:53 pixel-eu.rubiconproject.com udp
US 8.8.8.8:53 120.66.68.104.in-addr.arpa udp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 233.178.182.217.in-addr.arpa udp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 226.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 136.126.158.18.in-addr.arpa udp
US 8.8.8.8:53 131.169.93.208.in-addr.arpa udp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 31.32.42.70.in-addr.arpa udp
NL 69.173.156.148:443 pixel-eu.rubiconproject.com tcp
US 8.8.8.8:53 s.e-planning.net udp
US 8.8.8.8:53 ib.adnxs.com udp
NL 193.3.178.2:443 s.e-planning.net tcp
DE 37.252.171.52:443 ib.adnxs.com tcp
DE 3.120.50.71:443 www.opera.com tcp
US 8.8.8.8:53 ssum.casalemedia.com udp
US 8.8.8.8:53 static.smilewanted.com udp
US 8.8.8.8:53 spl.zeotap.com udp
US 52.223.40.198:443 match.adsrvr.org tcp
DE 18.157.153.25:443 rtb.mfadsrvr.com tcp
US 8.8.8.8:53 image8.pubmatic.com udp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 172.67.40.173:443 spl.zeotap.com tcp
US 8.8.8.8:53 u-ams03.e-planning.net udp
GB 142.250.179.226:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 sync.aniview.com udp
US 8.8.8.8:53 api-2-0.spot.im udp
NL 35.214.149.91:443 x.bidswitch.net tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
US 96.46.186.182:443 sync.aniview.com tcp
NL 193.3.178.4:443 u-ams03.e-planning.net tcp
DE 18.245.31.19:443 api-2-0.spot.im tcp
US 8.8.8.8:53 cookies.nextmillmedia.com udp
US 8.8.8.8:53 sync.adtelligent.com udp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 107.20.43.192:443 cookies.nextmillmedia.com tcp
US 8.8.8.8:53 ads.stickyadstv.com udp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
DE 162.19.138.83:443 lb.eu-1-id5-sync.com tcp
US 8.8.8.8:53 pixel.rubiconproject.com udp
GB 185.83.71.234:443 sync.adtelligent.com tcp
US 8.8.8.8:53 image6.pubmatic.com udp
FR 154.54.250.81:443 ads.stickyadstv.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 8.8.8.8:53 sync.1rx.io udp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 8.8.8.8:53 px.ads.linkedin.com udp
NL 46.228.174.117:443 sync.1rx.io tcp
US 8.8.8.8:53 i.liadm.com udp
US 13.107.42.14:443 px.ads.linkedin.com tcp
US 8.8.8.8:53 creativecdn.com udp
US 8.8.8.8:53 pb-am.a-mo.net udp
NL 46.228.174.117:443 sync.1rx.io tcp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 8.8.8.8:53 pr-bh.ybp.yahoo.com udp
NL 198.47.127.19:443 image6.pubmatic.com tcp
US 13.107.42.14:443 px.ads.linkedin.com tcp
US 8.8.8.8:53 sync.smartadserver.com udp
US 34.192.141.209:443 i.liadm.com tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
US 8.8.8.8:53 cs.admanmedia.com udp
US 52.46.151.131:443 s.amazon-adsystem.com tcp
IE 54.246.18.125:443 pr-bh.ybp.yahoo.com tcp
IE 54.246.18.125:443 pr-bh.ybp.yahoo.com tcp
NL 147.75.84.158:443 pb-am.a-mo.net tcp
NL 81.17.55.97:443 sync.smartadserver.com tcp
US 80.77.87.161:443 cs.admanmedia.com tcp
US 8.8.8.8:53 2.178.3.193.in-addr.arpa udp
US 8.8.8.8:53 52.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 173.40.67.172.in-addr.arpa udp
US 8.8.8.8:53 214.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 4.178.3.193.in-addr.arpa udp
US 8.8.8.8:53 19.31.245.18.in-addr.arpa udp
US 8.8.8.8:53 182.186.46.96.in-addr.arpa udp
US 8.8.8.8:53 234.71.83.185.in-addr.arpa udp
US 8.8.8.8:53 83.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 192.43.20.107.in-addr.arpa udp
US 8.8.8.8:53 14.42.107.13.in-addr.arpa udp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 81.250.54.154.in-addr.arpa udp
US 8.8.8.8:53 19.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
US 8.8.8.8:53 125.18.246.54.in-addr.arpa udp
US 8.8.8.8:53 sync.search.spotxchange.com udp
NL 81.17.55.97:443 sync.smartadserver.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
US 8.8.8.8:53 ad.turn.com udp
US 8.8.8.8:53 dsum-sec.casalemedia.com udp
US 8.8.8.8:53 rtb.openx.net udp
NL 46.228.164.11:443 ad.turn.com tcp
US 8.8.8.8:53 sync.targeting.unrulymedia.com udp
US 8.8.8.8:53 t.adx.opera.com udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 35.227.252.103:443 rtb.openx.net tcp
US 8.8.8.8:53 trace.mediago.io udp
US 8.8.8.8:53 simage2.pubmatic.com udp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
IE 52.94.223.37:443 aax-eu.amazon-adsystem.com tcp
US 35.208.249.213:443 trace.mediago.io tcp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
US 54.204.40.77:443 sync.srv.stackadapt.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 cms.quantserve.com udp
NL 198.47.127.205:443 simage2.pubmatic.com tcp
US 8.8.8.8:53 match.adsby.bidtheatre.com udp
IE 34.246.206.6:443 match.prod.bidr.io tcp
US 8.8.8.8:53 sync.crwdcntrl.net udp
NL 188.166.17.21:443 match.adsby.bidtheatre.com tcp
DE 91.228.74.159:443 cms.quantserve.com tcp
DE 91.228.74.159:443 cms.quantserve.com tcp
US 8.8.8.8:53 pixel.tapad.com udp
US 54.204.40.77:443 sync.srv.stackadapt.com tcp
US 8.8.8.8:53 ad.mrtnsvr.com udp
US 8.8.8.8:53 dsp.adfarm1.adition.com udp
US 8.8.8.8:53 image2.pubmatic.com udp
US 34.111.113.62:443 pixel.tapad.com tcp
US 34.102.163.6:443 ad.mrtnsvr.com tcp
DE 85.114.159.93:443 dsp.adfarm1.adition.com tcp
US 8.8.8.8:53 sync-tm.everesttech.net udp
US 8.8.8.8:53 p.rfihub.com udp
US 8.8.8.8:53 csync.loopme.me udp
US 151.101.2.49:443 sync-tm.everesttech.net tcp
US 8.8.8.8:53 d5p.de17a.com udp
US 8.8.8.8:53 cm-supply-web.gammaplatform.com udp
US 34.102.163.6:443 ad.mrtnsvr.com tcp
US 8.8.8.8:53 ipac.ctnsnet.com udp
NL 193.0.160.131:443 p.rfihub.com tcp
NL 35.214.214.73:443 csync.loopme.me tcp
US 8.8.8.8:53 core.iprom.net udp
SE 213.155.156.181:443 d5p.de17a.com tcp
US 8.8.8.8:53 cm.adgrx.com udp
US 35.186.193.173:443 ipac.ctnsnet.com tcp
SG 35.186.154.107:443 cm-supply-web.gammaplatform.com tcp
US 8.8.8.8:53 sync.e-planning.net udp
SI 195.5.165.20:443 core.iprom.net tcp
IE 54.217.19.5:443 cm.adgrx.com tcp
SG 35.186.154.107:443 cm-supply-web.gammaplatform.com tcp
US 8.8.8.8:53 ice.360yield.com udp
US 8.8.8.8:53 u.openx.net udp
US 8.8.8.8:53 209.141.192.34.in-addr.arpa udp
US 8.8.8.8:53 131.151.46.52.in-addr.arpa udp
US 8.8.8.8:53 97.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 161.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 150.216.36.34.in-addr.arpa udp
US 8.8.8.8:53 11.164.228.46.in-addr.arpa udp
US 8.8.8.8:53 103.252.227.35.in-addr.arpa udp
US 8.8.8.8:53 37.223.94.52.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 205.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 77.40.204.54.in-addr.arpa udp
US 8.8.8.8:53 6.206.246.34.in-addr.arpa udp
US 8.8.8.8:53 21.17.166.188.in-addr.arpa udp
US 8.8.8.8:53 213.249.208.35.in-addr.arpa udp
US 8.8.8.8:53 159.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 62.113.111.34.in-addr.arpa udp
US 8.8.8.8:53 6.163.102.34.in-addr.arpa udp
US 8.8.8.8:53 93.159.114.85.in-addr.arpa udp
US 8.8.8.8:53 49.2.101.151.in-addr.arpa udp
US 8.8.8.8:53 131.160.0.193.in-addr.arpa udp
US 8.8.8.8:53 73.214.214.35.in-addr.arpa udp
US 8.8.8.8:53 173.193.186.35.in-addr.arpa udp
US 8.8.8.8:53 181.156.155.213.in-addr.arpa udp
US 8.8.8.8:53 5.19.217.54.in-addr.arpa udp
US 8.8.8.8:53 20.165.5.195.in-addr.arpa udp
US 35.244.159.8:443 u.openx.net tcp
IE 34.249.225.179:443 ap.lijit.com tcp
IE 54.73.231.133:443 ice.360yield.com tcp
US 8.8.8.8:53 sync.a-mo.net udp
US 35.227.252.103:443 rtb.openx.net udp
US 8.8.8.8:53 pixel-us-east.rubiconproject.com udp
US 8.8.8.8:53 us.shb-sync.com udp
US 8.8.8.8:53 s.ad.smaato.net udp
NL 145.40.97.66:443 sync.a-mo.net tcp
NL 145.40.97.66:443 sync.a-mo.net tcp
US 8.8.8.8:53 ad4m.at udp
US 69.173.151.100:443 pixel-us-east.rubiconproject.com tcp
US 8.2.110.33:443 us.shb-sync.com tcp
US 8.8.8.8:53 dmp.adform.net udp
US 8.8.8.8:53 a.sportradarserving.com udp
DE 13.32.27.65:443 s.ad.smaato.net tcp
US 104.26.10.209:443 ad4m.at tcp
US 8.8.8.8:53 cr.frontend.weborama.fr udp
NL 35.214.174.141:443 a.sportradarserving.com tcp
US 8.8.8.8:53 trc.taboola.com udp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
US 52.46.151.131:443 s.amazon-adsystem.com tcp
US 8.8.8.8:53 cm.ctnsnet.com udp
US 151.101.1.44:443 trc.taboola.com tcp
US 8.8.8.8:53 dmp.v.fwmrm.net udp
US 34.111.129.221:443 cr.frontend.weborama.fr tcp
US 3.231.143.108:443 dmp.v.fwmrm.net tcp
US 8.8.8.8:53 r.casalemedia.com udp
NL 35.214.174.141:443 a.sportradarserving.com udp
US 8.8.8.8:53 mwzeom.zeotap.com udp
US 34.111.129.221:443 cr.frontend.weborama.fr udp
US 80.77.87.161:443 cs.admanmedia.com tcp
US 8.8.8.8:53 8.159.244.35.in-addr.arpa udp
US 8.8.8.8:53 179.225.249.34.in-addr.arpa udp
US 8.8.8.8:53 133.231.73.54.in-addr.arpa udp
US 8.8.8.8:53 66.97.40.145.in-addr.arpa udp
US 8.8.8.8:53 65.27.32.13.in-addr.arpa udp
US 8.8.8.8:53 209.10.26.104.in-addr.arpa udp
US 8.8.8.8:53 100.151.173.69.in-addr.arpa udp
US 8.8.8.8:53 33.110.2.8.in-addr.arpa udp
US 8.8.8.8:53 141.174.214.35.in-addr.arpa udp
US 8.8.8.8:53 44.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 221.129.111.34.in-addr.arpa udp
US 8.8.8.8:53 108.143.231.3.in-addr.arpa udp
US 8.8.8.8:53 cdn.indexww.com udp
US 8.8.8.8:53 dpm.demdex.net udp
US 8.8.8.8:53 aa.agkn.com udp
US 8.8.8.8:53 beacon.krxd.net udp
US 8.8.8.8:53 usermatch.krxd.net udp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
US 8.8.8.8:53 obgpm76tt0a0sgozk8l.redinuid.imrworldwide.com udp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
IE 52.208.77.120:443 dpm.demdex.net tcp
US 8.8.8.8:53 ads.betweendigital.com udp
IE 52.212.33.223:443 obgpm76tt0a0sgozk8l.redinuid.imrworldwide.com tcp
US 8.8.8.8:53 um.simpli.fi udp
US 8.8.8.8:53 c1.adform.net udp
US 8.8.8.8:53 pubmatic-match.dotomi.com udp
IE 99.80.110.212:443 aa.agkn.com tcp
US 8.8.8.8:53 ad.360yield.com udp
NL 188.42.196.115:443 ads.betweendigital.com tcp
DK 37.157.5.132:443 c1.adform.net tcp
NL 89.207.16.140:443 pubmatic-match.dotomi.com tcp
IE 52.48.196.44:443 ad.360yield.com tcp
NL 34.91.62.186:443 um.simpli.fi tcp
US 34.111.113.62:443 pixel.tapad.com udp
US 8.8.8.8:53 ce.lijit.com udp
US 8.8.8.8:53 live.primis.tech udp
US 8.8.8.8:53 capi.connatix.com udp
IE 54.73.162.61:443 ce.lijit.com tcp
DE 13.32.99.104:443 live.primis.tech tcp
US 172.64.146.152:443 capi.connatix.com tcp
US 8.8.8.8:53 image4.pubmatic.com udp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
GB 185.64.190.81:443 image4.pubmatic.com tcp
US 8.8.8.8:53 jadserve.postrelease.com udp
US 8.8.8.8:53 id.rlcdn.com udp
US 8.8.8.8:53 bttrack.com udp
US 174.129.13.121:443 cs-server-s2s.yellowblue.io tcp
IE 34.255.106.93:443 jadserve.postrelease.com tcp
US 192.132.33.68:443 bttrack.com tcp
US 35.244.174.68:443 id.rlcdn.com tcp
US 8.8.8.8:53 id.rtb.mx udp
US 8.8.8.8:53 ow.pubmatic.com udp
US 8.8.8.8:53 120.77.208.52.in-addr.arpa udp
US 8.8.8.8:53 223.33.212.52.in-addr.arpa udp
US 8.8.8.8:53 212.110.80.99.in-addr.arpa udp
US 8.8.8.8:53 140.16.207.89.in-addr.arpa udp
US 8.8.8.8:53 115.196.42.188.in-addr.arpa udp
US 8.8.8.8:53 132.5.157.37.in-addr.arpa udp
US 8.8.8.8:53 61.162.73.54.in-addr.arpa udp
US 8.8.8.8:53 186.62.91.34.in-addr.arpa udp
US 8.8.8.8:53 104.99.32.13.in-addr.arpa udp
US 8.8.8.8:53 44.196.48.52.in-addr.arpa udp
US 8.8.8.8:53 152.146.64.172.in-addr.arpa udp
US 8.8.8.8:53 81.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 93.106.255.34.in-addr.arpa udp
US 8.8.8.8:53 68.174.244.35.in-addr.arpa udp
US 8.8.8.8:53 121.13.129.174.in-addr.arpa udp
US 8.8.8.8:53 68.33.132.192.in-addr.arpa udp
GB 185.64.190.84:443 ow.pubmatic.com tcp
DE 79.127.216.47:443 id.rtb.mx tcp
DE 65.9.66.97:443 tags.crwdcntrl.net tcp
US 8.8.8.8:53 simage4.pubmatic.com udp
NL 198.47.127.20:443 simage4.pubmatic.com tcp
US 8.8.8.8:53 green.erne.co udp
FR 141.95.171.142:443 green.erne.co tcp
US 8.8.8.8:53 a.tribalfusion.com udp
US 104.18.25.173:443 a.tribalfusion.com tcp
US 8.8.8.8:53 pixel-eu.onaudience.com udp
FR 141.94.171.216:443 pixel-eu.onaudience.com tcp
US 8.8.8.8:53 matching.truffle.bid udp
DE 162.55.120.196:443 matching.truffle.bid tcp
US 8.8.8.8:53 s.tribalfusion.com udp
US 8.8.8.8:53 84.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 20.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 47.216.127.79.in-addr.arpa udp
US 8.8.8.8:53 142.171.95.141.in-addr.arpa udp
US 8.8.8.8:53 216.171.94.141.in-addr.arpa udp
US 8.8.8.8:53 173.25.18.104.in-addr.arpa udp
DE 162.55.120.196:443 matching.truffle.bid tcp
US 8.8.8.8:53 uipglob.semasio.net udp
US 8.8.8.8:53 pixel.onaudience.com udp
DK 77.243.51.122:443 uipglob.semasio.net tcp
FR 141.94.171.214:443 pixel.onaudience.com tcp
DK 77.243.51.122:443 uipglob.semasio.net tcp
US 104.18.25.173:443 s.tribalfusion.com udp
US 8.8.8.8:53 122.51.243.77.in-addr.arpa udp
US 8.8.8.8:53 214.171.94.141.in-addr.arpa udp
DE 3.122.214.165:443 ps.eyeota.net tcp
DE 3.122.214.165:443 ps.eyeota.net tcp
US 8.8.8.8:53 d.turn.com udp
NL 46.228.164.13:443 d.turn.com tcp
US 8.8.8.8:53 165.214.122.3.in-addr.arpa udp
US 8.8.8.8:53 13.164.228.46.in-addr.arpa udp
US 8.8.8.8:53 ws.rqtrk.eu udp
DE 57.129.18.111:443 ws.rqtrk.eu tcp
US 8.8.8.8:53 i.w55c.net udp
IE 34.250.160.0:443 i.w55c.net tcp
US 8.8.8.8:53 pm.w55c.net udp
DE 23.88.86.2:443 matching.truffle.bid tcp
IE 34.251.19.157:443 pm.w55c.net tcp
DE 23.88.86.2:443 matching.truffle.bid tcp
US 8.8.8.8:53 0.160.250.34.in-addr.arpa udp
US 8.8.8.8:53 157.19.251.34.in-addr.arpa udp
US 8.8.8.8:53 beamng.gmbh udp
DE 116.202.226.165:443 beamng.gmbh tcp
DE 116.202.226.165:443 beamng.gmbh tcp
DE 162.55.120.196:443 matching.truffle.bid tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 8.8.8.8:53 ghb2.adtelligent.com udp
GB 185.239.172.170:443 ghb2.adtelligent.com tcp
US 107.151.11.18:443 ghb2.adtelligent.com tcp
US 8.8.8.8:53 18.11.151.107.in-addr.arpa udp
GB 185.83.69.58:443 ghb2.adtelligent.com tcp
DE 23.88.86.2:443 matching.truffle.bid tcp
NL 193.3.178.4:443 sync.e-planning.net tcp
GB 142.250.187.206:443 analytics.google.com udp
GB 104.120.140.163:80 download.microsoft.com tcp
GB 104.120.140.163:443 download.microsoft.com tcp
US 8.8.8.8:53 163.140.120.104.in-addr.arpa udp
US 8.8.8.8:53 205.81.16.96.in-addr.arpa udp

Files

\??\pipe\crashpad_2852_UVOBPMTZUSTJVRGM

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 9db7d6d472d8162fbda66d962f68bcd7
SHA1 b2f415c468b76d5a0b4b191700dce43aa662eee4
SHA256 f2184c43db512f52d07f4120e2cc4bfd93a7b584f3202067e5a2d1bf0ce399e0
SHA512 934e344a042324e0c8a905e652af9f1f76e34f1e39234a003a9bb109abb9b6abc12c1e4e3388c41a4a3095efd3360245911e71e94f55d0bfbe229915379e2a98

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a40e4190007eec2171bc0ec82631a021
SHA1 369786f9e20c88c3dd0a550b60405c2456beecd7
SHA256 49735b2de626cf122265f36c3b8006a5f1468575d6cea8246a8131932963e91f
SHA512 226591a161a89506a709422600115c84cb66ea4b7f938b27d2d2c993bec8e22cc7cf9e658b3e22a338c94d1f6f925ace0ba7cb362e4bdea3225304c7eaae4e0e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 006cbd0bc8a8eaee995c991c05f59fa0
SHA1 0d99438721ce3dde758db4947b0f7c0e7edbc389
SHA256 3a64d49b73ba7b28caf1f24493f686a9edc7e12d319954325abb5026c5ff8e81
SHA512 3d1a0ddda262caae3d88990648853cc97513ca15032fc3a3857551f0e5bfb7e39faa7f7deaa0143d072f6f3e7749ea26c9a5b7214b80e26851d3608040cec4f5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 eaeb9d41e18f2f19ed866e3cca4ea664
SHA1 0dfa28232d15ca323792bd44afb53cf4e1305393
SHA256 6b18c389bd1d983b2aba0bcf16ea271335b0eca52f260b3dcaa26dd5eeb352f0
SHA512 d22db1864fa12fbacfa75ce3e2130f2361806fb26082e0fe2a1ad48852540b7107247bc85c95c0fabbf32e0a7d228436caf4404e8c71c5a4d9e39948ddd12614

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 09ffdaba18006eb148d4759e912baa7f
SHA1 8f547704ca7cc3cbc525504fa3301321b5e75fe1
SHA256 5539f077475a99d61d2fd54f319d9cd8e6e900c9af060dcc9aa3d5e1299a8950
SHA512 ca7fb390d2b0930fc5a80e7d7e824d003ca197ce6bf03814d00cc4f6c9ad69f144bb9e892a6fa36f8dd8c9e14760808d6850fc0c4ff85866662d120ef6b3c1dc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 be2d1689ad80154c5b9ccd1fc356b2a7
SHA1 50ebbc4d933f31a63b0ebc00cb3a023d5e93180c
SHA256 18cf4e698cbdfce9c7667e808d86fb1ef8e64d5eeda3bab67c3cd6acd7a1efbb
SHA512 f2daca2a43f104662e8c407376d979d23806dd8ddaec88627a7b45f90cdaa9639f18727112c3ce4dd342f2f7958fbb33346ab9413e7072073939a35686f60bd0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1

MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

MD5 d0df793c4e281659228b2837846ace2d
SHA1 ece0a5b1581f86b175ccbc7822483448ec728077
SHA256 4e5ceefae11a45c397cde5c6b725c18d8c63d80d2ce851fa94df1644169eafc9
SHA512 400a81d676e5c1e8e64655536b23dbae0a0dd47dc1e87e202e065903396e6a106770cec238093d748b9c71b5859edf097ffff2e088b5b79d6a449754140a52ad

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations

MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version

MD5 009b9a2ee7afbf6dd0b9617fc8f8ecba
SHA1 c97ed0652e731fc412e3b7bdfca2994b7cc206a7
SHA256 de607a2c68f52e15a104ead9ecbaa3e6862fdb11eac080e408ba4d69f1f7a915
SHA512 6161dd952ae140a8fb8aa5e33f06bc65fdc15ce3fbfe4c576dc2668c86bce4a1d5c1112caee014e5efa3698547faad3bc80ec253eedb43148e36e1a02ce89910

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13362587498282502

MD5 4c16628de3d0bd693b2bf35e069d0e18
SHA1 266d0f490330505830084b18d2c5c784d64971b1
SHA256 8a48a869a82d33d0a91cf38f162f0735f1c1c2eee8aa5a390207335eed0a481b
SHA512 4f794254982119bd7dc1696a46ca707db2f77829d5e2a38a40028b8041a317ad3cfe52454eff8ba3436c80f38140d662293fb05e82d8c9f4c0a09890a476fe4c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG

MD5 62a7751bd292f6c27783399a9ca62a85
SHA1 273c578d99fb3e5a7e3c6fa9000d58ce6c96d47f
SHA256 f1772272ac748b495c25bad36fc0506d097efb7e76eaf7474af62aa294bc0ea6
SHA512 b1c4fcc05754c487dbc9798365c009e94785426b635c77c6898be0c20626d6cb680ff043bd9e7e37fcb4a004f8f995169ca60fc6ad1cf8e4e8da180f3a569b9f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000003.log

MD5 366723388041693df20d4c9b959e63e3
SHA1 805079c0c468ca8f920df8140d0d25e0a3301f7b
SHA256 850b14e204009b5bc38782932371fe29031b4de2a0c6ad0349cba3de4777e34a
SHA512 11b24dd16ce11ecb5f479d55aab0547aa531669ef654bfcd20659e7e57652b76b11367ed2d1a6e37251195db56791e28fc146053fcb28687145b74e3378ffecc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG

MD5 6ed17d88190f5a0b773637f35407eed6
SHA1 7ce4f5719f55e489db695ef312fab473e47854a4
SHA256 9061df4968183fcb14b9bf818cc76954b18397e75db005996e45a1bda1d98f03
SHA512 9412f1abafd09b422275f146026037c1f09ea169e5f2897b719617e7f9e5ced95eda73b0a06478c48d57b85450c3a147b2600dedb96908dc02b8f15bba83de89

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager-journal

MD5 d98aa724d7bd31baf0af81123477f2a8
SHA1 9abe47d1086b5518b2d00a7575c4b8f821cf4a6a
SHA256 7200f4802d805cd4858165073622ef267ce5bd749fe2ec9b71654d1bfc08c1f9
SHA512 7cddb4e5c2fdef523f00bd5e90ba406e56d133547d3b3cf5a5b11019e1cf9855f9839aa4c0dfa3780f17ec0eae6ebb4139b8f5538c19954bcb532dc0e7c5038b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\f_000001

MD5 db7cbd9b6280b6b8224d74e178480ec7
SHA1 b0a5ee0cc32feadcab3281d658bdb5dbb2f2a71c
SHA256 4cf1f54778f3a46a9c1196ce97a6f3d0a0cd2cadcb6298c76e469f57e407dd06
SHA512 30d7be9566fdfa62d0ebf6442a1dfb7f52e45ffee407963bcb1de19dc4b2020ee3bffe752cf903e27b8920ab55d58d29ca64d89f994fea9cbe18e43b3d9bc47f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\QuotaManager

MD5 fafdfc01a5ad008593c8a9e7dc22ed7e
SHA1 82c7ecaf417ff295ef92d496e0ab88fac9ce1aa7
SHA256 3f87ea0cf3b518187a19b7b066cf0d5b695a3996b3005490e0ec0e14f57ba86c
SHA512 f2086fd12c0298b1ac72dd9e4606ffaf6862c2959ec1b82cf1c1f25fac2aa84f6f81590a97cf82e48f8588c436ac7466f2be83e26a15c697c081b14ca7921f09

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG

MD5 bac18300ea1f0acd9f9a762a32754870
SHA1 d011fc5a96f730e674428da9fd85061ad7b50f81
SHA256 b3d0c10f7619eaa3ab160e7c90b1779240572f3f534946b571adce6f661029cb
SHA512 72dce9713b46f411cba914122473a052de48cf89bd169452f69f38b6fd9e62d2a7a8825430d8aadaab9bf1a5ef92a410e9fc33316e7ba1067110df9835712b52

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_3

MD5 18381070d359cb1ed913693278085919
SHA1 623cb5787775b4118e7ddf9d991518e6b1bb1584
SHA256 bf744a08213fd446adc0272a78b27f2d2bab121aae7e066c37652618db25e8f9
SHA512 a78474455deaaebcd9433a989062931d4902f3508f347f2e3328a8bedc10453415484cbec4533e502dfd09d53aa2b09e7d48f9f730a816e0c2240e0c3707dea5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_1

MD5 ff0e8e4554f1f13419d11422c0d8d083
SHA1 de4eccd5261353d87a7c441e77f38c67d4f3c19a
SHA256 0c420676d5735e34c7add78a1a5545a006e8be3c66c882144d27a1ec8d9b2f2f
SHA512 9ee54e92ad2419397b45df1c907dfcba0f5151508f9129993eda63dea5a940f686defb9e9ac8c2d035d2593ddc5cc88b7471f32b360bc29d5aa5356fee0105a8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_0

MD5 8a49bc41ca63b0e8c57f58fa656edbe9
SHA1 03965b72d804b8390c75ef64a84268192c4edf23
SHA256 7556fd9a9833d86e7f8b20df9a06da7f39f7f2dc43317b3715c9098d4dfd4ab8
SHA512 b28595626cf8da7c26fa55cea605b2ffd7cb4725c77bbed4c7561004f139fd9882b00fab60360e92737ef9809fc054c6af873fa7864e6c1b0a4075071727169c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG

MD5 cbf366e71499e696e33d5232a07069ce
SHA1 bc51056f96d1dd832d0c9e8ffb6f2dd09737c3c6
SHA256 a8852762813d5375b0bc5c3150daa819edd152a97e6acc80efb5e400f4c4fa73
SHA512 bda851121185aa23463c2d15539467feb5716f1ebda5d1bb808bf3a18cca08d81aa6c5ae482543f910b26ef949b6b9b3220f9b4c40029b3ea786b4a34de82fd0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000003.log

MD5 b72ad886f3b9af3ec23b4dc4235e8e84
SHA1 509543fcde6e466c0ac85098f5f1fe90afc1e827
SHA256 920572bebf3dee31ec0e5c2fcf176d482583bc1d212e3fc7b8101af405546f42
SHA512 69c7c28bbf97fa66c4a390d667388573a91a9635f56fbbd013fd3556fca0a94f4274c2d91690f9d90d18f102a8611d685d9ddebefa5ec7f81d13e9d1e3396667

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG

MD5 a1be397788a639a0ff914a8d2c9baf12
SHA1 f5dea43aeca4224a20d24811b4800d825b156a23
SHA256 4805719a2ff8a83a92b9432f510c8d17e814e08caeab3b6cdb6e31749302520a
SHA512 1d79c49d215b6d5fa531cdd5a9d0be8b7191256898e97c7d1383c61d9aeae83cf0334e323a836d2392a1e21d7cc21e19e626a394ebebae66f68ee9cc26995796

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000003.log

MD5 a916c03f1e2fa852fe129bb5b212e476
SHA1 58e27294d69f071659b837e2d415e2b4b5e48b67
SHA256 1fe852759c2565c699703cb99dc18de85450f6a028b4ad54fce3f325a5d7f011
SHA512 e443ffc8140a8c29b8906834b887f4034ca8d9cdede4a24c308e2b960226477f339bda7f0c45135c8224be0af578827335b5aed3fd5403eb78d8458c78e38971

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG

MD5 a5654d9fbaf01eeb694e2ba0af66c26e
SHA1 132a5ac2d6e36ae3847e9b45e6eae3e5de0220e4
SHA256 2b496068a2324dc272fb53b05bd34b81618d06439f859b293d9d010160d6155b
SHA512 8700a926ab03bb2c813006c10d23b8b7815b2f42639d8e491be56e2d9f26ed1127b42a5660211e5cd42fba4b94c9427384b900b4e7273572d772328f334b623c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log

MD5 dd83428bba10008e4104efb376dc7ead
SHA1 c4a038152fdcc24fd7f3078da7c14fead83973dd
SHA256 845c8575898ac6fea61a77177be69e78bf38c019c1c99222abe17240b080d873
SHA512 8ee671df902e4c1910f47d572e8dc74a51ad23c3e04d655f12e8588be6eaf517e7e94a1d4d73a79c9357e18abd581fe5bee995d5181aff5d0103b10ccfc59144

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG

MD5 c9e777b42b8e4ee60bb179191654b665
SHA1 ea9f630022d45d643e5677adbfc75a40c3ffb762
SHA256 0640104f07953069da3a30f1e18582b8eb08226bca297ae65d90e7482d63d6af
SHA512 314601d53e4f3374cee4eb1f83e75f1e0810cf9973ad8d6e1f7e498fed1909a3d27e4a74c8ec216c449ae6cdaa56b0ae7c5154fc8c7d114374982aa9e5c3234c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log

MD5 9f94d02d0e314534426518a7e89438e9
SHA1 87363a77cdf3162fdcc15de3f550b71262cbbb0d
SHA256 c1f65a6450918f10652944d70d1c3b0f1c72d1903a30fe57982fcd03f8989bbd
SHA512 00f7334266b36dfc798ba3193b2ea7813ea55a897113e6a1b5bb8d96efdf1f937bbe49fb867170766b0417f20dd5aa936bf78bef34cfcbedba1d0d9e066b3285

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies

MD5 2177a3dbf127aecbea6913ef334fe149
SHA1 c9fc9bbd134dde2de522c8f7d8bc728a7c74070f
SHA256 fc040bf762150220d0239f91dd7ddc1ee62aa60968b16f147f1d62dfd5e156c7
SHA512 1993f911ef698fb12ab2f8fa7ddc10e548686b870b1a36aaa0eae3a03ad6b34d0ec5b37a4b59ca6990f52c7206729390611bc41cee334b8372b7ed7abbcbf069

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG

MD5 e0c5e9f790528f718af17ed9aa29f15e
SHA1 17d80e3e0c8893a8510eaf380ddd1b007ea77e27
SHA256 1b710b24a20b9927b689262f5ca579bffbb168e16f458b377454a3c45693db84
SHA512 3d4f062fec62c6b6b0005cb6c16ca3ee708c9e48f45a4a0d63c9c12010b1f506c15e486d2dff4084d1e4d7cc0813846d89576e4ea63c7f88203e645ffceb7085

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Visited Links

MD5 f6850fc06d44e5aecfa84eb7609b9a62
SHA1 4d3c89421c688e9258837c6ece436442b5c77b08
SHA256 52eeb0ad7fbe4884fc54c79f0e88d20118f83be8d7f71514385d80c2879eee78
SHA512 279ad1212d068a79effb9f0d40b6d0667d3563fae148f99385e3ca4112f7f21ace0019e72336a78eec405f56bf749a6f939aefe1089121b722710340adde7939

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_3

MD5 01f350fcb510dd1afd2bd804594cce3e
SHA1 8827e1a77769d7c87e6dd8a7e708d8173171e6a2
SHA256 bafec89592b0fbe188037f9fed80d63953fdd8ab0383b9f2f436599dd344d0a5
SHA512 904f4bf32c87b657f3be68c569921c69ec1d0d0a862d29f79571cf853ac89dae5089208ed87d85a9419f3fb9c7244af62f053c70fbaf9f98e516b54497c376c2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_2

MD5 06f421528202cd6e74997127d50f7d93
SHA1 1e9ba52d2df69c462cc8d5d33b2e437264b6103a
SHA256 629e5e8947864bd525e2deeb857578ed256603ffa916cf39ab81212c1197fcd8
SHA512 d7e1c0b3a85401f1479e3cce75f69dd35aa75b24a196844ebb5390100b5f4d34e609be84d087f4688e61625584964cfece4652def66aab3454ce86ce8bf81661

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_1

MD5 61d584474bbf1c478d44e2ee587527f0
SHA1 ffafeac7b7ca97914fa7a28dbf2560fd15ea35b9
SHA256 e30022e6800906a1b9154e8fec414aa845311fcf41349b29efcc87863568ee35
SHA512 c8720c77ae7e4fa416aaf9f454344c66582109e3845ed14db47a5c183bc4d7034353a50c7c567fc3dc57e0a56b64650144e4d9a0dc03e75b3b9726be202b8ff3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_0

MD5 18253457ef95e2a42fed18b226209c8d
SHA1 10e7975ab3b485a00656e577c34a0023a95ca507
SHA256 5574aced6c750e10146f98252bcc42114cebc879d720ab69730fc9ed60ab20dc
SHA512 91ce40adba71ab25fe828a92939cd095c559754be688bb0a30915974a648fad5d071d95f5836a5968064adeab05f590897ab301c035e23947f9cf16e235f2e79

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log

MD5 cbffdd39dc5d57dc7043de21ba66fdf4
SHA1 750606e17dbbf93d39c273b17bcf6094bfa0bb4e
SHA256 f6f8cd38c1566ca0129dcb20ff598db2f7ca46a975a9ffc1c733a015317af7f5
SHA512 bedda991251b15455c1344360241af5f2f695550c60d90bba812c179ed34f281903c4199c484b9bde118357dfe7c4f6ed922dc2a06d4a21c56458dad0e011616

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Favicons

MD5 4a5c7b28d85ead12db869783f65f6982
SHA1 e4e19237546ead7bc9874545381613bed92df1ed
SHA256 f6ef5a21b36c9f123b83598194ea37344bcf29a55a06d313066db576f881d1e0
SHA512 643e1a35449bc05787c5b1f0d4824fc5c5f044dbe19de7dd44bb435406ab16d3de8b0da0f056ef3eaba6d30526c5c0d1f56c0d2e36deb48a31df735cb9ebff06

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG

MD5 ccac11d4b3213657eae4adf5ff6a74b6
SHA1 d5e6b108d7f4eb34b4126f2d5b3d6591f2c43f57
SHA256 7a53cd385ddc13030791319cf781dc0fdb2c6fd228cfed1586a73a5cd98ec0e2
SHA512 f035164013f3e2bb476f4732b91a8d0a3800428f08fcc05a1b67d6a3314b9c5040b5ba85032525f678b590f61b6f2ccdbce008b37965ab562e02e97692f07016

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History

MD5 72af8fa0b76ee4af9ebe92efce044908
SHA1 09aa799ea060f11b713c9a4f79f87384e7be02b1
SHA256 ddaa9d9e419ec209a416df8703cd36f971d24dc9fdf21c812325972bb5bb85fa
SHA512 c6641ab04cae028bb731d76e72bf08d17f5a13b424b1be12096941dfded6508d9b83837addd486f53dc9e690c0308175d2310dbfec30c71024930e9fce3fa7b5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Session_13362587488167502

MD5 955f277b7ad97b60751e64dabdb3b55d
SHA1 bc1c0d36490c858410f93f4a968256f92fd5424b
SHA256 ea5e133a5be82e3b02679f8f15bb3cfda2438117ec8f8d6580e785af0e485632
SHA512 d5d068367a51892179615804c4d5e52db9dfc52a7079ce643eb9683ec7b8ee4f49d3ed8b550b43b4fc4de3c694ab4e61aa12c4000c56e7c050aa2426f5590663

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\chrome_shutdown_ms.txt

MD5 2be793d2233e389f39298592e31de29c
SHA1 69a764f1577f9369cf78fb076126d98d79070dce
SHA256 1283f83094b788ff6096b54e8078e3e673faafde1a5719954ed7444f5f2b29cc
SHA512 fead0d6d701bf17d753deffc51af4889b25aeb089a441c4c86514a89894c23e9a96dad6a95f8b05d9fcdff99c80dfddfef530a471f77512b4d79287e97c42a9c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Browser

MD5 de9ef0c5bcc012a3a1131988dee272d8
SHA1 fa9ccbdc969ac9e1474fce773234b28d50951cd8
SHA256 3615498fbef408a96bf30e01c318dac2d5451b054998119080e7faac5995f590
SHA512 cea946ebeadfe6be65e33edff6c68953a84ec2e2410884e12f406cac1e6c8a0793180433a7ef7ce097b24ea78a1fdbb4e3b3d9cdf1a827ab6ff5605da3691724

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 a68942c2c5d2d3017b99da75d83c0088
SHA1 29d58f56d0bc486b982de94106bf4a20167f0384
SHA256 4c8efa7b6cc369ce69115de40fdbc914115178927045dafa2623ccd7d4db6ffb
SHA512 db707ae88d7624ad89aef67c3c0f0d673bf287daa62ef80e8f08b68d996fad57682458d4d84a3d71b22188bbb5d9e1cb9a60fdfe05a2a12259060612f2f5e11f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 24e7b8ddd1b1fb8af012cfcc3dcfe4a9
SHA1 0d97ee6768d01f6418b9ef976d1660c090cc1ccc
SHA256 7c0a17c2ec2ea77a0da90c57781371d915701c88a26254077bbd662ab74c14ae
SHA512 673ce3fcf0b82ab7f5920ed02b3d2139fe99ea2adfd01200283bd782cf69d228b28fca0148c1a1fa3df2e243c557c8693ba25f7b61d52fea7a3ca58629eae5dc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 d652f2872a63f8cc7a1d845e2dc9e9fb
SHA1 cf0d56a33319d3ff19d940ef44a380c069ec8ff5
SHA256 36e3b302c6b1303b930cfe145939fded9649593cd0f8eb085f0e3d668479da6a
SHA512 157991fb88373777205752d28f39b9668e3901f54005c79a7b6cdb91aa772bcb0fc0f57dfc9212ae873a08ff1ca1cd0e2c2eda662095867d472f9f7a75b0f8e9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 6f902f0f0beaabdf3d862cb954ff6234
SHA1 c8506638e3e55a4900d21f3a09ac9e4110b95638
SHA256 e74c6866c7769f5d136fea075fc1943e1407a3801e25070f77af821052c0903d
SHA512 86837cc5901cc00b37c665c583371e7b39c0eaac2514fb2f7c6fff68784628e7a1a86a83fe514625d323d475ad015b428b70335e9916cfce225a050720b89cc8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5839b8.TMP

MD5 9ef0ff4900295e230d8788413c77260d
SHA1 84a705aff1cf98d4a9ecbf32d80f82df60747d9b
SHA256 5424ee668ce8615626057e98d27b98fd7a9f76e8c78bd11055aef25b10e14016
SHA512 0c5f4998973849938e2d472a256efaa3f4c0ec49287edb4b7f14036bff0f9bde2430ae19d9d88890007631014c0466f0a095ab950384042706d580747d9ebca6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 df7600df607fe1777700ecd00fe95b8a
SHA1 886051a40a3c8369d7aa558dd8ace19157bfa2a5
SHA256 e0877b06c1f97e96f192ee7104c2a448fa6d50eacc0b4c17cbf631f08f5c5db4
SHA512 79cc021d0a4ed86ad552110fbf1061eee9a04dc629b14cba8051edd529208deba4f11d238f132c475cc0e8bf8f50d16ee8dcbbc19638abb055697d7f9d2c3f39

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 9f0945c89d646fe9b561047d613cdd60
SHA1 3754e20339184199dae9967a9807297179e48d7c
SHA256 b44859323412e74a8722d42f7c53c88e31252f9320fcae4dbacccd5d08f0e68d
SHA512 f8ff4cc467b2a4df0bb520e6cc278b06c5e19f4132c17fb12a1fe7dd83e5df9aab3c678fd1ebc24e6b696934d2d72a10fcb58a3c85592c4d085f6e92f90978c8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir512_1874690843\Icons Monochrome\16.png

MD5 a4fd4f5953721f7f3a5b4bfd58922efe
SHA1 f3abed41d764efbd26bacf84c42bd8098a14c5cb
SHA256 c659d57841bb33d63f7b1334200548f207340d95e8e2ae25aac7a798a08071a3
SHA512 7fcc1ca4d6d97335e76faa65b7cfb381fb722210041bdcd3b31b0f94e15dc226eec4639547af86ae71f311f52a956dc83294c2d23f345e63b5e45e25956b2691

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir512_1398795517\Shortcuts Menu Icons\Monochrome\0\512.png

MD5 12a429f9782bcff446dc1089b68d44ee
SHA1 e41e5a1a4f2950a7f2da8be77ca26a66da7093b9
SHA256 e1d7407b07c40b5436d78db1077a16fbf75d49e32f3cbd01187b5eaaa10f1e37
SHA512 1da99c5278a589972a1d711d694890f4fd4ec4e56f83781ab9dee91ba99530a7f90d969588fa24dce24b094a28bdecbea80328cee862031a8b289f3e4f38ce7a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir512_1398795517\Shortcuts Menu Icons\Monochrome\1\512.png

MD5 7f57c509f12aaae2c269646db7fde6e8
SHA1 969d8c0e3d9140f843f36ccf2974b112ad7afc07
SHA256 1d5c9f67fe93f9fcc1a1b61ebc35bda8f98f1261e5005ae37af71f42aab1d90f
SHA512 3503a0f4939bed9e1fd5e086b17d6de1063220dffdab2d2373aa9582a2454a9d8f18c1be74442f4e597bdba796d2d69220bd9e6be632a15367225b804187ea18

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 161301887c23ab69f039d7046a06201e
SHA1 99c5312c2edb87e52d819783229ac38687b996d3
SHA256 11f3802eb0de94e2fc0acfaec47f84f68c652bc455b6a70dd472c672644f8289
SHA512 8353d197db81b77f2af5659bfbd1ee134fc9ef9112b34945c362d1357b5869eb8d8e17b2285f1f6cf138e9e2a0a6818b634f1eb4c913ebd065072450ac086feb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 644db01230074764fb58473e99e52517
SHA1 7531e8512ad671c6a20e474ed2f56ba710341ef9
SHA256 9e1abaffb932a143658cad1a544a6248a3dd0146bb27fbeec7fca06f1c7465f3
SHA512 7b06678a8bd99160c6ee52710867ce6b0f0ac1997cb6d505ff7a04815fab6c0642ba3040941b07eb60fd8ad4a365b72b9e06bb4b10f69f6c6367ec9ce969ed39

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 924637037cd1259d31030ecdfdc0ae7f
SHA1 16da97fc8719055a77060c9471d41ef381e742b6
SHA256 f20bd737570574979a3b3afe09827d0e6cfdf47bdd34ff1c8db04ff45f4dee9c
SHA512 346e8d1bf65599750e09519a0c3449a9b674f6582119884760a3a5b27e91eff25f266c0ba07f73f7545831cc5603d45578e163916b0ec4be7d9fb63bc25fdc0e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 1609c7b769d99c134e22df16cacf7cea
SHA1 0dca6b788f98332d4b3469342dc97bb9bcd4bc3a
SHA256 bcf1265c582d90d9c671f256d332e5c1069d0a7b7725433f49b0c23a88060d29
SHA512 a7f200e18e73a7823e8cb8bd8e8b829162344af0d5725063af8c2fe60249adfb2a812d81623d545972664d17e7a7e1816e856d6cfa185a618c9485a4d623958a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\7b043215-16eb-4525-a15a-ae016c419852\index-dir\the-real-index~RFe5893b0.TMP

MD5 18ef6dbdd6de511bbba856c39bbdcfbe
SHA1 331d95da3aec86dd3e1eb91fa5eb0c206901b90c
SHA256 4b28288a06ac466b7d6fa773b8b3d1ad215bf3e2950238d512d87ffc4de761d7
SHA512 3eb8e1ca82bd95be048325eeb3ea5b350b85d6ab2d3fc01305647beeaf683549f82e80fe9725732a438e58ee8af7c2cfb4470974a6f8a837ef24ed0d24a13b0d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\7b043215-16eb-4525-a15a-ae016c419852\index-dir\the-real-index

MD5 50f73e8bdc94e51879b96a05fdbce8e6
SHA1 6bfb9fd816e82963be4abb495a7167d56995430e
SHA256 2e798242cf295dd65a2a468b42819daca2858890389d42970ffd8c72a1100c0a
SHA512 a047d7ee462fc5cb2d8c066bfb482659104bdf98f0f417ba8404cfb2b03a75833a9f767b2e283da458cf378524f9a0f67d0d12d9d798014febea8575b6025ee0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 8abd84d474d2304bff97f942b60f5f07
SHA1 4f671bfc86164116019d375e3ee6a51ac311a5ae
SHA256 5ca83138c5d08191d6f029bb1c450883ebecc673a0de081773aa6fa48d151a62
SHA512 90d55d7ebc7aaeeb49454f3a1d8b8e4389dcb57fb2c23c76c3387b10cf719d18fc5194ff6dd57f4adfe11da191bde17a45a7d73d672494aee9bf03c9a140a6a0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe58b3f9.TMP

MD5 d1274da79d22e1d999a5cb41f2442f2e
SHA1 b8b720135e646d2b758d4d5a81a86b3355cab069
SHA256 43ea7bee26e1eea19a63793d422a3888367f865e241e99ec58dffc925c5184a9
SHA512 4ad8e709e7a03d0fed59a8cacbd4a2bb40c1dac1e97770027013f9e7ded1c96a5ddf65a3251efb8d88546651b2254ca96d5ef30d468d3e1a928dc36df4de9a25

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 070ff489d181c2cc4d3150a6d88c68ef
SHA1 af4e4342fe3f5bc175dc16fdd87b885ea2c82a01
SHA256 4770307168703ec6a505ec42fe5068e61cb1889a105df279208ff32c2cdbbf74
SHA512 6ad1a89ce29566746da0a17e53c3d61d94a01374be705a2b230624fb0a89e9ebe91379985400fa9d0081a5e33ba4b06a4c595257013d6a1482df354efc5c5803

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0797c83a-0c07-4ad9-bb1c-372fafaa9889\index-dir\the-real-index~RFe58dd8a.TMP

MD5 42324a3eafdf53055f242708a184c808
SHA1 750ab2dbeed3a66c05ee809dd3e808009b77dc6a
SHA256 e928a465e53d449ada8433a79fae3ee90fa7c9a5e217f34ff0887b38e6bf0c0a
SHA512 044818a1558e9098036caaefacde30cc1507cdf8b7243700708e02a955545f6499ccdda656481be6554fc44cbd9508af0f1729aa008355fcad7ffb339af87fb8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0797c83a-0c07-4ad9-bb1c-372fafaa9889\index-dir\the-real-index

MD5 0a853be8d1deacead94c70a1120cfdef
SHA1 7de82ce324dc0d44dd9544c1ce4d0a65283c6fdd
SHA256 5a6e6ea08dd594cc56cb5c2952e436cd68d7a423490c2f12b60afff42486043a
SHA512 7dc760ac0053f48b11f458a6ebeb99c4c35a91513b59926e3ca271dfa040b8b8a4f660ccae14b585ba4cb69da626934e79f2ad53e9b67becf5fe73e670ffda15

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 1d95dbd08802fdc3bf1465472bf0790a
SHA1 cb5157c1d4fa44ac9e8f5b07ed0fed6efa32b50b
SHA256 83820e0a4051b7833a1cb2fa4a271a3838938a5bf23a4c8cada6e132ffafd2b0
SHA512 871298cc64af98821a08aea2e80ea728831a7916ae14f87f18b0197d5f45b93382dc34658a3bb10412c15b3f3b34e75b7e70de2450190ff5715d08cf883478c4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 c5acea0f2ada4ba34e1f3ce3f6b536c8
SHA1 5e1ec7e50395baf0ea4bb97a88ad163f8bca3196
SHA256 79a6d92f3db4aefc6d1766b0e9f7efc369c4e118870c8da899160849aa9b18f2
SHA512 15de4d9c183c9836a9473aaabb80c49c255647f02a419784b9c63169d6557fa3b5ec3b4000a239acb63085faefc35f477c3051cf81fac9bd68e5866ec270bb48

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 5810656e5d0ecdf66f5763de27ce2a48
SHA1 2f101a6a512f9ba3d74b739640eaead1f91a6adb
SHA256 aa87fa43b64b41f4729664417f6d53930405fa37b4932c3079fd07269e406f7a
SHA512 9d4095cdabec13b799136057bc692eaa4952ad92a5787391915407b59ae042346a4d7489456bf7964e9888a51249e50484b0cfd9c3f325ec8e2c9d8e5f7667ab

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_0

MD5 d78f2f238ca00b174c2842bd29880f3e
SHA1 bee20411c316e6ae1fc8bb42e0aabac6b780465f
SHA256 8b7f399775b27531403109f1a13130872e9c115e33093886cf8bb185d014a108
SHA512 6d7e742cdcf8de7889f664f04fb7a0ed33d5628e9f1d62303ebe0a176de12b45b1ddff254228309dd4e747c735a62a8adc3a8bcff5303eaa9634fd792ac317d3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_0

MD5 6d635998ae37260cce6c41b68652b87f
SHA1 94dd4fc749c1e6ebf8b3078da6528ca698cb0d5d
SHA256 81e19880c440eebc18d9d1af067f6447f12e26f477c06076ad92b8ea9ac071c3
SHA512 ba8f00a7bf3243cd9fb00ba00d10dd301b45382e16ae02e921b7356817cc541575e1c9ea3a04fd89ca766f391a499e8f500623eac7f8f8d5876d869949b96dfc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 06f778dbbb4ddfc599aac772f2b8a615
SHA1 7c896804d6aa4561eef61a9b5694628fb46e53ab
SHA256 3c7eb70d58680ad73a25c3069427bb94f5f2e8b05aaf8d6e73a26eabc1e20138
SHA512 f243001ab9b8b078233215caae9d174f805883420e64ad6ab65fbc23f7a570e0c97043b3f760bbc8f6b735c57141b5736939279a9899790435066b810adc64e8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 9a87c35b951c212aa440fb5ba959283c
SHA1 3c1ca86b29b8500777f4c90ade5868989e156b61
SHA256 e864014bc7f10218fcd3ecb09cd9c4d4681834f3621d91ebde33167f9811b607
SHA512 97e90104feba15597e3d24f351bac39e730e400ccc55e6cf172d54837a6203c5984d17217c0998aae66f85deacb713589f0bf6411751b2cfacbb33c82d80be91

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_1

MD5 a4d00a4fccc4dc0e161d0e8260aac7a9
SHA1 ca01073468f9e186a0db5d6a569a0b08c84f5af1
SHA256 3e7f806c259d407b4c104cd6f792fb0dda57a9cefb79a3dabc3549794b85bd8c
SHA512 87bdfae30ae9f36dd4c1e7f7fcf1f5819e6fa2023ea9a278d2fd0f28405d7431c8c44ba44793b76f65a03abbed726705e5abc4ca47208c5363b8427eb50bbc4e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_1

MD5 828935d4050a117e1d5df565253b16e9
SHA1 7e237b26b672be0288c6d1e16f0d83cfb7e6082d
SHA256 b824d9b732bbc617a6592229b8e8acfab81108b7371c926b9b77bda58babb229
SHA512 670ef88bc6fddc5598140ffac877f46bcfef8d4d50bd5a26c119b55ee831a46235198219162d4cf969458d5248d7dd569bf9357905de16fc815a1a0ccd3580a8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d9440465a8033801423bfabcdd020433
SHA1 d1aad9d84e6b715514df7b388579e74d2a4cc51f
SHA256 fefd7afaab9ee3629f5b384df94ef591fb3e6221adacf615720e87d2986d87c9
SHA512 1ffd7bf2aa1e20944ea36fb47f8fd7492e6049fd674f7a576aacff5d4dcd7aaab1d7aebd6a47e429224dd3141c96504ac4d38692bb04b8cc120eee0e85008640

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 2a5e3c426bdb39675cc52c5921d0d30d
SHA1 42868563cb21bdf94338ac372680aaccd01f971f
SHA256 2e0df8c74491059e73f770d7f69f103f9200e7a9abdd2fed3f96d15917bf0340
SHA512 cf09e69c547381ec154fd8b613d21538e25e5f1f792fe65d30826a5aeb7625f595db91cb054ab1aef3a7cf553de41b7a87692fda8b59b116b85542c5dc3235fc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\1123df02-ec71-4152-91a2-bd7693101698.tmp

MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 3dcbc2599105d488dc90c192197146bb
SHA1 8e2915ec4c6c6230e9cc6a22df96964439098623
SHA256 31b7307e1a00a1432f3048b50fc8753fafcdc4a7e0f0ea6ff89ac6b13992ea5f
SHA512 9b182bc1dee43c275fc3c4428bf7ca4d9bdd0f8299c7f9fc54f4c3de2ebdd08d6c426966672d545f76fce0b4572b54faaa6c6b3d9a846d3cb4b3d0b80da385ac

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f28674eb4dbefda7ddee8be92034fe1f
SHA1 747c07d86334cdd698620e0143528fb589577766
SHA256 d41901fd887977b0028e91baedab6ed2f536fb89d9397fc4711bbbda5996d423
SHA512 ed33f6b80d5fea92ab7b33bcdfa5a1619689ff2a179df3586bffaff3432d625e068302efc30604a70f881a5dcbfe0f99109ffcfe7c74294e335efe53be7a1b80

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 3f7c825ee99f4be3f6afe24e1826e504
SHA1 8a882fa9aa736d0ce34f6272acab50351262ae86
SHA256 fbd442dc0fc19fa77e5b1ec54dab7de4003692ee34190837cd0dfccb226a8659
SHA512 cb832f52c8f64c3fe02e27d365d3f723675df57d68a04482f9d870045e671fedc7f0d71e76b44c128967369b14b4e074390d8767143a9d8adab2d9c7cbb6bd49

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 7e0a809d17bab2bf00a45aa10d8328ea
SHA1 852ac768d8a7839f3834097d7412ffa312950288
SHA256 45f23765857dbea0fb1d97d455f3dfa66addf09e553905afd4188b787c5ca1da
SHA512 d140883b392c44172c95376cb50ff3c0b7f6943ce4d0c97385cdaa1c64917077695be4c7a11bed060aeedb13586f501617078097988cd41d6d5557c701c7f4f1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 99e00bf328ca1479603dd890d423d270
SHA1 d9e3ca55e6cb95111b150cca0aa089266934a27f
SHA256 ecb806616777a6722128062c8732a8be5d10ee64cd5c20f4175b8cca662553ea
SHA512 a33839d967f4b78acbbf211ce5a48416e96d6ce61d56f0d9aca3b4a9b61fe3167b20692d05cce2e6ab495c486d1fb8da2a0e6bec98fa189b46fa2a18ea67d2b9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 8dfad6e9d54a92249719d31d19859357
SHA1 08b21965c64706dc441903c1ff859498057d1c17
SHA256 9496970a9b0ca0c7a19b4b867c9c908df70bba6e79393a3d8176daa8ccd8d264
SHA512 1678914d241d8b7303417a291aa41554030ec3a04da0cddd3686527e72762211be2470828cc09d141bd4f696f2420a5911a1dada8c09e94112c8585c1840e6e6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 92a4a149142736149e5538815731f21c
SHA1 8a1094285ac858d9afbbde56b5f980eb86a590f3
SHA256 e96293236d5f29cd34802c0ee8aa2b199ebf098a929793d04b86eea9d6f2f265
SHA512 53eb51b87e9d0463f86e9b6a22704841d38183962c3a74e594e587521afba698d511cc27c7907ba54d40917f94d368780e5cfafa607c5f25e7d69e68e6f3c713

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 ca556c4e67ab652b77bde75d35fed838
SHA1 2fb3d471e8ebc2af8ddddc84e6e4df3d3f20580c
SHA256 9d9980880d50be0facd9da3be724127460d7c6055182567b2a1d58bc905f6674
SHA512 830c4049c46900546a451681107f60fff744c741cd29223b997a95a1e7ee634e134307f1166a0b578fe8183254c4c287fade6430528887deebe3e5c569b15000

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 55d4d38f2751326a1f66f27d79bd59db
SHA1 96bff461a833ce4c5682f40e2a6c531eb8ffbf89
SHA256 429dddde8abb830ca74215267b77d909b67f610c6c7965d02e02fe7e238d38de
SHA512 6f133542ca04b3b86d376ece4b0ce5450783d7bc84edf4c986448c542a375cf3bb1547a97386a145dc2d8aad2c285465d466f76c92a799ed727d3e6bcfd21adf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 b842e747f86113f4bbde0f4400317a26
SHA1 3aecaee4e7939beaecbdd4e00ed13cda2c2bfb3f
SHA256 7b5b77dc93b987279d5d16f71badc800ce790d94dd4babdbbd28be9deec7be93
SHA512 2004cf24bd5f69a8a7eabb1162ebd06e1c682e880b57f976ec713430410743ca946b568dd50bb6fec88ec6685482935e0cde9b5322af91c88cd12786ddf82388

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 46668b56db15b25301b5dd03773c860d
SHA1 1a773f3d19616f7e9e160fc4f6323113f24d185a
SHA256 8a280f10e4474a8fa8cf58b5a57b35fa065eda9155277aafe82176d521fb2a17
SHA512 093a1e13262aacb9ac9387e3147fe3e0a8c015d4eaa5b6a602db046d4d0dc754c505bb2fc6b95742950750294f3166b48048228e635f276973a0032d949777d7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 96cade2e5e39a51e60760792f72e368e
SHA1 59405d510b00314491ec74aaa2886abde01b2d11
SHA256 11c1d9c45fe11dfd8976e83d53024d342cb6301d2ecbb0bdb58ba206005de700
SHA512 5bdf9a8498a600e48cf434e4cc2e70eb432ff056b3ce9e70001908c173655c0cea87ad8cd5458e17fbc3bae1d1b365dc604c0e7ba43873bcd846e668dfdbd737

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 0d9f9f50da9f29efba649f1c2be484c5
SHA1 0d7220f8111fe543a37c46b4b6e7fba61323aadb
SHA256 f47b03d09e31ef3919b08225d51dae5709df7be864cd87018e6a85c649245873
SHA512 7088dba8fa03fb927043f68e5a7f3824bdc80af1515bc97e5c1b44740f9200260655cb04a2ccf8737bd27dba7c5c9e677397d6338816d0ae948e989a460bf02d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9320d7d9c855768958ad4a10d0ab739e
SHA1 1ead03edecc8a6d45c000af3d54606e59b33eed7
SHA256 c778902d9f0f170cd85777509f303ca1fe9299cb2d44733097acf4827a79bce5
SHA512 0858e5117fbb840d732b1df9675b91c878915b4057c702454b150474a5c668fdb9fd884231f782e85b13139fa2103818b705d923ec36e9b24a5299ac24ea8033

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 a443efbd54d80b68235c0ffbee45cc27
SHA1 ed3f2499bc9e3510557da114da7eba8a9af3d53c
SHA256 555f989bf6ac06d55c2c9c2bb19a62c641028457efa703f181847528e19d993f
SHA512 a59364c5d45adf57d4d61578a97a6a8f5233938f52b3c5a5677f49e9d6aab5b8b42eb4bf4dc3deef1c64e29bdff87bbb0b0dc6b0c5785403f0749e237e47fb30

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 4120e31be1a84c812d2560bff2fa3327
SHA1 556366fca487a36478de27184d09b102bd27fd59
SHA256 1eb19ed3be9cc8cf1c2dcefb5023969abc5132204e42b718e959834b0f48af28
SHA512 fe84c14b5243949dcb7b347365428e97bea861b7adc245f4fef34fa53ff2343c5159ea420bdf512eef6b684fa66b56b5eeab87a3b472c78e0338212ee8f03bc4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 23219f87f9a621f74622cf621165b472
SHA1 aaef5180268aaf24837c5422ce38193f3700f174
SHA256 2472f09b17d78abed9d22bf591eb3d86dfdb5aa2cbc9240c48e49a51bc4ebf69
SHA512 6fade09a4b51f51bbb6bbb840197443d121bcc08eb2a3a4a0e020e1f5e29611ccacfdf0eff1e12c15d7a0a6eb0221aa14a58654042ab7cc823fb1ace22d0522e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 2d8f954e6bfdcaf706ffeee126fe06be
SHA1 fc804c0cd2006dbb9c9823bdf5f29af5be9453bb
SHA256 b9223f09c17ecf568bab77afb47fb084bab58d75284d7c681e55de932ae9085a
SHA512 a077e077ed60f6053e2f71398a4b6e2cebf2180891c34f47a39f164e40db2577d76692b5be7083fd41fc5a840622817a10a2e486a4994d69f2f73482980eead3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 47e74c5b8a2e4e4e50ca58eb4e8467e6
SHA1 a680f670e9245a290a27fcb50835c7da14877185
SHA256 62a60f8fc34213128a0aa9b970f4f01333b3ee7b5914389c8b04fa815cbb1b1f
SHA512 ccf0f94227d4d300c292f522a607fe945713aeb6a775dad909d1a28fa7d0bad85e8baedf39a97d71e3e0e3526e14693c39512a396badd200a1af359d57a4e095

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 ba28524e50cb6af449867f69870e09e3
SHA1 98fc68b314310a1e73e00f5a212473f1e5fab510
SHA256 b602e9c52e60bb2330df48820802fd0ea232fc1688a20c1bcf872a47e2a3cc76
SHA512 fcf9822c6d04548486132800ac98aefac55d89f0342321362c8deabd38074fc7d48bf1a5abd3095a70e47022316262d707a71e0ac9942956371c79caf1301651

C:\Windows\SysWOW64\directx\websetup\dsetup.dll

MD5 984cad22fa542a08c5d22941b888d8dc
SHA1 3e3522e7f3af329f2235b0f0850d664d5377b3cd
SHA256 57bc22850bb8e0bcc511a9b54cd3da18eec61f3088940c07d63b9b74e7fe2308
SHA512 8ef171218b331f0591a4b2a5e68dcbae98f5891518ce877f1d8d1769c59c0f4ddae43cc43da6606975078f889c832f0666484db9e047782e7a0ae4a2d41f5bef

C:\Windows\SysWOW64\directx\websetup\dsetup32.dll

MD5 a5412a144f63d639b47fcc1ba68cb029
SHA1 81bd5f1c99b22c0266f3f59959dfb4ea023be47e
SHA256 8a011da043a4b81e2b3d41a332e0ff23a65d546bd7636e8bc74885e8746927d6
SHA512 2679a4cb690e8d709cb5e57b59315d22f69f91efa6c4ee841943751c882b0c0457fd4a3376ac3832c757c6dfaffb7d844909c5665b86a95339af586097ee0405

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 d6f81567baaf05b557d9bc6c348cb5f1
SHA1 0c840165fcd34d996c85b6b44b00c7206bf772b6
SHA256 e60413bec64775bf1933ef4f9673c8bcfbe0ce71e950fd589bbd14c0f9a00359
SHA512 09b84cc9199592821d7de38cbe24332097b276bb25b6d09f7dcdc3a6b17369ee944a6f8120f13ea6a5c15eb759a90d7ce29cc845a5c0680ff2fa53e2623171e2

C:\Windows\SysWOW64\directx\websetup\dxupdate.cab

MD5 4afd7f5c0574a0efd163740ecb142011
SHA1 3ebca5343804fe94d50026da91647442da084302
SHA256 6e39b3fdb6722ea8aa0dc8f46ae0d8bd6496dd0f5f56bac618a0a7dd22d6cfb2
SHA512 6f974acec7d6c1b6a423b28810b0840e77a9f9c1f9632c5cba875bd895e076c7e03112285635cf633c2fa9a4d4e2f4a57437ae8df88a7882184ff6685ee15f3f

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.cif

MD5 2c4d9e4773084f33092ced15678a2c46
SHA1 bad603d543470157effd4876a684b9cfd5075524
SHA256 ed710d035ccaab0914810becf2f5db2816dba3a351f3666a38a903c80c16997a
SHA512 d2e34cac195cfede8bc64bdc92721c574963ff522618eda4d7172f664aeb4c8675fd3d4f3658391ee5eaa398bcd2ce5d8f80deecf51af176f5c4bb2d2695e04e

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxupdate.cif

MD5 b36d3f105d18e55534ad605cbf061a92
SHA1 788ef2de1dea6c8fe1d23a2e1007542f7321ed79
SHA256 c6c5e877e92d387e977c135765075b7610df2500e21c16e106a225216e6442ae
SHA512 35ae00da025fd578205337a018b35176095a876cd3c3cf67a3e8a8e69cd750a4ccc34ce240f11fae3418e5e93caf5082c987f0c63f9d953ed7cb8d9271e03b62

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 cec960807fa5bec11ad4a31c3512da4d
SHA1 a3ac60a3518747d3bbead5edfd17e155cf7ce9f7
SHA256 f960075a7b1c2590e18700f3230f7baea9aced3e6ba5dc93dac193027b5cec48
SHA512 2da2d935f9b96bd36536f3a7a494775c8ed9bfef6538ffe66307b73cd5c82210fc43bbe6706d74d99dd5b924fb78a0d1beceee8c0e22d91e17b1346dd85690ec

C:\Windows\Logs\DirectX.log

MD5 2a6b8362a7bccf40f628641c81f79ab2
SHA1 c0fb3cc0aae3f568a70012ec2c07715c962a1dcf
SHA256 03b86c42fb343136953d7a9eaa33099e6d601e455ce7f200948caa05d53d96a3
SHA512 dcc2ee617590ce398f25bf01367120c03910147d1b4e147bc0a26edf11eedeeb7da971859aa61cdd1671e39a3038209e1fdb2c94c240d796c8a5486529fa86c0

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxupdate.dll

MD5 7ed554b08e5b69578f9de012822c39c9
SHA1 036d04513e134786b4758def5aff83d19bf50c6e
SHA256 fb4f297e295c802b1377c6684734b7249d55743dfb7c14807bef59a1b5db63a2
SHA512 7af5f9c4a3ad5c120bcdd681b958808ada4d885d21aeb4a009a36a674ad3ece9b51837212a982db6142a6b5580e5b68d46971b802456701391ce40785ae6ebd9

C:\Windows\SysWOW64\directx\websetup\Apr2006_xinput_x86.cab

MD5 e207fb904e641246f3f7234db74121fc
SHA1 1be8c50c074699bdd9184714e9022b7a2f8bf928
SHA256 3fdf63211b0dd38069a9c1df74d7bc42742de003cef72ad1486aaa92d74546fa
SHA512 ed95d53bc351c98c0322753265b0a21c98df97d0e2fbbc58a6836bff374b7540b0cea21371cd4a7ead654210a42e1f9809cac6e4eae2ecf0ef2b88e220dc37f7

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 8edbf083b200f13b4e48010cf3c42332
SHA1 7902f5760e9771ff1d4026ff75778f436f749b0d
SHA256 9732f05584afcea70b945009299835b7e0fa05aae20d956c710ee127d1e607ff
SHA512 0fc08168a63228641e4d65b1e75c90d9ff8bbe16475140530ccd2f63c11a2c51c660d4a7bd1fb347d8467600460ff156a18716399013a268280f9a9e0363ca7a

C:\Windows\SysWOW64\directx\websetup\Apr2006_xinput_x64.cab

MD5 b0669f7d395078bee0087b089f0b45c5
SHA1 30506fc3dce9532ef0a8cb3973347ec9c3c9875f
SHA256 e63a67783ef7624559f95ab697bf8afbdab7ace31200283ef840e6b94aa16e5a
SHA512 d7efcfd85b3cb6cb9b1936b701a9d7d91a6094aa08d8c933edf8493c6ad57be05a579980a404b35e9721f71b45f4cae28399fca3ff5df20a9a3138b90f86b94c

C:\Windows\SysWOW64\directx\websetup\Aug2006_xinput_x86.cab

MD5 16b968ca0c435ee45e77a84c2d0364a9
SHA1 90b17a60a34f6335787a6b2d489cbcd3a4ea98c8
SHA256 6dd7c0abe37d3df7aa6db7bb352260f4a15dc965ff9d30aa32fe9595c1a18300
SHA512 3bbbfdf8b5673641ec066c3fb52e6b0d5ce0bc6ed6bff17ab4ac3fa69a8628b09e5ec8322fc39d2a206974b54d297caaff9410197e26d090fe74f963cd535045

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 4d508ab9e761666446ed75d10a9952c4
SHA1 447b9463666058890903a712e48080bcccd3cf92
SHA256 f62e34af76dd829b4fa111ec5fd14ccf7223e8d8be149ba08c9fbdccd822af91
SHA512 750ac58f0c42f37fcde4a931f350a1f0a7606165b8904cb475aebe2a3079cdc848a21d686bdd1be9f77ea5b6c84be05758cad2f0b20a2843105412c0c7c72637

C:\Windows\SysWOW64\directx\websetup\Aug2006_xinput_x64.cab

MD5 a9d582e44e46e36f37edb7cbc761179d
SHA1 ed1bef64385e94ce89afa704d38408e23b31fa79
SHA256 c26633d38e0a91b9be70382e916a83d50e219609f7e05cfb2d27dfafbe480b43
SHA512 20011bfb547dedce8e6fceda22c3a3a83db140e8a20844f3b0e8741b4474c1fea73d84708b801e83eae3cd2d8a2d6c851c3f7cd0154c0382a78bc2c2df6b01e5

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 edf660a46f752a049c8d4dd05a854bfb
SHA1 8461903ce4ae4ba6c7d3f5a11a79612bf77627a2
SHA256 9efd51642c41cf85174850e297a4b3aca1ce824819dcda2fa7a22dfbb260d7fe
SHA512 d6ca336d44d76dfc68a2d20044f4c296630c1ba7f139a5c3e9eeec31745ac4eadc884b3c4d80d9138a181d81aa22d5fda3283bd86e9c77cb66939f33ebd6049b

C:\Windows\SysWOW64\directx\websetup\Dec2006_d3dx10_00_x86.cab

MD5 75c33157d8a1b123d01b2eac91573c98
SHA1 e3e65896ce0520413979c0143c3aa9bd3a6a27d3
SHA256 02daa8b5ac3752f76c3bfd9a505ebf22b1b4b41e44eb92ce2799033b2330d186
SHA512 f0f1f1dea5938e1c7ff2adf7c8d421c2e68e6d3a8cdf18d0f2f3fe1c6837a4f37b367d2d974c35832d1d85a619948dd0f250c7d6dc4ae39f618f5a2893eac7dd

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 aceda5efefa3fecfa06cb939f8bff9f4
SHA1 2a0ea6ec07b0c5a369d264f2c3b1b7817b56a7a8
SHA256 a99703529f06346901e4e262d93f1b8c8e4da3e96ca4c071106c4382ca2558c9
SHA512 f2f03242ac609a606eea90d8f98090f70704702df189e9c87d81d248d2a98a2af74a5974c1464fa29428be10d21aa35284ea0d28d95e81d753906c21c7f401e9

C:\Windows\SysWOW64\directx\websetup\Dec2006_d3dx10_00_x64.cab

MD5 681407075e9b19e5ef2218832f6fad71
SHA1 e4f4d292a36cd9a3034007ef9d2005694307eb52
SHA256 f9bd5bb083bd55d1d2a690bc66d6d9da0b1a8b49f09e811e788c030669121118
SHA512 e983e7dd3f40510816ff3ae836600a186dba827b484b0c346c20e43e229189a86d4cb5cf219c1fc35b77ab0668866446f6e9206b279931c927d4ed66ad3625f1

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 ea20168be941c59ea61bfce11c7deac3
SHA1 f144ca4aa5a1c30bfa4b5163bd219ae1d4913bcb
SHA256 f926561442ba3d43ee6ea8d4b42588b25d5b8a382577fcd89ee3bf2c263084ae
SHA512 dbddece15382d174f9eee716395c4a7a0dbce9c0e8bdd640cba59f134b9e09d300a7daf5728fa0d992f393f40954804ad183bcc18bb759d373f0ef687e87070e

C:\Windows\SysWOW64\directx\websetup\Apr2007_xinput_x86.cab

MD5 b362ec93463d8b6381a864d35d38c512
SHA1 7ce47ebceda117d8b9748b5b2d3a6ae99fc239df
SHA256 b6c1166c57d91afeeeaa745238d0d6465ff2084f0606fd29faf1bfa9e008a6c5
SHA512 cc57733912e2a296a11cd078372c3b43f1256a93ec5becd0d1b520eb210fce60938aa1caa6dbbca03292a05495b5ecd212ee5f77e3ebabb11ef31f1975b2d09e

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 408cca21957bb22716b5d605a9c51bd5
SHA1 a5dbe2a7163afb41f1f615cc0c0d098c60fdfcb5
SHA256 6b38ba9035194a880c460dfd5d48569d6bfedfa099a9931332e79626abf042ee
SHA512 b36c8940e6f3a3d92361d6825da8fa685350b891188c0d3d0a783dd3d461423f1e1bd80d861d2d76300aaf7ea77e17a0fe22b6bcc2f11ab6126cfce34072c9bc

C:\Windows\SysWOW64\directx\websetup\Apr2007_xinput_x64.cab

MD5 fae84e0773a74f367124c6d871516b7b
SHA1 caf8b9d7d4af965bf445d052d1e835b680d6bbc3
SHA256 86ee073c199b5080fe4f5be6ac24bb1117fea42e4bbcd828b4f0ec26c669b22c
SHA512 caf1381cae7417b57faef56d0023bf90c90406748f8813ab85c687ddb81e2498d2f1d5f4bc154903fd5a19836e6f245cd6f5d3927a383f1acc3bcc41b58fd09b

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 57fb131645b8289383e2e621f4c28104
SHA1 71abb1cc810974e75ff084595e16f46bd88da653
SHA256 39b61c1336e7bb95487dccaad47d33cff953589c17f51496a95342fcb17f148e
SHA512 0178f994bce78ef5adbcea90c994a6c7d99813e256f3f86e9559e306f3b795f6f506bd4b78a13a117b4afed36c4b6889b36ffc3c09fab69f94aa0f2404593390

C:\Windows\SysWOW64\directx\websetup\Feb2005_d3dx9_24_x86.cab

MD5 7029866ba46ec477449510beee74f473
SHA1 d2f2c21eab1c277c930a0d2839903ecc55a9b3e8
SHA256 3d4e48874bddcd739cf79bf2b3fd195d7c3e861f738dc2eab19f347545f83068
SHA512 b8d709775c8d7ca246d0e52ff33017ee9a718b6c97c008181cd0c43db7e60023d30d2f99a4930eba124af2f80452cbf27836d5b87e2968fb0f594eca1ebf78dd

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 5799df5b88730847dd657787d59d6878
SHA1 a1bdcbd884c81e29b7e5bc256ecfa0055d8bdefb
SHA256 f064b65618e11a6fef9253c955c36c8af441113aa7609822f2a02bf48c0ee3ff
SHA512 5e0c140dae074b27c81e652cb676855e78f32f6d9a5379654d9106a65f874dda7cb80e5dd8752a25f0c5ddaeae35bbdd43a967af182c79dd5de3636b64d1eba4

C:\Windows\SysWOW64\directx\websetup\Apr2005_d3dx9_25_x86.cab

MD5 9c5dca423d9d68349d290df291ddbeef
SHA1 d9f1cae586470ea309ce9f115525b0504fffaea4
SHA256 5487ed4e969a822e5c481cefb1d4da3066b1d5ec8c55798b246915ecb58a8665
SHA512 9f50599321f45fb7451b0a1c0f1dcbd6b4a4e60ee27b0ef5aa29168c1bce5b08f34329916ea2ea655cd632d0a19c81953c2a5f1277f6a96fb63afc098236509d

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 18b6813f1219a60d1964765f8f74d5ea
SHA1 2b42ab30711bade49e5e6dc1bcf0ba5912484add
SHA256 7c079edb82fb33dbb50e014099db55afb1f338a31b5ee39ac5bc77297195daae
SHA512 46752cb9512a6eeb4a70e1f03f8bb1ad52d9cdae9f1f5a440bbdbcf11de84851390e5634a59bb75463dd7a25fd3ba181c30fb7dc27b087ed1f7c2e5fa4976109

C:\Windows\SysWOW64\directx\websetup\Jun2005_d3dx9_26_x86.cab

MD5 029359ebca4ba5945282e0c021b26102
SHA1 6107919f51e1b952ca600f832a6f86cbbed064b5
SHA256 c44eabf5be3b87cd845950670c27f6a1e5d92b7758ba7c39c7849b1ee1c649c0
SHA512 fa007f257f5267119b247ec4ed368e51fd73e6aea3097e2fc4e78078c063af34d161fd1bdcaf3097bb575d2614dba226a624d060009ee4f7beda697efcf42bb7

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 04160ac95ebefb785d2f251b99d34d1f
SHA1 66aad4137987399fe894886c1848fc26e491744a
SHA256 101654a7dcc364b91670353a4cd396204207866229ab9be7a648b5f66f9d9fff
SHA512 7199b7f9d6bec65215788d14919d0610e67f98cae58f99cf91044bf42b86a9c7579a400322d19bf0b30b983e46e48e4e8ad0ce2d65ade0312f3ef6d488094106

C:\Windows\SysWOW64\directx\websetup\Aug2005_d3dx9_27_x86.cab

MD5 3e91448a7481a78318dce123790ee31a
SHA1 ae5fe894790624bad3e59234577e5cb009196fdf
SHA256 8c062b22dc2814d4f426827b4bf8cfd95989fd986fb3aaa23438a485ee748d6d
SHA512 f8318bd7ca4271fc328d19428e4688da898b6d7fb56cc185ad661d4a18c8169392c63515d7dd2d0b65cbd1f23892d7a0a5d3d77a4cda6230ba03b3b917e5c39a

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 40a8b899a6ba0900999ca82335212f5b
SHA1 a5063026cc4c01f278ec312c434320f0eab1bae0
SHA256 7c9f53aecd03fceab89cd51734197fb3d77b819c99a6af0fd9f8f5f9baa1e785
SHA512 5ac11c8ee70f23650457f0c3e83c684be00e60ac01d073144b366e362f8bf32358158ca19dd8d859d000711bfaabf8d1695d8c00e5dcf973147354f1278fedda

C:\Windows\SysWOW64\directx\websetup\Dec2005_d3dx9_28_x86.cab

MD5 b1ccaaff46fe022439f7de5eb9ec226f
SHA1 8bb7225df13e6b449d318e2649aeb45a5f24daf7
SHA256 645f8d90b07c69330a8c7c8912d70538411c9a6b2813048da8ad3c3119487f93
SHA512 2b59c07584d45705273a975a0223e4443db190675558ab89d92e1572de4843be3d0d1267818b19185e4e438a8bcfa2af5fb5ef2a119da270be4540576fd78c77

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 6a0ffec5520dd9526d53fb206e92a225
SHA1 3935892003d2c3f6e87c24309515d1668e07dda0
SHA256 13f74a30aba7102226de97797839832b44d9987ce7d23c2c711903a5709b25d4
SHA512 63267ddca50a97491d91cdced635dbbdcbb335cd92c831e32c3e1710c71ef8558d332da0496276c2630ce5f4d840f7eec99788a433a768ab543a6c0affa0d6fc

C:\Windows\SysWOW64\directx\websetup\Feb2006_d3dx9_29_x86.cab

MD5 f6cc1c08d0f569b5f59108d39ce3508b
SHA1 e9cf7edc8c9c4b57a9badd8386a2117ec5785aab
SHA256 4114e76799af3da9db3dae51305dad70a05b757e506e4a327092d536cca7ee75
SHA512 86df72d5b15396acb504c1ac9de7ff5c0cc9c95a90fdd82daedc55baad490cc47a71cb511571d37e25dd9bc1ee9652b9723e33879bc1756a7881a8e61ebc59ed

C:\Windows\SysWOW64\directx\websetup\Apr2006_d3dx9_30_x86.cab

MD5 b3d644a116c54afda42a61b0058be112
SHA1 9af7ddc29eef98810a1a2f85db0b19b2ec771437
SHA256 ca7b9c6a49e986c350147f00a6c95c5b577847b5667b75681a1ee15e3a189106
SHA512 a2d2f12b7b37bd8f5c8465dd13ad31942df11ee5ed5423deeeb178e6b594587706d2c5116258be1562caa5eca691358af3cb83b77898d1012ff521017d199165

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 eb7ec90198bca9379dfe61238e3ee3ef
SHA1 f1306037f93e46233fea7fc931b50ead1109b974
SHA256 830f7d089d575cbfc227a0db375196a7d8d5078af42884e4582660bb2a4bb767
SHA512 1400655e709aaed964be9824fee4b6c4802c107295b377e92f8fa383ab35dba4251927672d35c0c8eeaff1bd595aa41c2157de604531a2603e485bf86866f498

C:\Windows\SysWOW64\directx\websetup\Oct2006_d3dx9_31_x86.cab

MD5 f778928c9eb950ef493857f76a5811ad
SHA1 ea82d97077534751297ae0848fb1672e8f21e51e
SHA256 4891e2dea9d1798f6a89308e58c61a38e612f8433301ea2376ae14c3dfcb3021
SHA512 1f382a287fc6763b8e8d66825e8256dfb7d0dead6b6a6b51dd7c4a5c86d536cc7ef4128be0ce495fe17c859018750072dc7b43e3476d1ba435f209cc4eb6d43f

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 31f62400100ec2c353a4d29041f856e3
SHA1 88ba7629fe19127612767efd86da1910e0f36c1a
SHA256 1c852f14039bb465a7700e58a1899e66ca0ce0b01fb9247830e9ed820c3e2740
SHA512 c3586e487358f01285f091cf366002067e361478f365d85af10e359b3bf5e0230da0780f3c3214018c7cc359466253ff3c034cc58ca45b1ff830ba6c07988540

C:\Windows\SysWOW64\directx\websetup\Dec2006_d3dx9_32_x86.cab

MD5 a5bead938afdc63adfecc1daf5049d7f
SHA1 b3d5bf56f6b9bf87c33009a088ba7785b6363b4e
SHA256 a1cc7603302ee53d54f4353c223d95e223706924d99b864220b13814ef93eefb
SHA512 c9244bbcfe60f347ec8785b1a41b6e243153624ea73b16db4d624239a69fa76d2df2e54039d8f4d2c495890ac17b676e390f796118b4e16d9f03683247190362

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 1867f3d1b1ecc40fd4dfb919e6886171
SHA1 8986290180ab8b0591ded70c8d9fd7f517418281
SHA256 6086fba7481b45b503e2d892ff5dad13f5fb347374919a2764371b1efef49099
SHA512 c0fd728362abe97fca294e43988a64d51fc22ab216814c34a626946a4b69ca2f40f5f6431b3e35509cc0dd9b0e219524209eff2f01907ade98289aa19ac21ef8

C:\Windows\SysWOW64\directx\websetup\Apr2007_d3dx9_33_x86.cab

MD5 a5915ec0be93d7eebe8800ce761ee6dc
SHA1 e8bbc21c2b5f0e5801286f07e3da09dbc67c3961
SHA256 efa2e6de548401376a575e83a79de019aa38f191d63fdef3bd2b07d8cb33e3d7
SHA512 02259ff3c8478cba134a8f8408aa624b7165ced97c0aed8c9626034599dd5439f84d1af9eefc4191898b0a524e5ffafb9875ec00e740cebe97eac4c2dd0e31aa

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 5344f87c9930997120805a9d0291edfa
SHA1 0f2d31aacb69ee9d1cefebac09a9ae7cafda77b7
SHA256 69ff2b62fc11ad9039c0e5f01b918f022bb624d29a4766f448f71d71a33dfb86
SHA512 c881280c51e4220061ca3a2c21ad5021794e47641c00e0eec25c818f5d71e42ab5bf1798ce2d178c61be67c594af31ae32b0bedd0938323c72d65cba66eff68b

C:\Windows\SysWOW64\directx\websetup\Apr2007_d3dx10_33_x86.cab

MD5 f784b8a0fd84c8ac3f218a9842d8da56
SHA1 fb7b4b0f81cd5f1c6a900c71bfd4524af9a79ece
SHA256 949068035ce57bbb3658217ec04f8de7a122c6e7857b6f8b0ca002eb573df553
SHA512 01b818aa5188cde3504e289aedca2d31a6c5aed479b18a2c78271828ae04bebcd4082051b7f4eeca8a31e8ee5adba158420ecdcb21371c735e4781ee5f661dbf

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 4974f9e6020cd08ff20e80e177c973d8
SHA1 ee476af6c3ba5c94e12aa2a022b87aa57eabaf45
SHA256 6ecf76467882fca643e9792821c18df630b16b0e4f446ee50c8d7b8a62e50e64
SHA512 ccb985c8d7d9ffe9f0d62284cb8d824b14df54104c238a9687d5967b56e77591017038079bdd3dcbad4d9fcde04a52cb46930e90425342641c89c0a305a4d956

C:\Windows\SysWOW64\directx\websetup\Jun2007_d3dx9_34_x86.cab

MD5 fe8feb215fae59866dcd68c1604d97aa
SHA1 cedaca678d15e78aa458b965abb467e8964a1fab
SHA256 1c1e1c6f68ba556a0af09a38c32eb421c543a4848c4b42d25867c98dab3b3a50
SHA512 9955336b561e4fd3ba3da7fc086643e811048a25a7e68344d2cc5cab091980baae1c04ce41328b59c896662e2875886b78ec869852b2d1daaa46af38c894a3f2

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 13a5aad608d219f8642cb691238a0a8e
SHA1 13de21481dfb1e5f40dde426f5eec9cc4b4a7471
SHA256 f19333bf7528ed3ba989e5275f57d2b606689aeb748efdcdca218753044415fe
SHA512 3d85dc688663ecffcf98cb4fe5c6f158a76d3eed82727ff0421bb4b715f32589f699be70cd857b311870312f888cb57a6e7149d9ebd5319fc0a5280bed58b38f

C:\Windows\SysWOW64\directx\websetup\Jun2007_d3dx10_34_x86.cab

MD5 19383cbada5df3662303271cc9882314
SHA1 123c97c33f7ef2ba345b220450f181d440412e6b
SHA256 8ec971c91040618338ac2369188f3e5d7c85a5b1e3b9fc8e752dd845d295cdba
SHA512 a4c6acc9ff656e05d75ae0081c65c200b584209c99fd001494c4d206f2ce8a78d2dd3644e51018574928f3b9e9373bf7ec8c5147a3590b54d1c6d50e61342853

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 44403953b69af833ac90700686eba448
SHA1 24020e4d88d6d3fa8e571949974a4917ad56f7a2
SHA256 3f9257e94d34a5d9c2a623fdf8f76325ed76ab843fa349e8bfc9d10686d85f9f
SHA512 1be5db192d3a6b452345b179e27cec125378df9358c60a113b24f418275fdb4d16499f7d4c69cd79fa6cecb9a2075e46a219b52e94588dc668af1eb839b1567a

C:\Windows\SysWOW64\directx\websetup\Aug2007_d3dx9_35_x86.cab

MD5 3ed592e6cdae66b1c0671d9ec417a738
SHA1 9f083ffe00a8e5eabf282130cd16044b488b6e0d
SHA256 4914d2b5c3251b00c0cc236f51afe469728d92b50c953c66d213f079ac928eac
SHA512 0144dd9a83f953eabaaff3c41f17a363100c9a2ccd932321a4afe990d8fcb5a430e842de9146c983409b6366cd974e318a535e6475b10839a6679844cb7d23b7

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 2b821c74d2e062c62994d7c95b079ddd
SHA1 63187467c9079b80cc4a052ef2d163e6884642d7
SHA256 8e781f69d16f7836dfadd36f83c68c601580bec6de797d4ee64a48737d31e5ae
SHA512 f8cc702053f37298302fe5829e55ac9186de318a873451cb80a5455c1eaa98798bb8a76b43fb2a5740addfd51957f25e87f33386b364dc5125cc36c43df01083

C:\Windows\SysWOW64\directx\websetup\Aug2007_d3dx10_35_x86.cab

MD5 ddc4af0d53b477e5af77942e7118b66e
SHA1 81ad8201dcf653a6e977c4506a274d0bac12643c
SHA256 9536166ee7cc1100cfe24e01532e8e4deed6baa838b4c025581f2ca046a25915
SHA512 1e082d7e7855bc0af6ec09d4a69fd4a1b0a3a31e4de8faa52fa0bdcd601c501ada6216dddb83058f37ab4a371068e0f344bdf42f2551943be19bd719d99ba93c

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 ca0f547f93a1ecf1d4649534ed5066c0
SHA1 cfe67c10e709ab816b75d9542a687744957683d8
SHA256 d3a15b921d27ceb8d84477506f951082fbbd796e0fde794aedf2211628cfa955
SHA512 061605059d113145b39cf72dc810f42de9b28dd28c4f3e904937a43b8d584e570501563973a37ed5137c9ad810c30d162de2850b15a61bbc3127854c4347e13d

C:\Windows\SysWOW64\directx\websetup\Nov2007_d3dx9_36_x86.cab

MD5 c5e127067ee6cacdd2f8962e6005542e
SHA1 22c571e4da75a6e5dfe02e3e3587f40c2939c745
SHA256 f52cc1304b533083b3fc5553c49433c0e4e46d66d567b9de0b558ca518db1544
SHA512 e70df11af8cb5d51c3111b8327371ea40292580f06d7d265f2449b89a4941c4740bde904367fbcb4158512939bbd7c7a3dc20d3642475789fc075a2ae8e27860

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 a84f2239c4f5d1179ffc05a09a6945b6
SHA1 ea6ab540ad81b6e30cd349d1884d53a96b3789cd
SHA256 5d455aec145c442f759e0b4464ba5eb8b10b2df1cc4801d0ec134c77a2a9295c
SHA512 9be16704682e7eb84b3a666c04900a55c32d6cbdec87363993d8702954dae97539f338108724247ae6095289269ddc25f4dab8501f51d751600ec86249a5214c

C:\Windows\SysWOW64\directx\websetup\Nov2007_d3dx10_36_x86.cab

MD5 3d9a0c59156d03da0f19c2440e695637
SHA1 55b050991cb17410c75adc3913066baedb482ed0
SHA256 bdf7fb01c02783a4f8c9f5e7911f5cae3e2a7cbc425b90b36f9ea6eef2c27de3
SHA512 e9a662498c43865e917f0778b772d6964517e41289cbf5a0b8a4e44d8c4b4e9a5049c76f2ecbe4acc7e9cfcc3f1d87a75c3f8703e66804ce758969814ba14fda

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 b84daaaa7bdb4612d3e2e4ca709d5c9b
SHA1 72c359a135b7d2fb4c0ff615f6be62fc413f15e0
SHA256 76b8c4e67162b29ba60b10eda0678f30508ab4a4a9580cf65ba139fcad1205b0
SHA512 845628e1504a56f3a1183ff9da99a911fc071fc4066f2a8d5fd62575a1c4df2db888e25512aae1938b8415d0f82a81ddc9a3bb13714ef92c6a4b0798975851d7

C:\Windows\SysWOW64\directx\websetup\Mar2008_d3dx9_37_x86.cab

MD5 8ed75e3205c2b989ff2b5a7d2f0ba2df
SHA1 88846203588464c0ba19907c126c72f7d683b793
SHA256 91a50d9efcdfbcdf22a91d6fbb0f50d3c2aa75f926d05cc166020bf7aaf30e28
SHA512 d0cf0e3aad9c8c43a927d1bbbd253b9fe4c97b638ad9a56f671ebeda68fc9bc17cc980d93095fbb248dd61dc11b7e46c22d72cee848b150f7a13ead9e08a7891

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 cd45778ad52aa6468971e2685807968e
SHA1 54e914f6d4d88bbdb97f50abff953d775f7b7b24
SHA256 5ffc9c8ddadad4cc26dc6758b142d86b882a0cc840c53503b923e5e70c6507ab
SHA512 c588a88fb1d1ca74ce2bcda0052aaf994cdfda94d80657f176e4579be17b3dcc9d7803872fa68ffb62ec6985c7770662ad491a309816f1239f1edf5886e91eda

C:\Windows\SysWOW64\directx\websetup\Mar2008_d3dx10_37_x86.cab

MD5 8234b9b90bcbb5077e1b5faa0b66d1a9
SHA1 e9207c572fdec592b7c17a7f9c6f875c8a55b1f0
SHA256 6a2727269e6cac7c4d2e316333d29bac0dc1cd7f51c36c0c08b0388203dedad2
SHA512 74c94a6e092d7c828fc1e3faee4b21917afc3cacec04f260754190d0533f93a58289763ac620e5a577f7865902023b30548cda4d9e968c90ee13050ad6d1e8c5

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 4d51275c98cd0919a5dc0c6c2bf87f24
SHA1 f25979d34dd00dab6a8702e68234823de685e56f
SHA256 cb58110c6d731f63ec93d03536358ad0b4ad2d65a8cab2e9f7a62266cb5a1ddc
SHA512 0e78f62e800e62081c922f5d2c786bd02f7f0875a08a26b86e4810c116eb411909dc271ad0732b44f6acc0bd06b56b745e635a32bf1c4d1266a97133d557b4e0

C:\Windows\SysWOW64\directx\websetup\Jun2008_d3dx9_38_x86.cab

MD5 e2fb2e37c342983493c776bd81943978
SHA1 2a8f3c45cf979966d4d4d42a4d34f05c72c7e29e
SHA256 57e57a6348e55aaaca6bed5e27bbdd0a4bd0dde69c77f4d26c805be6384be927
SHA512 2d297f607c5a098a3d2b19e7f88aa12f720af3c23fe6ddce7d4659a9184d1cf8f8a76f35b8acb639b48cdad8998c919215a03b89207e2bb1829ea3d8a9efb95a

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 6460e2c4de84713242c3154059b4e12c
SHA1 bf58b021238b18f37dc6d18384db94534f9edf6a
SHA256 57bc21b86044daf245e01b6e546994ae1ae05a5d7f9c4bf4f82f6f3435935514
SHA512 073b7cf4c06c2d7b54cfd6f6b43d32370f58d60aed48a2fad4a611540187702c3eac88a865f8afc0cda8cf3dccee4156fc38075145fbd4ccc7997e3685a941c9

C:\Windows\SysWOW64\directx\websetup\Jun2008_d3dx10_38_x86.cab

MD5 b0e2b612daf28b145b197a4db0a9b721
SHA1 f69266e4af3d2de31a2a2e416f10b0f44737739a
SHA256 e8dc1063c9434eed8d633741b19cdfa1889581041e2214b87b5159e3ea087f3c
SHA512 6e31f18cb75ce69d291d0abd15edadf02c0693033351dfb2f435312a47540aa223c8176209725c14a05fa6494153a3e191b2fb7cb8c5cee11fb42371ce67392b

C:\Windows\SysWOW64\directx\websetup\Aug2008_d3dx9_39_x86.cab

MD5 4379902c4180a9a6bf40b847372cec5a
SHA1 c7fc8184d5620154b9bfd6fbc8820a78c4eee592
SHA256 61e703e8d231412f135b4aba629122d9cb69ac9ee39fa3cbbe6b95de05097a8b
SHA512 9269f49a5ca90143c50b817e9f5aec0fc4c32ba1b6d3a21cc5448cad21a16a902540c8cfc1825b124ce39e0bdc479ade4354b6be15b2067e3033e04998e0710a

C:\Windows\SysWOW64\directx\websetup\Aug2008_d3dx10_39_x86.cab

MD5 5380053ac4c344bd38604022476b1c1d
SHA1 043dc8f49bca3bf0bd85e858f5c2eedf68565c0d
SHA256 84800c55f773d5d6913e344e41baba58cf07cec2e6c7114ca3bf48e8f355419f
SHA512 f3ce2def6e2e8a1d2c07f627e3c437a1bba0b2e456020a84121346472be3d28e0fc69623bd408f35a2c639c83dd2787f998dedfe42b7625dc71500824b035fec

C:\Windows\SysWOW64\directx\websetup\Nov2008_d3dx9_40_x86.cab

MD5 75556d89fdd442967a23993c9111d997
SHA1 003de53653c0cc84f8c3d617d1f76fb475f1a7cb
SHA256 863ac3438f57158d4f53900c6924bfdc132ab43a5af57d4658e65842836b4fa1
SHA512 6086114500dbbf4db9d0a9c3f72732995bb9a3ab5c135ead53143749b95651b37b64be7a52ca09388de90216fd00486fdfcfbc87d42d77fac469f82b5290e06d

C:\Windows\SysWOW64\directx\websetup\Nov2008_d3dx10_40_x86.cab

MD5 5dfeb46e60795266da03f2d0a67e7acd
SHA1 a77758873e5544e8ad22acf469c4a0fd0c944a88
SHA256 ec52b075a3e9c7fe468b317e0ff977964b1003d560065128741f4392bf47c49a
SHA512 6ec058811ac017be3cd3a46559cd73126666f41b0fa58d92c1168cf2a2e0e2357b19f65531c786ec81a438975dbece440c5e7b6c653afa5428ce6c444179af6c

C:\Windows\SysWOW64\directx\websetup\Mar2009_d3dx9_41_x86.cab

MD5 901567428d8c82756d7bf5a406441bd7
SHA1 6e3c22147f3da77ac8f20d615ca32b5ef2a0ed28
SHA256 32356344aeddf709c9d5302d8f3fcc1ff1be2e82d8d17833a2086400af248794
SHA512 6fd4c429e32480bdff4e58ba8bc0d28fe97c9ff5ef1fabbb856230efa669246a354f99b723e7483d548b74c121ac8ba9cba2b5bc3c18f35ee828302d392cf6ed

C:\Windows\SysWOW64\directx\websetup\Mar2009_d3dx10_41_x86.cab

MD5 45e83cba5710a1de7d3990a288122e85
SHA1 23c4bfbddcfb11acb7c47c409825f039af7eb908
SHA256 b7da29103cdf374de0c09713cb985035eac45fb8b394d3b8157d8a7562a89899
SHA512 8c56d376d349aa00948e1f3c6168dade76ac9a26ade1aac5a385dcf0253602f5a2973483d083425195db6ad7717494fd3cf674f5549774ac608cefa2a88bf0a7

C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx9_42_x86.cab

MD5 9bc8213933598d050827d20a4573486c
SHA1 e6f9ba62756a00c53746419dea221881aeb336cf
SHA256 9c96b6fc4df5c0efca9f0d653976772b2b964243214f99066e4ca4aa6df791dd
SHA512 a1920d042963cdda41df44044de5b94b4cee6efa102f633214e384918d93d2d6a31eb388bdbd00c7e9c199281e3b71caa5242e9a42e7f0be27edf90a3cf6890c

C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx10_42_x86.cab

MD5 f264af5a36b889b4f17eb4d4f9680b4f
SHA1 1df087ea99d321ec96d0d2f1c66bee94883d6f08
SHA256 bb46189eb8cb7769eb7be00cfbc35902072fa9408313ef53f423e5ae5c728f61
SHA512 73ae1cf3cafba148f4e5b4d8ac12a7aa41f6ecac86c139c6a7714f90f3dc61c444dc152a3ad3c2ca800c1a1f4955a2b508735f8490666b57d1420fb7a7bfc269

C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx11_42_x86.cab

MD5 dd47f1e6dc19405f467dd41924267ad0
SHA1 85636ee0c4af61c44d0b4634d8a25476cf203ae9
SHA256 39ff69ba9161d376c035d31023d2fdeecb9148a2439abe3afd8f608f7e05e09b
SHA512 f77c4cef5cb7e927948f75c23a190e73d6c75b4f55915859046533a10aa3c5abac77d8bef71a79368c499c85009213e542094b85b94b69e62aa66b60616777c3

C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dcsx_42_x86.cab

MD5 73ba11ce0e936726fc9fcb882f8b91ea
SHA1 4a4babe3ac751e60ae6b5b0d69c93fa53d7fcd21
SHA256 a9a704b73531d6bf59a421ab5c046c19a16d2b0b07f09816dbe9da4550a24b17
SHA512 9a198eb93d5623651d2981a277eab4c345c08161254d0127d90c97344450ac1a7fd5c8ac840048a43a347e3296b286b646ea0fba88f0c7bce1ceed1484112d56

C:\Windows\SysWOW64\directx\websetup\Aug2009_D3DCompiler_42_x86.cab

MD5 87bdae64fd47a75f867a290ec7b8a4b7
SHA1 dd9e69e1815e8bc161e8eb89a0f2a296074bb95d
SHA256 6bd32337826f5a5141fc06391919a249e984150905c2546dc8bfc33d41a24e82
SHA512 c8f7a490722741df4e03823880c6d623ff16ab648a40c1b1c8f7bf26c92499eb34c4596bf239337cd23a57974757958ad9a30d42a4141dc0e7522f998ed3893a

C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dx9_43_x86.cab

MD5 bf124b64fc3774f61d30de0a405f0c6c
SHA1 2f8a8babfa4e51555fcf125e8373d9c5f7f7434a
SHA256 457c5ce48eaa0fe551b46dffc1e4dca985d261686d8d4e6bced533ee1f682fce
SHA512 935922ce74bd399e8358693562f86c9b4b6308a6e33586a5dd61924f8b6b2cfd6cb2e472fd082b9ea32c0abb9a799a0ba9103b4c316342f8072a7a3782c2116c

C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dx10_43_x86.cab

MD5 591a61bd06c73c70f93dac5af2d8e924
SHA1 c9d36ac5e2acac31a7413d22ed1c09c71cc96ffb
SHA256 f0bc06ceb484d97cf01526f9223df7b4357d166c4391869f2e7d514dc1fe769b
SHA512 3e2e3318a700a6ed82a21018403ca99728c8a56b7df81f99a5d705b586cee1141586dbf19a01ef1f1a72ddc8f45ddb51ba5769ae4634b02233ef1ac4e0fba5d4

C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dx11_43_x86.cab

MD5 061bba3836b3ffcbb01b150467bbe951
SHA1 00d8fbcd4068b3199d3d393bb4b86bf82985480d
SHA256 b80db68cd82caf8bedaee62808171b20c546a76499c3ad53014e3bd2fbd2918d
SHA512 aec8327e1ccc0b33b3e32d66a5ee25c4b70a227b708d10f61ebad2d998f3be68145fa85c50baa16a21ee766b336b1432fbec02c75d698793092015c832b6fc26

C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dcsx_43_x86.cab

MD5 e34c0cf1bd5a68c80bdc709a452eb322
SHA1 4dd4553ec7e2e42d51a716b1f4cb58588bcaa164
SHA256 799b517227812252481c9c9b22cf16ff185ffc20b9273612c8a37153b53aad93
SHA512 3488a52f6fd3681b10624546b923368245f969330d4909e91c5b58f159cd24b258a8a2274d62243ca5ca9f1fb40f9f248b3bd92283f775dd24baf68ecc5fd03d

C:\Windows\SysWOW64\directx\websetup\Jun2010_D3DCompiler_43_x86.cab

MD5 e7dfa140cb0ae502048ecdf1e42360e6
SHA1 4db08318f78f076fcc6ff29737b3d6d676f59c54
SHA256 293ced557ad732abd2737333df39b08216f31601d7ab65b743fe51b4efb8b6f0
SHA512 39b69a5cc4a50de72d031c41879ed7644b577a9e3e3b44bfecc61d5312c7c32c964dc2cd37db711f7e486f444ca77fe732c642f3e494e6da1bc1cf774d9ef75c

C:\Windows\SysWOW64\directx\websetup\Feb2005_d3dx9_24_x64.cab

MD5 dca673a8f9f834f9370862d1c97fd9e7
SHA1 1a0cf0fdda2c9e8abdf5cc19fcdbeaf1bc1639e7
SHA256 be3de63f136a2b41d3229e477ce2cd7f67ded031b4b370e640c39b80368238cf
SHA512 255270bdbc1dcd6a3213d8f0da2e48c6445b0141c5148edd1dabc9ca4643667651694b68013412a4f2ec90ccd60a757f64a9a76e2576c4fcb056dde726a6f67b

C:\Windows\SysWOW64\directx\websetup\Apr2005_d3dx9_25_x64.cab

MD5 e961a77647e7fc2597a68ff572f730e1
SHA1 976d1cde1ec28a4992e1cbc345637447115f14c8
SHA256 a239e99d02fbfc9d30d5b705aa743fc070386faea1a66b3d67099ab446568a12
SHA512 cf72ae18e99942d959bce58678f544a10c98802d919adc30737389d6cc0d492f8d7902e0e2cd04501fe6429b96c782649658d2d35c879a202c23e88570a15b94

C:\Windows\SysWOW64\directx\websetup\Jun2005_d3dx9_26_x64.cab

MD5 05103e47f259fa22d27c871e4cdee7d9
SHA1 502fa5d15fe56dcf64431bb7437e723137284899
SHA256 794e23d8b08f88bb0d339825b3628c24cd0297195657f9871ee6324786fada36
SHA512 180e0abbd97b6781c6639c6ab2a2355400b8e32784a8469c3cbedea23b121cac5ba17f6aa509610d0a1e5830735455690f574054d6224a6a5d2ae70edb601835

C:\Windows\SysWOW64\directx\websetup\Aug2005_d3dx9_27_x64.cab

MD5 a9f4068650df203cee34e2ca39038618
SHA1 cd8caeceecd01dac35b198b42725cbeb5b7965a7
SHA256 3500c1a7cfb5594521338d1c29946d1e4ffa44d5b6bc6cf347c5bbbde18e94dc
SHA512 c92fb461b53051a22fb480ba5b6bf2706614ae93be055b00280be4dace19c1f2a9327106a71851b0e42f39e4172ea3a027f7ce878bcbcb252b723eea49dbcf1b

C:\Windows\SysWOW64\directx\websetup\Dec2005_d3dx9_28_x64.cab

MD5 d964ed45ff274da2c8f48e2cbd00aa9f
SHA1 5c2e5607065238fb24a0b65ddfc904406615e2a9
SHA256 daf10a54089755f9a8aceff0c7695f1aa42d35e3179da5b9bb91e409036ae547
SHA512 a74e2dd4bfb037e5f5a1deaa86f9c4a354f023b62e1f2075509fb707eee1725b1136441d1059bd3929af1a44f6372dabef9cd15d386a77b2b22a532b74cf16aa

C:\Windows\SysWOW64\directx\websetup\Feb2006_d3dx9_29_x64.cab

MD5 33618039dac4e97c813e5bc1a499e6c6
SHA1 c792b9d0134df698476c2fa4179de6bce8aa583b
SHA256 a5ffaf9d58da5d79402c4dc93e79960f971d2701d4651bb33d18925af641f11d
SHA512 35b490903721ca5faef73815d4f9c6f52efab1fe82a4fdbd7566a1b028525afd29a72dc68d4b7d219cfa5cb33fec241d6b2784f15f9795d368dc356b3df30b5d

C:\Windows\SysWOW64\directx\websetup\Feb2006_xact_x86.cab

MD5 fec720c0c15c43569ea9fab7ceafea95
SHA1 c65235b40865725a00675f1bc013ba8b77307669
SHA256 6456fc26622f3a72b9449ed0e61874cf1adba23cccbfcda1324f033fe0788fda
SHA512 8edee940930e3c610e709e2c6348abab479628bfac71a0c507f46af8d80f1f0c6e31c7c44af5f884668ce472b281ff18cb44a97ab68232d455b7bc8f89a75268

C:\Windows\SysWOW64\directx\websetup\Feb2006_xact_x64.cab

MD5 582102046d298e7b439c819895f6061d
SHA1 09900f44668350118589f18c693b131d7c1f9238
SHA256 c91a6380c65853e41e2f9593b954f3b5af49bcc894476d8eb78cd9f8b6dd7da4
SHA512 8aabbcbc88489ff8828d532be5c1bc0d33d7960f41c7b38348aae73ba4777999f4358466d061ddd8291dbd434e7741ee2c3215a10f8287be36209e0842c4eb2d

C:\Windows\SysWOW64\directx\websetup\Apr2006_d3dx9_30_x64.cab

MD5 5ec6f520f3afcc6494ab0d43b690ebd4
SHA1 2359e14cb6da44aa89a3815e905d6ffd81960d02
SHA256 27d99894e2a68601f46487c9999723dc83bcc9c6f903f2e2622d05668035b015
SHA512 9db4a9581edae2681491d5e13228642737d0d186e0e1672b063482b2e699274acfcb81dfa9631902e93e009adc0bbd9447061830c8ce2fead6743e2d45aaed60

C:\Windows\SysWOW64\directx\websetup\Apr2006_xact_x86.cab

MD5 a2132a62f9ab0bddc3207166dc014581
SHA1 53b19ac3e6c6752011ba641ee3c409ed10c95dd9
SHA256 52c71c89ccc22fed3d7c985a22c464451af34b63b3a26a3799bc25d881221ebc
SHA512 76fabd7f440b6f9b409b0b2635ead4ef332563a9bed738a722a7c6b9a077094154bf735caf02c67191b08ab0a19fc03e05ef3d984f6e34dcf3bd587a05d2f424

C:\Windows\SysWOW64\directx\websetup\Apr2006_xact_x64.cab

MD5 6ca70cdb3fa575506ba4035e9a50d8e4
SHA1 a2a20f5f95a1ab293a188a55bf593a82ea0dcb7f
SHA256 f82b2043b470bf0e711c3d05d758a379920340212437917b5d98af0c14e7bfe0
SHA512 a453ced526332ace37861a0a862fff3710ef74ed57965f28dd279f526a2f33c390e82fd2c49bee75476e5b4c349c40a71eee49edac720236a16780dfd700fe62

C:\Windows\SysWOW64\directx\websetup\Jun2006_xact_x86.cab

MD5 cfcca19d60ec3d822ed5ec8bbadec941
SHA1 ab0e87182877991810af48f1478906c1e671829e
SHA256 23495764aba10ff35cf9d23aeeffdf38716219d8a155ae29162f01f7fe6a30cf
SHA512 2acaea2de2d77bbe8206e8309d48a4cba432d72fb9bde2576bce7a31ee29fdcb0d44c2b996e8dc21a31bcdb03c806e11ad53b74d9c4c972436d5202825900c01

C:\Windows\SysWOW64\directx\websetup\Jun2006_xact_x64.cab

MD5 d404cced69740a65a3051766a37d0885
SHA1 288818f41da8ab694c846961294ee03d52aea90d
SHA256 5163afa067fe2f076ab428dd368ba0a2cf6470457ba528a35e97be40737a03c0
SHA512 87998e67b359c2a0d4f05dc102f6c4db4f260903385b7558a2c1a71436001d5b18f42b984e6b279a8197243593c385d41f51de630fa31c5ca5140f6970f87657

C:\Windows\SysWOW64\directx\websetup\Aug2006_xact_x86.cab

MD5 e16f0875713956a6f9cd8c5acad36e51
SHA1 984b821eaef3b549ce0b12f72a405a93e51a9dfe
SHA256 31b16f93be7f5f9bb78e9ece6da96565d50a0bc1f66b206b7a21c601a308dc53
SHA512 dd626d5552eaf0c1dbd32bc4dd84811bace74c6350eddac692d3c3e8c393f4a19c26e8f2932f54a14648448912e6b87c796c6eeb6da9b2c55ec4565983b76189

C:\Windows\SysWOW64\directx\websetup\Aug2006_xact_x64.cab

MD5 4ba26f9dccaebd7be849a076ec82d6ff
SHA1 42fb0d0089d8bc92735820f475968f59af4e4365
SHA256 13e7eb934a7596e7c3b7d8a0962e68da841d9c73d154825dc982ff6d05cff221
SHA512 4e4fd8a31ac3c2f8cc66d434103c0097ab3fbe2c2e8140aae2f95fc4ac1927aae9cdce8730dd7c4dad785d9a653d90b0f914b258bb5695c68ca93f605ac82dd4

C:\Windows\SysWOW64\directx\websetup\Oct2006_d3dx9_31_x64.cab

MD5 edba7bc2a22f3186420c271b7291dca3
SHA1 65483db4269be348528fd205239b811d775421ca
SHA256 4f5cffa56fd44f7775f12fc511a1e3f030c05ac78484f6866b12b82979067c22
SHA512 90a9fdad3d7f933da8c3731e42d262034907d8088b85d7100be46c57def02b436c31eb9ff144b9d67fd931f92a1677ec0cd762d9aaf066bb026f139499ba3a66

C:\Windows\SysWOW64\directx\websetup\Oct2006_xact_x86.cab

MD5 4fd2b859952c008de0542053b15bf0d1
SHA1 0800cec84b51fc6362c871fab87a09db5c4ad6d4
SHA256 f6b6ebc9c239c5263aafaa63fd691da5aa715e9c794d5fd663e86559d5c6ae56
SHA512 d656c3bfe4593ea9084a5d09f0173c8f6b7d6229fc7e3f6757ac03089cfa94a7337bbef0456785b79d777b976f5a8259056d2ddcfe0f74d78c304a02bcee0ad8

C:\Windows\SysWOW64\directx\websetup\Oct2006_xact_x64.cab

MD5 cc568d26b5b4cda021d528cf75b21699
SHA1 dd47a33950c9e3a88defcaa7ea331fb1f1bbab97
SHA256 662d4e5d005cdba02fabb0d7a68a7b48ecafdebe21718d892833d5c482e5add7
SHA512 24b53bbd82dec594d9909352d1f2afe69b6f082db99aab3385826c4e8d22f5c075f3c5a24c8104dbeef2d894980319af141c65d768a51936c75092a846f3c8aa

C:\Windows\SysWOW64\directx\websetup\Dec2006_d3dx9_32_x64.cab

MD5 2290064562f2d6d197765f4edebc5bf0
SHA1 70c2e3c3eb521ba4c46c428d57166631f86512c8
SHA256 da1ce01be39f41f967282849715e8310dc1887bfeb92c4e0166d2c31f00647f7
SHA512 b25a517de79668e3abd88acde835df4a0d69e70ce0e001db31d5debcd812bce46f4ada5e07c036c7bbe88d6dfc9f6531b2198f03fc27fa46070c790b45955dec

C:\Windows\SysWOW64\directx\websetup\Dec2006_xact_x86.cab

MD5 082b7d69f96799aa2ab1a8ea1fa2ab88
SHA1 75c7032b749259977c947a5103f9a4b92c2025de
SHA256 b98e55c654b9ee6f6d040665d932bea7a1299c56cc9996eea900ac4f5649c7d3
SHA512 57c96a4c99ab9a7d33a8cc81a3b4e2ab58fe3a2fbc7f79ad688c7d0257d281c662d4ce0737f68c00d15f715bc6177d2ff9cc32a69cfb77216265fa56ff79dd8a

C:\Windows\SysWOW64\directx\websetup\Dec2006_xact_x64.cab

MD5 f34ffbdb67dcf84092c9d321e3343d3f
SHA1 52fafa930c3464e070e1e4692d4600b12678e9d7
SHA256 bdaf9c41f83e65de2b73aaca2002541d48c65f551cfa0578b3259d3bfca54ead
SHA512 a78d32ee71f5b4214e9b8b95fb8bdd4b629d34529fad7a494219175ce5cc129a3f5c500d426afe0de6a680977fb86abf0b77be353d8d19d6ed1a11c421c6e757

C:\Windows\SysWOW64\directx\websetup\Feb2007_xact_x86.cab

MD5 a09f7eab35816d682e7432dbb36b047d
SHA1 db67b9434abaa8e7f166956a1c8d01f536162c21
SHA256 0e3655490667ddf17150aec089889268bdd7f1e8367d2bed6f3eb68a5ff28288
SHA512 fb1cdbfb3cdd60783d1c8696ea6efb746331880c79aa74052808ca09092cf1a2336bf784104d16203740998129b718dc0ad4a632e4031e85ccf340c593f05e57

C:\Windows\SysWOW64\directx\websetup\Feb2007_xact_x64.cab

MD5 cc622a75240ca96fa8f28bd984bed5bc
SHA1 424f216c5c0e02ae654612eaeb04900c9dafbc61
SHA256 3454d5101716a5c17bcdee8632668d981f99e8558d8d05e20a33ed718ed8c2ac
SHA512 eab36cd6bc3ae6f67d89996785f9c7d51e140bfb839a866b4e4ffa7809846df861d30d1fce2e1a498e8403deca5ccbc50b8f37f4c1b4ad3cd3a63b150c49ecef

C:\Windows\SysWOW64\directx\websetup\Apr2007_d3dx9_33_x64.cab

MD5 f33c12f535dc4121e07938629bc6f5b2
SHA1 6b93fbe3d419670a71813e087d289b77e58e482b
SHA256 3ca2acf6b952d6438b91e540f39abcb93ee12e340ba1302f7406f01568e5cf91
SHA512 df1753ab43d5b7fde2a5eb65a77b37ba28599bc0683a4306f101c75f82b0f1a2c8ddf5741981073cc5df26e9ea38c9a495ed0fb1689d2e7fc7d6f693759c822a

C:\Windows\SysWOW64\directx\websetup\Apr2007_d3dx10_33_x64.cab

MD5 906318e8c444daaaea30550d5024f235
SHA1 3f3dccf0a8a1cbf6f603be1da02e1e2bf89d24fc
SHA256 1a37565c5b868b6a5c67f3e24b8af547506799444cb77c7086e7b0cec852f239
SHA512 0a7aed2f49ea3dcbca1607fc46f166a44bc9d08589db05051b422c8ad84adf322352f71333367c612f9579b4aacb4cd6b82489ddf168ad67fb4d42ab52999c88

C:\Windows\SysWOW64\directx\websetup\Apr2007_xact_x86.cab

MD5 8922189c0a46d26b2c52c65515d87180
SHA1 27830c01afb15158186a045b7224ef33793ad211
SHA256 39f970bf4cc42e9325ada84a603c6c691bf94921385a52325f402f7432ace697
SHA512 53d51caa2cf448681a709f2b9737ef75dea4e9a46e2b29e6588b13e941671643a64d3597649aa2ae0b1fe9e5d591ed00bad9ff3344ca62851e03a68279142cab

C:\Windows\SysWOW64\directx\websetup\Apr2007_xact_x64.cab

MD5 fbb6aa140d5d0aa28a7561ea15d69e72
SHA1 26804276edbb1ee23b96690b40a01bb9c723f7da
SHA256 7781f0494648989583d4ac7695b9c5310eea76b6a102e15ea0fc7376250e4584
SHA512 08d6f2ef3346229f71e9fd6904d99bcb69f0a03cbd2d428f0a3ba58836694b801446165814aee120b4c5eb7046184b08fb49248f5e1941579b9caeaf9fba1b1a

C:\Windows\SysWOW64\directx\websetup\Jun2007_d3dx9_34_x64.cab

MD5 8dbaa3047397ee4cfca2efffcc2dfbd1
SHA1 d88fad72d7eaf38b8469b2b8492311c39c42be04
SHA256 fe4b15931e048c97cbbc26f753093e7d41eccf174402542631284f8bdb9ee692
SHA512 1ce01bf0bd4c0d832d95b13e958da6cb69c0d3949b128fcf40ec59ecc0ad8989b27c91eac28cd98777d57dfeb811cc1077fdb87348a11b6370d806771d7e742d

C:\Windows\SysWOW64\directx\websetup\Jun2007_d3dx10_34_x64.cab

MD5 1ab35d11274d1adbd316b19c44b9ae41
SHA1 14165ec367ce179588c8a5806fc968fdb49b4aca
SHA256 02ed1b5a850edb52ec174de177e91842edc7c5f4c06ceda5b16f3427dbcd4c99
SHA512 71c8fac7c95211d323c4fb6a02916e7d43ee399bbe0f1d983b5ac210f5039b23355f40b36f023f3c36e19787e2871a60cc389e51d6327652cd84d9e3b93d5a4d

C:\Windows\SysWOW64\directx\websetup\Jun2007_xact_x86.cab

MD5 001cff513a31ee082133e7ba3b0d71a2
SHA1 4517610a25239a16c26ca9890e1f0e52dda3781a
SHA256 245b0c554cbe2677939a70e5c4c6666b1b43d10d47980223f8cdeadb2d0eb76b
SHA512 7119f6ca16fe6d968310f34828f30d8144531b89583cfd529056d2e31d5164fc65136fa9015b69849f724ec641a9291ac644c91cc3fa8ebdd4daf9cf5a665a7f

C:\Windows\SysWOW64\directx\websetup\Jun2007_xact_x64.cab

MD5 b9648d12df695290be0479c1e78894c7
SHA1 932627d40a83411f9f4006792adeeb4c3a74cf37
SHA256 3f2ca0accef2594fb014296f4111b7fbb59729c5d928b22f7283c392494fee7c
SHA512 240b622b02c5fa3d036043ecbe5bf29fee447147af36e795bfae83fafa35934fc22a3e9cc2d846bd880d7808897355e16696c555146ee69864472d4600ad25b6

C:\Windows\SysWOW64\directx\websetup\Aug2007_d3dx9_35_x64.cab

MD5 ddfef236e7d70471aaa1741a8abfb735
SHA1 5f7acde3116a6d4363410d984b9c8919674ec9c9
SHA256 28b6ff092de67717c47649c87e7114c34325edda199ce2943403c4f3f4c3e0b2
SHA512 00990f7e6f266c67385813b0ba399a2a2c970dcfaaeb7fab183e2ec0cc50613cb0ad57200bcdc731900d8f7e609c95e8ff9cddaa52bce2ccedbcf4e9f74008ce

C:\Windows\SysWOW64\directx\websetup\Aug2007_d3dx10_35_x64.cab

MD5 8f715d741b7401547a263fd4af02e7ba
SHA1 39c031174008a0e7bd603a5670f578c0cc6443dd
SHA256 c97275f60e2f25732b3b264b8bdf9cfdaa39d6e5b189c08fab5cd7a04fae9bf7
SHA512 27cdb534361c1f6205585e1baabd83b03f6715d29afb61351f660bed1ccd1ef035c6541ad7e4c551bfdd2aa8fe77a903d23eb27618ed369c37a369d373467c8c

C:\Windows\SysWOW64\directx\websetup\Aug2007_xact_x86.cab

MD5 12fb614027a3f3ca6b510bdbbc3cac81
SHA1 aeb8241e273e12d984f3551b2e9ef978153a6ff8
SHA256 c35652b18c6a2d108812f415ddd435ce0eef5489e37142300ba67d66986ef43c
SHA512 f983f518ac3573a6425ffa0ca049ecbc9d4b857bc473767ce2c67fe4118731ecf902ae739b4d817288bf6cccaf5d9e90ed035bbe23fdf7026d16b80c08c441b8

C:\Windows\SysWOW64\directx\websetup\Aug2007_xact_x64.cab

MD5 527e5861d4999e7b410f5bda36cd6d7f
SHA1 403303e3c349a283c275c673261b600b3589095e
SHA256 e8ef9c88a6b958916c1959d1c6c7f1666d22e0f70ce8a8c83183f49ed71f6287
SHA512 38b1d719a477990eb5033cf870b070103d13fedac7bd99e61d54e7afe27d3a1c73a250981524c9fe9a29722efe01a033531ddc97fd3e550d4ba5df28903c5bf9

C:\Windows\SysWOW64\directx\websetup\Nov2007_d3dx9_36_x64.cab

MD5 a24b26f20ffd17ff3725a6dac823749d
SHA1 e0a9f241a083a58bd62046b0fe50afe73561c901
SHA256 23ad953d03c9da720002834eddabe71bd649dc9cd31abc7a09a8e77a948414c5
SHA512 5fdc1571574ae2ba50bcaa90e2cfe2dfb30a66574b6dad682c5b1b68c0ce1c8378ca8a766485968ad20432672b42a030a6edf6275b3f78daef055c45f37d0d3b

C:\Windows\SysWOW64\directx\websetup\Nov2007_d3dx10_36_x64.cab

MD5 9ad15681fa177c198ed2c1780f92262d
SHA1 5391c59fc75cdb5426f71e09b67384b2b9fea98f
SHA256 bee9bec21771bc5365847be692e785ea619d625df629981a167429df6f0cc9cc
SHA512 eca7104fa4e306326a92c1967d339d32b9e9ba1e42965fca820847f9f9b085d1ed30867db10129766f9dcc9b6320d4bd43f05103317e53b79f1355d1f1d69f05

C:\Windows\SysWOW64\directx\websetup\Nov2007_x3daudio_x86.cab

MD5 bb6131295182fe609e802e39f7b3af9f
SHA1 925dc4dbd64492f4d013063ed6562427269668dd
SHA256 90f472ed8b0beeea5db1b462da44577160337c767b27ce70ed58d68d0a03e7a8
SHA512 0b61e722b2ccbcf8de5d56244d9bcadf5d97c43da0ef01363f1f0d79f686b70c74d3ea5d6482ee28d2620c647cd690f5fd807e2f5b4328044aea5bdb6372d04d

C:\Windows\SysWOW64\directx\websetup\Nov2007_x3daudio_x64.cab

MD5 523deb17de80955969d860376fc0768b
SHA1 8964d237c360208e42d1a879e541dc710f1aab05
SHA256 122e09bbf46b3c3edae6c28ad060482dac24d4331c682fe0231cc5b6fb53c5e8
SHA512 c46522b916bd840478c06256305c187f950e525f7780a1763589c3ead8cb425a245944549accd58cb626769d368b03a047cc3b1fb38cd2ec4c4bcfc5668a2b7e

C:\Windows\SysWOW64\directx\websetup\Nov2007_xact_x86.cab

MD5 b3eb2dbd7a3a366ef2a2e1efe54a4e4e
SHA1 7edfde36ce6f8904b86610ead23aecffa0a21c63
SHA256 6dcb9461eab4aceb999784ecd74d985b3543899542ffd66203929f409c70c8d8
SHA512 b69cdcc7a2519a48dc13f60bde5dd0dd84af63386b1d98a507103492ad8a9ae5bbfda78761ce15db9abe5f201d509fda8013f3489aaf21db85cdd25dbcc29cb9

C:\Windows\SysWOW64\directx\websetup\Nov2007_xact_x64.cab

MD5 3d098aef8ad101782fb2187d7666ec64
SHA1 e6565c1c8cc68a0013490be6b3d6819dfdad94b6
SHA256 9fa6f4116a4eb1e72f75cbdcb2e34198a243d169276d4f493ecb8a9dff3722d4
SHA512 eed7ad526c5dba959e5d5b963154ccd87c4177a286e2f59a59ccbc7226e7a738ec89ee9d859113b72eb5c15caad444929c456beafbe125853976cc9e1f4936f0

C:\Windows\SysWOW64\directx\websetup\Mar2008_d3dx9_37_x64.cab

MD5 600b24bef0749c2fbf406e0173478843
SHA1 d373147cc4ff0cf42d084edd75af18f1d0a347aa
SHA256 7ef2e2a5d4843f58b3eaca34f5a9c63e9abfa726a3244b762a6de70bb9a95123
SHA512 e156ee9e70a1b2be4b2d4b538b6f6ad4f4d877bb0d31297464840e3eabdb9239d73e54a9ede97c4eda688d7afa8483e271e31fdf9c658b240aa9510f161ab19a

C:\Windows\SysWOW64\directx\websetup\Mar2008_d3dx10_37_x64.cab

MD5 756fe364f6a8bd2e70ecbbe895e134d0
SHA1 eaf82f86086510c0522b5dca8199110874b11b37
SHA256 6aff708a5bc25b4ecee972f930293324f86bc45dc97d687dab782108606c5902
SHA512 3d1c0a3ca8da93a85a459b252ca9ecd9177a450dc1a8f73add303a601ec64285fedd2dd97ae0a2c72661dc579e03fdd63ae6df900f645975885ab7a178e47352

C:\Windows\SysWOW64\directx\websetup\Mar2008_x3daudio_x86.cab

MD5 5262e69c5834aa27a833c1e589cc2574
SHA1 757bb50815568a7aac35c1d85adce68466fa39b0
SHA256 1ababdfd6ca26f1c56f618f8c9f90dbc063d964bfa31caa787b0a8a1bee519be
SHA512 82f75f1fe7524e32514eff95ff7013ee1a095085937c1d31c7209c6403b6de9bf5ff0391fdb4bd3ef3d2cfbd941924732ea2b9d30055d90e04405abc426dde95

C:\Windows\SysWOW64\directx\websetup\Mar2008_x3daudio_x64.cab

MD5 bdc5ed445942d7384d946acaf03363c0
SHA1 b7e021195bc4574a5676ad57eeeade1835299dfd
SHA256 312c2dfd80126d25a1cfab0fadf5c99bf1f81b404e121afec908f5b5d04529a2
SHA512 e6f792d767f5f4d3fbb08ba555d6aac3a8a873c11711eaf8936c738a9205fbe6ef7e64a9b56c58fd3f858bb7c20e595afc2f3c9d9010e101c2eca737d1676895

C:\Windows\SysWOW64\directx\websetup\Mar2008_xact_x86.cab

MD5 486b18945e3f5ef496727202eb8e1473
SHA1 d1741959717a62b3981542b3a9d75f58d5aee637
SHA256 d2140d9b4420b022d6e6135a67029033b5b0ec083893eceadd1007eee41ef4cd
SHA512 e262c6b5bea9c60e07985eaa5f84fd7d8191a17739dab8985fbe60116352cffc06f05f309c6aff00a596d8a0b61982e86ebe26097554f1a46b337d155ee437d7

C:\Windows\SysWOW64\directx\websetup\Mar2008_xact_x64.cab

MD5 3fc4683385ca18bb91a64aabd6287ca5
SHA1 1dd91f7af09a1d6ed2d205bc385b526d3400336f
SHA256 b6f81e365b7fc224f66bd6560e5040dabc9370b3f21f9bd85728349200dd7632
SHA512 4c6be51c33444d62967ac4dcd3b0ae127963ec831f4c618cab2989726130fd5a50d3928e1e66111d000f14b8fd3882aca1b0725ec6025359b30017cbc5380afa

C:\Windows\SysWOW64\directx\websetup\Mar2008_xaudio_x86.cab

MD5 dc71ac34a07bad6d68fc0520a5b0fb2d
SHA1 fc74844b5bc6c504568fff83ff629e802b859f39
SHA256 bce9c695d24972eacef357da0f83ab9d9cce2ee9a46176ffffad3a0abd64f48f
SHA512 15b9e540e0b194e2b6a66a41a143184c4ec26c8124b6d7827cea43d7bd1f0bceb33c5617522fa5787ad28423a48f4e735c4e782b12abad53defd1f9ef0ef9c11

C:\Windows\SysWOW64\directx\websetup\Mar2008_xaudio_x64.cab

MD5 3b2c203ed13d8901ab7c27616da80b6e
SHA1 f4c659eccd07abd1429ccb0a403c6fa80e821631
SHA256 e9a2e00f9c96bd5c91c4ae069c1c2ef6451e0207e8c18074f14d0d0ac08301fa
SHA512 967125b6ee2e3c4ca7c80037ca0a9d4d766ebb333ed68832ba1c7e321cb6ccdaa6ccc6242b01f61c779515e34185c63d71e99a7a2cd267f289967413c3606aad

C:\Windows\SysWOW64\directx\websetup\Jun2008_d3dx9_38_x64.cab

MD5 93e07225a9cdcd077af0d83b232da2a3
SHA1 8ebc7e6376203c68a2e3cc82dda75b2e7b285aa9
SHA256 f33a6b6ef55bd4e75a2e67d269b917fa6113f2b1c9b745b19d3ce6a6365d1cfc
SHA512 6cc39c9eaee38a9ae8755ebe6091bd60ce780332a8cf70934f8b08bc920a148fe8ba78967f2290609f07ab992880ffd64c55b6243fe3b0d46dac56a12aff5367

C:\Windows\SysWOW64\directx\websetup\Jun2008_d3dx10_38_x64.cab

MD5 ae0baabeaa94d668f9f1948442fe9b79
SHA1 34dd1c1ef542cceaf8202f41761c0c76cd9611f0
SHA256 a75a8109e3b4ce2a805555577d45853bc2e67451ba287b45aa3ce4ca14ce87b7
SHA512 da4fbcad45a08d8c691324aed44c227e6b6a22b2578804806f492bb7c1644a8f9a8aa7540d6f35c0fbd243448a79e56bec2e7e2b26bda40f637242f1207c789f

C:\Windows\SysWOW64\directx\websetup\Jun2008_x3daudio_x86.cab

MD5 dbc81af3e6112058cb652136fc9e99b4
SHA1 ccdf0a69cbf4ceb933dbbbc15fd96df52931f4f6
SHA256 75f048bc8261c1877126a82d3e7983f22f830596eefeaffb799947d9a13afd51
SHA512 879f04a0c66b76aceece022397f87e52f15be73bbe479fe03f01163746e21f6b5178091f30a5118b32f116a4ed27a99c1baee5ea5da9d2e277b6f534daa4b841

C:\Windows\SysWOW64\directx\websetup\Jun2008_x3daudio_x64.cab

MD5 8f47579336d3e8bdffa6ec7efe59ba29
SHA1 4379c4f9c5425668abbbdc965f8bd9df0b7b0855
SHA256 7363590b33717a0c2e07f3b2dceb3689a526b255f29c84092022a37bf6e9b9c1
SHA512 257e5b70b727b44bacc49fe30d73d4cfe0637bde62ebae58218bcd24f4d97a3f9d30a938b9a8a6e0479b3f6b0410bf8093e7d74752bb1df73c1906dac809ccce

C:\Windows\SysWOW64\directx\websetup\Jun2008_xact_x86.cab

MD5 54640e3a5216776937ee5f026ebd22f4
SHA1 bcf0ea32672f6ddc01bc4e4e23fc67301769f42a
SHA256 fa86c9d133cc5ca499b1f57d52a6024cae3f5605ff0e5bc466f07e3f7bac121c
SHA512 6b4fb153aec1f860fa57462a70937de3a94d61164c263850ef883e72569871913df5390bbd92a6b2574ffed5e8f39e434e435f16a0ef232121eeff3e71db0049

C:\Windows\SysWOW64\directx\websetup\Jun2008_xact_x64.cab

MD5 a3ecdff8018bd0ad0d1a34860e4cda6e
SHA1 36db6dd7d33e4ead7fb2629205b8c6717a62dbce
SHA256 09e15921b2a8204235c7128b804f26e72599f05f55005bd29fdb05da8c812460
SHA512 01da2b3ee535dfb0648fe340f3fb34fe98dfa7d5e0b87d5041ee8032581bf5bc0cb03678dd19b9faed3e0b9dacc36819cedc705fa5f093f8244e422ebf30d9c4

C:\Windows\SysWOW64\directx\websetup\Jun2008_xaudio_x86.cab

MD5 50de676bbab28205c1d045c35eadc944
SHA1 ff963262b0d5d73e27a827116eed38ee1e182258
SHA256 6d128830655e6cc400c1677ad91341e7b69f3d3f5acf32bc44ed2a32b5e776eb
SHA512 5f544aa2c671a5ce3b6431059ba042b00e973920b1e77a57b42b387db493d03e2a8ef1bde824d7752646eda20e7ac3e17b5729e391a2e3e20ef953c65b7542e5

C:\Windows\SysWOW64\directx\websetup\Jun2008_xaudio_x64.cab

MD5 be0eeff1ac4f42be998940f6564e89b5
SHA1 62f054a4ecd6aa187c3d1704378c458786de5337
SHA256 7679e7b1e03399a5d0d7b802308ee1503a9c5c59935d16c330db760876bfb37c
SHA512 c3ff516aa3730e908ca626349f037311f5521849ad970c64dd44e63344b29dec6a40454cdf436732302514b976ad7d8913d7416468241ebe4d2f043056510192

C:\Windows\SysWOW64\directx\websetup\Aug2008_d3dx9_39_x64.cab

MD5 85ffa26e1821c06035bbb25ca9241c34
SHA1 272016aa12473f9c3ab33be1ae1ca11a2df3eeff
SHA256 03f30dd485a82b6505a881f525e432bb84447e108bf086ef341a39951a1863ed
SHA512 537e708761fdc3b5f1a3908f565e0d2c09a5a7cc4566fc65176e81cffde8702b918377d9aa701032708ef253b91f2a7153995e39fe4ac2cd311d51e791bf1473

C:\Windows\SysWOW64\directx\websetup\Aug2008_d3dx10_39_x64.cab

MD5 dda02cd5814439f8368259285e408845
SHA1 6c9de1bcabcdd5333c24f253f38ddd256e6c6787
SHA256 c6602fb00efe93ea7875e29974c073b4f83991bfc064470de94a95dbacd51712
SHA512 8809577e13859067d9af53c4d6d6da047e9c88d264e7facf102ff34101c530e2691f1b6442ac2694ad3342f83b1f5ed3333d6f12d2523cc1a6af1a29b0aa6c24

C:\Windows\SysWOW64\directx\websetup\Aug2008_xact_x86.cab

MD5 5e96c7336834510b8af861083d87e8d1
SHA1 1c4065905496690b59b0c7ed25399ce6593a4a29
SHA256 736b3c20aa536c1569465badec5bffda858978b2d9ec1e48ad639ccde301d6f6
SHA512 683cc10a5fb529055bec363dba6b26dfab6f764fbc256ac9c224d70fe7422d4df6e1303cfb707450d1150d79bf8239bb55653e2f0af87c4dc28969ac0db17306

C:\Windows\SysWOW64\directx\websetup\Aug2008_xact_x64.cab

MD5 1284916b97980a2dd714ee7d9f3bef97
SHA1 80216e9bee9ab8a7a94c11039126533308411034
SHA256 1b640b0022c876f74a41db17672bb0685b74d3759a7818f84c8ffc51a9aa0d51
SHA512 aa367c5eeaa123eb983a188bdf9558deea1052ef0332ae144ffe2681039c374fa80adc0daabe12e91c9505107c2bdbcd4780b58e58738183ea8ca927d14a0bae

C:\Windows\SysWOW64\directx\websetup\Aug2008_xaudio_x86.cab

MD5 60aa66cca3684683e233daac694bdf09
SHA1 a14140e7eed90414b10ba0c248ad0cba888c1516
SHA256 a1550abc06e39ca576d24efd2801d139c64c7dce643246a7ddf2de2d03a7ba23
SHA512 ca846a0e0ad82b4c96ba1ef01e6bb0b98852676598c4e3e80877018f6d4ab25a2f4eaa8f80115cc3304aa75169a584560de65f2a63bfb43f26b2e1a2f7edb5d1

C:\Windows\SysWOW64\directx\websetup\Aug2008_xaudio_x64.cab

MD5 154c82143b1b0730e7df3459cad48253
SHA1 bad95ba1b8294f8574aa93c6aa3dabc1e2ae95a4
SHA256 42807ba4736a40b7bb9b4b558c0daffd2ca75987dafe47a6571f3c45f178d29e
SHA512 db6d734003542c8891ab86d3cd2fbc96a020da852bc4098c9451035ec40f33ec0de44f770973df932abdd3c1ac35109a12c542278d0c898e54e6f8bd49c20c97

C:\Windows\SysWOW64\directx\websetup\Nov2008_x3daudio_x86.cab

MD5 7b59a5d0824ab10eb4dcf0295d2c0a09
SHA1 0c084c3e1a3da5aff22aa924a5209c57d44435d8
SHA256 8fbe56582e93b3277caf8660f689cc9e9fa6a33056d40a88d48f669a005430cb
SHA512 db4a91267afd98205e98716e0080f18d8efac9b2043962e8b909910619d04ad3f99692b1a9b0b612c8a5fa32b31150805e375b67ac6b897dc1c70bffc9f24f81

C:\Windows\SysWOW64\directx\websetup\Nov2008_x3daudio_x64.cab

MD5 c931e5b595c62925df29ee9040a0bc12
SHA1 2a06d78f47160cadcd0f9ec634818c9b79b7f61a
SHA256 4da03f7a174d276dbbbe469c12670fa85fe247428fd5033e93ccc3ae4d5f84da
SHA512 5d9ec84116df04b955e026860ff7b2750cb87261d2a91088936e7b5ee500548686f4a7a4884b1c54081701f3982c8991613c0c77c93fa32df70084e63717112b

C:\Windows\SysWOW64\directx\websetup\Nov2008_xact_x86.cab

MD5 6323491029405204cfb35e995062b79d
SHA1 b281a0781b01d2d5f55723f5674df508873e35bb
SHA256 3e804174d83cf4908cce7aac97756541a58c16372368904a253d10d64fb4d2a2
SHA512 c0b39e2c1912d04d39ee46f8e30e554fbfcb8d011c05a133774ef78ec761abb7d619aacd68a8dca48b6515ad003006a500386bcaecb9356c0cbb41684bf797f1

C:\Windows\SysWOW64\directx\websetup\Nov2008_xact_x64.cab

MD5 45eb89f9552c6536092dbb848dfca448
SHA1 40c7f5144e80614870bfe1ff1d0eb400deb8fdb6
SHA256 636f4829ebbf2e9a1ebe572a0f0b7f8289089339cc38c7075f48fe4930134cc2
SHA512 e4e771a0b6b93db895620c23a32ae4bf3a455a687480c7c1363e53e9b8d9206cad53989bf27b326e1583c4a993c59d68ce6d3f054698c405c8cf62e3cb256e6d

C:\Windows\SysWOW64\directx\websetup\Nov2008_xaudio_x86.cab

MD5 350f4eecb4407263a2417a284d355186
SHA1 ec76503b1f170010d778eefb6c3ff1d4aabd309b
SHA256 cad128dc2e64a47f65bb44f43a5a0650b045a5dae34ce13f34817642c56e4721
SHA512 c6a1c97bd08a02135062b5294e895e60e6c4361626bc15c0693b2a3aecf610b5e9604c1d71aafb1a62a9154cb2fd8067d77894698585286fe2900683982c1c29

C:\Windows\SysWOW64\directx\websetup\Nov2008_xaudio_x64.cab

MD5 97ab92ee81ab716560b9c51ba6e644a3
SHA1 681cedd9212cab09139585a69bb55898fe7c4a40
SHA256 63229aa8bd8e675b292c263fcad6b7868394ad29987d3f4db55f618359cb0681
SHA512 ca783306876f76b59e5c0ce4f6a49461bf5fa4c2206f289fc40c0f0f050687fcd798dd1b07e2229aeb0a0b736dc5123d4acffc0e737fa70f51ea7abb6d410372

C:\Windows\SysWOW64\directx\websetup\Nov2008_d3dx9_40_x64.cab

MD5 2d7ffccf9db1906fa49be695354e5290
SHA1 8d0a8a4b7241e31bf931cc3cbc2dd50cb48896e5
SHA256 9499871ec59f7f115f51399f21730734fa1037eb0c1ef9f1bd12c0479b216a6c
SHA512 5df399c1b62652a91fd3250fe696aaf283f028910f0e25762576bc7c74588822dfb4010ea33c05d222bc60fbfd6d3fcd757bacf4773d7d2fff734eeea078beb8

C:\Windows\SysWOW64\directx\websetup\Nov2008_d3dx10_40_x64.cab

MD5 9bdcd6514ca65c183866b1988ca23d43
SHA1 6678a610be410bca5fafa0761afc10eefcf1bd7b
SHA256 86f96aed9c4e381623a6476bdeb375c3f49eb0f252301ad4db2f7974362790b1
SHA512 e4a9d9087633d7e6302ed58de60ae7d35bbc1257d209b082cc67f36bf85572912a703f990254e15abd8e3d0e5510f4f9db8e2efd1d567f647a2da2608e49bd7c

C:\Windows\SysWOW64\directx\websetup\Mar2009_d3dx9_41_x64.cab

MD5 212bb7229cd29cacf1a5ec4e1c6e52e5
SHA1 c79ff23f737b991e8a7f38b9e674677482405f20
SHA256 53da650f9aad168fe8034da45abbabc950729780ecc4f645f1470e851fd67ac3
SHA512 6e1396e665f7b7d6cfda0591ec4c4082f8e3cf0eb2e64b7eb771cbb16f73af2a1c35ed2499062cd51d2c7c438425e235fa21bc48cda6ac3fc60d6518bf609fdb

C:\Windows\SysWOW64\directx\websetup\Mar2009_d3dx10_41_x64.cab

MD5 70456abbb34272f7a6c2a48223c08f23
SHA1 3d4ae2460131b32293a2f0b0c3c3b4f8b4dc484f
SHA256 25ef5135a88061ede0c4fde037be62e3a11701748ff83eda1aa9cc496687265d
SHA512 e660fa94c8d579aac1a6c8f8bbe55e2488b744a8acb59631eb82231a5c3363b3b923d43e6fa044afa5190060c8da67c0800c0255d8ee666d44f45e177a8241bf

C:\Windows\SysWOW64\directx\websetup\Mar2009_x3daudio_x86.cab

MD5 fa5256647c0eccc35c2b1c581a846f91
SHA1 0d5a854808650098afb36c25cea9f67d2c9ca7a3
SHA256 2984d216a782ca017243f4685ba592801b1ac3ccac2bf20a8a134fecaff03510
SHA512 0ee38e439e202e4a06a1e9965112a663dfd4f7bfa5a6f34694f8429786ab0eda3a6ab13469d0e750d9efc8834cb482fb8894e76673aeaaddd9fb814bd6b13204

C:\Windows\SysWOW64\directx\websetup\Mar2009_x3daudio_x64.cab

MD5 e28e921c4c92007597e71d499edc77bd
SHA1 d8c0e4ad125b21a32f14d967b7f1f9dcace4a86e
SHA256 53a41f2989a2f68e4e927c89b2e38bbfcee7a2182ec588db233f26292f9d7911
SHA512 da023cdf89845bc7c7d2541348455c17730d4890df5b8be00e807d7c453d8d1da1cf12600a600f22580f9805233f96dd3394ef95c511e267f33746701b6f1d64

C:\Windows\SysWOW64\directx\websetup\Mar2009_xact_x86.cab

MD5 c1ff75f8ceaca8bb6194efc53563a3f3
SHA1 789890284ad15df5acaa580dc47ddcae1f0d0c41
SHA256 250c430741fc09d74ef6f43559a365ee908f52d96cfdacc7b6d8bf5e1bd3e5e1
SHA512 5e51ec6d2a6c71ccc070a48539170dc9738c7b500d6bb3bdf9fa15a85e435b4418399524d278babf0b79ca91880206d7c57a7a27104093dceb1ee1f9aecba1f2

C:\Windows\SysWOW64\directx\websetup\Mar2009_xact_x64.cab

MD5 a9d30e5a134b5d7c5381e4dd018ab673
SHA1 2fa0a0050281d98c2b00e1a0ae0b99d0b6a594a2
SHA256 19890202eaec445617d364ffbde498e8eff48ebe5112a42fb4b99b4258aa0757
SHA512 5257241c6d2638439e6274c084a096fa753536c0d5f7ffb1f4242676a9a27ed4691cac7ca614df039278b87ab628a8e75fdc6e223413abd82b26b970869abe1e

C:\Windows\SysWOW64\directx\websetup\Mar2009_xaudio_x86.cab

MD5 528d1c8ba95c79a237ee6f83403b919a
SHA1 cf2270f9d664e90e6481ee37c319ebc0dba1efb6
SHA256 e7aacd3af1c4e2031e4e4365d47e8af1023272c795f823b41f1728d48d127b67
SHA512 f7fb7c5cdea9dd4a58c597019cf50c50a568bedbce2fe86c9c9aa459f16c66a23ddb89e45970de251de49d0b2f92c250a836ee1f727c43bd3b062ab716aa6bb8

C:\Windows\SysWOW64\directx\websetup\Mar2009_xaudio_x64.cab

MD5 04850620fc179a2812ca31b9ed375ffc
SHA1 cc04b25b10b16166e36499256a4693297a7023f1
SHA256 2c1610997f383e55d5e264b3cc52d9bc5262ea72bad6116a0d84e623f61b0361
SHA512 d27ae04e183771bee6ce15f611f563657c0fc4914d5857b018e7fe374122ec9ce56ebb2c5f990f46689255a84ab3d3e8d9746b41b0559b506df55aa7cd7b0d03

C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx9_42_x64.cab

MD5 e3a8689d2876c6d3baac0b36b5c4bf1e
SHA1 22746af0bc59f5ba90a1f48a9cebdb87f40e56c9
SHA256 54a61b655ca36f76a489b46c6174dd601a831210f16ecb9d839cdb7e19d47904
SHA512 76fdb7b7cf64751e1d59e70968a14547e889d2645468e5125c280d8d585a3dcecfbd83cc1a08d552db7ee91be78d769372dfd9e4c0e86a5b80ea32ec7a78073b

C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx10_42_x64.cab

MD5 55fd3e53e8b2bfb1de4143b5f2b7c829
SHA1 c3711ebcfddb1d52e9417bd02509b768e683fc40
SHA256 98ca8f4d1c6cd13fa721a35a23992d9edd14cc7465d3752e5978d89c9bc91960
SHA512 eda2cf25132359899806296aefd0af98ab406ede587a582d701a5f8584e0e0dbddd60ef0225a59b0669965afec97709c38e20e8a3470c26b4dee35205c1eb01e

C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx11_42_x64.cab

MD5 4196833920bc3bf77ffb56e3693e4160
SHA1 fcfa14f51cd79582c64f7956a5781622b682b1b7
SHA256 f2f4753e201d6e7f40f4011cc4b4fa95f4519da0481d98cb24dbb6679518ca93
SHA512 242b19b6f8132577e9a7c7247dc714a95c7a4b81416b79dbcaabcfe14c03405b965d0ac751193947af64356f34bbbb25acc021b0bc7e452e35340058f169989d

C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dcsx_42_x64.cab

MD5 8182931eb4eae0ed69b183c49f7fbbbc
SHA1 91630f1e8e48883c4398b85451f1b0e6a8445d6e
SHA256 23d902f8b95dbd5ac925e7d1bd4952eeac762e11e209be973fd438396a1e6e50
SHA512 1bbd9da1aa2e3d956a79cff74ed8b6ce958b1f40103824328157ba87ff6c7c375c4d1c790c8c079658fb67ab01e1349ae29395480ea8e6308cfe714a742b56c6

C:\Windows\SysWOW64\directx\websetup\Aug2009_D3DCompiler_42_x64.cab

MD5 2e09221105524389268d24f0b1fd4861
SHA1 6efcdf3e9a018a3af6b1ebeeb3030552905cf44b
SHA256 ac103963d4ab1846c4a6d5bc042ed2fa543f88424e37e05af5165ee62989b503
SHA512 9b4d319c9c575b59c4000adda1d6075efe197179ea0d4442cb06b42569a4e5e3d437dda73cde7b5991ac7b76ad02fcd00dd7d048fef6eb51e93f5012dc67f21a

C:\Windows\SysWOW64\directx\websetup\Aug2009_xact_x86.cab

MD5 234963b689c5fd79cf71a3f555b2b418
SHA1 e9a4a8118da844571beee04a8e79675729396c15
SHA256 1520e988f112dde8ea11794e4b6dc9bc6ccb2ae7e0be7342d4696b719e5a86d0
SHA512 dd00fb9da7f14daaf3ff535e4ef31c1eb35757836242b8b1f491e4061128781b59c117aee0ad7789d90852babc459ea5614ed5fe4263a8d7219e045b0a5a80bb

C:\Windows\SysWOW64\directx\websetup\Aug2009_xact_x64.cab

MD5 503d5dcdc151739cce29b6bc144413bc
SHA1 2fe0261a0e81da501448861d710bae9627ff658d
SHA256 34d922a89d6b354572c17b890b0efc21bea237b94859010278fc1a4435ae7724
SHA512 fc7d8896ce2710a6189a812bb57b80b74489a9311610eece7db32ec0f830525e9c73e10755031ac3bbe8649344f02c44df2450e5b6e98b17c706e4755fbce0ff

C:\Windows\SysWOW64\directx\websetup\Aug2009_xaudio_x86.cab

MD5 2136cdc81fb2badbabb1ca9da463034a
SHA1 7a2d39f51d390fa28d627ab349523eda6bb9304d
SHA256 68785e0781b43c34cb184ae167363c23d5b9d18ddaf8474a5f1d6b90a939e8b7
SHA512 82a600478e77ee623552ec7be8cd63f85a0028d552cb3764b0e36400020746e2503c505aa31f9b3569c65ca56e34a900913f712a4a9f60471ca4126e3e582de6

C:\Windows\SysWOW64\directx\websetup\Aug2009_xaudio_x64.cab

MD5 3f50dca229c21b19c6ff1da50f9b7022
SHA1 c9db30c33c27923da5303cfb6fdffc0642af7315
SHA256 348bcd596d4b3f1e10059a0ce3c4383d383c4964c00a77ae7281e3472f6b8b25
SHA512 c7d322d0f8d14a3fb65578dcf84c31f6f57d674e315d0f5bd9c4c2b9f05c006febca671d486cc6da5ffee5af46a45ca967446820860609d62ac9414f633e36b3

C:\Windows\SysWOW64\directx\websetup\Feb2010_x3daudio_x86.cab

MD5 c0f5452d6ca76e8cc63ed7e6b6fe75fb
SHA1 05a175375eae4953bc2aa5b6777fbad268d7b7fe
SHA256 3cdd51afca42c61a7fcf0e7348ee4f2095d1bb9deba31f7c09f5694a028b0d35
SHA512 bf75bd537f253c2a989416bbb0cf68e530c8e9acee0de0cabb245a4ba06d827b7eb35e940472a6c9096112be58fd96c50ad398ea14acad0739c154cfbe405aca

C:\Windows\SysWOW64\directx\websetup\Feb2010_x3daudio_x64.cab

MD5 f0ed6ef41acf1e74ff9bdfc16aa8cd02
SHA1 8f888a9ef499ef705a512352ea976eb7168d6860
SHA256 a46a4b55659921966428301c02409c32a642ff7699419f71ce8775944117ec41
SHA512 577373645ac7c617d6cd98e92fa52379d1b098232c0d563d31bb0171379d04d5f43aa8142a95943c8ae702b82e94a1f46f8516f1cddf53d8d63a2474f8643421

C:\Windows\SysWOW64\directx\websetup\Feb2010_xact_x86.cab

MD5 022f58555cb11343e2bf69562eeaaac1
SHA1 1cef7f8e152b72c3d8892702e9c6cdef6bf7d8ad
SHA256 d5a7cb9a858e3dc2fa875c8aa915b6999137b616327aa79d382379a1ce3974b5
SHA512 7308bb60c33bf063ca1e13fdae7aee032d4725e967149ad8db8bf3935b1c5cee8937dd8772702413e0d4b440110ea2af4bf58ff0bae89b9b6eecbba9702665b7

C:\Windows\SysWOW64\directx\websetup\Feb2010_xact_x64.cab

MD5 16384557c085f2268ee68a6f200060a0
SHA1 68493582ea6e17342227f326a2aebe3830b7d0db
SHA256 dc678bde00cc64b91d29c5d98be82b19de00518d1706643e8eb8ddd4ec577327
SHA512 d0ee2f2836fa5804f8c5d817f2c51dfb2b63d1f2c14516f467b757445e08f346596a9861e86873fb9c78556390a3c60862dc8bffeca0b1cba92a8df061f206a1

C:\Windows\SysWOW64\directx\websetup\Feb2010_xaudio_x86.cab

MD5 1a65ed07a006532b97beca96bfaeda85
SHA1 66bafce1212a29513f26d7bf8d1b80c96238facd
SHA256 738f0ca04f3f568eb5c1a4d8f1af30e4930e4f7950e96776a5b8adea16efc8f1
SHA512 a8082022c5a7b2cc0a3f8bacd3bc85d1788ddd3f4abdafe2b83497d4e1fcc9bf574ad86592d850ffdae85f45d445d0f11e89c219107ac7ec6e7ecfdfb69ed9c7

C:\Windows\SysWOW64\directx\websetup\Feb2010_xaudio_x64.cab

MD5 c501686b2ae5f884c3cfcf67c300fdac
SHA1 1817a5dde8fda83dcc6075836146eb17621e229b
SHA256 b99380971dccf9500604a39bcdf5db6f5d96b14519ec0bd575587638a0238099
SHA512 e41b18c0c1b69d89d5f64e1cc4dc815faa7234e13fc63f46ee0913e1eb99fa0ce585cfe94d5bf124246692e04c580716f334700f4aec3eee7aef77d8c2b53cce

C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dx9_43_x64.cab

MD5 4ebfa56903a486e4ff5c0ed4c57ff8bb
SHA1 ea0edf56084d4a7011953fc34ef4ae5e0004f753
SHA256 810a07865b7fcaf0d7abebc86682479a05bccba71c69aa2d4ecbec3c88c8270e
SHA512 be06091faff54db09aff6c034addbb1a143de17d05f4ee9239509a108dce5f479cec2789fd27c2ea3fb66ae47de12631dd4f4599cce80368020e620c1a6a0a35

C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dx10_43_x64.cab

MD5 15e92aada1119117964d28291f8adba9
SHA1 a4bcfd73e2d1adeacda9046cbf44c9fd21b3e075
SHA256 c689eea749f1ad76a162d1c6dff31dd92d0ebf85f5b539c4c953d55bbb921b57
SHA512 d0653f6aa90f9389a3ffec1bfca92b3ef22e0a2c7892dec2d156da3e2d757a26cd39a00ca47e3a4e153460599e48657f5dc96c8aa9f7c2509db0ba1ab0ae5ec5

C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dx11_43_x64.cab

MD5 1c119486920ae4e41cd2c328777509e3
SHA1 a89e8cb197576d78c6d1d2e45d671d7e187efc74
SHA256 37ae82574cbbfe2cae6019a168a6d1bde38f88f8e51f13335001943980a665e1
SHA512 d81c623005db87ed057aba3fa807ef3b4534ecb8473e9a3283457543590d6d73b9a9deca333e312a2616f74f1bd407de9ada7bd1c52126e04c56fdea78119bec

C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dcsx_43_x64.cab

MD5 89111c646b93b8ebcb306f0f743b2d7e
SHA1 f9e83beac4d9665eaf54c6578147a6ad539d463f
SHA256 ca1b0022af12f048586761439e152d1157eddb7153c031e075ab8d946173d31e
SHA512 3e79235d4c73d26506c3d537491987c06c184f0bb2eb7f40babdc70682215393f6e9ef49deb57c83d7d29ff15740b472a59a7320b5d006a0f094614396b06be0

C:\Windows\SysWOW64\directx\websetup\Jun2010_D3DCompiler_43_x64.cab

MD5 b6c9433b3ae42a99b0ca86700b265d9d
SHA1 595ef071c6798b31be6db2c721ca8a1fc51c8210
SHA256 9b56aba20f49739cde64f07ec317b6e20b0713fb9ae697318d811a0f103a6dbb
SHA512 04dbf5a877ae71f0b96680b34946f64a5477d1a23669eb89f4b2746084784efc0bd78db548671cb2eb8d3701570478a07485874b2d293351ae2bc1c6c2845630

C:\Windows\SysWOW64\directx\websetup\Jun2010_xact_x86.cab

MD5 3188814f4f1b69543688a55af1ffe23b
SHA1 57108fe718c3fbc3ab17b849d72dcb03315a1068
SHA256 fb320286968952ae93c7cdb4078bd99e689a0946157574760b844f7bf39c7ea0
SHA512 dcad3777a739bfeddef3bf7c87db289c88b9a5dc0d9e196acd2ab0d3c685cf14d361cd539ff07b0f23ad36b2bd4163c9c8475e014e22da272de78bcba8ca7793

C:\Windows\SysWOW64\directx\websetup\Jun2010_xact_x64.cab

MD5 79ed229e336b3c13524d5769e95fa97d
SHA1 1407132b85923d199509c700806c705af3a67727
SHA256 3e8fcc374e84e1170067a057acfa3b5464220d6bf5324566a05242e8208799b2
SHA512 676472162b9d54e9cbf23c853236f10009e5646be45f97be5d08dae7e5f87a947dbcc9d63cfff5b7d739ab9131ea6e3b9a499cfd813c678c9a4c5dd6eb338907

C:\Windows\SysWOW64\directx\websetup\Jun2010_xaudio_x86.cab

MD5 11e2b64c1e1c07f5843adde7e247c8ed
SHA1 ead54df66fbf52fc503b2d364da64a7de4f19fc7
SHA256 c364833271396d78811a9a3388341cb9e1cf5e6e0fe2d7986cb4dd2f931a0dae
SHA512 e3a988dd221599678a7b691f2b0b5eae5e8fdcb5352c7e9c38868c2cfc0fe9417a5954d3e8240157c5d9753d55f540c25ee1944c9ff3f2ff14df5d7051a79991

C:\Windows\SysWOW64\directx\websetup\Jun2010_xaudio_x64.cab

MD5 461c07c13afd70954f34d55986a0515d
SHA1 d74a8f99e72d182c21a30e4cdcf9f7ca39dcea54
SHA256 7cce405577fae04e58fe31a099febba96d3ea7cb94ed2184b6bfba32d9f20acc
SHA512 aef4b8bdd17af066f5680485cc45266859f802f2a79178472f5c00b9146ab52f8e04d36a973ef8ff45eee29940fe072180d4e7e0e89366fa2e8aba8bcdb890f6

C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2902.0_x86.cab

MD5 74a550d8ca43f210e526bb000af42303
SHA1 ca3dc6136846ad196939cf71ccc04be6b108bff7
SHA256 afa44ed18e3217892499062db4337b94025726df991a0bd4dcc3a9f8c27c41b9
SHA512 58757d831931daba43ceffd512d47e29bdb91cb7b1505d69079a14f911e149d718e1566323b9bb1d0292333c76603e7634da5798307b6dd6c97f885ce25c87fa

C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2903.0_x86.cab

MD5 6df41acd290de624df34e57569225f7b
SHA1 b33a256ceec451e467dc2aa2339a3736915ade25
SHA256 84e240f8813bacb2fe0f20081ca20cd0fed4b9e10c96aded8516b25375c407aa
SHA512 0b2647e0f6ddd936023d70f4a6c3f69275ef65433dd45cb47293a933f2d7b2d0d0385f80c8cb8be8538c4d4420d2da17484dfa056fc7dfddf1ca974b4698954e

C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2904.0_x86.cab

MD5 0ee4994d37940795f01cd2be93b7d847
SHA1 082f6aa6d9d92cc23ac1ca858244a101dd8f5dbe
SHA256 cadffad57691af14fdc0f41250e644257a3068da134a5922f343f2e69b1b5441
SHA512 ee23312d54c0d0140f80317fd0cea299a362d8cd1463cfd79a9062eff2305ea188cae4f83f3cf2c301e6d82d29820fec726844971e286ddf729df9a17afaa167

C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2905.0_x86.cab

MD5 70a647ca8587b3be1d2209c998b86b50
SHA1 5850552af0aad715c2406a3f50d7c6af1595444b
SHA256 f10aee00b78b734acb3bfdd81ce0ac22648376486d0c308f9975b05181ecbe13
SHA512 470c027ed3113af38c5f3c4fd3348d3cc8affac081dfe3b7fdbd1787da3bf78489e5379d8f306d917586ef8810b31a7f303125c94739f6dba15e3ac4745d996d

C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2906.0_x86.cab

MD5 d7bf6789f6c6dce7ec335f842e91c9c8
SHA1 c0297ea86238a166da27b9428dc891256b52b364
SHA256 bcfd420ecb20116a78b54678cbb04204e76368809aee1e1bb36810a4d433de2f
SHA512 b07bf7444afebd52a11f64c57d76cab8976a222d8f9fa0e78e1dcd7bd2c126dc28d7df7b778f10bb8f69dd7b7163c76e5f7edb260e31ef66c458f4fd72899b36

C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2907.0_x86.cab

MD5 d82fa9747fd442d8cca1cc35b97440b2
SHA1 a3e2ab8588a1bdf435e786c000c38144adbca457
SHA256 b185fce1d25a4411c1a2f53ec1e4232de9a3078d7db7aa469d53c5fb041f792e
SHA512 234e7a4dad6e9f83ffec2c769e775b18783b6a03e50d7e8186fb7fe01747fbb5ac46cff6f8437ca932f037da6c565f4faca694da4580f2876e31c252fafb55f7

C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2908.0_x86.cab

MD5 3bb868c2953151575cb8833fcda21fc3
SHA1 403c8a2123f59d2a3abeef22630cd6f62cfc1d92
SHA256 fd1c15037800a0a689126b09f29a6329452cbaf42508242d9cc185f557f04954
SHA512 33021b90441bea79525dcbad841164d1b8568907edc5c27c0374c7cbe93bc381d93081f8f7b20f14aefec3b59153dcc9b2fa44c80b1ef7fcda0f8a6038ac24cc

C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2909.0_x86.cab

MD5 3f8bf012bf573f071e98df62843ece92
SHA1 b6004908bb160643899b04b6edac9fdc7e3d86fa
SHA256 1e9c063428322da24df17c5d49c63a53e0f0751d26f741d90216b9c4ff1a9136
SHA512 dcea9b2fd7379f8a0d7eafeea4340f3ab7d71069ff843550e2c7a2ea21e1fba7a779a5352bd5758bc88eb8dbde0ec1d1f3e8164b1766e1a47f676a44c36c30ce

C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2910.0_x86.cab

MD5 4ef2b868739e09e4020f2f0b0ded4a46
SHA1 39d201d0666cabadc0dbb81ee2bc691b9be10191
SHA256 1829a24a8ed3a2496ce92aa0c5142d8f512b11cdf23eda5e579edb5b11e2b589
SHA512 3a2f894854f9932840c7c7341f2e1882102e4f12dfd45f36deecff520da6d3237d9ea3867041f53037c808789e6bc57e7ba067d9c8f621350396126032c5223e

C:\Windows\SysWOW64\directx\websetup\Apr2006_MDX1_x86.cab

MD5 c0fb3fbba00268b9992fd0bf2e2d2efd
SHA1 fa6ba1c5e193353f01b816fe782ed296ae7814dc
SHA256 90e08fc3b98267756c6017f4d37b157eba3586c262474d1556b21d9c35d84da2
SHA512 00d23eb3c3312170e4a6a2992721255e307085f6f128cd3203d6e9b16eec7f0ec54b8a3fc09a5be51da2225b55fd89b13c278e25853771e414d0a5a93e3a3b0f

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\dxupdate.inf

MD5 e6a74342f328afa559d5b0544e113571
SHA1 a08b053dfd061391942d359c70f9dd406a968b7d
SHA256 93f5589499ee4ee2812d73c0d8feacbbcfe8c47b6d98572486bc0eff3c5906ca
SHA512 1e35e5bdff1d551da6c1220a1a228c657a56a70dedf5be2d9273fc540f9c9f0bb73469595309ea1ff561be7480ee92d16f7acbbd597136f4fc5f9b8b65ecdfad

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\mdx_1.0.2902.0_x86.inf

MD5 81700fd8d24ccd5ed83ce202dadcc625
SHA1 380473dc3560cc64fd0beca96674554d87085c28
SHA256 3bd14cf2a96544ece692e1911500f7196370a111017fb6b0e23db0f0d0f40dfa
SHA512 8ee1bd03fcd6125d22d1d35437537f594a84e67573ac72d440d45d419b88f5d3d1f5fcd8804e1a0b873714c1a71c63a488b8068f0c465e94940ea6e2db1c7860

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\apr2005_d3dx9_25_x86.inf

MD5 bae5034d79a545ce120f2c336de0f68a
SHA1 7276af2015696d5041214fa92eff4375b3d8b183
SHA256 f484ef48e0c6e2be8207d8c8c7308dd966d52bea1fde221b927d3e49f1cab0b7
SHA512 be58875949d23732ff63a6f505b242a44811cb9603a9863d6a78a4c9193b6336b89ec9a82666865888590a7b81ad99d466a3847e7c22d0de399d476364280a22

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\jun2005_d3dx9_26_x86.inf

MD5 62f8ec9c0d3bd54ace90cb15f5caa208
SHA1 e84f4a60c79f862aca0f917d1d30898af4036fad
SHA256 262ed4a65dd45e19f196cb2d9946326693ee31a86b51bf77116dec2727971cb6
SHA512 3de4ad76b207c2a0ecc10835cb787d61faa02e3531f6242a606ac0686cbfa156f59c30695effe5560d9a8481800b356873b7590beb8a739b33c0b1fcccea3fab

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\apr2005_d3dx9_25_x64.inf

MD5 f052926f0715b88b23ad52855b34df46
SHA1 c411b1ddee73a4b317d652bc3ec159ed58efffa8
SHA256 3d97810d00ceb3e7674a2ef81427d4180f77f93f9454837c5933fbc6a1ad5c1d
SHA512 8fad81eeb503d81b96c098190b5c4155f4bfe1cf2f36fdb5834a176c7c78d11b52efb6b3ba6f3168d7a21a1fc5e53fec770d125feaecd7d1cfad9cb1106d0b94

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\aug2005_d3dx9_27_x86.inf

MD5 e45a175750a672cbb2553087a8c5cf8a
SHA1 70d487f99e101bf39650594c27674313181a8ff6
SHA256 d02232a6587c460c026601517178318bab2ac29c59d269c6e3d1a3a993a9a1c4
SHA512 199882ada178e41be14af82001829d009379445028d3803d2a86eef899c01600cf2aa86123311b728e888498674379a35d40ed0964c2f88da24758fe3c7093d2

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\jun2005_d3dx9_26_x64.inf

MD5 134624a22aefee1fad4eb11445b8d342
SHA1 3f0f65ab8be678250660ba47f33f229643c118b1
SHA256 addafcf0cfd36587c12eb2692922f0fb134874d11005a0544cc054546a493933
SHA512 24bfc2d96b3078f82ba031045271460295f3a1e6dd3c8c30d8d50c98daa9051aeca93ed8ecae8722b70083d3b0ba41735f81068e7514e81767e1e119e45ad6f3

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\aug2005_d3dx9_27_x64.inf

MD5 7cfa60cdb7e697b40a268eb8814446e5
SHA1 e8e77082361d5a5ebf6163cf880f9700cff5741b
SHA256 0a8ffec8d7ef3a0aa005f604a045dcf80cf5b6473b4f26e30c58eee23e253fae
SHA512 77aaea559ef94d405194351b52643512a71990833dac22a331d5b78d569263db11bf969e26224ba8a362bf538782010ca074286ea605490d40c10f7d2d53d255

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\dec2005_d3dx9_28_x86.inf

MD5 e0b6120a048295ebbc629a9f8fbe53ad
SHA1 3d9cbcbdafc1f9058af74896a5859591e164555c
SHA256 d4d03c4ab3c8486d6331548e967ee17e011fdac90f63c0a9a44a744815a7da7a
SHA512 66c0b9501bb08d41bb708d0a724fe6ac27abaf735ca224074e594cde932ad1f9eb9db5defba8a8a71a0a12904f20324ee4d129a1ac9fcf816fe74d648379908c

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\dec2005_d3dx9_28_x64.inf

MD5 9a3ccc90b71d554e968eca0a812bf0b3
SHA1 0ed1ca28d7f6c8b4e017cd48b8504340cb4d736e
SHA256 510b6d528be3f2997b8bd811486dc3c13eb27a9de22d1bf030e6db0e632cca4d
SHA512 0f10d2ec9f72651927599b69dc3f4e037febfb9c2a18e02eaa49962903c1cf77b63ae6335c06effdfac26b87418ef2c7a2d53dd799a28d275632d8255ffa8be4

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\feb2006_d3dx9_29_x86.inf

MD5 f4c258b663ebf54c55d7d09b05b26ff6
SHA1 85af1252cf3d9ae7afcf8d576cdc17910203ad03
SHA256 f12f4bd86d5cd748b0fcf7106e9dff333c27c0886541339ba1f40c443bdc61cd
SHA512 cbd491fd8e847a4659758bfe0f5a4b56c97e539e3b3aa7ca601c329d858c882cceefb9ee8341d794235b7c2403a090f45a0ba8f2f44de3e3b1685d027d8bd19f

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\feb2006_d3dx9_29_x64.inf

MD5 0d951a2eda3638d4c976a5ffc1a9f8db
SHA1 fca89fa6bc6d4c25758b7baaff9136c3d73140ff
SHA256 ef36ece1a6bd8af3b0b9247b081d28ed511b7e18c43eb3aff364c9ce8d3a06c3
SHA512 89e960fbf9421a208476f7f65acf8047d231f3d6fd87fb31b01185ce88f5ebb1fa7513224124889082f41f1dcd579cc8bbb638f1af73081b4630fb07934dbb80

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\feb2006_xact_x86.inf

MD5 9dda266ba05cd917cca889659e3b98c8
SHA1 2a2ba2ccb3c9d87c03198b9ef3b9c6e21d693055
SHA256 45146fd446fc8533dc5f97d88bee9ae220161f24797114d0bf3afc7c479ed69b
SHA512 26fa18c8058397b8b5d89baf1fb9cd689827b48781dbe40ddf884c0a3ff9cf8d8451c6c084a693e4fdf107ad181fcce35a2fcfb371548df948416b5713d8ce38

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\feb2006_xact_x64.inf

MD5 7d46669082d530935e79c74c4fd83bf2
SHA1 194a05e3b019beb07da96c3bef780e6154a78b9d
SHA256 b7ca1a4942057592c5b83b4425350da41c61779dcae608112141d727091842d4
SHA512 590a9628fb90d4140d6f96238caac46f8ab23a59e3a9d94a28d1638006085efdbfad259b9633e4a56585f6cc10119d67abf3fa873a426a1946af589c17f84fa1

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\apr2006_d3dx9_30_x86.inf

MD5 a49046c25439fa900b1d1bf826506ce3
SHA1 deb71dad1d55dc5af2f80a1c3010c0d899bec187
SHA256 373cca07c0ceffa72901441219a4457de9ff110aededae5e4818588da39cd344
SHA512 d3e04f2e7b358faaefdd683e7ede8a41c2f65b7c8072754b03b2a5de416651f92712fa7d9bc6027d7326dc5bd8a497161685c04cbb7bb36a384aeee8dd77b086

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\apr2006_d3dx9_30_x64.inf

MD5 5d684b07779ae5b421e23167e2b9b44a
SHA1 1e3570908b810cc799f047221351cac7a3583787
SHA256 b70b8f62a2459580d22999301f1823bcb8a9bef54bd33b38e0af274a3a12e010
SHA512 6688f5a9952b36a0a83e806c9be99d9ffe9ba4982b76a9c7e8cef5f824c17ffe9e5ad9ef4e4974c6e2a9cb37e8c05584d8d83033182d1c5d00a786bd2b693e23

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\apr2006_xact_x64.inf

MD5 09c9b7346b65f5ba209934f16e711c8a
SHA1 9d6cf0fe295475c438fce214d9d24d5579f2f29e
SHA256 d9c3216ada5dd7791ca852a8ea97765f94a7b56fed27b20916b5067eb82b14d0
SHA512 26b84a457b5bd17a5deba56926af156a2144213a2b75fb015641a7817fd2307cfb439ca22ec0bb584dd21f8f9e4c7b3cc749a350b26cfcd0257f5fbda23fd9c6

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\apr2006_xinput_x86.inf

MD5 53294b978995caafcb6a9ac8f67b8580
SHA1 c165d2c615261f135f60442ad0a6e589d681a850
SHA256 b604779115d32d439f77b33257c96f928ec4ce564189f7d0d357099c1da140c4
SHA512 a3da7e02ecfadb181ed13855b093908fca0aae2ee75e6bc4f873fe69a34cdc08f3bf504aac2ea98f9573437d2ff000e43ae8450c87036ead48e6c2b80ec523ed

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\apr2006_xact_x86.inf

MD5 f67df97463d42bedc122fbedc37096c4
SHA1 42cde962b355cb3c6a7a7a88c8dc315f811a7494
SHA256 037db252501fd0e30303c11706d804d9eabbf319d0b4e88181ef8f297b4fef8e
SHA512 93815abbd6b6666438adb146bff476aa2728aa7475178259fea623dbfdae819bcf1accddddb7695ef23bb2913d234264ad2ec826bda6eae5d99459798b032144

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\apr2006_mdx1_x86.inf

MD5 2ca62bfeb43facdd1fc06f20fb20397b
SHA1 ffbb8f6a8a11f949ca180a7e73279c4b775bbbb4
SHA256 2546a1875bf868edc621a1cd0ee262151faa08762bcced0117e1304eace0c04d
SHA512 3d16b07bbfd172dfa979dfcf4384baff35538de371dfd0b266e5110772f0751f9e5274fa92b06d1f289f8aaa585ca1fe382f8469561e74e343f37e8a05f85dbb

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\apr2006_xinput_x64.inf

MD5 019f21ca754cc2e21d97c3a2a97d5ef6
SHA1 54d97b4018e0cd04c63f1221cd8da7a0990a2cb0
SHA256 f9d01e93e547045e1d232242c900530dfdfa54698586c7049281965e3bd01ca2
SHA512 0c0ef6a8bbc05eb81cdba8aa2c3f4a0d39f4859b6de495c79f813894253ad1ddca4851841064cadfb1901ea1f056c68560aae1e68bd12c590a143a6b7f0b16f6

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\jun2006_xact_x86.inf

MD5 fa59f92f7d32613a12189e75eaa700dd
SHA1 f2c3947427e7eca9fd1ad53427d1dec28a5f0f55
SHA256 6bdce6f6779712e38c6d9e6e5961217e417254089f096c719f25566e952cb257
SHA512 e8dcbd918cdd7d98a94d53413088e2f75e4d1a15d4f69b6927f3cf19760d9f2fc577659fd533b2e4e2997aa29f285b0fbb35830331997549e429dbdcc7ae9853

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\jun2006_xact_x64.inf

MD5 a983924d66305104b4e21a551dc66448
SHA1 23deca69eea790ae7afc30cffa55e87ac8520cdf
SHA256 fe9caa55be17684622fd7339b1b96e1f0d107dc33c065706d24a435d523c6e12
SHA512 83c2117df0fc37979ccca7d861598a8a127d135456f72597366ac65276906435ab99fa353f246f9f61634fe96f8376d38253300f177d5cedac194cc92407f3d9

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\aug2006_xinput_x86.inf

MD5 f87111f61ac57d80199cead8e63ec45a
SHA1 4a525a78a90fa87290f60f0598fe285f9f46c90a
SHA256 cc66d67daa1f4c31ff5e59c2606c3930f72204a5057c29b9d58dde37a47b1cb7
SHA512 ddb1b7259aeec662fa271f6a6d271e9d48c4b8ce4d47d452dc2ab15611421baa13cec0024e668309b7444b31fa5b24f41b032796c81a36e94d7e577d9c516712

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\aug2006_xinput_x64.inf

MD5 90d7a7386af9b951f939d869567894d1
SHA1 ef70a6efb5f7b32193bdec6c5ff13a4abeb4f00c
SHA256 35f25b9538e55172cf36729519581444e26b38a9dae5cccc4ad75dfa34ea08e7
SHA512 10920d0116aab01eb1130eb91b26bd91d4b3ff8e09a77db5b79f88c94c463389548c2b3ce494162d4b2c3fda903eae6c2d87492475c56fc901c37fc8306555ce

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\aug2006_xact_x86.inf

MD5 ddb0d03b1d4a6ce09da5cbc61f5525c0
SHA1 ba5e1361e394301d5b9d9a4aec68ae21f19c70a5
SHA256 34e7227e03812fce5415b0a4c3d15a9e9b259350ac9873db2a98b2ea76ae2284
SHA512 2160652a7f8adfc346e0af6f822875c34d2d13f168b9895b063925979d4fcf33a7da777ce7d43c9ef2b23186ac00378e8c2d4ee115bb2ff794e863e8b6feec5e

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\aug2006_xact_x64.inf

MD5 d40e6c659cb7a757d8e751b050495927
SHA1 a9c515d786bc8f5c739fcf5ac1b6e15365f9e14e
SHA256 6fe310a67227203bbca3389dfe3403fa268cb424f4b525cca2d5407ed26670a5
SHA512 fb58acb95f1914da3c650168ed50fb6f75df68773daa8e8389db9c7c7c4d0e8bf93e46458fb76de676acc65132d781a7624f67289860a19e03520ecdbdb66896

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\oct2006_d3dx9_31_x86.inf

MD5 8f7aa1f0f2389f3cac574652f5d6672d
SHA1 921f2161cf46c6314a330ff52c83f8a3f1058f0d
SHA256 a1c61096019a6ae1a9f31e3fe67aa2bb7e9e451967959d7088344f3f20ab572e
SHA512 a85c03ccaa27adf3c75287529f18e84f526cf91785e0f4281db0eb86feba78522603e21def19bd2a33e03ceaedd9109b8af1dbda4a3fe93fe6eb95366b6df747

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\oct2006_xact_x86.inf

MD5 6181c4b93bad5332b34180ac0bae5077
SHA1 259c8de2dff2a5dd8d4971fa1ab3fb0d193ae90b
SHA256 66998b21cbe6f05b12cdb4bb45549dcb1b4a92f8a1b910334150a8d767fa39e9
SHA512 8508ebc77b667907c5c2f587131f24cb25c5a67ab2f7d8b94216931457f486b37b9701397ed6ef527c9c6786f82a938a52d2b6cb0afddeff4101cb100e3ceca8

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\oct2006_d3dx9_31_x64.inf

MD5 e2a0e651573cffbf81578b864b50cfe7
SHA1 1c739f17f63ce7c5ba00638259628f7fc919cf74
SHA256 c031987e68e476365cd885e41a072f85fdfc9e480c93871d024a5ccf26d17118
SHA512 abfc6452d055bf6a3fadafb9562352bda90ee0edae5a0fec798951ef9d39701835212533a60eaab67c5c0fcf01ccb9115fcea3779b024ee1e11f217cb676e7f0

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\oct2006_xact_x64.inf

MD5 535ca39d61f752c3f1ba4956871fa27e
SHA1 4941efb676adedb9a46d7cc7415d8af03957b3fc
SHA256 4c388e9eaf3c39e75d003a58020e491b675b3a6054c702062a9c90e86f691d96
SHA512 f203958ca9c7d37daccd342a4deb125b60ef839b5b674a2a0220d7f0d770d5cfcd5c1f691470200bb4d8711f2f6a77d8b968e17020dbcec8c40b127a09f5f9de

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\dec2006_d3dx9_32_x86.inf

MD5 c28f4fd1644e2a20b1c897438e197e1a
SHA1 5178534444ed7dec8c63f02defe7bdb864c47123
SHA256 ef09d783bf5cff2cfba99946e5e71fda577b196a49c88bed1c51b5fd29cecf94
SHA512 7cf93260efb1d794a17ba25b1fa02ba03b0ceeed8131d274b805155072a9a2b92a899471a8b23add8bf46c6a5a3cda63499043eaa754001bb43cafd882c8e708

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\dec2006_d3dx9_32_x64.inf

MD5 39929631df326b944470256c4f9cbbf3
SHA1 932de27abf59c889c02ed747f0ac04f5e494492a
SHA256 ff00313af4a90f426492d72969f5efc6c56a17f2dd91f20cb5c0a38d9f1f2b6b
SHA512 8dd2755a2b2fb90c6880cbbde65d127f55d12df2bab4560ddf86d6793b2cd4733929d97efef5fd8eeb417731a571888c893188df0361ee57eb4437fab331cb13

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\dec2006_d3dx10_00_x86.inf

MD5 1b702c5bdf738a8abf4a3108097a6b7c
SHA1 c1d9c9d5e07117f273064bec36ac92b5ed624d38
SHA256 33291a47388edecc059f1825c1979142d7a9cd4a850716f9dce687deba1fa750
SHA512 498483dc823e76316e977dcaf7fbc557c3e60c67129a678701d5168105edc97f97479107330d5eb3989dc179273cc9b74d055827f036f2f3551a0a3d398f04f4

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\dec2006_d3dx10_00_x64.inf

MD5 eec826f7141bedeeef38c5a3528b5034
SHA1 529081aedecb7b9fbc7d9707eeb6415f98bc128e
SHA256 2a43ac72ab9a6f4771c02b6e10884921b733b86dbd7ebdfc5502d011cd5c8d05
SHA512 62cbe09326cd04c891faa124c65554fd631382a2e078c70ef72a1a07d57239b3ce599b57be3fccc755075174df1d63ac3597dfb3aef9b4ea34ba4597d804d2c4

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\dec2006_xact_x86.inf

MD5 211700aaa53bda6894be85df3dbdc792
SHA1 4874325e984b4f0d884cc732da474b3bb59d3848
SHA256 4c0a40094228a51f567bec65c2cdf289d268812c1af579e3c6b76cd3adb77e12
SHA512 8f51d965cd1ee20cac11256afc5e422d94d43435729d653b25c5347e108fa50e59c3bba18fbd7fe4e2a1a6bd54da1622b80e029a5914e973f3faf5884a262baa

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\dec2006_xact_x64.inf

MD5 ca414f7196d9b2a7a9d4057ca0714fac
SHA1 7eae4a5bfcd42915adeff5377036ecb4bd656999
SHA256 f2f2040b8d13705f00d8e20a53f22093aa0f8c8d6aa6224992ba727ace7b75f6
SHA512 1efb725a49a8ea7125074436bfe988af360b1ac22629d34a754cabaf3c151855d08e826a0e244cdf9b624b531de14d23f32c1c16c82f6832c8604cbf52882e11

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\feb2007_xact_x86.inf

MD5 5f1df74b0110f56ae0b6556dd2dbc14c
SHA1 c8c7d383f5e37c06015e1304b599568999bd4e09
SHA256 64b6020f43bbab7f7c2368fcfe7224165fef555b2bef813aa13b2d9f6295d46c
SHA512 06572fbaa625c85b05f5f4eaf880083607b6d010a8d4bfdb28cfbb1021b08e533f3491080faecb24055acb897b337d83caf9306fadebc1f1353763e8908850a5

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\feb2007_xact_x64.inf

MD5 42161a1071084cb4f32b0d7d748d9b62
SHA1 e7e29605c21b7a2c370dcf979a40c50b93ceb298
SHA256 184c1684c57de07983edaaa1ae2751b263497673ee8418af023a63fa03553f53
SHA512 2aa8e864dc28ee5d0583d044e3d8a9399d8d49b9fb1c522c1c640eb7b079515ffb0bac5280a220c23e15ea4c7ad45c7f1722e05e9f9baa069f4a2670e4976358

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\apr2007_d3dx9_33_x86.inf

MD5 044cae9c30c88bda73727243f5e5206d
SHA1 de744e349cf4ea458b10657d510966d21ad08d67
SHA256 349a09a2791d697bffffc61410a536cdcf258f0d7c86dda44a297e8aec4bdf00
SHA512 18e501142004afbcd28b41bdd3a9b19e2eebc047d7858ee11a9135f19759cfd8c643ff074a51e937bbcab7162888fd95effc146be21fe63dfc300ef03ed44056

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\apr2007_d3dx10_33_x86.inf

MD5 fda5776cc944ebf6d84fb45c8a1a35f5
SHA1 f3b603dcdcfd6a310c2b0945f1a3b97276041ecf
SHA256 3286ba521fda888b1808f12955a58d7da4df7d2fdb472c7837a1e0e1a6317a06
SHA512 b051b04ce06ad21d08ace3a28d490214556f4b5be060ee05f8a4ff872d1cc72df05624021a9a0cc1efa4e63772f55cc61f11edf03537831a44ddd6ab409e83b1

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\apr2007_d3dx9_33_x64.inf

MD5 e40a6f3215c3f1397eb18b3388f95032
SHA1 4845590abf12bb5725d94d7aeb953a5686918537
SHA256 2d87efca75d8b9aeab3262841d52a7c56bad34ac6b9691f4df2d89b14c950f8d
SHA512 942f54a3984a29e1973ec096709de890fe870a9dfc84a8c5597244251cbd69f84543cc5cffe620a076d0a16dea6e393c6790553d6d9e2fea1af1c0f00a12140d

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\apr2007_d3dx10_33_x64.inf

MD5 00ad98b94609033c2819745587b0eed5
SHA1 2a07dda60a97dc2b4a7cf3cfc6245e72cea0efb0
SHA256 3e61c4d723d282c36c5493d82644ea96715b7b548e50494d22b4a83d4e2b8237
SHA512 e7fea5f9186c324423c0b129dc3e8594df49dc84c61400f4635ccf688075b256d7923ca8f4483bf7b2fe43862e71aa134cf2c9545a23c622d0cc04dc7d6dac1b

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\apr2007_xact_x64.inf

MD5 dcfa000ba60f73c2c02ab590faa1ae10
SHA1 154b9ff40cd92bfaa572b289662d0305fa2fa017
SHA256 bf6ca1165632efccb0292ae8b739ce68d78ebb95dd39b8e4c1717d78a026db10
SHA512 34f6cf1f3fbbdd79d04dd55315b0074abc21b9c26df6e2fc9d66c6d15f36ad35edea741000a84a25ea9a68a94d46f500398a27c8865a30746574741dffaadabf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\apr2007_xact_x86.inf

MD5 99f23af200574f24c4c5d9ee12fd2cb8
SHA1 f0e50816ed808748f9379733921c9302551cd937
SHA256 008db10780aa8fb6f20b7aa5f5d513ca77efb36c8dddfb9ad89173ecaf700af5
SHA512 5e97d157ed8ad10f9cbb9490a16141fa52b2f32e09edc7e7f5e4b2d9c9bf38bbb85706d76543ca4ffe9b54d5fbc4b763b7df0893f1e7e56ae4c8ac1a720dbaf2

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\apr2007_xinput_x86.inf

MD5 e188f534500688cec2e894d3533997b4
SHA1 f073f8515b94cb23b703ab5cdb3a5cfcc10b3333
SHA256 1c798cb80e9e46ce03356ea7316e1eff5d3a88ccdd7cbfbfcdce73cded23b4e5
SHA512 332ccb25c5ed92ae48c5805a330534d985d6b41f9220af0844d407b2019396fcefea7076b409439f5ab8a9ca6819b65c07ada7bd3aa1222429966dc5a440d4f7

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\apr2007_xinput_x64.inf

MD5 94563a3b9affb41d2bfd41a94b81e08d
SHA1 17cad981ef428e132aa1d571e0c77091e750e0dd
SHA256 0d6e1c0e961d878b319ac30d3439056883448dcf26774003b73920f3377ecac8
SHA512 53cac179d7e11c74772e7b9bd7dd94ffbc810cfc25e28326e4d0844f3f59fd10d9089b44a88358ac6dbd09fb8b456a0937778f78ecc442645764f693ccd620b8

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\jun2007_d3dx9_34_x86.inf

MD5 b1d65a13b527d75ecdc30cabf407d103
SHA1 db6df8ce6c28cb4a0275aa134c2d42a0ed957fa2
SHA256 a568b7b8a0360ad94b1ed6388eca6ca9d8770937360a426a0fdadef9a4019bba
SHA512 7d80f772b36c408c258f7db1180bc09996620634e6304761f5c10659d0885bb8d0b19bcad50a13a5d99ee92dc8e15587534d966bd32c5a8910308eab623a7f86

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\jun2007_d3dx9_34_x64.inf

MD5 d203c1993f21a870871ebb0c99de313d
SHA1 e69a5bc70fe66f89fddd81330dc148a1e788a56c
SHA256 77f3fa1756181a90d2ee63c26cddfdaba0d720c9a49121db28746cd02b3e071d
SHA512 e03c341f2d8df6e8174447d32bccb56b096073a35a3d8193860bd4628d812d1fa381bd35a55e17b4f27c5c5fffddb25223d932e995736fc608030501954d45ba

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\jun2007_d3dx10_34_x86.inf

MD5 55e30750af2bf57321ad1097a512d725
SHA1 0af3c73afaae0e8a1fdabe25beeb96b32eafb9ad
SHA256 808983dfd3db7c3452589ea4e14ab4af8ef47dbad3b639f9a3c55685c9b73867
SHA512 0ad8b51a550243d3f24ec5934f2b5e53f1d8e0b87997a7cda38840b3160121f1e221e6cb09d3f5b384df74be2ed10d4dd92fb02aff98bd0ededab751ddaa7149

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\jun2007_d3dx10_34_x64.inf

MD5 bf312732fe77f600a36f2a7b98a346dd
SHA1 5e9c70959111dbe60ad86258cb5bb20d0e9caa0b
SHA256 0f75b7ef71e183476ec938705024eb8a10a77d7602a336be876c7f5d17429725
SHA512 10f3d128da5180ecccda522164269e4940b69a7f55af9501de648e572ab5275f02c113be5342969c73e118fb7ec49209883c4a8d6c4648fb898289f77ce7a3d0

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\jun2007_xact_x64.inf

MD5 c8ca749e73883789faf6561a375d9b51
SHA1 fabee2ac65f1d4267da8df07cd3e4cf4eb19148f
SHA256 405d8cbe3c87b16afac2a9254497412a42de4ae2d8fb470a1234dc3260e0b90f
SHA512 56a0fd5b8f065b82f5f9b73dbcbf912045847180a6614dc48ed7b27fea3909839615aab0c8d0a122d9fca952e9591da5152b4c618e84a2d7aa409dea4fa4237f

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\jun2007_xact_x86.inf

MD5 757a5f0cceaf39b5c7c9bd61650fd12e
SHA1 a7b3dda77f0f2334466d324eefeb3e5f6809d880
SHA256 33b980fb973394d9d8cb4645914d4cf6793bf92bd311e0431ce9cacc59fdcbc5
SHA512 f4f969b017c9233bc4a2267118fe921689b3237d28fc2b251ea3b6227e0b17dee84dfb8df6491928791891dfcd265688069b92d8a88cb9dfdbfff07b24a4dfcf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\aug2007_d3dx9_35_x86.inf

MD5 815d75e4264b1f9c0bbcc529ee7a290a
SHA1 cc956156066c87ce1bd2b7628453f1824a426412
SHA256 c0d87c1b079b54b75b86939199ca5ee1f796ae3de9c4ed0ae074a4fa01823c73
SHA512 bdaaca529cd52df20cf1e35b45e1824fe48d09442666b18faa3e948937026b09d880a27f1d915816bc6e1d98b0b486d590f867aeaa046317b7f48d6a0f949391

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\aug2007_d3dx9_35_x64.inf

MD5 0b3f4e715a43024fd00f769e62cd8b9d
SHA1 ef6de20d95a920e3b69307737976bb243783160a
SHA256 e34ad9e49f31cb9211e0f350405c344d93fc65075e470c8fe09dd78af68f2c80
SHA512 336df101ab341c5f22d516089fd31fd9f0541a01d3ac4ab4e171b73452ba3bab3cad84af50f1e9da17c46bcfbe7a1b52284e2ef2af49c67c6d6cce2969e14ec9

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\aug2007_d3dx10_35_x86.inf

MD5 741a5ce76295b86694cd7540870eeec2
SHA1 2c165af0047c98d2864379ea5fec33bb1507bbf9
SHA256 7987e2c475705bf8f049a15af946ec0cb5ccddf27c0b5c8126694421df601770
SHA512 b7d0a0bdcd060ee263860024abe5b054aeb2c8c8c7ccdff9cfa9886188d7177b1bb8799909b3c95aba181292b5bb9f9426ecab0a6a2689970afca5a1739fc4d3

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\aug2007_xact_x86.inf

MD5 8898bbb8acc1b54b3b9b6a2f6b0e2cfb
SHA1 e5ace499d26e573544be76c8e45cc5278d15022e
SHA256 c246c38e41ed71bde4b3cce4fe337826173896a04c26f8b2a00b06bb0cec024d
SHA512 b0633c44541cdaa2d2c3174027d849ecdf5ccf2149da4a2932f59db600cafd8b959aa0382973e23fec7a76ed7555e96065a4d8aa077f50c2a14e5080673aef30

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\aug2007_d3dx10_35_x64.inf

MD5 703b4ea6a182ee3b48026d01319579c0
SHA1 3184959599dcee4e74b251ff14dd2aac81e2ad68
SHA256 af4bdfeb4283f04e24475279931e042f17052224cf708f0c444fba2f2e221289
SHA512 a6e67befdb1d757bc08f6a726e6d79c4f51324edbd1f48730616e27079bfa60262b88b4c49cca046e3da3832e375dfc29b2ff48b7007443606da94793ef7ed84

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\aug2007_xact_x64.inf

MD5 a78f12b4514614db269bf55faf383875
SHA1 0425c3e3ccb15f691d6f5d30b71856138063002b
SHA256 2fcc4bdc6516418d3b4935c301e14f30e3bbd0adfd264bc34067b27b0b266b8e
SHA512 9d1cc2704541b71b246c2cc8e6e1d667cd7e691e42865aa5b0a800cf26386cf00781ae7727b7f90711e987148e98f4253e05b6d3872d3f69b0584bcf97b3fbea

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\nov2007_d3dx9_36_x86.inf

MD5 08ffe480ee5e54fc19a2feea46adced6
SHA1 c939391c489bb321f70707183b0d3f4b5f13911b
SHA256 843764f70f56d430c0695e263c895a135a631f793213d1005fafcf9c210d1ac9
SHA512 c05aa34b860b5620c982731af15889da5571395fb35faa24d43ccbb1b42dcc756769a0b9153c28112d7347f28d4ba933d8b15fb36a3e511ac99eb148f848ed99

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\nov2007_d3dx9_36_x64.inf

MD5 345ecd585eec22fb33a62e59c2758b6d
SHA1 2d6ed63996903c32b3e7ae24d86c924b11d53e7c
SHA256 d1b544b3912e73e5984cd759096120febe6f17e41a3cf920ef82431b9b569c1d
SHA512 6d88cd48bc32a008989ec4bb71afba0afeeaa12f17833fb4072c38b237bd006f192f4e4e7a65d8aebe5d6dac1d13098eea370b03ced343a5541e0ef23e813364

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\nov2007_d3dx10_36_x86.inf

MD5 582814cd47564fe8e3424cb2eb090501
SHA1 87a2114434564bb0a5cb4ea337577dd405f5e42d
SHA256 96f48bb810055699d37e9e27a65947483a0b4df304870e3b5448d3051b3e4926
SHA512 203d522271aacc0200bdd684934a8478b54a258f55ecca49a178ccabf418a328cd02ebd2a9656bd9dcd40c33de21d33664c5b16c1e7877de424d37b4f9b3e7a8

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\nov2007_d3dx10_36_x64.inf

MD5 60e353607750ae5e63cb8e56f443321a
SHA1 8f1b07f8cfbd66e9a7e3c15118bddd99b04d6871
SHA256 7a49ae818e199cf9f9bd831f94cb6d03a1e72a141d76546261979b30642757b7
SHA512 038aecc1264f608c6028ec2288f0d8de6c9202bb3d1e96fd247e889afa06f1ce592bc9e224f37e83f29c0984cca6c4e85ab11eb28570aafa20b076f2b2e5b6e8

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\nov2007_x3daudio_x86.inf

MD5 4287ed3f6647fcd80ec6b0f7f2606964
SHA1 27b2e4212295478645a017a4df820af6bdb4dd0b
SHA256 f882bdbc8230d24b24e20f9d0db447586e9493801900a8ba381eb493bd41f5d5
SHA512 c816d7127fb7fadb971b757ba76d4b918fe18bb16e5d2249b4bd80b0b6c47208e7ba5e11b521d9cd0a23d464c392f98a3c617b91c0ae799f3aa10401b4e2bcd7

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\nov2007_xact_x86.inf

MD5 7e2a5eadf9f1eaf90d5eac15b7a9f558
SHA1 907cf74056bf7ad91e47c98aaad9a092ab42fd02
SHA256 24714f229e479338ed89bdd6143140505fd63f517b7e71170ea6c072a1748b06
SHA512 63c2f438e6feaec2b9fce15617940c97862a54527d549fb6ea149e4d18199c1752e255c6cb167ff20b9cc1f74b87ffc97110b65652bc5c3883cd14894d21f8fc

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\nov2007_x3daudio_x64.inf

MD5 55402001ac41f0bcd1f457a36d298848
SHA1 a18fbdc9631610f2550f05cc3aed5a665afee7a4
SHA256 1cc72ca78433fbb72ee6b654c908748ea846c87c80424816745f285ed3bc910b
SHA512 96cb7ff1d43a7c1642d8ce9cb3c23ba460f6c083a7927fe0ad7a3ebb85649c384ef0542ee3e7dff6b99413b95a2a333327cd28349665901f466782fe96ee491a

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\nov2007_xact_x64.inf

MD5 bebd51d24aa338f6192e291d03684b6d
SHA1 cf2c0efb60f44748b0ef3f95276b0512719f130d
SHA256 841d579573afd51499c7cd8ee986a41db63cedb722e8fac351d3632ff470c161
SHA512 28fdc41091d761faad79c1af33da0372086689113df2f1cb40513d50727e5aefd652a977ad5c92bd62f1c5ef9cfc24c23bc6758ddd6a4d1ac5db0b5e401432ca

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Mar2008_d3dx9_37_x86.inf

MD5 020d1260794d5780937f0f7a919cd62d
SHA1 511ecd1186deaf129a5532b79fc776a9ab8fa9be
SHA256 d55858e166a2fe00d4acc30da756f0ab2c4dd5a79a9874eab3100722c74a1b75
SHA512 201e24e51dd859c35fa9d0a403993cb0b2eba67effbc598ca4491f05bff4f0805731b1e7cf6026b7dff9fbc3167c16b43887f080fa40ac11c6ffe09297401f9f

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Mar2008_d3dx9_37_x64.inf

MD5 ec75fe979fd2c2372ea75c72a905c832
SHA1 954642c9087489285c8f0786b63aee108ec08d04
SHA256 a4fda3373241c2748a969ddeeb6ef41b3cc1bca6608362ba87db75f69023fe9c
SHA512 dcaa772d21d1be7fe59f1ad32d10e7cb454ed2a4d98b3add201f8bef03718c29f9915fb4cb779111a954a9d93d898393ac2ba593c2d4d378b88bd492b7b5381b

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Mar2008_d3dx10_37_x86.inf

MD5 1242da12c637d5976af936f60f387c26
SHA1 a6890fa9d41f6785d54a7d3e1b229b64010089ab
SHA256 bae3bc2b7071d2d1c657a87a8c8af6c0fb5373f11c9aa5f61b406924717d0792
SHA512 7fcaf6ac1a8166e8c68d650dfea40bf329565d4ef92316ed0188a252736c9e288cc8f7d017b0de4af05245d1bf94a85b2dc72a93c618a1f2caeda45fd84a6a09

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Mar2008_X3DAudio_x86.inf

MD5 9ab8a749708995453ee8a995a877af2b
SHA1 eb8a0ad7f7b38aa190e2fb8a4a2d11cc9fa9b493
SHA256 0b6e28f00364a9ff436c3d99f0d4e80bf615f1450f420122324853cc0b88b16c
SHA512 9b0ed586fed0ffe25d4076b202afcc7ad580dbb05593e392a12d64b639098f8b7687463f213e53dfbb85616c5a3781adaef8f1ffd293c082a84291472266480b

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Mar2008_d3dx10_37_x64.inf

MD5 b21f653f707315be4c85ff4630af305b
SHA1 32b0d69a786a2cd37d2fdf541931d90ae8656944
SHA256 f37681f4d49f71d48b1960c3efac74f28af9fa764b29ed3a40b5f424fc8f60c9
SHA512 e68348c9413f77749218fa34e55e416c7bac95f234522bb6eccbed1185a3f3af2a393511d3b83dbfc64580e1725f9f53e7e586570d696a3fee76761e8b0902f4

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Mar2008_X3DAudio_x64.inf

MD5 2f7b3369825c6b74f4b645ebf52c8e98
SHA1 105972c77223b943df6533d517c698241ddee9b1
SHA256 b7dba312a71ed109c9c54cc5cc096096eb8cf0962396e8dc996f8fa28307547c
SHA512 88a47bc3520f9fbc082f1ddca7e083cff9bdbe5c4a0a851925ea14d8e0f327f2a9982e5b4ac457e4950acdcf6788299c4e13a15ff38bb76c8d212f1466cfcec2

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Mar2008_XACT_x86.inf

MD5 e3ad8befca2528572d6c51a15e072c94
SHA1 9718337261b8b93b546a5c20bee8b44d26707053
SHA256 6b0cc0dc993e172855864fa078c4e5c8f2f46bfc3200bf2ccdf3292931ee3cb2
SHA512 de4915424d8a53ede76394fac14c4de46838f21afc8bf30f560d2d00df4f366dc9ab48bb343be3580087a7d5862a14c08f83b5d9cc8e78aa4cce4e6b71b70c59

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Mar2008_XACT_x64.inf

MD5 d5debb90aee2d6a73bb448aaa99f985d
SHA1 950ff1a768bdabf14ca2cc6809431c3be8b19d9a
SHA256 1038a41e63ee8abbc8be85a86fafb2ac1d03defa6b88deb270f96a6ed1a97122
SHA512 dca65e91d4eb619fb34615a3c8683e04af84e843346b88bf4d52cae0c27e52b5a7a417c531eaf50cf45932e3fd6f5fff1bcfeeea4fe65efffbe791c8ac1a8101

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Mar2008_XAudio_x86.inf

MD5 35c6f6f109257f242cfb2ad2062d50c4
SHA1 222406bf52449ff0d5a7ca8ace6cbd3dd5f41708
SHA256 472bcfb54b5d63377da128596dfb30c8f200f79edaaf6d29de1afcdb71a3413d
SHA512 71180d47d8c177d84e68bcd6b9f948dc8c946f7a6c4091e20e04f1c8098b9ba92bde976194b06595834ba4b159a702c091d04ec823ac377b7ba7713f057f99ee

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Mar2008_XAudio_x64.inf

MD5 8eab978252843c5c47a913e4eee460b5
SHA1 b5ac7e6a36157c41d56e1113d7768e67530640c0
SHA256 10a2db49dd3bea59133bbd82b3fc0f8a959b65b0c250c11a9a6f3123b961e6e9
SHA512 d1b7be4eaba7126f3f64d625cb9c9d16dd40dd1dec96b4d647f9a5e24d6b945faebb65f25348d9ffbe092b03b1a54414cea9a2e4d1eb1deb102ab5abdb34d810

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Jun2008_d3dx9_38_x86.inf

MD5 c7fc0a82355bafed08a5597930b80263
SHA1 037419fc93581e053b4cd31c57222c8b8761e242
SHA256 06faf7f7ea5503dcece13d6537e57cd2581d5188a5d839fe7f118298a721b51a
SHA512 51829843dd7e2e501d6054f500fa523bf63f19382890880cac0e3f207a00dbc544195489de67c7dcf876d9061f2af12bd346513e1c98047b0c185669be5d8cc9

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Jun2008_d3dx9_38_x64.inf

MD5 df5538bc9e0494845a8e2d607e06e561
SHA1 a056a64230f03835dcf9bbc5d84edc2eb0c09484
SHA256 ddad68974990a21a8d4a91c47ef1034ddf0475551586f04e86b8cd2f0c990d6f
SHA512 4f19379034eb47e01de81a611facc2c8300c7b10306ebbabd232a249debb4acdcd3de42b71d851011be5b3abcae1ca232ae6891be79adfd754369dc0f16b249f

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Jun2008_d3dx10_38_x86.inf

MD5 d12a6b9889eeb330b4a4e86e9bd175ae
SHA1 62a4a7cb8fcc0edc240caea13b2b487cd012fb00
SHA256 f5f54664ec67f6333a9f0607d891bd0dc2acfee8cce09ac4ee0372b5d0aa12fd
SHA512 86274606e76b98b71dc4eec5180b3a52cb6627ac5ecc8b008512b7bad404e03b834b7129ce326a3c9c1cfa8b19bd5e97467a9390bc8a0e749771ca06d9f73491

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Jun2008_d3dx10_38_x64.inf

MD5 e2b760696e2300b1c9b6c2531b39d029
SHA1 1c576840cf04b73de362b28b943bd69b09b3883e
SHA256 0de0ada970774620c0905227666fc30910e64f3cfa4b99e4c5481685d12e3ded
SHA512 94e4bd9834c21acc7709fd28dc557455929f940be0a4a794105188dceed7e023f87a489a1de44a9f93f3780f6f9088ab3d4e829a0089bec74a25ba4297a0dd73

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Jun2008_X3DAudio_x64.inf

MD5 0225e16dbd17754f202f34cc1fdaa60e
SHA1 d8d7e02849d9594b346023e9e69a5b2a4fffc45a
SHA256 f4526ad18f081b84a139e6d98923569fc8ffc7644e20499e2f68abfb3e87753e
SHA512 2b308f4c4592a80d4215781ba7ace57f93a7449b2ce36a7c78203e1f16f1b7321dff6c32272180c9cbaee5d31afbdcd11f3d474004fe13c63752d3c0201d2033

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Jun2008_X3DAudio_x86.inf

MD5 7949a4d37b517c39295f0d656cbde501
SHA1 27313949fe172d687e9faaaf91044ef56b7c973e
SHA256 0064b7db5bfe52b6f40f61d962901c7baa116abbc72328f50586b6fa65f894bd
SHA512 93d947c95b7ae357bd47a5a050437cb05192eb6c84e9222a46d70ecc7c54bc2a5cb1d3f65cb2a4db5fe18106ed9be5a7aefef08f9634b28cd5cf128bd00352fe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Jun2008_XAudio_x86.inf

MD5 e82ee7f4d71ae8bf90378bb6dc107d57
SHA1 6fc8e3437dc9d87213064e69bf0769d20fa7a739
SHA256 e5e435c4536f987e1087218b025e6dc66c24c3e300e839391891f1b3bfd360dd
SHA512 baea9f4d6c744f26b55426c9666f135c07f3e8af15fee04cdf34c0af83567815dadd5a4ac8a6547a49d58e0c837a28fb18c4fe1f50fbed8da9991bd2aed8ab7e

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Jun2008_XACT_x64.inf

MD5 9b2753cd7967a014a6391b44900ce258
SHA1 d6d227999ad32de75e05ae7d7fc43640e8893ec4
SHA256 90577c4c3d5d0de80c805caf0cc713582698ef7224fecf4ff911ba6309c5c920
SHA512 31136e55f01d382cb20f7109d0369a3ab7c8997dde1b65e9214e410ab686add4ef6950241c0aa9fc93ea0cfe3134d98ae1f3f48b44e92a620715bf159d6f5914

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Jun2008_XAudio_x64.inf

MD5 c564c4dd81be3fe65783bca776be371e
SHA1 b60e1e1e34b8c56fac53dd7af79e1e05e04866bb
SHA256 9ce21064f2feed9bc9426a6e92e9c850aae31abeb80c7906ff917fbf4cc03913
SHA512 5b790aa1a6215ce8687cf3503267e31d1d7b41b5e4675bc634be957fbe14c53556989278017f2c97336df13d16eeaf975e0602a4cf9c8356598c392977df4dcc

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Jun2008_XACT_x86.inf

MD5 59c4f83a7fa2a8dee4970d37a96c2b55
SHA1 75b42f58c61d8c8ae185cd8560dbfedb7c4d6d9c
SHA256 79cb10222e466d54908d30ee433830e9673d5a538fabc5f4568521c2aff66eb1
SHA512 9a9b7ea3b354cbb29d88797533332abd4d1ad195b28ee6af05a0c6f83343b1e2ae0ce172e9941eb5f0d7ed3fb0382c1319fe4808ea2bf8988a1dc63b78c8c095

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Aug2008_d3dx9_39_x86.inf

MD5 b28ef6e3eebceb622d1431fedd9f545a
SHA1 c6ae73cbbdff4632911dc1759a9ccdd73056ac8b
SHA256 8a23d386626328f9519076f33d5c3b71c639f2347741442c3374974e6f61bd53
SHA512 4f2bfced9eedabd6ca807a1b88cc063d15a31ab0bd8e2b60c65d6daddac9a111c434a0fa7d7641813d9880612464351ea30368bf6f0ed9ffc69bfb4d51882d12

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Aug2008_d3dx9_39_x64.inf

MD5 9411bf36f2075b7e42468277e8020e40
SHA1 c38bb84e7381baf0d2720e5f1822781a639c04bc
SHA256 4cbb1c6804b9c76bba4e41f0d2a45f1daba7350af9da4ae6966651f7f4da041a
SHA512 c860da71a89c41e81c1c89b3e1f4e93e747d7dca1152a4ba063f53f899fc701fe24f14abecfe883571af518df4c2d766432ddbae2ccb2c52bd87d85f6ad015b3

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Aug2008_d3dx10_39_x86.inf

MD5 baa493c7a361f1ac0c5efc94f1568f97
SHA1 16dd101673b96b54bc5a38c20ec3ed785c6bf7bb
SHA256 e83f8d48323887af89648c5bd7af713b42d20ccb757be34675f1fa527e6cc33f
SHA512 2e8db3d1ce2830caa9a0f698bc31e2b907e39a233fb056fae44062b3ff732b3b62f12fcb2eb948c1728df9b64c4d8ee873c0f95e56c2ad1727140236ecc71095

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Aug2008_d3dx10_39_x64.inf

MD5 b01ca47b1cffd13ec5d8a6a592ae8449
SHA1 e1b615488ba42c44922522dd47b2e99f1b5394e7
SHA256 a5eab981c313538afcd7abc7742854d251c736835ffc1f549a4768fdf49c3e71
SHA512 2609474f1ce19473ff8f5f4550f9eca077bcf063bff8ea7fe890493e1119e80e6b233141a8e9dbe7d9f1e167c4941fead6cafe506f98053e623728b7edcf4ea2

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Aug2008_XACT_x64.inf

MD5 f616331f6e6916d1d27fbcf357cf1478
SHA1 e5530aa845bca9b1c89abbbc189f65584008cedb
SHA256 cf09d632a4b2cc670d435f356f309dc58359735834baed10343fdfbf37eddaa1
SHA512 c39fd664f43c4cfad8e65d5d6b3ca845abc0b341cb663acc7e274a00c3218394d3d04cca850312074a294bcee4e5a0796a3c90d6263de63f8f83078d9c44c8ec

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Aug2008_XAudio_x86.inf

MD5 e0947065f559b93eb93a7ceeaa8bfd44
SHA1 39bb647363b00924c7c0b3792f8017d7c7d9e3b4
SHA256 f211a7d99b3ffa0180bd91f68b2c285564227e075d499e950e76fde04e7707e3
SHA512 620810dcd56857b2d3d5f1271c5d4979cc90977acebfea81edb472d02da8e6104e89984816a91ab57a2469253a391bcc378093f1adaeea7c0d35f7f1b794969d

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Aug2008_XAudio_x64.inf

MD5 fe4812a5425f1b6d9562b9609db16ba8
SHA1 01a206feff15ead479848ddf056a560701960fc2
SHA256 311bd58ed7437a1cc79692ae360a02efbc8ec51194abcb80bad78b2208a94d58
SHA512 2a98b997af381504ec8e2c5b182c73717ab81a455ae77c57036aa904f87dc8fdfd16a7835cc1e631e9435257da8bc631946b32d8f3bb72d260d1114c4c3c4390

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Aug2008_XACT_x86.inf

MD5 d2aedfbc8bd56092d658bd60b464dfa5
SHA1 54f8e1cd59f43cbe02767face39fa42f50ddd229
SHA256 f1daaa8d96108a4a338f62a4a1339143ddc566e194ca00dde5427136bfccb0af
SHA512 41d74bf9899e8d904bb0bfeed5e053ac3c453e0d591526aaf5305ba33128abfe29cea09bdc23e2131f91626a66f0ff58f6cc02fda9692e58fb2c476795e2b6d4

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Nov2008_X3DAudio_x86.inf

MD5 e8adbd1e68258d5657a34ea722f3bd32
SHA1 ae4e88d17663889e841992436b524a35506ee534
SHA256 d0361ffe046b7a7a374a4938d419e4121365892e4f2138899f670619ab34ac6a
SHA512 62b132cbde7afebaf20a437b810ea42b7c782eff4fa1f83e2e586b2fd9303829ac90c54704e28f53010a8487e04bf92b791c85fff4c949a12cdff2132c2b09de

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Nov2008_X3DAudio_x64.inf

MD5 fe8f918218c40fcc007bf16e9cf0b76f
SHA1 2b66a5a714bc7a0ebdccb0029e179bb3f32009e5
SHA256 d04d052fa3065cdf00e96bcdd7dabf3583ef10b6d80fd67cb03c32f09f2e602d
SHA512 9845d8d2c0c0c618594e692abb382e4244d95f5a06c48d7ae694dd09ada670ff23bab07fbfd09310f60f6684267ed0709a1d146da6fbbecef4790b9373840b2b

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Nov2008_XACT_x86.inf

MD5 87c8d16c6db20854f9610bd5be6e5ae5
SHA1 c17d78456637cc2a67b35d48f9cb3c730526425a
SHA256 31680e7a90d24eda04c910e1f3e6c02774cfc5c36ae08e7ac043665264702f83
SHA512 061d80816e2e5a7a2df68cd91a95e5f17aae8610a18b254abb7d5929826b14da5755eb01912eb369d1fb5725f2a4c144ce92e0d08b61799903d83fc91f35413e

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Nov2008_XACT_x64.inf

MD5 d28248a55a7747733c0e4356c1a15d70
SHA1 befab66a5faf1889c6eb2208698874b00024b78c
SHA256 2d8a68e726728e4f4be05e35fca812b855046ce4bf697f0dea14094dbd7e1d79
SHA512 f7b89d96e287ddf8200462c4eb0415f2fec81b7a69e5fd4bd5bd33cfc805287d287dc403060b01639cdb67b14ebe65e42f75c3a1fabbcaf8692d315cd5bf45a7

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Nov2008_XAudio_x86.inf

MD5 052b3294a9345385406ac2056e724804
SHA1 79372406f5cf40deefd8ada18ba238e80360ac70
SHA256 950b5aef596fc5048732f6cf263dfca5bcc25df7dc17df91efcbc3551751a3b3
SHA512 9b0cff2968acd2552609169a138d40fcc25ff2c35b70ba61cabf769f4e5b54774f32392508867b6ed9198b3da5a858b3a7079d7c4a4ddb31f63e4d4985efd2bd

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Nov2008_XAudio_x64.inf

MD5 318d70544da7620126540b0712200e7b
SHA1 707c4a04f02e10b08a16528b0da8b284cfa315c9
SHA256 ed20b160dd26a5ed3c220a1fd9b5fc880b3280ebf56c2f73e76b6d4da5ef82bd
SHA512 4acbf6b35043ffe9c740e3e48fd9320e10f5dbe317dd89dcb97b68495b60cc2cb2cd98e57fad030ed053636b710d344b96667b69bec4b7727ba2508f35f23aeb

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Nov2008_d3dx9_40_x86.inf

MD5 d9f6cb1edf9f92a045f4b2b8ec17cdb9
SHA1 fb362c8de21847523211fa512cdbf73e5b49aa60
SHA256 955637638635025f01f82febab4a4977252a765439d90ce940fba752723b9db6
SHA512 e22fa0520dd3f905b5170e3ede4d9b9e40b0522c9b39308d150c01e5bc381949d70ce04818efa9eb2a08bcc3b26f2179db9a5aa1a5d14d757ee2dd2c5c3cfae5

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Nov2008_d3dx9_40_x64.inf

MD5 4f4a9d3074a4ce8fa141a17b0c2e97c5
SHA1 e77b4e76ef70fb08befd69a03b9f5dcf02c81428
SHA256 d071b30f56763506da0c939b8d35b0540bef3ef0d51a5cfbc45816ca91f891a3
SHA512 7b961d3b9ed247e75047a5bac6d65ed741fb3c210fadfb23d4b77653af7001fd557fecbc2bfacac00188894374ec7ef3b0a5c1b1f6ddb0c9ad3ee3dcd1f32027

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Nov2008_d3dx10_40_x86.inf

MD5 7a3a4c3b7c9c979261ab1fe477809731
SHA1 545004e59315dea0bcee6bde61bde3c45f79d107
SHA256 a4eed39cf36adccac4317e5822b30aa37ac5b001bcf4a24f7b5ccac6b8b71e9d
SHA512 556cf8ff26de695e39aa42fbbfe0bb986fca9ecdc08209c28404aa1b285cba8bc4ba62659fd0d929d138c781446fdcf2a30c0e1aa1487f6f1d75c9f15145c7bd

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Mar2009_X3DAudio_x86.inf

MD5 c1501e224e63e7c7fbdbfb7734a8e4f0
SHA1 c6aff4de1b44499d304649b782346b0a6decdbd8
SHA256 aabd029d75f25244bae4ca17dbf9c4feebec0d5f121fcd388c175c3360be1bac
SHA512 e29f985810029a43a987ba45c905aae84d0615330e6fcedf81806a403f59c8861fdbb31935b0c610378d8131d38ac6798c778f5c6fada9f51838cd8a8cfcaa99

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Nov2008_d3dx10_40_x64.inf

MD5 f0769f57bd08036d669104f9bc942228
SHA1 18fd51cbdb46f1ffd47103dc026f1cabf4e4868c
SHA256 7f902d9ce6f6d71be1d16997ffc9661be2540522c73cc185516415a52dced2a5
SHA512 427acfacf52759a1ebd749022c375767fc283a625b6773e06f8965926e0b96a969a27a440bd661015b56eeffa6decce7322e43974172966520c9ea5f6164914e

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Mar2009_X3DAudio_x64.inf

MD5 5e65d9cfe5f15381afe2016508800dca
SHA1 93a44fa2bd9559929c4ed459a336e1cc27738f90
SHA256 4da1a6bbcb7e84073dcd1898f854702ec32f5324478b2fa39c4a9868abeecd3b
SHA512 9ab50d72212f79f949679b7e7c19f698f2b1c6f1d695555d925b7cdcff800a14fc98535476150a15c563eab74d8a98316f44027b0e3ad2834735a6f94aa07646

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Mar2009_XACT_x64.inf

MD5 eb9c537b01096960889de48d1a13725a
SHA1 205f797be95c576f2b15760a25440f532011332c
SHA256 9369fb0a9d3353627c097fc19780e5e7126af47766ef6a4a95ff3ddcca56691e
SHA512 c82ecd2c952b1df01e6c7f7858341c62b36330945dfd0c6bdc404d14bee5682ca06a19448961e03a2093ea00040fd38ce60c126b9f155607b7435b28f74055f6

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Mar2009_XAudio_x86.inf

MD5 ce1394e17492dac92e0257482272617c
SHA1 f1babf395b608a9966cb5d89d85d131ce8263576
SHA256 1b66e4d80f9843fc73b0a6097fb8ed5f3d2cfd5cfb5c328904d2c370bd87bb3e
SHA512 c5b800c6d519d147e37b459b3c667d2e05b6e344ac38be69aee40dc1e20b232c9a123f0f6ec8fb5909ba8d76fbb24a626ffb2f76b08bb3d3984d6ad6541d6a9c

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Mar2009_XAudio_x64.inf

MD5 8d2a8bbe89cd936282ff828c10ae57ad
SHA1 acdedc9919abeead28ef07da56ea33f88c45c3a7
SHA256 4a554d09934581a87a4cc98749b525b6794947b64b8414d380edfd502713f9b6
SHA512 69ee567df6d9edf90a6a2a882b745597fe0720af3eaa0f23ae7241e7519aee5af435566bb1e0cd8b2f6bf6956b21f73d7af9d8e9511afe48a54f68f440aea2c1

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Mar2009_XACT_x86.inf

MD5 25b4458970583bd63b3e21ca5eda19b4
SHA1 a41a7c318342365d64f94da5c2b9d0490895d684
SHA256 764c3caeb1725a11701ca7119fdc49b3219553b79f9a5c1a02b20991391e5a21
SHA512 4239e25d6701e28a58424361d2bbcd27abcd91308ee2b5abde611304b0c2caf3cd807c8aaf3665569a565664b12c53e17aca73703ece809b9f26487d9f9a3778

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Mar2009_d3dx9_41_x86.inf

MD5 b37a5ff044eb65521a290c79ba1a3e00
SHA1 ed505464894bd3e52654834487f3821ae117edfe
SHA256 bd29711cc2ecd924990167ffa95f48842e24aeed3acef1023717040240b4bbb6
SHA512 eae4408cfa7f9c39b101489688cc570a184b8a57f3d20d3b0452a581fb80c4f485dc2f512a39669a92a5bde81fbf474e1585f566ff482e87610780c23126c21e

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Mar2009_d3dx9_41_x64.inf

MD5 d4a1295d35748a262f28c2d3ed7a116f
SHA1 f6794d7a852b3f56e93fcded600077220ebfef74
SHA256 12fe918aeb224a9bd4d2a8142f97c95d58a9a69e591e7e4f95014c155bb03519
SHA512 79a2c575482ebeb4157971c07df42c76b42fca1b00e213f3f311935977bc27c86ecee6b387d93e9dadee06bdbcd6d4edbd72ca0a66925eaee547f1bd195e7f02

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Mar2009_d3dx10_41_x86.inf

MD5 6f64b88a71edf6070f48277cc7e22125
SHA1 1c77aace8a83ecb9a388bdee2aaf38e78af08ac5
SHA256 0170a4b551b58d92a753e86793bf3af762fe3f8d781512f710a4d661aec8d626
SHA512 4349bed85d5c42f921005ad6915571b680cbf178dc1c9fc8f218dbda7cc34b76647edfa324d3c529dfba18da800bc010623a6ee8b34a5ede0a447d1e7dc93827

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\Mar2009_d3dx10_41_x64.inf

MD5 d9bc0224ff859db21a9f684ff138cbae
SHA1 dd4f2ecdc2a7801588166d92d6e6aaf769bb3627
SHA256 53dc284b87f5787804823977d2fbb528e393829367db5d2ac5dd79c581a27616
SHA512 29d5c1e3b54e79e322a966d954935a31aa7108aa31f04e711e36efbdabdbbd3282ff56df9d640fe48f8707d55a7af435c83b7f281177d4d5bf01364786596ff2

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\AUG2009_d3dx9_42_x86.inf

MD5 dff48361a5cb0dea034dc6f16de99477
SHA1 afa417acf7e9da37923255a623ef34c7f6446c80
SHA256 5989dc367a8f84815bcfa1c46ff756527c6250c62973220d1af354b70027eaf2
SHA512 750b69eee07e7d6e7fbdba722e2e1ce377729dca5fe52b4d57d23dd2b80b28b3af8403aa43c469a5042ad35eb09ba4dbefc40a014a137e1b5d87e0f2de203856

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\AUG2009_d3dx9_42_x64.inf

MD5 ecbefd1db4cb52d5089b1d4b20a08656
SHA1 85134f773bccff3e874d27d7e79dcd1e9485c903
SHA256 4887cbec8545b02152eb16f6296987a43a256b69b408330eaee362184f298d98
SHA512 a50afd834f0d892af5eb33b9c6ffbb330ddebcebd123fc7f706f05efac9491b49dfdcfe6196f3b6a3c9f7ffedf4fa723e0499f03417552404c0fb4f4fa3c046c

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\AUG2009_d3dx10_42_x86.inf

MD5 b3a2e761e5da007cc6036c5703e12eed
SHA1 447e852f9bdc357b00864d4dccc7486f1313918b
SHA256 a80a00464775da82c02f628c5bc13cab0d0643ec2a44b28d2acf7c77d467becf
SHA512 28a106886578fb38f144602d2b29c72a906bb24a50b16ea7d3f71f8bd7f194fc0d7c8451dd1c3e9ecc59be3a866c07a23dd394a17d39eb7b55cde7b347bed3a1

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\AUG2009_d3dx10_42_x64.inf

MD5 8d272f58bf5ce42962d7d9835e9b489e
SHA1 7e0969289f839b5dfe606f6ce6ed106460f97682
SHA256 2bfdd3d3bf485439013045b3a08942f457385bb89ab76d9479fbdd85f09e9d96
SHA512 0554257a41df07860233f26330020a45e2dab2613a6028f79914aec7552d5c54525b137e450202db1283b602c3d95908acbf9f1eed20dd79c21fda5963fc2b5e

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\AUG2009_d3dx11_42_x86.inf

MD5 9deabc0af1186bc22a6feacaddc5839a
SHA1 2a1fbc0737777513390210fe7fa48fa8805b15b0
SHA256 edf6764083b47c04fda52b149f565587c6a07d4455357fe3c27c9e56cc57a94d
SHA512 8a3dc2b4d25a2a4ed94cb70e88b051d9df9985f3c6a8af0725bb521e029015755b415c23a44ae8318aea4a04ec9b9c1ffc895df41d28c384d78a465dbb29ed3f

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\AUG2009_d3dx11_42_x64.inf

MD5 520790b3b1eb8bb9ff00e4730d17e256
SHA1 51872475e3c31bb749f0bffaa42ab4ae362b2dea
SHA256 f9c13939779d4526107cf7d3554c122efb564cff02228d02b0b6ff211904f5dd
SHA512 da76b41ba262ac7adcb2b48b8e3845b7c57b1c45a664a1f0bc90d420cfeae1ee454c2089ca37ca5df264759f016c781ab1bf17c026d9733df7271e8ee3320dec

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\AUG2009_d3dcsx_42_x86.inf

MD5 a156f288883f2c1e867896c114509aaa
SHA1 02d7a136da0bc6c8cec933a880c62b90ea8d329c
SHA256 ff9da1b0328fd918cf9558ee57387a4865afe98db1410cc16b1e921c5a744c48
SHA512 632fd6b2940a851bc82c2d57a962dfced3b2cc61010e037ef9065b4a8da5a0f112bc2c66984cf76334556bcde35d49dece1841ffca9c149526a56d3824178b02

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\AUG2009_d3dcsx_42_x64.inf

MD5 32b0f585bed3e042371e125ebc7e0f80
SHA1 dc0f6d3a501cceb50a92848f045725f93182f150
SHA256 f7a5a84bb654837193e0f40b579777f5c6cc2c7341cf90503d6a6709d319797f
SHA512 ff7ebc445ead8c5109585ecdc58c7bb20f9cf9debebe587ace38c64f70277ee6a9c9359af0ff55a1d4bdd2d01b958efdce743f30cf5b20bc8656fe4124ec5670

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\AUG2009_D3DCompiler_42_x86.inf

MD5 e7f9ca8ca804cc404f855be173f6ac61
SHA1 5cbe6a3e7cd65a66bb6ed17930ccfacb8c756fcd
SHA256 bb8834d2366f6899c507bae176a13dadbd44488451a263eac830be95f4bad43f
SHA512 cca663b914f6f6d1b86db83e4f2976b103af041ca171257b9815a689788018434228182bac943fcdc7770d43180d53f887ec987e9639edc26ecabc7d20dbc4e1

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\AUG2009_D3DCompiler_42_x64.inf

MD5 bf489f4a6f1c8772091caf9d3f96628e
SHA1 c0da8b93f1e17acd81e5664ff7f014cf470d12f8
SHA256 8977772e5392b8e79364b3b8d97300e97ad891f38d5a2dd306549401e46b05ff
SHA512 2e21de522c0be4b797262528399d7ec8604fbf466e8de49cc12b9c2e2daa3a8f0977e952bd36135ed4887516d31ff8c782273325d2afad48f8b3202f35b4ffbd

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\AUG2009_XACT_x86.inf

MD5 5b6e899df58c5dd0201934027490278c
SHA1 8379d615b05654bdbdb6512b98abdb93a9179796
SHA256 1eb88b5460824fd32eec9b90e7ef5cb529f51215046e539d39fa27a409709766
SHA512 2326b2b5f046ea663bc8723155098ab58341ace400fed48933575dc55b1cd14ee8f8d67194303783a1d1f412e395eddd8952127eb35d8ec745208a6889dc63cf

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\AUG2009_XACT_x64.inf

MD5 e8623d8be34f89b38932adebb2ab2df8
SHA1 f7d844b8c77bbf1bdbaf4c615be7591299185bb1
SHA256 5d57466af1801ff3a92b1540907f0e4b91d90189177d68c6b4c8833e5d57dec3
SHA512 a398b5057707743dc3077f04e3796fc231da56b54d58c826b13ec610bbdadb0513c56183156be2e45b47ae96971a9287097ffdcd709f496e96f8f7233375f1a0

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\AUG2009_XAudio_x86.inf

MD5 6d9bf03bfc9465df08d17b18c431926b
SHA1 184ff4a21ae4756179fd179d1c3d007842a7ec2c
SHA256 842cc52100b5774bcda19e40837bd552b308e74829d5b35a505822c7436892e1
SHA512 35efd74761fce6b8c7371cbfc5c8c50a0142a3fa3492dda3e566b031bb1dfd58633960230985d899348073de38295e25f76d716b153640a9e0e8ce6d59954f5d

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\AUG2009_XAudio_x64.inf

MD5 af52205973fa73d4227dd5e105f6a37a
SHA1 2e16e2914fcb65e55a117b24b992d6e8cbec8c55
SHA256 4348663aa7cfe22916fb13d93307e7384376fad9d6fa34c6196f80df42c61a33
SHA512 92b8ce27f01fec9c17c2677eb4e9e3f1dd592a94a3ea12e9580c8e206a8895c99b0498b2fac30323814c8da16a48555bf5a76eb72afcf5b99ee2e05c67cb4ef0

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\FEB2010_X3DAudio_x64.inf

MD5 49460e9297b0faab5a5d73e7aa2caa67
SHA1 a7e211f3d4ae808f67a798924c4d3314183df873
SHA256 68351f03f4ef83e4b8c359e3e130441081690a1866b838a1b35d64674ef3abbf
SHA512 92c4c0751e9123e1eb09da312bc44041d13262e26cefb807dcd1b354c5bd12c0d7197f1d3d457ddef89714b77ffe45db9c717332963c6daa507ae02a6d5fc941

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\FEB2010_X3DAudio_x86.inf

MD5 e84adf38d499ae39090ad60fd76d76e3
SHA1 6af4d58bc04aac2723e8b97649f1b35fb1aca84c
SHA256 d4da3e530982812d1e2a31570b80af541fac1b13c72997d2aad7ea3bfeaf4a4a
SHA512 6714992e7aee7bd0798fbec68f92c97ee502127580e21e1b6693ed6737312b44dbc9fd9ef579fe552590e9e5a4904df94e4116334265a34699a04aa76ab87c24

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\FEB2010_XACT_x86.inf

MD5 82c10b720e33be099f69e4010d44ecd2
SHA1 e95a2eb23db3fd610d71089500aad523f93c9469
SHA256 e850fdb84bcac0f667927e53fee943efd3f43be6c6a0ae1e17f3fff83ddb2635
SHA512 853261c439b26cdc8991ac289b9f9925976452ed613481b0cf09e75444882805ffa15633eba441d8e1a04641f5f6378b68e2270a6a48d3911d7f9c2c0b1235bd

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\FEB2010_XACT_x64.inf

MD5 45f4f5d8439b3a33df8f1d9f39a162c6
SHA1 e09440edc243b072aa589ed139ab9fdeff3193d2
SHA256 c7efd1ec4e4d31644a5054d32cc1e6795464472c05439573ae93e1727a5eea4a
SHA512 f8b7ab66b7fd182efddc2a851c6468a311705267afd5fb81554713b338f24642c5e7b5d5000b85e417154c4285457f9fdcdcf9f42c155c801f7a295e6ae3ea34

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\FEB2010_XAudio_x64.inf

MD5 1c4dc3c97e96135a784867d68d193bef
SHA1 5019f79ea9b624999fe58420daac619c5695994c
SHA256 da63330fd2a1538b714ee6cf2e09256446a04a55f866b3f70237d8a7165cb3e3
SHA512 d529d68ccdacd41a7bb688bf226a23f4d08639213d96e3e428c16176681c5f7d45ca8527291322b2a6d4dd14fea1cab3cf183006bca3b5a45fbf2e05c2ee1437

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\FEB2010_XAudio_x86.inf

MD5 e6e942a2cfbb587bfcc4203b5bb34fd4
SHA1 2e0172ea1936911a98e11a6e98990703e24172c0
SHA256 74c827ef94881099761e04397ef8f162fd0ccaf4876a5503c4b53a5216d2acca
SHA512 3d70d76e6f459819a1703c5019a2e10fe518ee6e8eb5d3313fe57d3d1b6313b52c4904398a26841c78a9ecf9d715e1201e834ab3df47265e070ec94417a78e4d

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\JUN2010_d3dx9_43_x86.inf

MD5 a11deb327119b65bacce49735edc4605
SHA1 0be2d7fa6254b138aa53d9146cda8fedbba93764
SHA256 6b33d32da02f664092d44b05237990f825b4062c105a063badcf978648b5e95b
SHA512 b0134a3d6f2d576e5fafb601014ab66fef91d661013acc8a7a9129940369a1d9ed5c0f228bb1666a4e891f09b4b18e83f0cb2080047aa84fa45ab663e5739a31

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\JUN2010_d3dx9_43_x64.inf

MD5 ce097963fc345e9baa1c3b42f4bfa449
SHA1 e7624afc3a7718b02533b44edfe4f90d1afda62a
SHA256 272650a2d9b1cfea17021f4bf941b21f2206791e279070d4e906ce0ce56ac16f
SHA512 f3c4f00eebd9d465bc2415d59c417bca0f5a07c8e13880b28704f770763609a653d4b06f53d98325b66c2c7094895190900c47980f81463215e919f00966ee7b

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\JUN2010_d3dx10_43_x86.inf

MD5 53a24faee760e18821ef0960c767ab04
SHA1 4548db4234dbacbfb726784b907d08d953496ff9
SHA256 4d4263cbb11858c727824c4a071f992909675719be3076b4a47852bf6affd862
SHA512 8371471624f54db0aca3ea051235937fc28575c0f533b89f7d2204c776814d4cd09ee1a37b41163239885e878fb193133ad397fe3c18232ad3469626af2d2ed1

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\JUN2010_d3dx10_43_x64.inf

MD5 13c1907a2cd55e31b7d8fb03f48027ec
SHA1 ca37872b9372543f1dbe09b8aa4e0e211a8e2303
SHA256 a65f370a741d62c2be0ca588758d089dd976092cb910bb6b1b7d008741e18377
SHA512 545aaf268d141e2aae6800e095a1ae4eafe6bfe492d95dfe03789ccb245cc3ef3f50f43b10a41a3b0efdc7f8c63621b437323e133ba881f90a3b940095b80208

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\JUN2010_d3dx11_43_x64.inf

MD5 590fe1ea1837b4bfb80dc8cb09e7815f
SHA1 792b5b0521c34c6b723a379dd6b3acf82f8afb1f
SHA256 2c4cf75b76203cba6378693668c8c00b564871c8bfd7fbda01e1e841477b2a3b
SHA512 80bee8f1ad5bfaba6b3ac5a39302a1427dbaa5919d76c89b279dc753170ec443924eadf454746ce331a6682ee729ab79bd390a5d3b55db8d08fd6f4869101f53

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\JUN2010_d3dx11_43_x86.inf

MD5 fb5d27c88b52dcbdbc226f66f0537573
SHA1 2cbf1012fbdcbbd17643f7466f986ecd3ce2688a
SHA256 3925c924eb4ec4f5a643b2d14d2eda603341fbbd22118cdd8ae04aaa96f443c0
SHA512 8aa2200f91eca91d7ee3221bc7c8f2a9c8d913a5d633aa00835d5fb243d9cb8afa60fe34a4c3daa0731a21914bc52266d05d6b80bfc30b2a255d7acdf0d18eb5

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\JUN2010_d3dcsx_43_x86.inf

MD5 cf70b3dd13a8c636db00bd4332996d1a
SHA1 48dd8fc6fa3dae23cb6ca8113bc7ad837b4570d7
SHA256 d5200b332caf4fff25eb3d224527a3944878c5c3849512779a2afcfeae4c3ca1
SHA512 ae31a9e20743a2052deec5d696a555460a03d400720679ed103759241b25d55e2fbc247170da3c0c0891f32b131ab6a6845de56c2d3387ad233aa11db970b313

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\JUN2010_d3dcsx_43_x64.inf

MD5 e1f150f570b3fc5208f3020c815474c8
SHA1 7c75fc0cf3e3c4fd5045a94b624171d4e0d3b25c
SHA256 5289b5ad22146d7cc0c35cdb2c9662742693550de8f013d1ec40e944288d155a
SHA512 a53618ed6ebcd50ef074b320eb3ebd38af4770a82caa808e47cba6a81982ced46cf954a1c5a383f171006e727d8211b4fce54c9faf27b4c14a770a45a09037b8

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\JUN2010_D3DCompiler_43_x86.inf

MD5 1a86443fc4e07e0945904da7efe2149d
SHA1 37a6627dbf3b43aca104eb55f9f37e14947838ce
SHA256 5dd568919e1b3cbcb23ab21d0f2d6c1a065070848aba5d2a896da39e55c6cbbf
SHA512 c9faa6bb9485b1a0f8356df42c1efe1711a77efa566eee3eb0c8031ece10ffa045d35adb63e5e8b2f79f26bf3596c54c0bd23fea1642faae11baf2e97b73cf5e

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\JUN2010_XACT_x64.inf

MD5 dc506eaa8bdc02b0918e8ce956b505ce
SHA1 9bfa75f2b2d7ba26a778623c8505e10428a1f6cc
SHA256 f3c288d84db29f7bc4d2c771341f765b5e1940a4827fcb55a65b48eec83c71d3
SHA512 9938b821370919a25e801cc19841e951ef4523fa62eeccade6825e74c43319e9bad2f76e5971ce5d26ec2fe55258f7c9390626bc3b934c84b70f7a2870976b89

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\JUN2010_XAudio_x86.inf

MD5 31d8732ac2f0a5c053b279adc025619f
SHA1 c8d6d2e88b13581b6638002e6f7f0c3a165fff3c
SHA256 d786d06a709d5dc26067132b9735fc317763fcf8064442d6f77f65012ba179da
SHA512 abc37922307f081a1ffdc956ce59598c19ad1939ecfb6ea3280aa6aa7a99c3eba5462731586ca262f7d7257d7d2a74ff57a45abf6b93521eb6f1c9f22f8eb244

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\JUN2010_XACT_x86.inf

MD5 dbef26a0b937dc1859e9582aa88bf928
SHA1 25f85650c6f62e59c11f7234be22d34e890793b3
SHA256 ca604ce9d2ee43a09b39b23a6a2a048b1a79d85c7d78679cc73aacc75cf7a62e
SHA512 4259193cd51168020b3b02ffaae89d7b4a972273b227cc3116c8cac3874b7c329e66c989ad200f93b05d1e4f90657b5391f37d6d128108db66ad7d6a758aa34c

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\JUN2010_D3DCompiler_43_x64.inf

MD5 6494a3b568760c8248b42d2b6e4df657
SHA1 700f27ee4c74e9b9914f80b067079e09ec7c6a7f
SHA256 3e779533a273e3395109c7efac13ba1c804c01b3ddb16938406fbdf90d851216
SHA512 2bf68b123d7823ad7182e132d9e55f8de7580229e8e1b3b40030da50bb9bdeaf67bb9727ce2171fa83b7f804c24d9728ffabb44cb5017b16b771bb19e62b1b42

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\JUN2010_XAudio_x64.inf

MD5 dd987135dcbe7f21c973077787b1f4f8
SHA1 ed8c2426c46c4516e37b5f9aac30549916360f7e
SHA256 1a0f1b929724f8b71d5ce922f19b9d539d2d804c89af947d5927b049ef0fd3d8
SHA512 f0469c94219b4df99d7b9b693161a736fa8eec88a3f6c7f2cf92fab2ade048dfe61fcde3a4cf4f7a2aaf841d079a46b17259dea22cfb02831983f55bd7f61899

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\microsoft.directx.direct3dx.dll

MD5 a73e7421449cca62b0561bad4c8ef23d
SHA1 cf51ca7d28fcdc79c215450fb759ffe9101b6cfe
SHA256 7986e3fbe05418fe5d8425f2f1b76b7a7b09952f3ec560b286dd744bf7178059
SHA512 63d24647ac5d0beb8f1284973927263cb6e05b4c399cda3912178114b42d541dd516c6d67a453ea997d9d0cd9126a1802678062f0951c2547e1b445ba50dfbe4

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\microsoft.directx.direct3dx.xml

MD5 d2ecbcc04f7e087d738df9329d47c30f
SHA1 0f2d7c485020928227b668a148b0a60d99bd6695
SHA256 7b38e6dd8c567d17d94f595c33fb234284abe884a1148025f59c8e426ec30c03
SHA512 5662bbb30d7a601efac49f0e090cf05112565ac40dd998787e40d4ee6988f985ad8513b0d5f80e17f8ec9e7784af1c50a70137c0ec22b0c72107b601503bcbeb

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 b12ab03c64f642f9a0f8de8acf0f2f14
SHA1 f63acc3fd76aa9a26f0b1a94dcd189900580e656
SHA256 a62067c757aee8b8a0669d1a888c287a1d90d1b92f011c93e418ff171a60ad08
SHA512 0c892cedb972c53ba95facec23f0ce30f492968704eece70a9caebb4c42ebebf63f568fe0fbae88f0673092bc83f3e81720a84b276f51168fa4934fc7aa1e3f6

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 5e2b8b8a5ed016468716b9ff82a1806f
SHA1 f1772121149d87745738cd471d0e504301a9ad0d
SHA256 5b70f0ac40a38c903062a12ff7cd71d907e75238a044ded9b34fb51e9a9a2799
SHA512 4620c9bafb7dfaa8d4351d0d99ae3442ceb2220201f16bd9bab4fbeb1f411fd63d4f0e79abf6e762f4d0e62d42608fbeebd13943ce338eca59ad1080ea6c2728

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 3dce3dbc59f6ab487444dac380ed24c3
SHA1 b6e6e7989cfaf88f566ce0eda1a26460b7269678
SHA256 d6cc09aa0f540696780732cd47e84efbcee454d249886d0f79c9b598b4bc4098
SHA512 990c488a28f9e32a75ce5ef38088256047530521b8fd9e86ed4fe7b5fd5cb3e7651eecaf4ca2a6dfad7b7473aa594598c576e98d1cf62683afb84e4164ba4e15

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 d3f1922325be8e7e1c72bfd8179454ce
SHA1 89134f43ce2af4adfbc4087392aee6fe56be7ff4
SHA256 8418941d8f1d4c84288e0bf54392378dd3d87b602bb693ff4f8a633022681c12
SHA512 d33f513ff6c199acabe86eca6dc06d56c330ccb78be4d13fb6b1906a3cba3c93afe982b05cb057f2b88f6e6637452f4d99d4a4fe6f3f7c473de9e67a40758bed

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\microsoft.directx.direct3dx.xml

MD5 1c124cc5c3be4a5e8d6619125b1b33eb
SHA1 455365d2ff521d135b75522a4ce6382aa73b7c30
SHA256 c3cc575c93690ddf44fd71fdeaff3d61552e9d4eafbef77840e4208522d81fb7
SHA512 1e9fde35b9c4d4a123a92545f5b15b12657d4652328e8d249ca31338f80b10a9b70811a16c40e82f286ce1b192bc545d29605c2ded4b937cf69088d9aa9943dd

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 4351c8b3821968dbaa4737b0a1da24f9
SHA1 f67e20c84856a4c495f135c64fd72aa5b8af2e2e
SHA256 aed6d3720290b1191a752142222819555f9ad571c3cd22c1d383580a289e3bdb
SHA512 f98da5076640f77f5ad9a5312a547252604dda593cc86093093bca3b7d5dc6cd1e7e37f43cfdc047af4de81f292e2f03ef61d55d934df1ffcb793662d40ff341

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 fb3bc0754921873a65f5fbdca845e6ee
SHA1 67cde5bc8577cd3040e275d290ac021874da9fe8
SHA256 f500c350dd71df7452b92444e19b4644b04283434a6557123f1e4d9fb078c3f8
SHA512 292b8bda44e6ff6449c4b38da9b8317491c0f0da3d1e5f7947741de27cc51bbc078fbf947c89c4be3a0b54f7066f0480990d1de57919edba3414aace77c47635

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 aa28e764e1a4d4d2aae21f24b1db5fe3
SHA1 70dac2f82d194da8d332178cf07be851531dc33b
SHA256 c96de1091a1cb5c521e123a26ef46eaa7fb561decb1c7b802a41db397eb1ca67
SHA512 c6611109a1a5c2dccc7c090cd623577023e1c886111b0a8d626c419b215e69dc0441cf7058946e42247cffd8f490bde71febf08179dd3671efaca494949d1e88

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 afcf5f50c632f3a5598abc28f196d77c
SHA1 294385693592f9d6320f8b0b18f45bc194d01a4d
SHA256 5e90089e69e4f7e2e42ea4a81fb62005c3710d0a4acdf207b97ed03f5641d013
SHA512 29746ffc665051e13386e452c3e41a593b6339e09a228927929be100cddb3e0e0fd3b54abe02eb7d46a3d97466ecb02bac362398b72fd8e804cbb21c8bc856d9

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 ccd53738df4fa27849b6bb05dd67d10d
SHA1 28126653a3d1b4574fcb0c09176f5fa0ff28ef78
SHA256 c29d337bf7639fbf424b34cc0409d2715762e1b4d82881fb524a2508381c9f62
SHA512 aa3a10504fbe49a4c44151beec7d9b543f4b89a51621fa60810f385bdc8a6821e4bfc37cd46f3688013f6f4facd33ab45bd0deb4a1fe16453e1be8f11f2119c3

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 cdb4ce934c2bc165f0620ca88fdbf04a
SHA1 df6cae8a13c1eab0c12812340f12698a549d227d
SHA256 3924b5c97f5c1d31ba1327d53725b123f3849543619a55977ad38955043f1790
SHA512 a169eca2eceec894809b687c3a0e4eee38aa8e2bfec2e903fde712cb4de0e188a9fd190bb63bb9a3df3bce70f560fa0b9844e53f89c18283e054f57ff527e6d9

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 96ed9aae5431abd6c66d06cd7fb2ef9f
SHA1 255640879ee79ca08d35b7a0e75b074a259e867a
SHA256 7c23aa5e3b4eb838f063d5b66e7fe5e4b4a0f501333cf8ce813cd986ae42a3da
SHA512 70c56ec94d04a0fb607acb80bdd55b74a174b4f0c736adba3fcac7d7f6298549a4e8423a9f695751399fcbe618f23319f985f1c03c72454a00d97f46218390bd

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 43c280c3b15ceb2472ab560d09629664
SHA1 e3a897d7608d03c93b5c2b8aef52703452cf6696
SHA256 bebbc40ca25ef22e9d16b0de1123e0cb0444fe7a78b4f0b4395bdfd81618698c
SHA512 5229eef9153b992684b6dcb4a32b231c63322b5e4b49ef262228c0dcca4760f97cda5d15a7fcdf77d813eb24b359101e716f72988374106ace13473f27e731c5

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 fd47da121f60afd2480d644016d42077
SHA1 e75186dc9a8c18ce80fee02fe0e8fc91f461a7b4
SHA256 246b9c32d451dd79d782ceb06b5a8ccdb71e474642c70960735624fa8fcafbf1
SHA512 680fcf5a7e063ef80067fa8aa98de5773fb6d10cf1f148f0062d127ded9cae57630fe7912d10868fee4f57c19574941f1fb1f96357f6a330c489a90b31e42b86

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 490807c150b7d8be44bde871f4df8c56
SHA1 69b68a5b8cc3f3e75aa2ba284654ca58bb62f23e
SHA256 36a21fc4f4c8f6ba4ad900613ee1b08ff43f2545585a2601c9fc4cf083d68a77
SHA512 9442e26de55009428cc6e747637c2cb64bd2f008541ccbb37fed4e83ff66845c7cf3874d93542e0ba544e2db61f4864b665b7720568eba284beb095489f3ca64

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 3f95848571192ad85daab5be3974399e
SHA1 1e1e23bccaebc0e2cf0ed01f993cef7ce590ae35
SHA256 a992dd3e481a8c22d2f9cc6827a018e364647fd11938f59ae312ed78e081e17f
SHA512 890de53e982614f350e3d1372ebf450c133e8b760af254cab0b86e2fb685756a643c763e1b83b266b446910abb298750c30a6e8bb36b21082ee2cb958e198b4e

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 933085360527de1b4947289ca468184e
SHA1 d5ee5e1e3c992c7518b5ce510c627c1564131b12
SHA256 78d85f0e2cb7d7bde534222f4ebfea1c9e06d37ecd3bb7ebd59e35f00b94b11d
SHA512 2e22398d7cdcd6a46daf3dd3478d861bc4012ba1b54862311ae031ebcd3f908352157cbeea528f22ef1824f8924c3f217311feaf1804cf675eafc07a8d3962eb

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx9_24.dll

MD5 bc831661963763ac4d504c5cabb1fdd9
SHA1 51b323ea377f9dcd52946f5fe77ceb5673d1592c
SHA256 94ec67763f67932dd4273ef5cc12889a5cef090ffea3ee78a80c7b530272b1b5
SHA512 fe97241d5d9ce298f62ae3295eb9f4091430c8c2c53e967b76e0aed76c3579f8bb07338a0de48e4547c63ab381b3b3d0989a183447b8e47496f35493541295e3

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx9_25.dll

MD5 5b48fe9d6686f0d54b26a005ace24d1d
SHA1 1c395f6d2aa729a607e69dca73f8205cefd26aa4
SHA256 4c54df27ce84d21b2924e64ff79b13e7876ce85d8e0c9c1d0abd8da73888187a
SHA512 6a4fa549578097ba36495ec210365c27d165065820f0fdad20864a3139949e72da00f9b7c614d07d8950307e596b693ed7a291a5c69cc0f9ba30c5f74d6332f1

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx9_26.dll

MD5 523ab607eef81cc4d909e7febd8a788e
SHA1 2fbf1444daab3312da6b34509763656a28252134
SHA256 8ea96fe01c3c86a36fcb3795ae03eb12034003e335ef475571efaeda17c5bc78
SHA512 791f520533f58cbccded4e7c1f64fc14d20942efe57f32a5ee75eca4107543718eb35ecaf52e6eb3d9112867141271b8c097766fcc3562f016bb612bf840528a

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx9_27.dll

MD5 852edc778a7a50077694f84d8e601234
SHA1 14705b638e1af81ddda5dc52f68c61ebfce5e9e3
SHA256 a70d571cd675c97c9eeb4a234dba1d667ffb54ec3bb14defb36b3e2f605ae257
SHA512 51c4031d98bfe3251a81ea9f4434ce38f077645a40d0ca413e31b6951c384a1635cb040c24ccf1baeef3d5a47d0d18d8b47fef3bcb28570d6e936fcea6f912c2

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx9_28.dll

MD5 be19b603dfbaa829ee5b7749b3ba97db
SHA1 3d42825b3e7fe5744f67ef145ed47bb524496305
SHA256 f3e391b5f1c1f9637cabf2b812b6f5d65e4776c89d779f506f6b643cc563176d
SHA512 095e8357911c1a06000f5df291bc3cbd80aa3a9672f485fd1f2b9bdb1172d1c7235449485948bee26fcec630d6b80fc927454f9b32cb31c823494c780e0e3df6

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx9_29.dll

MD5 99f4fc172a5ace36cf00aa7038d23f2c
SHA1 893e05e369c2388daec359ec550fee5b9122ed40
SHA256 c5e21c18f8c79bc517da59e3192c39ea73bdcaf85867628187f6b3cca07dd21f
SHA512 a4b86d84f99c3d0c0825e3581878aaa25207765bcfbf31cb07cd6bf69a9cbbe1c3068719b212e38f741e06a89b9bc6d217077a0dec7f9efb1be75fc3c214dd52

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\xactengine2_0.dll

MD5 2112fe0c46662d429347a7d7b49e3ece
SHA1 8cf607547e9c5a10f129a3a8f8f32bd295c0d5b4
SHA256 cfd1c2d34feb7d94f282e97bf762a99bfa7309dc7353d96dfe4aadc187d26c67
SHA512 77f77add8411d418798d643d783752896d3fcac002f15696caeaf45b5396d2d42fe53bfb409d66ad505cdaac0ef0a20a62aa45b50aebe65237d2c44af36bbc34

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\x3daudio1_0.dll

MD5 4e961525cc7ff0e5d7da19e170b7c14c
SHA1 7e3654ef7f7c9524ff415582f1b066f29b4234c4
SHA256 228dfece2b4555a243a73e7bf461036f1e53951977625651ff5a59deaeaf4b88
SHA512 8785d0b2188f36d53c1a2b99a669d6edff1c0c27905d5bda1615a503f115d5b0762f008481145cb0cb6a2589926543b9c8ed0ecc2e328593682e39b90fca2087

memory/4936-20255-0x0000000001FD0000-0x000000000202C000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx9_30.dll

MD5 e415862612e65f10d7d888443ecd7594
SHA1 aa8440ec3b5bac6594fd58d97c10c2ab7d419b2d
SHA256 5edeed79f2359527a55b8189cfa8b9b121cd608d44eead905a0f3436938ad532
SHA512 f5de2f9e045c3d579d98b25fbbb7b90aa9ddcada0c6bc4e103e5257394f3cbb7c968d89db61e15b10605561cefdd63456912aa428af5a62cb769ac8c4e5eecba

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\microsoft.directx.dll

MD5 0c453970e89db1c1eb9de087e6eab5ba
SHA1 c4c7e034773a240909332814f499730575a1cd71
SHA256 942e98f142373547493f13b14e1603b2420851aff013d3085bada7b6b2214d9c
SHA512 ef3b2cc2598b4ea58f00f93155319674450c8c35b706108ce3bbb5c2502efa179046d9d50e12725e6dc7a555f4880404ed03de15a0753606f20a1654799886fb

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\microsoft.directx.audiovideoplayback.dll

MD5 75933586afd94ea24c5acd3dbc89a272
SHA1 970fd4b49d1368330c10279798991b901a233c2a
SHA256 406f473429573e9f0084aae125ef8f19f59291aa4c33cf7d40e7d996995a3238
SHA512 c096f0f11fb306c6a84886826306fe9c2862c3c79b14a8991a174224b41c2a68b76e5be506494d23d354384c715c5d82a1cacffff9644de9d6b93e9478087a1d

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\microsoft.directx.diagnostics.dll

MD5 c0843f0f45edeef233b1e581ae75e3bb
SHA1 04569c78868eaa8927ba64f93312720117152843
SHA256 8c9685959706750091b0094522cec8644de1d1c6309e7a2fe02cef130d3a2b9c
SHA512 8fc293f5c5de65893d92c54f921c84f8a3f44fc733445dda7907ee09d062371ef05c11d014ba2017fd15908b911d0185a14b89d0a311a870fa33650c3176e442

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\microsoft.directx.direct3d.dll

MD5 7ad4d9fabd109432eed91b359ceae430
SHA1 c1dcddd86f9fc630cc0231acd7b732fd55dc5f63
SHA256 f3359d5e41b1d4fec7230579a593e40fe44f6afdfacd1e2bbe52ee06d84686fb
SHA512 bfeaba581a7aeff86bac0c184da823e4a26516a3c4f39af6b6b1bfced73117f3816c567b182f4da0df1935a6e97b6d0520cf02f518736b52fd27d37750e863fb

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\microsoft.directx.direct3dx.dll

MD5 25c76c1e29d3e8e7398f0901f558a629
SHA1 2e907c9688a025538f1b2d0cf1860a2ae49fd2e9
SHA256 2ee41d4d591a39d648e90db4d47d0fa0557fd68197756ee2ee94fcde4d820cfa
SHA512 7308fd91859d00debf446bd6b594f3ea196dbe46a3583858c76d2cbb008a8698207f1ce7746afe3de4efb9a27980f5f813c77cc88e273fa82b2695d8f3d15039

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\microsoft.directx.directdraw.dll

MD5 d9824a9dd107e598575112b4ff897292
SHA1 adcc54d159f1eeead01dbd2fbc73c808ce519920
SHA256 ff4c03bbeb292317a77c86c1c81ae9564acb984b352fbef36d66e2d8bcbd79a8
SHA512 caa1f0411e0470a315ee8c7a62defa972ff17557bcfcf74016c64ad11b0f6fa46a126131a18e275e59e025814545e1d7ffe145377f6a0bcdb8cc93471e4c9bd4

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\microsoft.directx.directinput.dll

MD5 cebd995ddeab2c525a5c4e95789bc961
SHA1 1c98da39d7eea36d73b361ddb24054038c2b8331
SHA256 0ee2a2c371a918cabc85143202864d0c3a4abf1b93a5029081a622e0acf17ab7
SHA512 158b3fe6e6605eb56a99b2135df529226f9af4b001ed0c2e1fd201a60054e2201dc22245ee5a02c6e7778337f1974ee21fa088e94b13a7402e61f64658de49a1

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\microsoft.directx.directplay.dll

MD5 46f26e2bafd44960e7f13b2ef80aa0bc
SHA1 2277bc8980e0f6c3672c2348b0494f0cc0ad611a
SHA256 489f65e1e00534835486e9255eec92b83edae4dade6dff867a380859ae53006a
SHA512 5b5147940803bccd0184b46e60560f967831541e707b5ef19781103e31235f1ba05d00e44a6f2ed061ebf5dd7013d9c696131a3edaa77d3aabb85b3255ba5489

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\microsoft.directx.directsound.dll

MD5 d035348ec8968861af585b7132fe4c7b
SHA1 877ffdf77b9cdc1be14135cff0b756a231401617
SHA256 2e28c8fb8b87b5ffd1e0ea27710a2e785ef4741a89e4b3c3af726ec63d15a1fa
SHA512 94358b581510c68049ac92990674a6cb495cb8ff005f7fc03696c57ba8b4cb384c5035d9332d0ea39093ba5fa5c8082143896cd2fc7ac24a192520789c707458

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\xactengine2_1.dll

MD5 7c9952111f4c743b9f0d8b68b6ed93c9
SHA1 75dc863ed10e4e4a18fa06dc32789cf16c738c38
SHA256 666cef7d27a38f709063c9c581fd95e6b3fa27167bff4beff484dba2dc922a2b
SHA512 aaa3396fa9081f25b2eff6682ea26afbd297c8a61cee4540f9a947c1a96ad51f114a9985bbc69ea7d0251f6e4b1e835c92daf0f8c5fd66e477e3243ced3c9bef

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\x3daudio1_0.dll

MD5 f77d5ab654881e683cff6650916c424e
SHA1 56d8f090755f1ec60b13e748b040069ea8759b5b
SHA256 77cc09cea6de69f12106e6dd9df1c0446a525a54c3953d69d64711b9394cc38f
SHA512 dcd1273673f4088e854057e47484bb363e1e7ce094bc2c98ad7cc9112877892c1d6fd591dd9cfb325d6c451f2d03a4cdcc238af1ffb5382b7153f079cbe13abd

memory/6268-20688-0x0000000001E70000-0x0000000001ECA000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\xinput1_1.dll

MD5 f1726346e583442541fe73429f8e9c10
SHA1 a1b7a4edd7d1164197f734218fb485165c075d0a
SHA256 69cd725c53e0302e75db20e9a3e4b33f58dceaa2e6ea4938b2733df8bc289a71
SHA512 ba17740271ea92c917db85c64d4ef63a8f2036fb1398abdcbedf9d49c09a53e34ea04e8b3f5a2ee41c2b2ecea6196ed7f9866ee48a9f3528c3b4c1f19dc167d8

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

MD5 fd1b55b856bcad2230f4338f72f9cf9f
SHA1 3d1bcaae1f2f2a759486bbf4dd543eadc7efbe91
SHA256 300ed1a4ef37c8d5f13d67a5daabd46bcdd9ad9da4fe6283f20d7d38f72caaf5
SHA512 dc73dab5f5384a01bf66197ebc9b74a24c146e8f17571c98edf1d7d1dbc33b0f4075d46150b782891397d8a4875a8cf375a111855eb689f2a8e6ed0aa3ee0091

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\xactengine2_2.dll

MD5 5c4d3843b491c047b7a619901fbd2ec1
SHA1 e02dd40f54e7dde0bcbd648e4fc6f723ac438bee
SHA256 4f996edb65022e33ae9c9f7acf7232c8d444f75c50c72894f6d3173b55404ebe
SHA512 474105b213bc067e0822ee22c769f0caa7a02f2d74a0422b676675fc45482db3a8a3dcb2744339a4c7fa029a2f58a2aef5db500c65cf646106d8ed096b17d062

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\xinput1_2.dll

MD5 33b62be226934e1b01f5043870c70427
SHA1 ad96f837accd277da2933d07aa86ffe3ef803b5c
SHA256 9714d146a785d458f0de8fef387d82c9f8e101c02407a0cbeb06f02a69518eec
SHA512 41f859fa59145ef6cdd6cfc4a14f90bb932d2c6aa339bda1763d8e315e6a78bde561010152460e6f996c9ac9ffe6650ccdf6ded34656081a0ed9ab1270773710

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\xactengine2_3.dll

MD5 69d841744b2bae38fbb2d40a230a549c
SHA1 2a6429b1b1758bffe3366ab72212fb9b02152d77
SHA256 ca20cf8e4034719a46bf67c6009486c2c1cfc2da10ffed3a67dcae677b4f6793
SHA512 d5e26da74fc84da90b0f60451479524f1d03946076d009328aa7f9939456762633006d11970dc4c849101728ca32350c125005eb4e3f75114d4528cb17a35b44

memory/5280-21073-0x0000000001FC0000-0x000000000201E000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx9_31.dll

MD5 797e24743937d67d69f28f2cf5052ee8
SHA1 7d39afbf94675487a9ff7e41d2dbb8daedf7ad00
SHA256 e2065619fe6eb0034833b1dc0369deb4a6edc3110e38a1132eeafcf430c578a5
SHA512 8804d0d95688a932c7bf7e1a023179de8df3a5436e356b36d803cb9781f3a378adb9fe69d03b28362755b808cbeb2cc718ab920672270de0b954996996328f5e

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\xactengine2_4.dll

MD5 6550e1a0a7be611592c31222fcb981fb
SHA1 2197a951ecac85f7144fb925f6daff9ae7811e5e
SHA256 1e0e09fc077bdeee3de065c663b83f6717d39d56778833f030955077d490d000
SHA512 4013fba5e4211e66ebd9f733ff35635cca82875d6af71dcfeb481a436efeab608fe41310bae63d55c7fdd64a5c5f64068ec1eeb997160c8ae27f21f28e2bade9

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\x3daudio1_1.dll

MD5 121b131eaa369d8f58dacc5c39a77d80
SHA1 d8fe20cb6f28bc5334ae64a8df3563d1985beb9b
SHA256 ff15f14174a5543f028fa49cca745582fe4cacf3bbe490749cf43444690ab359
SHA512 ffe19ffea137603e5401f133d461b30af6fc25b3affb8a8ce20b98e3270de398b9ecc83a6cd904ff42c5885d3806c7e175957bf4a5827dc2f067756a51bc40db

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx9_32.dll

MD5 26af232140c88b42d92a88f2198edf6a
SHA1 b62aed3f71d8963227e5021c2222192873ce753b
SHA256 e96693794daa05a75a83c11df2e7b42f2de61567c6ad0b69e353b50f6c88119f
SHA512 54a6a235af4dc3f3c693fba5ac2d487d96c9d7a2bb7deeab35d5a252e723e597226ec84e953625c8808546f91fbcfc42add85076846a63925fd9eabc09dbf935

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx10.dll

MD5 6f34f7405807dcbf0b9bf6811c94c6d9
SHA1 2de04a49825acf76a6a7aa02108337142d30b6ff
SHA256 fd2caa28493ea76021b93641958238b7a933f4f6db1a2070be03cc81d87d8307
SHA512 df623daace6702d25365697b62a4ab7d03d944306521022c6e65e94cf1970b5057da811f10e675c952d93a37abd1b862b8ce8648429780aeb99a4d55fda6aaad

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\xactengine2_5.dll

MD5 86c93789e9006f1ac47ed9dd47d4c8a1
SHA1 e9de46eb68271018aa31c71ef89d1ddef19edf7b
SHA256 ec68b5163cbb5f15e2fbe37fdf5fcb0d01dffbe53a460cb2cf668f31f0127ad5
SHA512 5a86661171f039946fa0568c6a9c655026c0a74c04a7789fadcb4acfd6a4faa5179d14149321920ceca9a1214910abec3e67e356898d5bdd044ffeefaeb57df3

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\x3daudio1_1.dll

MD5 489e5b8bb1bd1028ff1c798eaaec65e4
SHA1 da9c385c48a6f590347581c5c3dea67502b99837
SHA256 fac23787e7c199c1969806850b5a9652f66f6dcac86f48f6f834abc253848a55
SHA512 33e3c28d60c7063d76c6959ef18dbb0227466766c4be9ce920911e192b75c18d11943a2eb0bef2caa920a6efa29162acf9f6c9c07ed5ddf5858420b240e0c0cc

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

MD5 bce73adcf5fcfac42ce15c6691275ea8
SHA1 484355fcbc55357c2f576fbdd64d33c8ec8ffa5b
SHA256 76eed293cdcdf17942acc313366b22b55ad78ee0389989438e63ab7ae145167d
SHA512 5e53f89142918eca969e005d006f0a106862877ee6e5d317ffa1b7c017730fd1d3d98e5e75f603183d0371da39c11022cf62232a2b614a9bc5e055f52d6da65e

C:\Windows\DirectX.log

MD5 1f29c8ab075e4f1e28db385712600689
SHA1 3fc321aed98f60477f4d365569bb96a50fa82662
SHA256 985afb0c62f063ed85b3518f20823a74dbeab263ec42c4f8c441e7e91fae5177
SHA512 30298da6546d17fb2ce7748b761b50e5f870958b34dd9335f5e0c8d5e5a937dabd86e2f383d98b123e744e37c62a9fc3c3e9be550be76360a0f05c1f2464f73c

memory/3252-21558-0x0000000002180000-0x00000000021E4000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\xactengine2_6.dll

MD5 39000e033d39d19ccce21aeafcce2476
SHA1 6e7823e689a9b720a049a260380805a235ddbf75
SHA256 be45aef0889b03e2243282a912f41580e8566db666a782c26a1d4d7988799d03
SHA512 65047afe28308ce69e3b410b3b52b5fa4f615c95802019cb9b78ac69694e9987076af4bddb2ed7e47b0fbe73729c91b94c525e5b7644a42658663ed044b384e6

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx9_33.dll

MD5 cdb1cd22baff21f48606b3c1a18b000b
SHA1 9315b5db975a34dbebdb4dcae652ba1db01c482c
SHA256 c6b7b2ad7742dde5dd8d1a35fdc1c185e586e551ad9c74d3fb21759cd8ca4da8
SHA512 c5fb24de8f1ee6fc1ed6e74580b5d22599ea4eb6c3589645fff0b15dc8dca051c4917e60fbc00ca86542dd63a8f5e40da92ea77e24826c0c6bdba9b58c36d4db

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx10_33.dll

MD5 37a8171accf46a9c196054066c28827f
SHA1 886264510372602c2ee0193c5a185d719a61316a
SHA256 b04e2b089656eae01a0071359f9d7fb040dea804c1b9d2379431864174259c2d
SHA512 713b843a35dcfc32caa67c52ce0a32af6f54dfc4c11615d32613017aeeb257fb3f9168443a4288c71209e5d40f2e1b281febcbae6da076d2b57cf01aa3cd78b2

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dcompiler_33.dll

MD5 fae7e1d578c42a7c3d9d61a99d178bd5
SHA1 8ac88ff2bc5f616ed284a04ddcbaeb72fb1f304a
SHA256 12e238af4b4edc1f774213709a87a91b77b2c9d2d18fe475b027872923b6fa17
SHA512 75107c64acfb6d84e1b05ba78377dc4699ba83b694b7ace474665c85f3e5843db6d06348fefed539c6c2b233775c7ef81d7bfd81937207e04e637043633cd0b9

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\xactengine2_7.dll

MD5 7febb8ce2233cbae738b16d42ed29674
SHA1 fdc5682d6aa0ec57b8f3c742fe736d74b3c649cb
SHA256 a43c92af3fbe91dfe2a1d415342631fe64e18c7dd3e16e93b6c78947b68e7bd6
SHA512 73a3c07b13b31d2df1cece720a0268cfdb7ae2a066b9e613f7c4ff0fc37b94bd4f32207149d56e1bcaa5656fd4501b1d136d94e18e97c07a8e793906dbc7927e

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

MD5 45d4dac07aa361bcd77aa815d1724a16
SHA1 3bbdf7da5d51211ae269572961b5ebf508ada28d
SHA256 34ab99536ea59ad60ba6efda3ea6d18291ef096a0bab3664248d6045805da0ec
SHA512 d940002a8e0112a3b56a909008403b447e9cbb80e38b9bbd508f40aa68224f7e5d9681e1039e747ae939e0829a25be2319b9f9d0862cebb042e4c525ccbc20be

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\xinput1_3.dll

MD5 77f595dee5ffacea72b135b1fce1312e
SHA1 d2a710b332de3ef7a576e0aed27b0ae66892b7e9
SHA256 8d540d484ea41e374fd0107d55d253f87ded4ce780d515d8fd59bbe8c98970a7
SHA512 a8683050d7758c248052c11ac6a46c9a0b3b3773902cca478c1961b6d9d2d57c75a8c925ba5af4499989c0f44b34eaf57abafafa26506c31e5e4769fb3439746

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx9_34.dll

MD5 1ca939918ed1b930059b3a882de6f648
SHA1 0c388397620ce0edbb362bb3ab2d4a9f31a56b6d
SHA256 b6f77f06518d35345fb61172b6a13159125ed60c469d28b1a2e07970e9ddf81d
SHA512 d1e09da8551e588b8d5d5837a79da9ae4ddd6a372457d3c341e68e3da07c0c1e84decadea9534cc87ef9ef38c094171004f836e6f74831fd6531ce72aaefeb5e

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx10_34.dll

MD5 5aa9987f2e62b56d7661b6901901f927
SHA1 2cd4e3e70c3b37da134ecfeeedd377d1726d9759
SHA256 330e120d745e1132252df81800362a7ae0b61a9060afc800165ba8a1d55d3fb3
SHA512 af9e39f368b47b1500e5d68a6f234361fdfc29ea31c32f614c5887f124d6097be0b2d8f37287d0cd0b094d3a12e3f5881ea822542a1c85f10566604fd6228988

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dcompiler_34.dll

MD5 75f206c195bbaca6ef28565b1c0cd75c
SHA1 4687454c58f64f2154f0e99bf5a323f73ca1790c
SHA256 5044a5810fd931339933a8d0c56115a5a5c27d8c0d8e348977e2724a032accf0
SHA512 84c0a8fd3e4293d85e919940f6f24d88fc6fd68f39cffefc34014656fee54256ce581ba408eebf5bf9dac3da9de19f2bf8403521c55881d3877dd64a8e50120f

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\xactengine2_8.dll

MD5 499210c45afeaadee8cf4dcf7d5e570b
SHA1 de5ca60de47c8f54d531b88ea80d9a24a8e87a98
SHA256 15d82e89bea30bf82de6ba0cfbe97eeaf05d1e06bc0133f0d1ee8d0cc41f51f6
SHA512 f76f69bc3b6cb4f92e675eeedbd10a80f0b970d75ea04392484d477a4d02dec670cdadcb90be9eb215c4ad48a90d28347c9104f0835e93b5a9803fd62670536e

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\x3daudio1_2.dll

MD5 9e4efe7cc29ece294f3506fe0d8090bd
SHA1 b5d0e9cf45ac3b05fe21aed3ba41dd94b1ad1fa7
SHA256 7c06bb70d12cf78de9c6a12a53c95f9dba41c140a48bccd500483e5b87795a8c
SHA512 998d3034cf21bb9aafe0821a96c64ab0c38f770cf9c6a6820a2292b569510dbcd0e71ce56dae813614d9a148c146e095245e963905e71679c3cfca1ad98f5e16

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

MD5 98b1369d38333fe9143259687edfb25d
SHA1 3536573ce844dc1441b91e1124b6689b93add430
SHA256 d4e57566914f1d36f4ebfb6e164ce2170f1d5e6392189d0ad6de3ef3b0a9aad3
SHA512 3544088b8436ae6e48d22a7638d59f3c14fb914caeba17a87d1af469b82f818a1a71c5faacd52f69b5bff190b44fd91f893d07b7e05c2e9a9dd363bd75722057

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx9_35.dll

MD5 3ef18b78d17c962f2b71ac1cb7757684
SHA1 2380329c17c7a530075c7572d17592bb3a00c4c2
SHA256 2198022938156b790e9cfb0f7997494b66a11a1ad49b395be58251d635b66b26
SHA512 93e9bff79630ee5897bfb3bc496f778aba160312edcff9f0b8cdb8e8af3d5c7b73a8d95d54ab26cc638a2ff7cfa27153629f9fa8a4a687ae3c83e1178471e720

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx10_35.dll

MD5 f3764552e45880dc49b82f38699aa87c
SHA1 25e347799bb3f36bdee30aa78cd9e59c7faa5add
SHA256 db775655fd923e29509402556f86002dd9aea062cdcdba7073e1057a67b5ce50
SHA512 7e52bbfb4f309b9f5a9632efd3dc28a0509b7d5edf471267f7e794ce8479dd8cefcb29535327a7384bcc25b5331ff87c223fb70fbb5da22fea3c919ba4c5444a

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dcompiler_35.dll

MD5 5b441670a4f5f8bcce76741902b8af56
SHA1 b98df0c54483664ecdc92eccdcdee09d082972d8
SHA256 5a866cdf74f981e783624dafb0e72f133ad9f9b293856d7a18c7558fa357beb1
SHA512 0243deac1124425b65cfbc7d6465bfb09a4849e6c5be3645b808cd3fa487c3044c5b45e9943ee31542a7a47803c02f0b92c05c1e4bee18cf6076641e1c0794f6

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\xactengine2_9.dll

MD5 46ee68f04a75a1ccf40235ea6f1cba05
SHA1 43a30e195b8d894c69bd857ee377ce7fa6170fa0
SHA256 93a0d8fc38e4e9a301d9e721afbeedc5af40becc0b11a6e7e8e38f08f366ff6e
SHA512 16e4c624e4e74d8c1fd7652ae745a87de3698567faf0cf03651ad87f1f730405fc0d2eca68e4b0ff3c5c526c254aac232f9bd359ddb6563313a8f02db3603fa9

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\x3daudio1_2.dll

MD5 ac49e8536bf510251611a77e2a6cb8dc
SHA1 8b1f64007fa777fa2aca1e456735ab872cbabeb9
SHA256 1ae37d90d39c36c142a51ab9fef7230788ff95080f2bc47734737bf82d3c2c9b
SHA512 2c33ba362315ab102e4898ae92f7bc71e7c0c7fda8cd79f896cfe76e5a2a4129bf6a1e48d75b82ed7d915c0ced819e81c0f89640677b6bfa388962ce19bde2a7

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

MD5 ffc75edfaca60d28b6e6c1da8488f0bd
SHA1 358ae6e2680666b994e721db5fac0105a86a9c6f
SHA256 fbe2e9cf7e400537a4871218113df178f70501ffeea59a8f0f721927124d6d46
SHA512 dadf216d9e92b349179b27cf436483dd5a52bfdc1db659f3d99b6d1bcc5f1fdf3b0fa4bc8bd08f89439ca1f07f5dc66625043f8065c0cc75e8b3627e59eb8d0d

C:\Windows\Temp\OLDA7D5.tmp

MD5 87d52a3ce4936f6c93ac092c3cc2780a
SHA1 3be34b222d022cd4dbe28f0668c14af716f1025e
SHA256 9566e346fbf72928e9b48b3408c8336a9e77b331bbc729e8ced9f0670c51c699
SHA512 d7809bf29599e86a5c164d6cdf83e9b8a29ae08972c998bed5bb8a93a11742a5905867d2bc7118498985c4f1f4e6223cb0659e8d9784a2ec05b12bebf339983e

C:\Windows\System32\x3daudio1_2.dll

MD5 9355a1169ac104a3670c2a77d060ff60
SHA1 6935990e213c432e4fe3cd667148d95c0a33bd02
SHA256 b822d7de1253c52676f4e20f9c715e92759b43b69978dfef2527b6101e420ee6
SHA512 9897bf3ab16e869b47840b72e0d8166e0f6cfebe0b3254e278d7cb046a5d50fdd2d8624da788b9afbcf58fc95024ccd2e5b9b010de074e8d9500669f349061af

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx9_36.dll

MD5 44bfec5c9c82a2ee9871d88fd3b9a0e2
SHA1 e2aeb78330d0815cffedfe88438a71024577d4b6
SHA256 c12f0ab0338eb5031d3d04beaf7208ac848f7e037d21ff963d2af90221cbe935
SHA512 35c42ce3afeeb3710d3d96d2cf9ffa2828fe17f8d749fd149e3797e87e154508c77f637de0e424d38bb3fa56bca959cf9da7787323950ec8261b144c09ae306d

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx10_36.dll

MD5 d9158e78a368b08d9133043eb3058c12
SHA1 d71d6f103bf7433f442f55c355dc74fd4b8a736c
SHA256 aee0248f18dfef8194451a22c69adda1cca38c03ae9aa776114da9d8851d4c38
SHA512 8bcf2da86f708ae84141089f80131244d957e64c6fed0fc39dc688201659cffa7005bfd4cbbb315ee0a60c61e38ead3b4e4fcb3d2f0ecd0386a6fbe486d82bd9

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dcompiler_36.dll

MD5 fb4299688a0d3a37687c015ac2b9922d
SHA1 a4898d246afbb0ed399e77fa5ff29c99caf912a0
SHA256 f15efcab1780fe7d784a3cd3798f147fa249e81b7ef9a494b85dc7fdab084734
SHA512 664b139754d587dc32820354c1333fe6a5528b07b8bbfaf27374a5da7e86a4c3e7904250976ef3cf8620fd0568c34fa75704a8b1585c382b99d4ee46518617ae

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

MD5 c92c92060d535cc9800b6ce231276852
SHA1 79281861482c717e61fe9bae300e0fba310485fb
SHA256 e0838d8d562ed4683bc06ecdbc46fe19dcddf711a0c7909dabf62da572035dcf
SHA512 7c8893c92c005c7c21f829912da4b9e5a843e842826d5e362a9828710486240aa109f26e38a84cfc03617f4abaeda25f0ce215b8f6a1f9a65c58ef5606814d13

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\x3daudio1_2.dll

MD5 f6a9fc2ad2f9111372b5ab3bba3707ec
SHA1 bc7afb780d42a332497139b5236b809433d86009
SHA256 4c448c7f77e3b4385d2cd35d0c470589cdf0524e532f9cf7ae084a8f88aa949a
SHA512 6cb44bb174ef28cee3e3a6ac51897b5cceb3f2d06d08c556cf6476a285de3e3b03a624ca92fc11b95f29694629457fa39747e3041736f9b76e84f19a052ecba6

C:\Windows\System32\SETAB01.tmp

MD5 bc78d5328541410510dde06b9fa92024
SHA1 f6123294896cc3c3d3cf5a9e0e03319f58da7cf3
SHA256 7a34a7a8af47c6b2cf890ecb56bad2454ba5eb1ef2df6fad9ee53c4770e941cc
SHA512 5284d695216aa4f70abafdea130326d8ee3c6d9a9858dfa3f5b184c6b8b185adebcbc92adb8a7530f9127ae1de30561986bf9c85bfb8b474a9812151a7843c59

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\xactengine2_10.dll

MD5 73e055af78a64f9b2779d44407ca2ab6
SHA1 d771ef11d22a79dba7deccb9b3efedcbe74532d9
SHA256 113640ae8cf78caa7cface2f906f9e6b60809906f5c26e08b2e90fc48430f3b7
SHA512 a8d979297ecce24a29459e7ff814e53c649a6c969869279dbf0f29edea4d73883441519a27e5e46bb1e4b5b942cb26907cea9a488de0067e589632687b25b5be

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx9_37.dll

MD5 ac3c517fb0fbbe45fe44007bcd3625a7
SHA1 eabe1601d0132882c7226a4ed04fbbdd5e8f0db0
SHA256 c2ccb84c672a9d8966e82a28005a4269886ee304972ac3590c0b8a9c1622a3d8
SHA512 89b44142355c494f2a21276d0629f3536adc0dd7cec101a1f2816031afcc8a96f94663ad46744c772d6b63d172ea62e9b957d6292e4a6184f958576f62b05836

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx10_37.dll

MD5 4a43e9a2b17e4cafa9cb5fec0b5b686b
SHA1 9e28d3d197958e65ab8dcaac91fa55cd1991c3f5
SHA256 61aaf973712f848b24c3e769e3252248ece96db63f206de0ca7ff43d9ed87a51
SHA512 8411bbd130427b690332d222233465bf79426670f565ac3b01a71929dadcfdd18002c54d60981dc1f202e6625f99ab73451805d64518fad9b5a9793407df2d71

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\D3DCompiler_37.dll

MD5 ea752dbce35045d3c830dc16578cc8ab
SHA1 0a9bdf391ccdd113fde4d10f0afc80d54df01259
SHA256 715876d15b590936e4d32602a764d810650eec134922b32eea742e2fa71791c1
SHA512 3cf5e79062203d39fdb74e789e22405b93de126deda3d698963682d51f264cafe9a91d433312bb7976fa9b50a4798060fcb97b6de7f0dd422eecac2a922e31dd

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\X3DAudio1_3.dll

MD5 c593fd0a96ee4b6390b653c4c641313f
SHA1 60d71ca2eed9ff8afa5561cf1dccca03607134b0
SHA256 74ec3e6b253af1b68252e62a5c08479453b3341d49c606adcf36913fe9ed9717
SHA512 1bb328d1a68dd7b7657d033bc2bcb8e2c096bc591e435b5691a4ad4f0f49cfad70d4e48af48d10eaf4ad13d479a3f4fef66b09a0852f8c61ff33937c7ea22190

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

MD5 edbb7730845fe5ed4717b06f84c1cb2b
SHA1 d9bc196e34d69ca0ec91a5a835b444ac3e8aea42
SHA256 de817d92db706f329d50567221c42110ae781d679ef853cc684aec779ab51ccf
SHA512 cb7c5db143087a470d7ca7f5d4200ae62513ffc27b864528d851c310d0f6f68d55b6fa45b7d3e0b81043ada5f7f6468447e9a877b6c6e06099c38690a6c07d10

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\xactengine3_0.dll

MD5 8a83673f0ab001870583fde2b004fa59
SHA1 be8d312b359a9b8f9f184d78c93c762cbc46e321
SHA256 887329745c479ce8d3023c969adf66780dd7e51ab536f0a08550ba4c77066c20
SHA512 583c73590d4b90576955783e24149125615b135f5bf5a815674e2546b93a8f89f6c3a286df09257e547bcfa8c0bc399abba59fb64158b411a83f28a4a4feabca

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\XAudio2_0.dll

MD5 418cdc57e55ee79c3f86c13a19b3d5e3
SHA1 cac2b8396b1c82a6f7ee2a3e3ec3d2e4c2f869fe
SHA256 e435b73193bdf651f7ae564eba05266595ac672db45e0e22dce92d0bcb3c6513
SHA512 1ba5a49d9102911d13d86ac4f0e4ecb44069c93a58e2e3225d9464755c14f8d57f230eb32049c2747385f7cbaa9c0da0f6001f27b685eebfcd94f3f5b8fa3250

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx9_38.dll

MD5 8f3eb548ac4ed90252394f60c77e3196
SHA1 e40bb2e3c99c55f2df9def2765bb014e01389622
SHA256 743e77a228e7d75442263ad70051e44534f7972c6326fd34b505a9c2c245894b
SHA512 bad441c93d37269a9d49edc39ded933e43baf2a563c425ea2db222a9859ecd1f076c2255c077a5afd07922b50adfda2bbb731ff6f292623b353a3dfbde4ce4e5

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx10_38.dll

MD5 a2650b27472c21cdd817eeede65648e1
SHA1 c0e5f70386bb229e289a476f2a95965699ba53fd
SHA256 bf463b7ee2235f351309b5fd790f514acf2b55a4a1f90222f7479024cc28fc34
SHA512 85320f262c10d80e889258a8584648dc20283d1af0467924e8745555c94a8fc056ac609b31d36a898829ad418c9df06047ecfcc644693bd136ccb50ecbd6fe91

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\D3DCompiler_38.dll

MD5 103cbfc5591008ad33046e20e8e1eebe
SHA1 4a8bd29d7cbe5652ba58cd6754318a03497d841a
SHA256 ddcaadbdd47bcba02c8d1880d456acc20732d21554977338ae507987ed04046e
SHA512 ddab1a2ab33b224ac3f9ed396415bbbdf96bd59bc6794fe26796ee87691154d5e1ca2abf8bb85e7a9fb6793446bf17f6f6f53b74e69443270f50ce0b85e06b6f

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\X3DAudio1_4.dll

MD5 e3832514bd21236067b7227f6165ef95
SHA1 bdde126bfa7e3133f33e3d3e7b4618422c61acac
SHA256 799b38139523a3b30d26e21798ee705375c61eed8ae2434fddb52fde51f4bb78
SHA512 e60bb2b8cea5864f3311dbc0ad8f7813764bd55153bc0554e2842b6973fe24a1ce9e4381fc6fb05792d97799fb247d591e15b7dc41eec2bf563bd4f7ca797d85

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

MD5 6f05a242d0253e19d67978780bc06528
SHA1 ed8c623b0e462e92185d498552a11be01723861f
SHA256 ea31341129f7558d34fc2fcae9e715343aaadfc57f06a33a6da18448bd71b77d
SHA512 2bafde8afa6918956f745b34397a4f6ac479d3696a363184ea75cb9e05c5d83796527ea6cf343004544173e5370bca0258d5636e3cc5cec16701d68d82cd97f3

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\xactengine3_1.dll

MD5 2e0e25252e1d41752876e9fe12ade175
SHA1 d9de3a83235166a4bbc4bc356419c07aaf3e3f8c
SHA256 088999560171c60129c95f9b541852392602561dce43e4c61a453d48065f52ca
SHA512 a4555cbbde372893c564e1fcd707525c92fbcfb6915354b0062474cc47fe36ef66a3af212c08da117f2f2121698e556633f8c399199344354ce0d4cea4d0a2ca

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\XAudio2_1.dll

MD5 e34ff0115b1ee3b4e03d22ae9840ee03
SHA1 746e6e84ff7f630643ff9381b9dff1f40a49ca16
SHA256 32a7c6a4edef46f025a4a5c64b892e29baaae948e86d9ed49e82014eec1441de
SHA512 7448bb3ebb8815e13e14514c8580dfb7f6de1a96c90f6611f6766dfb48ae7bc4a06efdc493060c054f222e7d9b308e062e1cabb19a60f50ff9e20f06905df58d

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\XAPOFX1_0.dll

MD5 dd165760f1b95200a3da2d9dfdb84234
SHA1 0724300a1cbaa32e03a234cf6080a67967c335d3
SHA256 8b396d275de2550af8ada6a1ff71f0f4870b51c8407e44044c2dde7ad6b754cc
SHA512 eb130afda1481dd0e27a19330a8be8045b3172e46edcc5a0cb089e191fe415c41cfbdf3af8f084a6ff58f89cf8d7d4d0879a3bae8f93a52ffc84da2d4fec5ccc

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx9_39.dll

MD5 8cb3defb8887c4f0846db1fc1304d6d2
SHA1 5fbe058848db16117ce7cfdabea1f178ba229a6b
SHA256 5d29988cad858f754ecc62c3d30de555f82cc21b5b26c448b890295e9b7bee82
SHA512 4cb675b179d05ead18d2e42329e0d10cd1d520cf9c8c0681b89aca79ac9c814e82941b0086135bd57721b66b55b6feae00bd29af804f59a486e935fda413fc43

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx10_39.dll

MD5 e6c2f1d8b667ddc04cb55b9f0159ef97
SHA1 9dc5c2d54397aeb56deafb63ee34b641f7030ee7
SHA256 613afdb8b44bb3bed945279229d9604a3cd553f8c2b9b091235cbab8cd00de61
SHA512 5cc39f19b6de99bad0be00fcbde9d498e23f29303c6ed4ba79c2b2bc63f259f9b617ecf6ac67beee8a71c03a0e80c29412e0159a5014a43a6168c37835bb0e00

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\D3DCompiler_39.dll

MD5 c4f1972497fe2ceb7d900938c97fcf91
SHA1 27c1886e7823813ac61c35ea0cd5b72ea0ea7dbc
SHA256 b99b655abc4ec45851cc2acdb7a348e739687200a4fe3be9c35d6738dd61112f
SHA512 8d35dd4000e1d632d0924b594d6ef13454159f8c3b85636f180486ff794b76f8a84d7977e340ef08217f0f68747b593eae0b44824a20c12494007f4a40cc3d00

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\xactengine3_2.dll

MD5 f3c6be26949caadb11dbf0086082fac9
SHA1 6b7a2475aacaf63f30964e9958713bec331c82ba
SHA256 e6a34c1f068f89d6515cb460eed3b4dbb53522c5579e6c75741482f0d40d9f99
SHA512 167afd32d847088d4973437f8b89badce194211f8fb1a14cf30df11848e4d4dd8d5243765edb1ed09df0f9b674cd7de764f1dae9fcac91f0ec98ecd259181d3b

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\XAudio2_2.dll

MD5 50f4a0d5e6a0bafefa78f353533b8e06
SHA1 d370434eea3a557ed77b2363dfac720a5ed98666
SHA256 9c7897b4ee1bcd190b1c0b7b77e64ee731d234764683a1e2286af70d86b62753
SHA512 7686b893996b76a25ca7da971ca3a10400dcc682a05e8317a9d159a9317537de0bc20dfdef643e85e6ee548d7893138497fc156f77534124a8eb3e3ce47f0cb0

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\XAPOFX1_1.dll

MD5 d95eaabf5d277ef91d9ca70151209e56
SHA1 3d47ebbd6236045309d2222a696b7141c0957379
SHA256 5ab63c0f040fdf65e681eba4daa55ed83e89ea10c426dc2fc763da0fc94f3ace
SHA512 6d2e73468485fee2b4007f1fdf16381cdd6c77edbe5530f63cbf8696646b14d06100fdf54a48547f29ea5775f29226b16808a5a1bd4c0778413855f80e5b8259

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\X3DAudio1_5.dll

MD5 350fefe18b86bd4d9ab2a96d00215a49
SHA1 be4ddfa0edc3a463471fc170e9706abac0a672fc
SHA256 315944bb2a1959c8a4bd2677ed415363e1611c7351ce55319dc98fd2aac83f87
SHA512 490bdd66920e36aaba2a4d12bfe4aacbead7403b1a623bead0d9ab5f68d80f46fa530c5f7de9e747eb8acbfbec8c635aea32655dddcb6a9d8e006339e1e8857f

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\xactengine3_3.dll

MD5 8ba296419af3417d1e9806b83166e472
SHA1 a2a8a64aedcbda68149a2726b094f1710cba71d1
SHA256 ef052bc9b7fde596fff3ea2d9c8fc994f3282953dead1b7f5477e7154af67245
SHA512 877e89553cbfb6afc6dfb22a590a468f035dccffecf842cb26010d5e62e33fe10e477d5cb157d321de3ecc59112ba616b80e767028eedeb4e70a591f1b81b902

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\XAudio2_3.dll

MD5 47ed15dc87ae334c13c4dacd1be2cced
SHA1 54f94839c4e4d798a1f4f1fb6ee240957a738cb0
SHA256 04dec9d7c68962e01efec0aac0ef7a3499bc4c16e8a41bd61fe6641da48d7dcc
SHA512 da0707a153172c48036d885404035829ea251b7df5a9246fc05dd164ceae9604cb0cc931b85d77151bc613cd5e7e4d0430a4fd92697c8bbc8faf5fcfd1c140c4

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\XAPOFX1_2.dll

MD5 295e47a75f278580f9441041eaaea3d2
SHA1 0716ca729ca3d84e9dfb4bd97c1e12466cc68625
SHA256 d1a55061bcb42f69b7cf35e2985d48e30c7a90f0bc668e90390f465b36bd0161
SHA512 a3cee1d45759fe3323fe8c3c49600856a86b61b3174c4d9c71e58a95db4848683c71605f5bd8c04bec591da02d96b79c68c1135410930ca63d17f7a929f2dc4c

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

MD5 44442b56a318475a3e7acb055ca79d29
SHA1 9ffe16ecdacd79269344643ca160d940e88e7292
SHA256 4c8befaece0c58eb75c38e2347db04557c1bd2a4a269282c3769d6bcccf50395
SHA512 d64ab17f7e1baaeb5aafa4e7eb100257d7a29b1f5caed394b2d3b656c4c9ae56a0f9b952f60573e3ebffa090740f95b0f173eaf2642d6245eb8c2bc6c619b096

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx9_40.dll

MD5 eea5e428ce63804f9b12d21c97b5968f
SHA1 77a7f48f4bdb7e66ed5e524bb8879e3da0d6cd1d
SHA256 16fd909aeb68d0d1aca8529dc7f78880b97d6649d70ce8d03a2c858bc28e216b
SHA512 545518dabd82441ddfc17fe1c1cbd7d14603bb58130de1307a31f73b93ca42afdf25dfcf481f0383c4e039edfe4a88ae7b84b06a2850c29bbc3550114e499c73

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx10_40.dll

MD5 91b4aad4412bb223b466f3dfb43e86da
SHA1 850aeb2b3ca15158be00faa5c161312cf4a876f0
SHA256 c05787cbf3aa4527baae96a425ceac910090ef48809990a450c33f3cda0e4767
SHA512 413f68d1ad36aa51389da62eb2fe89969e4460ab166ce44943e382fd2d1cad0953979eebb20af58dd51def3fefa1100ea9fe95c05714c36d5322e281cea1a1a2

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\D3DCompiler_40.dll

MD5 3384134eeb8f223178c2eb8323003ec0
SHA1 c8eaef8cbc91f4386e42904dee70abb6ab7304f2
SHA256 f0a6f156d13150de6ebb094233e5ff78581fbdb77bd0ff8d083698c42bc8e13b
SHA512 dafcf4c116d994c17d47d36b1dbc2ba8ca61cadeefa5d770adc391713d2c13ed2b6eb8d2464f4811cb472c8e1eef384ba21d7ad8203ba4e9ef07f33781feaaf9

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\X3DAudio1_6.dll

MD5 e763798cad2a90b6ab61854f50cd47dd
SHA1 419f2c98d2a3f419db1b1e9b5f4f7c3b9b636c1d
SHA256 574d14ab9a641c6cbadd78f2cd6c088b64b59c3646057952e63cad7d2778e1c3
SHA512 b455b0078786b7ff8362f7404095037a5332603383707a6dd493f381eae3e28135696fb4863e1915ea01c0f12ce10d021a18ab91cbab06b4d20142e0b38833fd

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\xactengine3_4.dll

MD5 686f8d1b4926d48227a06acd4d41cd1e
SHA1 324fd1d21a42f0c30bb071beb2cd5db9abbf3138
SHA256 d3bad7995b998f2c95dbb33020a198ef5a248825321032f051619f353d46182b
SHA512 6ed69ab933492870b7fbf4e178999b835846075fe103e65f9a0f9b1ad8d47c9277f31a7a0fb53f3620b591b103b02bfa8efec530d7372680f585b82e128edcc4

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\XAudio2_4.dll

MD5 e684c5fa18adf9ea14737757413bf727
SHA1 1dd454144e8c0f3aaf24db0b77f03737914d9a72
SHA256 bcde4317debd0052b1436a6fda60e1dcb1e308979498117fa0cb50061f38101c
SHA512 9686f92745a30fd9e442ff6a24dd89410aa483ccd46edbefce0fe378645292255a323e1aae146180e8a4ecd15765a996df959a302d5cdbc6dfa4c5fcb8252e4d

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\XAPOFX1_3.dll

MD5 c4479a4547390e3c5ef28d453abde4f5
SHA1 9b3af3d2ffcf52cc6628cb486372be2870771637
SHA256 c6956ac2ee59f71e86784138b5443de6970a1274ac161945b8a44dc1d535db84
SHA512 94a55bbff8a285d6b91ae72b70664b2c1a067890db175e20265be2d57a4b29deec52f08f0aba8ae07ed30dfcf96889ab835b971d2bf567758d3f7b881a7e5324

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

MD5 d001b26aaa9bec255c0b697732e571da
SHA1 adce71afb93cf04a86c1b9d2f80144ca35742d2a
SHA256 1707a6644d66406a9ac149b8fc959d964dce5c028ca3e1d0d5052e70f80515e2
SHA512 af39d48e90cd2cd575a8d039642985e25ead1fa51528a082d91c9bcaf9d1ec97afd0f66c0bebb53043221ef13dda69000ebbdaea87605efbe873f471e16a6f90

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx9_41.dll

MD5 3fa06cf5079b84155d18b05c08f7131b
SHA1 fafe52876151a08f39dbb6b4aa137dd85558ba5f
SHA256 6ac4df203af419d3f3b7d9a99e14a3490ea3ad307c474bfe36baea642b1421f6
SHA512 24d29c3ffb6532da860fef4dd93e61f7532cea3af94928495a3af0231e7dff6db5cad25713451a2e722c076462b94818cd6969a1c7d8905585b0f64e12174d1e

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx10_41.dll

MD5 1aa571774936717ee776dbed51e9edf4
SHA1 98eac7257ab3350504c0a70342b6b24658411f55
SHA256 9f4c15e1f68795727eded4737acc5a1aa85f896cd9e6924fddc9128b48f1bbd6
SHA512 bb47d95d594b249608e323c8ff383c0655a56e9192e1a2f3157e9c18dc7b9baabcf8e6b09d30fef570e0718edf673c56a23df5b5d5c6ec3242ad3d887669127d

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\D3DCompiler_41.dll

MD5 781e8b5b6fdb3c9b4e4a4a9fb019960d
SHA1 292b9f02bc2377c6f89b505554394ace161c68c0
SHA256 69ddadf8f5be24f10382706480b55e2492008d102001779f976608e880c65aab
SHA512 718955c983708f3ce5b6796de28658603bb61270ca6f1b3ee01d73ca9a789db326a7998df38cbd6330e69bfe3d9504b0fd351fb7bb18566be6af03fa36b7573a

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx9_42.dll

MD5 c6a44fc3cf2f5801561804272217b14d
SHA1 a173e7007e0f522d47eb97068df0ca43563b22bc
SHA256 f8b9cfab7fffbc8f98e41aa439d72921dc180634a1febca2a9d41a0df35d3472
SHA512 2371844bc86cdce2d1933625b921b982c4d1b84a39698b51180b09a2d45732407d721fa01d294ca92a88777607a1bb00283f6bcdd4231137a388216d0b09dd5a

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx10_42.dll

MD5 501ac862517c5445742bee8a2b88414e
SHA1 49f3f2df66d357aa84a5e7a0eb368ea595b7d95a
SHA256 46429c4affe041b08a7acfda0e9162ba42de966acb2cbcaf09ef976232073b51
SHA512 08dc13d5ad0a0d2aaca9d3dbfb53304216111da73bf48810df2982650d580757c10c8b9bf80ae5191e06ebaa44b2bf9c244ae141308748c3e7fb9ef6088900ad

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx11_42.dll

MD5 d09ac80a4b5312239852836c84df3392
SHA1 ba838d90a1e74d6b9a57abfc9729dd3b2e7fb192
SHA256 8c8fa8dce19e2f43e82cecd73a268e831a5ce0a16023845f7fa7fcb597772e85
SHA512 69232a47c80f01433716f3a9202af25e1b9a298a2b7b7d23b959e59d9c4ebf329cbe9a9a5bde41c06e978fda062225447114f9ae736920e7bbce8587a9390613

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

MD5 7d8f5afb77c3ada97a83f3fc253d6392
SHA1 e5424d020c6de84ccf72253834c545024161f682
SHA256 3a07c2436d3fd2473e15518a53262d4f0fb7f2a05589437cc5668f929063e782
SHA512 52f4bd961febfe6f691d7dd1e826f689319656393756e0c5c9e3d9729ad47e072071b204f63a3b37b67204fcdffd4539db08cbf190605dd9652ace51627e8845

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dcsx_42.dll

MD5 b337306dfb508a1bcef1974bfbb8d924
SHA1 203c32d73f99e1097bc306c9225307a18c617f4d
SHA256 e462eb3d41db54988ce3be46ced60b0073f8d939a9946cda67fb1df3c8afe0a1
SHA512 5c7a101e403aa2eab57e2972427a67ae6cd1598a35f983af784ca3a7446f7c60ad3cff7e52510f14647645a49c387020a06242663433db89e6454188b93813e0

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\D3DCompiler_42.dll

MD5 b33b21db610116262d906305ce65c354
SHA1 38eef8d8917351ee9bdff2cc4fbfaefaa16b8231
SHA256 6c976311406c23aa71018d274da0ecdef43b6e3a3b0b01e941a5e8e4e974386c
SHA512 7049726ccbba90d06b3a56e1dbde8196935d4681b5548248cd3e6a8e38183c268152ba2b07eb90823bbe327c02ec946c59abe3562b59e29d9bcff8fe90e0adcc

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\xactengine3_5.dll

MD5 db3c93e87452b8dab4f58ed1fd2b1998
SHA1 fbcc3c80c74e98e8554260b8a08e14dd1670075a
SHA256 1d37ab9b90372eaaafb5055401449dc3184428fed559baaf36fbcccd2479611a
SHA512 af693d7d326dd7874e0eba5b4163c21aad86270f8e54058c637f1cd200e45eafb75f79a2d579c477c06082ace44f3318bcef71698089808690ff88443ddf348b

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\XAudio2_5.dll

MD5 8b01fb723f3b30ab3debddbf97cfe577
SHA1 e379c3b7d0a66da06b6a381deea19bc541ee0689
SHA256 c596de2ab8394fb62538fef0b4657317f4ead50a6d798c5d066e25e334576c27
SHA512 ba8c5bf7eb657bce6e2c937e082b97bd6169d1cf3daa5800e5112d62596bdea47e5c1f23146f3f696cd68e8def4df92e3fb24a9aa8b9a08320738b66fa6dfe2e

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\XAPOFX1_3.dll

MD5 30686ece80545e06d78d156eb9f7d463
SHA1 b257ba4ffad8003fb7d12e9babd3cf4e88bd52f9
SHA256 b05ad9417028b9777f69422caa01ae9fd22c7bfe542bc6e7de2649e28a4ea643
SHA512 ca03bb01d8e2608517462597076bfa96f4b2595c33b2635d80e4348ac3926e17c93e5db30d7e43c30277cf8ac07f982a0c729f83a00df8965993d4f0758eca13

C:\Windows\Temp\OLDCA80.tmp

MD5 db6c0400a5e2e4f68c7eb75912443296
SHA1 f8c937c62774502960df9321ad1f1d7d0999cddd
SHA256 5f03017d3b51c1dc413952d21bf35ac660693c6f7539e8f8930ddd41d197a495
SHA512 2f950f06ac7806eb1e5e2d0de9b91efe938b0e7cdb85c5838de1bb98ca693be2046c94f7824b084b4bd31e956bd9ba90f891145fcb26cbf47911c925fd07f3db

C:\Windows\System32\XAPOFX1_3.dll

MD5 37b348a79c4c9b8ab925b18ffd241e96
SHA1 a0b030e5652eafca2cc5d741dbbaac203781ed1d
SHA256 787e10d48d90db50dc155fca53fe8c5c1a383ca24d468733d4b8fe3acf2d0a34
SHA512 20ad359ed0a1fbfacbbba2749eaac9be4e9f416e24cb7ac9dda55c6d2d372fd290781607e5f806b4da3a9d01abef58b979153bc144a8cc8c6d7115166178fe85

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\X3DAudio1_7.dll

MD5 c811e70c8804cfff719038250a43b464
SHA1 ec48da45888ccea388da1425d5322f5ee9285282
SHA256 288c701bdedf1d45c63dd0b7d424a752f8819f90feb5088c582f76bc98970ba3
SHA512 09f2f4d412485ef69aceacc90637c90fad25874f534433811c5ed88225285559db1d981a3ab7bc3a20336e96fb43b4801b4b48a3668c64c21436ee3ea3c32f45

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\xactengine3_6.dll

MD5 f81c4678a55ffee585ac75825faf5582
SHA1 8fb2e6cf2a022eaed2ff5e3e225b3ca1e453d1cc
SHA256 8a7e7c5ac2e6230f0249d46751522e7ecf85e7490cf7491ab73bf2e7e59e4c0f
SHA512 8c8071bc2640d5c0fcf140ad68d4788cbb0706d17313c3cb74e25624a748b282acbf77eda678cf0d5fecf2ec3d583508c6f4eaf5c84073909b616f59b4f4e5fe

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\XAudio2_6.dll

MD5 4976243bd70fae3d1d24e49739ab2710
SHA1 6ef27b10bcf4e697fe77c3e964b326be11e4444f
SHA256 61b57170f7c6365714396072d22cb98746718c0f44c9f0d5c62fdb1b218639c7
SHA512 af2d6aaad44bed880a1a2ee947618b142c76a5eca42d4608196b74df9108a9649059d8207e84a58b76ad43aefe9b66ffcc519f8126667177011cf4199f163e83

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\XAPOFX1_4.dll

MD5 e4ce2af32f501a7f7dddd908704a0ee6
SHA1 9dc2976efb15b6fba08bebdeb98929b6961063a5
SHA256 0aee44b12913a95840ee6431d90518b0d72c54a27392e21ee6995e2151554a06
SHA512 ec14a58414d595a36c6b575cdae690f11481cd3f0b35fd2f4c6a6d162a6272882cfe03da865e09a34972775790529f51c80b69056a2fcb909f25b549ed2f7f01

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

MD5 730e5493910e5693499485e352381c6a
SHA1 2871488c24d069e677868e0a590e7e74f1f19b12
SHA256 d808bb408a4bd695a9793e70b1c61637e008ac11174dbe1373481e2bdb0c9299
SHA512 62fb2a2ddfd62d48ca8a709426c07e1cda0e66df5b977c3bfdc3b191d15c3a139a5c6180ed7a66b2418a5436273d713f2af1cb21f7dc77df78e0743d6a18e176

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx9_43.dll

MD5 86e39e9161c3d930d93822f1563c280d
SHA1 f5944df4142983714a6d9955e6e393d9876c1e11
SHA256 0b28546be22c71834501f7d7185ede5d79742457331c7ee09efc14490dd64f5f
SHA512 0a3e311c4fd5c2194a8807469e47156af35502e10aeb8a3f64a01ff802cd8669c7e668cc87b593b182fd830a126d002b5d5d7b6c77991158bffdb0b5b997f6b3

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx10_43.dll

MD5 20c835843fcec4dedfcd7bffa3b91641
SHA1 5dd1d5b42a0b58d708d112694394a9a23691c283
SHA256 56fcd13650fd1f075743154e8c48465dd68a236ab8960667d75373139d2631bf
SHA512 561eb2bb3a7e562bab0de6372e824f65b310d96d840cdaa3c391969018af6afba225665d07139fc938dcff03f4f8dae7f19de61c9a0eae7c658a32800dc9d123

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dx11_43.dll

MD5 8e0bb968ff41d80e5f2c747c04db79ae
SHA1 69b332d78020177a9b3f60cb672ec47578003c0d
SHA256 492e960cb3ccfc8c25fc83f7c464ba77c86a20411347a1a9b3e5d3e8c9180a8d
SHA512 7d71cb5411f239696e77fe57a272c675fe15d32456ce7befb0c2cf3fc567dce5d38a45f4b004577e3dec283904f42ae17a290105d8ab8ef6b70bad4e15c9d506

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\infinst.exe

MD5 a7ba8b723b327985ded1152113970819
SHA1 50be557a29f3d2d7300b71ab0ed4831669edd848
SHA256 8c62fe8466d9a24a0f1924de37b05d672a826454804086cddc7ed87c020e67ff
SHA512 60702f08fb621bf256b1032e572a842a141cf4219b22f98b27cb1da058b19b44cc37fb8386019463a7469961ca71f48a3347aaf1c74c3636e38d2aea3bca9967

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\d3dcsx_43.dll

MD5 83eba442f07aab8d6375d2eec945c46c
SHA1 c29c20da6bb30be7d9dda40241ca48f069123bd9
SHA256 b46a44b6fce8f141c9e02798645db2ee0da5c69ea71195e29f83a91a355fa2ca
SHA512 288906c8aa8eb4d62440fe84deaa25e7f362dc3644dafc1227e45a71f6d915acf885314531db4757a9bf2e6cb12eaf43b54e9ff0f6a7e3239cabb697b07c25ea

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\D3DCompiler_43.dll

MD5 1c9b45e87528b8bb8cfa884ea0099a85
SHA1 98be17e1d324790a5b206e1ea1cc4e64fbe21240
SHA256 2f23182ec6f4889397ac4bf03d62536136c5bdba825c7d2c4ef08c827f3a8a1c
SHA512 b76d780810e8617b80331b4ad56e9c753652af2e55b66795f7a7d67d6afcec5ef00d120d9b2c64126309076d8169239a721ae8b34784b639b3a3e2bf50d6ee34

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\xactengine3_7.dll

MD5 4fd7bcb9d8af6a165e9ba0c2eb702e7c
SHA1 a90863632c2d54dd06e01537744a7b65bb3d0db2
SHA256 d7b1cf58898046c430d49cf8f778e4898280f4709340c3938d3139894166fe8d
SHA512 7fcc435d07c434ec392bb9bfa98aee20b0b1cd2ad6a31f073af80f6f37639336349728c9b0fcd967c4c395fc40c0efad1e36142fe7632512b0f26aca1b1c4bea

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\XAudio2_7.dll

MD5 81dfddfb401d663ba7e6ad1c80364216
SHA1 c32d682767df128cd8e819cb5571ed89ab734961
SHA256 d1690b602cb317f7f1e1e13e3fc5819ad8b5b38a92d812078afb1b408ccc4b69
SHA512 7267db764f23ad67e9f171cf07ff919c70681f3bf365331ae29d979164392c6bc6723441b04b98ab99c7724274b270557e75b814fb12c421188fb164b8ca837c

C:\Users\Admin\AppData\Local\Temp\DX6D2E.tmp\XAPOFX1_5.dll

MD5 8a4cebf34370d689e198e6673c1f2c40
SHA1 b7e3d60f62d8655a68e2faf26c0c04394c214f20
SHA256 becfdcd6b16523573cb52df87aa7d993f1b345ba903d0618c3b36535c3800197
SHA512 d612e2d8a164408ab2d6b962f1b6d3531aed8a0b1aba73291fa5155a6022d078b353512fb3f6fff97ee369918b1802a6103b31316b03db4fa3010b1bf31f35fb

C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe

MD5 585dd371280f2b6276029e13af57ea83
SHA1 f9695969fa4ab6fb387d01cc43df7cdcbce5c646
SHA256 020698081e800550c7c7c5b8b83290a6f9974fff0647c222616b09a66916dea6
SHA512 7f5e205893a5668ab57b3e8d8c08b7e74a4b132eb6c1f29e2cf29e8270d4b3f630e4a61d1505fd3bc8b9a5a879779f4457ab8539e9833300e582b997eb37172d

C:\Users\Admin\AppData\Local\Temp\nsw341C.tmp\ioSpecial.ini

MD5 321f005cedc4d2341e6f3070d1ed5087
SHA1 57b6b48747ac9c4b14f817af4b498826af14b323
SHA256 5f757e1c53b1d069f85d4813676501a43075cdad6f4cd9aeee324d41b58b5d6f
SHA512 00d8e7ee5c9da1cd2b0cc958d0c54435b93bd1a61163e16e2cc7f9cdefadb932c8b2983aba74947487f3dc4d0cfddcb2b6e2cfee95c7414729e01fe954f944e5

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-11 13:50

Reported

2024-06-11 14:36

Platform

macos-20240410-en

Max time kernel

2344s

Max time network

2655s

Command Line

[sh -c sudo /bin/zsh -c "/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://www.curseforge.com/minecraft/mc-mods/simple-voice-chat/files/5358779"]

Signatures

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A discord.com N/A N/A
N/A discord.com N/A N/A

Resource Forking

evasion
Description Indicator Process Target
N/A /System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid N/A N/A
N/A /System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy N/A N/A
N/A /System/Library/PrivateFrameworks/TCC.framework/Resources/tccd N/A N/A
N/A /System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy N/A N/A
N/A "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall" "--install=/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz" N/A N/A
N/A /usr/bin/tar -Oxjf "/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz" GoogleSoftwareUpdate.bundle/Contents/Info.plist N/A N/A
N/A /System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy N/A N/A
N/A /System/Library/Frameworks/ApplicationServices.framework/Frameworks/SpeechSynthesis.framework/Resources/com.apple.speech.speechsynthesisd N/A N/A

Processes

/bin/sh

[sh -c sudo /bin/zsh -c "/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://www.curseforge.com/minecraft/mc-mods/simple-voice-chat/files/5358779"]

/bin/bash

[sh -c sudo /bin/zsh -c "/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://www.curseforge.com/minecraft/mc-mods/simple-voice-chat/files/5358779"]

/usr/bin/sudo

[sudo /bin/zsh -c /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://www.curseforge.com/minecraft/mc-mods/simple-voice-chat/files/5358779]

/bin/zsh

[/bin/zsh -c /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --simulate-outdated-no-au='Tue, 31 Dec 2099' --new-window https://www.curseforge.com/minecraft/mc-mods/simple-voice-chat/files/5358779]

/Applications/Google Chrome.app/Contents/MacOS/Google Chrome

[/Applications/Google Chrome.app/Contents/MacOS/Google Chrome --simulate-outdated-no-au=Tue, 31 Dec 2099 --new-window https://www.curseforge.com/minecraft/mc-mods/simple-voice-chat/files/5358779]

/usr/libexec/xpcproxy

[xpcproxy com.apple.GameController.gamecontrollerd]

/usr/libexec/gamecontrollerd

[/usr/libexec/gamecontrollerd]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/chrome_crashpad_handler

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/chrome_crashpad_handler --monitor-self-annotation=ptype=crashpad-handler --database=/var/root/Library/Application Support/Google/Chrome/Crashpad --metrics-dir=/var/root/Library/Application Support/Google/Chrome --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=OS X --annotation=prod=Chrome_Mac --annotation=ver=101.0.4951.54 --handshake-fd=5]

/usr/bin/profiles

[/usr/bin/profiles status -type enrollment]

/usr/libexec/xpcproxy

[xpcproxy com.apple.siri.context.service]

/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService

[/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Helpers/ksinstall --install=/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/developer_id_certificate_reauthorize

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/developer_id_certificate_reauthorize com.google.Chrome]

/usr/bin/tar

[/usr/bin/tar -Oxjf /Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Frameworks/KeystoneRegistration.framework/Resources/Keystone.tbz GoogleSoftwareUpdate.bundle/Contents/Info.plist]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (GPU).app/Contents/MacOS/Google Chrome Helper (GPU)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (GPU).app/Contents/MacOS/Google Chrome Helper (GPU) --type=gpu-process --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --gpu-preferences=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 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=28]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=network --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=21]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=21]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Alerts).app/Contents/MacOS/Google Chrome Helper (Alerts)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Alerts).app/Contents/MacOS/Google Chrome Helper (Alerts) --type=utility --utility-sub-type=mac_notifications.mojom.MacNotificationProvider --lang=en-GB --service-sandbox-type=none --message-loop-type-ui --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072]

/usr/libexec/xpcproxy

[xpcproxy com.apple.nehelper]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=7 --launch-time-ticks=286032081 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=61]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=6 --launch-time-ticks=286078697 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=61]

/usr/libexec/nehelper

[/usr/libexec/nehelper]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ViewBridgeAuxiliary]

/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary

[/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary]

/usr/libexec/xpcproxy

[xpcproxy com.apple.pbs]

/System/Library/CoreServices/pbs

[/System/Library/CoreServices/pbs]

/usr/libexec/xpcproxy

[xpcproxy com.apple.SafariLaunchAgent]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --extension-process --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=8 --launch-time-ticks=290242452 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=67]

/Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent

[/Library/Apple/System/Library/CoreServices/SafariSupport.bundle/Contents/MacOS/SafariLaunchAgent]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --extension-process --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=12 --launch-time-ticks=290444500 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=70]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --extension-process --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=10 --launch-time-ticks=290480303 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=70]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --extension-process --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=11 --launch-time-ticks=291091659 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=71]

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin

[/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin --productid com.google.Chrome --print-tickets --store /Library/Google/GoogleSoftwareUpdate/TicketStore/Keystone.ticketstore]

/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin

[/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bundle/Contents/Helpers/ksadmin -P com.google.Chrome --delete --user-store]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-GB --service-sandbox-type=service --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=78]

/usr/sbin/system_profiler

[/usr/sbin/system_profiler SPConfigurationProfileDataType -detailLevel mini -timeout 15 -xml]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=99]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-GB --service-sandbox-type=service --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=107]

/usr/libexec/xpcproxy

[xpcproxy com.apple.spindump]

/usr/sbin/spindump

[/usr/sbin/spindump]

/usr/libexec/xpcproxy

[xpcproxy com.apple.tailspind]

/usr/libexec/xpcproxy

[xpcproxy com.apple.spindump_agent]

/usr/libexec/tailspind

[/usr/libexec/tailspind]

/usr/libexec/spindump_agent

[/usr/libexec/spindump_agent]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=112]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-GB --service-sandbox-type=service --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=111]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --extension-process --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=19 --launch-time-ticks=301726714 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=111]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=122]

/usr/libexec/xpcproxy

[xpcproxy com.apple.sysmond]

/usr/libexec/sysmond

[/usr/libexec/sysmond]

/usr/sbin/spctl

[/usr/sbin/spctl --assess --type execute /Applications/OneDrive.app]

/usr/libexec/xpcproxy

[xpcproxy com.apple.assistantd]

/System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd

[/System/Library/PrivateFrameworks/AssistantServices.framework/Versions/A/Support/assistantd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.security.cloudkeychainproxy3]

/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy

[/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=21 --launch-time-ticks=330863778 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=112]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=22 --launch-time-ticks=330992218 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=112]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=23 --launch-time-ticks=331195355 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=112]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=24 --launch-time-ticks=331828247 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=112]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=25 --launch-time-ticks=331981237 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=112]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=26 --launch-time-ticks=332027739 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=112]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=27 --launch-time-ticks=337453591 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=112]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-GB --service-sandbox-type=service --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=112]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=113]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobile.keybagd]

/usr/libexec/keybagd

[/usr/libexec/keybagd -t 15]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=113]

/usr/libexec/xpcproxy

[xpcproxy com.apple.geod]

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod

[/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=112]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=112]

/usr/libexec/xpcproxy

[xpcproxy com.apple.geod]

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod

[/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod]

/usr/libexec/xpcproxy

[xpcproxy com.apple.secinitd]

/usr/libexec/secinitd

[/usr/libexec/secinitd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.cfprefsd.xpc.agent]

/usr/sbin/cfprefsd

[/usr/sbin/cfprefsd agent]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=112]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=112]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobileassetd]

/usr/libexec/mobileassetd

[/usr/libexec/mobileassetd]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=112]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ViewBridgeAuxiliary]

/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary

[/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=112]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ViewBridgeAuxiliary]

/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary

[/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary]

/usr/libexec/xpcproxy

[xpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A]

/usr/libexec/neagent

[/usr/libexec/neagent]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=112]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=112]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-GB --service-sandbox-type=service --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=112]

/bin/launchctl

[/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveUpdaterDaemon]

/bin/launchctl

[/bin/launchctl kill SIGTERM system/com.microsoft.OneDriveStandaloneUpdaterDaemon]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=112]

/usr/libexec/xpcproxy

[xpcproxy com.apple.suggestd]

/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd

[/System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=114]

/usr/libexec/xpcproxy

[xpcproxy com.apple.knowledge-agent]

/usr/libexec/knowledge-agent

[/usr/libexec/knowledge-agent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.AddressBook.ContactsAccountsService]

/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService

[/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.CalendarAgent]

/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent

[/System/Library/PrivateFrameworks/CalendarAgent.framework/Executables/CalendarAgent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.CalendarNotification.CalNCService 653]

/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService

[/System/Library/PrivateFrameworks/CalendarNotification.framework/Versions/A/XPCServices/CalNCService.xpc/Contents/MacOS/CalNCService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.routined]

/usr/libexec/routined

[/usr/libexec/routined LAUNCHED_BY_LAUNCHD]

/usr/libexec/xpcproxy

[xpcproxy com.apple.secd]

/usr/libexec/secd

[/usr/libexec/secd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Maps.mapspushd]

/System/Library/CoreServices/mapspushd

[/System/Library/CoreServices/mapspushd]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=114]

/usr/libexec/xpcproxy

[xpcproxy com.apple.siri.context.service]

/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService

[/System/Library/PrivateFrameworks/ContextKit.framework/Versions/A/XPCServices/ContextService.xpc/Contents/MacOS/ContextService]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=114]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=113]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=113]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=114]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=117]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=48 --launch-time-ticks=509542761 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=114]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=49 --launch-time-ticks=510620036 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=122]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=50 --launch-time-ticks=511224108 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=124]

/usr/libexec/xpcproxy

[xpcproxy com.apple.AppStore.1900]

/System/Applications/App Store.app/Contents/MacOS/App Store

[/System/Applications/App Store.app/Contents/MacOS/App Store]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=51 --launch-time-ticks=512802067 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=117]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=52 --launch-time-ticks=513628513 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=123]

/usr/libexec/xpcproxy

[xpcproxy com.apple.dmd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.GameController.gamecontrollerd]

/usr/libexec/gamecontrollerd

[/usr/libexec/gamecontrollerd]

/usr/libexec/dmd

[/usr/libexec/dmd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.speech.speechsynthesisd]

/System/Library/Frameworks/ApplicationServices.framework/Frameworks/SpeechSynthesis.framework/Resources/com.apple.speech.speechsynthesisd

[/System/Library/Frameworks/ApplicationServices.framework/Frameworks/SpeechSynthesis.framework/Resources/com.apple.speech.speechsynthesisd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.storeuid]

/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid

[/System/Library/PrivateFrameworks/CommerceKit.framework/Versions/A/Resources/storeuid.app/Contents/MacOS/storeuid]

/usr/libexec/xpcproxy

[xpcproxy com.apple.iconservices.iconservicesagent]

/System/Library/CoreServices/iconservicesagent

[/System/Library/CoreServices/iconservicesagent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.iconservices.iconservicesd]

/System/Library/CoreServices/iconservicesd

[/System/Library/CoreServices/iconservicesd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.adid]

/System/Library/PrivateFrameworks/CoreADI.framework/adid

[/System/Library/PrivateFrameworks/CoreADI.framework/adid]

/usr/libexec/xpcproxy

[xpcproxy com.apple.spindump]

/usr/sbin/spindump

[/usr/sbin/spindump]

/usr/libexec/xpcproxy

[xpcproxy com.apple.spindump_agent]

/usr/libexec/spindump_agent

[/usr/libexec/spindump_agent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.security.cloudkeychainproxy3]

/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy

[/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy]

/usr/libexec/xpcproxy

[xpcproxy com.apple.CoreAuthentication.agent]

/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd

[/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ctkd]

/System/Library/Frameworks/CryptoTokenKit.framework/ctkd

[/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tw]

/usr/libexec/xpcproxy

[xpcproxy com.apple.pluginkit.pkd]

/usr/libexec/pkd

[/usr/libexec/pkd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ctkd]

/System/Library/Frameworks/CryptoTokenKit.framework/ctkd

[/System/Library/Frameworks/CryptoTokenKit.framework/ctkd -s]

/usr/libexec/xpcproxy

[xpcproxy com.apple.CryptoTokenKit.setoken 696]

/System/Library/Frameworks/CryptoTokenKit.framework/PlugIns/setoken.appex/Contents/MacOS/setoken

[/System/Library/Frameworks/CryptoTokenKit.framework/PlugIns/setoken.appex/Contents/MacOS/setoken]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=media.mojom.CdmServiceBroker --lang=en-GB --service-sandbox-type=cdm --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=124]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobile.keybagd]

/usr/libexec/keybagd

[/usr/libexec/keybagd -t 15]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ViewBridgeAuxiliary]

/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary

[/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary]

/usr/libexec/xpcproxy

[xpcproxy com.apple.rtcreportingd]

/usr/libexec/rtcreportingd

[/usr/libexec/rtcreportingd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.accessibility.mediaaccessibilityd]

/System/Library/Frameworks/MediaAccessibility.framework/Versions/A/XPCServices/com.apple.accessibility.mediaaccessibilityd.xpc/Contents/MacOS/com.apple.accessibility.mediaaccessibilityd

[/System/Library/Frameworks/MediaAccessibility.framework/Versions/A/XPCServices/com.apple.accessibility.mediaaccessibilityd.xpc/Contents/MacOS/com.apple.accessibility.mediaaccessibilityd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.coremedia.videodecoder 678]

/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService

[/System/Library/Frameworks/VideoToolbox.framework/Versions/A/XPCServices/VTDecoderXPCService.xpc/Contents/MacOS/VTDecoderXPCService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.PerformanceAnalysis.animationperfd]

/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd

[/System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/XPCServices/com.apple.PerformanceAnalysis.animationperfd.xpc/Contents/MacOS/com.apple.PerformanceAnalysis.animationperfd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobileassetd]

/usr/libexec/mobileassetd

[/usr/libexec/mobileassetd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E]

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService

[/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.mobile.keybagd]

/usr/libexec/keybagd

[/usr/libexec/keybagd -t 15]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ViewBridgeAuxiliary]

/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary

[/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary]

/usr/libexec/xpcproxy

[xpcproxy com.apple.pbs]

/System/Library/CoreServices/pbs

[/System/Library/CoreServices/pbs]

/usr/libexec/xpcproxy

[xpcproxy com.apple.tccd]

/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd

[/System/Library/PrivateFrameworks/TCC.framework/Resources/tccd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.bird]

/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird

[/System/Library/PrivateFrameworks/CloudDocsDaemon.framework/Versions/A/Support/bird]

/usr/libexec/xpcproxy

[xpcproxy com.apple.secd]

/usr/libexec/secd

[/usr/libexec/secd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.sandboxd]

/usr/libexec/sandboxd

[/usr/libexec/sandboxd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.nehelper]

/usr/libexec/nehelper

[/usr/libexec/nehelper]

/usr/libexec/xpcproxy

[xpcproxy com.apple.coreduetd]

/usr/libexec/coreduetd

[/usr/libexec/coreduetd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.nsurlstoraged]

/usr/libexec/nsurlstoraged

[/usr/libexec/nsurlstoraged --privileged]

/usr/libexec/xpcproxy

[xpcproxy com.apple.AddressBook.ContactsAccountsService]

/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService

[/System/Library/Frameworks/AddressBook.framework/Executables/ContactsAccountsService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.secinitd]

/usr/libexec/secinitd

[/usr/libexec/secinitd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ViewBridgeAuxiliary]

/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary

[/System/Library/PrivateFrameworks/ViewBridge.framework/Versions/A/XPCServices/ViewBridgeAuxiliary.xpc/Contents/MacOS/ViewBridgeAuxiliary]

/usr/libexec/xpcproxy

[xpcproxy com.apple.TextInputMenuAgent]

/System/Library/CoreServices/TextInputMenuAgent.app/Contents/MacOS/TextInputMenuAgent

[/System/Library/CoreServices/TextInputMenuAgent.app/Contents/MacOS/TextInputMenuAgent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.TextInputSwitcher]

/System/Library/CoreServices/TextInputSwitcher.app/Contents/MacOS/TextInputSwitcher

[/System/Library/CoreServices/TextInputSwitcher.app/Contents/MacOS/TextInputSwitcher]

/usr/libexec/xpcproxy

[xpcproxy com.apple.iconservices.iconservicesagent]

/System/Library/CoreServices/iconservicesagent

[/System/Library/CoreServices/iconservicesagent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.iconservices.iconservicesd]

/System/Library/CoreServices/iconservicesd

[/System/Library/CoreServices/iconservicesd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.GameController.gamecontrollerd]

/usr/libexec/gamecontrollerd

[/usr/libexec/gamecontrollerd]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=55 --launch-time-ticks=584515149 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=60]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=54 --launch-time-ticks=584538666 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=61]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=56 --launch-time-ticks=587761161 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=105]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-GB --service-sandbox-type=service --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=105]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-GB --service-sandbox-type=service --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=105]

/usr/libexec/xpcproxy

[xpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ReportCrash.Root]

/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService

[/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService]

/usr/libexec/xpcproxy

[xpcproxy com.apple.spindump]

/usr/sbin/spindump

[/usr/sbin/spindump]

/usr/libexec/xpcproxy

[xpcproxy com.apple.tailspind]

/usr/libexec/tailspind

[/usr/libexec/tailspind]

/System/Library/CoreServices/ReportCrash

[/System/Library/CoreServices/ReportCrash daemon]

/usr/libexec/xpcproxy

[xpcproxy com.apple.ReportMemoryException]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer)

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper (Renderer).app/Contents/MacOS/Google Chrome Helper (Renderer) --type=renderer --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --display-capture-permissions-policy-allowed --lang=en-GB --num-raster-threads=1 --enable-zero-copy --enable-gpu-memory-buffer-compositor-resources --renderer-client-id=59 --launch-time-ticks=596394638 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=105]

/usr/libexec/ReportMemoryException

[/usr/libexec/ReportMemoryException]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-GB --service-sandbox-type=audio --message-loop-type-ui --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=110]

/usr/libexec/xpcproxy

[xpcproxy com.apple.sysmond]

/usr/libexec/sysmond

[/usr/libexec/sysmond]

/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper

[/Applications/Google Chrome.app/Contents/Frameworks/Google Chrome Framework.framework/Versions/101.0.4951.54/Helpers/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper --type=utility --utility-sub-type=chrome.mojom.FileUtilService --lang=en-GB --service-sandbox-type=utility --metrics-client-id=c4c0c7dc-66bc-4341-87b4-36b4665ab2e7 --shared-files --field-trial-handle=1718379636,r,2951642165894560186,2069090852774494991,131072 --seatbelt-client=110]

/usr/libexec/xpcproxy

[xpcproxy com.apple.DiskImageMounter.1536]

/System/Library/CoreServices/DiskImageMounter.app/Contents/MacOS/DiskImageMounter

[/System/Library/CoreServices/DiskImageMounter.app/Contents/MacOS/DiskImageMounter]

/usr/libexec/xpcproxy

[xpcproxy com.apple.metadata.mdwrite]

/usr/libexec/xpcproxy

[xpcproxy com.apple.pluginkit.pkd]

/usr/libexec/pkd

[/usr/libexec/pkd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.dmd]

/usr/libexec/dmd

[/usr/libexec/dmd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.geod]

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod

[/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod]

/usr/libexec/xpcproxy

[xpcproxy com.apple.geod]

/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod

[/System/Library/PrivateFrameworks/GeoServices.framework/Versions/A/XPCServices/com.apple.geod.xpc/Contents/MacOS/com.apple.geod]

/usr/libexec/xpcproxy

[xpcproxy com.apple.secinitd]

/usr/libexec/secinitd

[/usr/libexec/secinitd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.cfprefsd.xpc.agent]

/usr/sbin/cfprefsd

[/usr/sbin/cfprefsd agent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.neagent.878568F8-CCE5-4157-8315-22F20DC8FB0A]

/usr/libexec/neagent

[/usr/libexec/neagent]

/usr/libexec/xpcproxy

[xpcproxy com.apple.diagnosticd]

/usr/libexec/diagnosticd

[/usr/libexec/diagnosticd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.CoreAuthentication.agent]

/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd

[/System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.security.cloudkeychainproxy3]

/usr/libexec/xpcproxy

[xpcproxy com.apple.akd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.routined]

/usr/libexec/routined

[/usr/libexec/routined LAUNCHED_BY_LAUNCHD]

/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy

[/System/Library/Frameworks/Security.framework/Versions/A/Resources/CloudKeychainProxy.bundle/Contents/MacOS/CloudKeychainProxy]

/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd

[/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/Support/akd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.AccountPolicyHelper]

/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper

[/System/Library/PrivateFrameworks/AccountPolicy.framework/XPCServices/com.apple.AccountPolicyHelper.xpc/Contents/MacOS/com.apple.AccountPolicyHelper]

/usr/libexec/xpcproxy

[xpcproxy com.apple.Maps.mapspushd]

/System/Library/CoreServices/mapspushd

[/System/Library/CoreServices/mapspushd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.logkextloadsd]

/usr/libexec/xpcproxy

[xpcproxy com.apple.newsyslog]

/usr/sbin/newsyslog

[/usr/sbin/newsyslog]

Network

Country Destination Domain Proto
AU 40.79.173.41:443 tcp
DE 17.253.79.202:80 tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 www.curseforge.com udp
US 8.8.8.8:53 clients2.google.com udp
US 104.17.29.3:443 www.curseforge.com tcp
GB 142.250.187.206:443 clients2.google.com tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
GB 172.217.169.42:443 optimizationguide-pa.googleapis.com tcp
GB 172.217.169.42:443 tcp
GB 172.217.169.42:443 optimizationguide-pa.googleapis.com tcp
NL 142.250.27.84:443 accounts.google.com tcp
DE 18.245.60.115:443 static-beta.curseforge.com tcp
DE 18.245.60.115:443 tcp
DE 18.245.60.115:443 tcp
DE 18.245.60.115:443 tcp
DE 18.245.60.115:443 tcp
DE 18.245.60.115:443 static-beta.curseforge.com tcp
US 18.172.112.100:443 media.forgecdn.net tcp
US 104.17.30.3:443 www.curseforge.com udp
US 18.172.112.100:443 udp
GB 142.250.200.42:443 content-autofill.googleapis.com tcp
DE 18.245.86.110:443 content.overwolf.com tcp
US 18.244.18.122:443 sb.scorecardresearch.com tcp
US 13.107.253.64:443 www.clarity.ms tcp
GB 172.217.169.34:443 tcp
US 18.244.18.51:443 analyticssec.overwolf.com tcp
US 204.79.197.237:443 bat.bing.com tcp
GB 163.70.151.21:443 tcp
US 151.101.188.157:443 static.ads-twitter.com tcp
US 104.18.3.78:443 s.nitropay.com tcp
IE 68.219.88.97:443 c.clarity.ms tcp
GB 163.70.151.21:443 udp
GB 172.217.169.34:443 googleads.g.doubleclick.net tcp
US 104.244.42.195:443 analytics.twitter.com tcp
PL 93.184.221.165:443 t.co tcp
US 18.172.112.47:443 wrappers.geoedge.be tcp
DE 108.138.26.51:443 tcp
DE 108.138.26.51:443 rumcdn.geoedge.be tcp
US 172.67.41.60:443 btloader.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
US 104.18.3.78:443 udp
DE 13.224.186.120:443 c.amazon-adsystem.com tcp
US 35.244.144.25:443 tracker.nitropay.com tcp
GB 163.70.151.35:443 tcp
GB 142.250.187.196:443 www.google.com tcp
US 20.114.190.119:443 x.clarity.ms tcp
US 130.211.23.194:443 api.btloader.com tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 104.26.2.70:443 tcp
US 172.67.193.156:443 tcp
US 172.67.193.156:443 consent.nitrocnct.com tcp
DE 18.245.31.92:443 config.aps.amazon-adsystem.com tcp
DE 13.224.186.120:443 c.amazon-adsystem.com tcp
US 13.35.57.188:443 aax.amazon-adsystem.com tcp
US 35.244.144.25:443 a.nitropay.com tcp
NL 178.250.1.8:443 bidder.criteo.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
DE 3.69.14.198:443 btlr.sharethrough.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
IE 3.251.0.235:443 ap.lijit.com tcp
DE 37.252.173.215:443 ib.adnxs-simple.com tcp
US 172.64.151.101:443 htlb.casalemedia.com tcp
US 35.227.252.103:443 rtb.openx.net tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 151.101.1.108:443 acdn.adnxs-simple.com tcp
US 13.107.253.64:443 adsdk.microsoft.com tcp
US 151.101.1.108:443 cdn.adnxs-simple.com tcp
US 34.95.69.49:443 i.clean.gg tcp
NL 23.62.61.97:443 tcp
NL 23.62.61.97:443 www.bing.com tcp
DE 52.222.213.56:443 gw.geoedge.be tcp
NL 23.62.61.97:443 udp
NL 178.250.1.3:443 static.criteo.net tcp
DE 108.138.26.51:443 rumcdn.geoedge.be tcp
US 52.223.40.198:443 match.adsrvr.org tcp
US 8.8.8.8:53 bag-cdn.itunes-apple.com.akadns.net udp
US 34.98.64.218:443 ggsoftware-d.openx.net tcp
US 34.98.64.218:443 tcp
US 76.223.111.18:443 tcp
US 76.223.111.18:443 eb2.3lift.com tcp
GB 23.36.248.193:443 ads.pubmatic.com tcp
US 52.71.111.127:443 sync.srv.stackadapt.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
NL 193.0.160.130:443 p.rfihub.com tcp
US 172.64.149.180:443 js-sec.indexww.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
BE 104.90.26.20:443 eus.rubiconproject.com tcp
IE 52.19.220.51:443 ce.lijit.com tcp
US 69.166.1.66:443 sync.go.sonobi.com tcp
IE 52.17.40.72:443 sync.crwdcntrl.net tcp
US 69.166.1.66:443 tcp
GB 216.58.204.66:443 cm.g.doubleclick.net tcp
US 34.111.113.62:443 pixel.tapad.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
GB 185.64.190.78:443 image6.pubmatic.com tcp
NL 154.59.122.79:443 ums.acuityplatform.com tcp
IE 52.95.115.255:443 aax-eu.amazon-adsystem.com tcp
US 34.224.114.128:443 aorta.clickagy.com tcp
IE 34.249.65.85:443 match.prod.bidr.io tcp
NL 69.173.156.148:443 pixel-eu.rubiconproject.com tcp
DE 91.228.74.166:443 cms.quantserve.com tcp
NL 154.59.122.79:443 tcp
DE 91.228.74.166:443 tcp
NL 46.228.174.117:443 sync.1rx.io tcp
DE 13.32.27.65:443 tcp
FR 5.196.111.69:443 ssbsync.smartadserver.com tcp
NL 46.228.174.117:443 tcp
DE 13.32.27.65:443 s.ad.smaato.net tcp
FR 5.196.111.69:443 tcp
DE 37.252.171.85:443 ib.adnxs.com tcp
NL 35.204.158.49:443 um.simpli.fi tcp
GB 216.58.204.70:443 s0.2mdn.net tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
DE 13.32.27.101:443 sync.serverbid.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
US 8.2.110.134:443 cs.krushmedia.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
US 69.173.151.100:443 pixel-us-east.rubiconproject.com tcp
NL 46.228.164.11:443 ad.turn.com tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:443 dns.google udp
GB 142.250.187.195:443 update.googleapis.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 172.64.151.101:443 udp
NL 178.250.1.8:443 bidder.criteo.com tcp
US 69.166.1.9:443 apex.go.sonobi.com tcp
DE 3.69.14.198:443 btlr.sharethrough.com tcp
DE 37.252.173.215:443 ib.adnxs-simple.com tcp
NL 23.62.61.97:443 udp
US 8.8.8.8:53 e10499.dsce9.akamaiedge.net udp
US 8.8.8.8:53 gspe1-ssl.ls.apple.com.edgesuite.net udp
US 8.8.8.8:53 gspe35-ssl.ls-apple.com.akadns.net udp
GB 23.200.147.27:443 tcp
US 8.8.8.8:53 gspe21-ssl.ls-apple.com.akadns.net udp
GB 104.91.71.135:443 gspe1-ssl.ls.apple.com.edgesuite.net tcp
US 8.8.4.4:443 dns.google udp
US 20.114.190.119:443 x.clarity.ms tcp
US 142.250.69.3:443 beacons.gcp.gvt2.com tcp
US 142.250.69.3:443 tcp
US 216.239.32.117:443 beacons2.gvt2.com tcp
US 8.8.8.8:53 gsp64-ssl.ls-apple.com.akadns.net udp
US 69.166.1.9:443 apex.go.sonobi.com tcp
US 172.64.151.101:443 udp
NL 178.250.1.8:443 bidder.criteo.com tcp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
DE 18.158.172.165:443 btlr.sharethrough.com tcp
NL 185.89.210.212:443 ib.adnxs-simple.com tcp
DE 37.252.172.123:443 fra1-ib.adnxs-simple.com tcp
US 8.8.8.8:53 mobile.events.data.trafficmanager.net udp
IE 20.50.80.210:443 tcp
US 8.8.8.8:443 dns.google udp
NL 69.173.156.139:443 fastlane.rubiconproject.com tcp
US 69.166.1.9:443 tcp
NL 185.89.210.212:443 ib.adnxs-simple.com tcp
DE 18.158.172.165:443 tcp
NL 178.250.1.8:443 tcp
US 172.64.151.101:443 udp
US 8.8.8.8:53 e10499.dsce9.akamaiedge.net udp
NL 178.250.1.3:443 static.criteo.net tcp
US 8.8.8.8:53 e4686.dsce9.akamaiedge.net udp
US 8.8.8.8:53 e673.dsce9.akamaiedge.net udp
US 8.8.4.4:443 dns.google udp
US 192.178.49.195:443 beacons.gvt2.com tcp
US 20.114.190.119:443 tcp
US 20.114.190.119:443 tcp
US 20.114.190.119:443 tcp
US 20.114.190.119:443 tcp
US 172.64.151.101:443 udp
NL 178.250.1.8:443 tcp
US 69.166.1.64:443 tcp
DE 3.122.80.51:443 tcp
NL 185.89.210.141:443 tcp
NL 69.173.156.139:443 tcp
US 69.166.1.64:443 tcp
DE 3.122.80.51:443 tcp
NL 69.173.156.139:443 tcp
NL 178.250.1.8:443 tcp
NL 185.89.210.141:443 tcp
US 104.18.35.167:443 cdn-ima.33across.com tcp
US 18.172.112.100:443 udp
US 216.239.32.116:443 beacons4.gvt2.com tcp
US 8.8.8.8:53 cds.apple.com udp
CZ 104.64.171.59:443 cds.apple.com tcp
US 8.8.8.8:53 help.apple.com udp
GB 104.120.141.107:443 help.apple.com tcp
GB 104.120.141.107:443 help.apple.com tcp
NL 178.250.1.8:443 tcp
NL 69.173.156.139:443 tcp
US 69.166.1.64:443 tcp
DE 37.252.171.149:443 ib.adnxs.com tcp
DE 3.68.142.144:443 tcp
IE 67.220.228.203:443 aax-eu.amazon-adsystem.com tcp
US 18.172.112.100:443 ib.3lift.com tcp
US 18.172.112.100:443 udp
NL 35.214.168.80:443 trace-eu.mediago.io tcp
NL 35.214.214.73:443 csync.loopme.me tcp
GB 104.120.140.21:443 cs.media.net tcp
US 64.202.112.223:443 b1sync.zemanta.com tcp
IE 34.251.183.115:443 match.prod.bidr.io tcp
DE 35.156.19.8:443 match.sharethrough.com tcp
GB 23.36.248.193:443 ads.pubmatic.com tcp
IE 67.220.228.203:443 aax-eu.amazon-adsystem.com tcp
NL 89.207.16.137:443 amazon-tam-match.dotomi.com tcp
IE 67.220.228.203:443 aax-eu.amazon-adsystem.com tcp
US 52.46.128.147:443 s.amazon-adsystem.com tcp
US 52.223.40.198:443 match.adsrvr.org tcp
US 64.202.112.223:443 tcp
IE 52.18.223.218:443 ce.lijit.com tcp
NL 69.173.156.148:443 pixel-eu.rubiconproject.com tcp
US 69.173.151.100:443 pixel-us-east.rubiconproject.com tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
DE 91.228.74.200:443 cms.quantserve.com tcp
NL 198.47.127.205:443 image2.pubmatic.com tcp
US 13.107.42.14:443 px.ads.linkedin.com tcp
IE 54.154.93.10:443 pr-bh.ybp.yahoo.com tcp
US 52.86.30.122:443 sync.srv.stackadapt.com tcp
US 52.86.30.122:443 sync.srv.stackadapt.com tcp
US 52.86.30.122:443 sync.srv.stackadapt.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
CZ 104.64.122.89:443 servedby.flashtalking.com tcp
US 35.186.194.101:443 ad.sxp.smartclip.net tcp
GB 23.36.249.192:443 ad.yieldlab.net tcp
IE 54.220.158.112:443 sync.crwdcntrl.net tcp
NL 35.214.132.90:443 u.ipw.metadsp.co.uk tcp
US 34.111.129.221:443 cr.frontend.weborama.fr tcp
US 104.22.50.98:443 mwzeom.zeotap.com tcp
FR 164.132.25.185:443 rtb-csync.smartadserver.com tcp
DK 37.157.6.254:443 c1.adform.net tcp
NL 178.250.1.9:443 dis.criteo.com tcp
BE 2.17.196.168:443 ajs-assets.ftstatic.com tcp
US 18.244.18.94:443 agen-assets.ftstatic.com tcp
BE 104.90.24.47:443 cdn.flashtalking.com tcp
BE 104.90.24.47:443 cdn.flashtalking.com tcp
BE 104.90.24.47:443 cdn.flashtalking.com tcp
DE 18.245.60.26:443 js.ad-score.com tcp
GB 13.42.179.183:443 ad-events.flashtalking.com tcp
GB 185.64.190.81:443 simage4.pubmatic.com tcp
BE 104.90.24.47:443 stat.flashtalking.com tcp
US 130.211.115.4:443 tcp
US 8.8.8.8:53 h3.apis.apple.map.fastly.net udp
US 8.8.8.8:53 apps.mzstatic.com udp
US 8.8.8.8:53 s.mzstatic.com udp
US 8.8.8.8:53 play.itunes.apple.com udp
BE 104.117.77.112:443 play.itunes.apple.com tcp
US 8.8.8.8:53 sf-api-token-service.itunes.apple.com udp
BE 104.90.24.24:443 sf-api-token-service.itunes.apple.com tcp
US 8.8.8.8:53 amp-api-edge.apps.apple.com udp
US 8.8.8.8:53 buy.itunes.apple.com udp
BE 104.117.77.210:443 amp-api-edge.apps.apple.com tcp
US 17.156.128.10:443 buy.itunes.apple.com tcp
BE 104.90.24.47:443 secure.flashtalking.com tcp
US 8.8.8.8:53 is1-ssl.mzstatic.com udp
US 8.8.8.8:53 amp-api.apps.apple.com udp
BE 104.90.24.118:443 amp-api.apps.apple.com tcp
US 8.8.8.8:53 apptrailers.itunes.apple.com udp
GB 17.253.29.197:443 apptrailers.itunes.apple.com tcp
US 8.8.8.8:53 se-edge.itunes.apple.com udp
US 8.8.8.8:53 search.itunes.apple.com udp
US 8.8.8.8:53 e6858.dscx.akamaiedge.net udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:53 update.googleapis.com udp
GB 142.250.187.195:443 update.googleapis.com tcp
GB 172.217.16.234:443 optimizationguide-pa.googleapis.com tcp
GB 142.250.187.196:443 www.google.com tcp
NL 142.250.27.84:443 accounts.google.com tcp
US 162.159.137.232:443 discord.com tcp
US 162.159.137.232:443 tcp
US 162.159.137.232:443 udp
US 104.18.34.227:443 cdn.prod.website-files.com tcp
US 104.18.4.175:443 global.localizecdn.com tcp
US 104.18.34.227:443 udp
US 18.244.20.221:443 d3e54v103j8qbb.cloudfront.net tcp
US 8.8.8.8:53 a1806.dscw154.akamai.net udp
BE 104.117.77.96:443 a1806.dscw154.akamai.net tcp
US 104.18.4.175:443 udp
US 162.159.134.233:443 cdn.discordapp.com tcp
US 162.159.134.233:443 tcp
US 162.159.134.233:443 tcp
US 162.159.134.233:443 tcp
US 162.159.134.233:443 tcp
US 162.159.134.233:443 tcp
US 13.33.187.78:443 tcp
US 13.33.187.78:443 assets.website-files.com tcp
US 13.33.187.78:443 tcp
US 13.33.187.78:443 tcp
US 104.18.4.175:443 udp
US 104.18.34.227:443 udp
US 104.18.32.137:443 geolocation.onetrust.com tcp
US 13.225.78.111:443 tcp
US 13.225.78.111:443 tcp
US 13.225.78.111:443 tcp
US 13.225.78.111:443 tcp
GB 142.250.179.238:443 www.youtube.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 13.33.187.78:443 tcp
US 18.244.20.221:443 tcp
US 104.18.48.115:443 dl.discordapp.net tcp
US 142.250.69.3:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:443 dns.google udp
GB 142.250.200.46:443 sb-ssl.google.com tcp
US 142.250.69.3:443 tcp
CL 34.0.63.29:443 e2c70.gcp.gvt2.com tcp
CL 34.0.63.29:443 tcp
US 8.8.8.8:53 lb._dns-sd._udp.0.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 e17437.dsct.akamaiedge.net udp
US 8.8.8.8:53 b._dns-sd._udp.0.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 db._dns-sd._udp.0.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 b._dns-sd._udp.0.0.127.10.in-addr.arpa udp
US 8.8.8.8:53 db._dns-sd._udp.0.0.127.10.in-addr.arpa udp
IE 17.57.146.88:5223 tcp
US 8.8.8.8:53 e10499.dsce9.akamaiedge.net udp
US 8.8.8.8:53 gspe1-ssl.ls.apple.com.edgesuite.net udp
GB 104.91.71.139:443 gspe1-ssl.ls.apple.com.edgesuite.net tcp
GB 104.77.118.121:443 gspe1-ssl.ls.apple.com.edgesuite.net tcp
US 8.8.8.8:53 11-courier.push.apple.com udp
GB 17.57.146.155:5223 11-courier.push.apple.com tcp
US 8.8.8.8:53 gsp64-ssl.ls-apple.com.akadns.net udp
US 8.8.8.8:53 e10499.dsce9.akamaiedge.net udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:53 bag-cdn.itunes-apple.com.akadns.net udp
US 8.8.4.4:443 dns.google tcp

Files

/tmp/com.google.Keystone/.keystone_system_install_lock

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

/Users/run/Library/Keychains/login.keychain-db

MD5 3c2797029f2e5a7b59345c778ffe94d5
SHA1 395475edb06d960d917e1459eb0bd6160a309d6f
SHA256 c9ed20a51beb0534d457b14c6e8a21e346330483b0c1c5907773d7cb410a42c8
SHA512 3279735a369ec550a3d775df31b43e0feca457ed82807c1727bba53680cb392b330041e929c071ebab2ee70951b5e901ae7cf3e16bcaf7c9bf953579d4f02bdb

/Users/run/Library/Keychains/login.keychain-db

MD5 cfd29bab015e9144090eb4c29dc8fafb
SHA1 4554d96d39641bb5e74a61ffca6ab2f552e7ae3e
SHA256 70d1666ef8a0900b47cce93f4cf785236a1e3f4e293a3b9b6267835547b6ee5f
SHA512 05a23230dae87bf2089d40b63b603d7041761c883095665ec9f869b7d0c98b798bb38d52e2d0c775db317f62ab314238dc5ffe83e0603fa9d8b9af3b74553012

/Users/run/Library/Keychains/login.keychain-db

MD5 ee0a6fd9b8175aa339bbd332a7afbee7
SHA1 00f25f2ac8171c8ef6ae75de6d00e3a9652c1f46
SHA256 cad0564d34cef0426ad1ab3940b974eee19af0f5b8510d0c9f239cd79639e052
SHA512 5cdc01ca6822688a63a1be6278a5be5ac89e2292bc7cfe2fdfe92ebf329625b4bdf0c77e9f606d9f437bbb2dcc248e20fe8e0fa7afc2f82e96b67dd48335f6b3

/Users/run/Library/Keychains/login.keychain-db

MD5 7f7753b698cf09d962d79fd7ad82e315
SHA1 1af16a9582f7369ecde5a5624153ea56048e9937
SHA256 f96b390c2bc66a4c6d340a21e47e06ca6d6175ea3614e650049fddaddc79ba09
SHA512 13932dc3b37362ec9dd7305ccb7ecd14f36d4d5c840d2ac4207af6a485ad64435908e0acde01d4db4d1d3cc9343e089da25e5c0417c936e8ec082173550ee49b

/Users/run/Library/Keychains/login.keychain-db

MD5 ee62adc27faad178fba3ad1ab686c8e6
SHA1 b81de94880cdd7dfeb0d52a8c9bd1fde32e94d50
SHA256 3dded4e28c235560b241109396d875b97f721d624030fd988889d2641666a3d6
SHA512 e89eba1634025bc580a0603c5a54f6b6f0b5d2043187d29f9b9cf2c6479f1315774edb89fd59ae0d3fc268608d8137c2f1b564cf7700ac5ed20d0a62abec69a2

/var/root/Library/Application Support/Google/Chrome/Crashpad/settings.dat

MD5 c6db1caaee0095f017c09113d53ed054
SHA1 cc37e2b3948325a0eeb51080f45b17ebf52a7035
SHA256 ca3252b297284a87de2ee1688585f7c37d26b98c05d7ed04bd7d6df10c0d1476
SHA512 3013340ee4157dfef7dcacd690b840f12b876e8241d4e8bc419016d5336810ab77023cdbbeaa896544e4c29f386d21296649542ef2b0fc6b58c49e2ad0337d85

/Users/run/Library/Keychains/login.keychain-db

MD5 505fc597fe6e60660392a875856bf211
SHA1 44e63c953060a0939994730e2db3718c84913ef4
SHA256 0984155f00ea4f435bc52f6737b2a152bc018e9bddd72c067a891e931cff5413
SHA512 1ff3d353a627a218a97498dcce966a94270ebc02c3fe50e6d86b7d7f33cfc35f0e9a8e6fa97c616335205c4b9d114b5fa8be96b6b729a788f4823c86ad0b2fb2

/var/root/Library/Application Support/Google/Chrome/Default/Site Characteristics Database/000003.ldb

MD5 5c4e7ade5753ab7de2c42c04111fa42e
SHA1 fb577b8c07d9617f507a3f2950df0a6dcfebe4e2
SHA256 d3979fd2d9ecfdb05498d79d1f24998c38cfd107e321f6810d8b7f9f12affd82
SHA512 7a7452bcd22e66190e36ff0036f21d854fa57bdcbaebf637aa3a6d932a385a7c90525ede0c124853c218445d583c0edcf45d12159ca452732f31d16c3901929b

/var/root/Library/Application Support/Google/Chrome/Default/Extension Scripts/CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

/var/root/Library/Application Support/Google/Chrome/Default/Extension Scripts/MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

/var/root/Library/Application Support/Google/Chrome/Default/Sync Data/LevelDB/000003.ldb

MD5 fe382e791274914bee5950777e4f1fd3
SHA1 53b523b5fc87e66f2520a0b5f9ea080072668f4d
SHA256 935d36c021d0e08a5648c622f3f6fde376e3310013680ae598c0e22dc943d132
SHA512 a5f608fb4f0a1dbc4c5d1b739b1a5b6f50cac1d6a61312b19abf9f601882a291d73524ac55bbe183e4e64db8dcc203d4bf3cedc734fd04bd448cb825d98d1e67

/var/root/Library/Application Support/Google/Chrome/Default/Session Storage/000003.ldb

MD5 38fc535a8f11d7e955ef58cc63158eff
SHA1 c45ad3ee106dbfb65dce7c09b53140f34454cd0e
SHA256 085c44dfa11e65ac3548c4d0fe1ae641570f90c7caaa2881c3990efcf555e6a8
SHA512 26e70000f77c1b6388dd470f9d7ec6bedc4fc3c43e48efcc853812eb076108bcdd9f50f7a89265e431d33df96e71755ca242dfd0aac16a51d99dea50a5a1e505

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.CqtkqQ

MD5 541f52e24fe1ef9f8e12377a6ccae0c0
SHA1 189898bb2dcae7d5a6057bc2d98b8b450afaebb6
SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
SHA512 d779d78a15c5efca51ebd6b96a7ccb6d718741bdf7d9a37f53b2eb4b98aa1a78bc4cfa57d6e763aab97276c8f9088940ac0476690d4d46023ff4bf52f3326c88

/var/root/Library/Application Support/Google/Chrome/Default/shared_proto_db/metadata/000003.ldb

MD5 17a2dc5826aeb539547f00f52eccccd5
SHA1 fd36ad6db84312792cffac0267f6329b21727d66
SHA256 746da9cf33c3e4d29907dfdf1065f06ae16dcb5c2e9a34cfb5dd0dae9130f151
SHA512 6bca3e308d0446211570021c1f1dc6d8e9704a2a68a90c5c8daf26b20cb2702bccfae8ddfeb6f16c8bfea83e1b648810054a25a7967bb9539feb241f2950ea73

/var/root/Library/Application Support/Google/Chrome/Default/shared_proto_db/000003.ldb

MD5 ea517aa120c972c602673d331dfa35bc
SHA1 7ff539eec544cf306b80137bc182fb544e58aad5
SHA256 0c53b2ef8ec9bd6c3b81955b45cd9fc69705e7b435ad747b50c150c7e341f8da
SHA512 e2bc6f26b0db61af3b7f1648e890be2b748aa886ff3ab51e207a915432c6d9a426b188fe9c979b443e8fe8aad248442b20b2e6cd38f494264cb7cdbcaa88eecd

/private/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/scoped_direQ1vQc/CRX_INSTALL/images/icon_128.png

MD5 30899b6c4e4a757b8ec6dd2208acdfb4
SHA1 f2c5880a724c6d75cce1b5191e0d82c3bc7de768
SHA256 4f17efbd974a41d88cb36567aab6bf4586579e78780f00b1826676819e14bff4
SHA512 58539e3f0ad7fef30792efcdbbd955599e11e4261c9946e7c3dff6267e01747354ea3b901c46fc8329f81c68afbeb2d05fe3fcb266bc5948de8befa5b8d040ee

/private/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/scoped_direQ1vQc/CRX_INSTALL/images/icon_16.png

MD5 344554d96e418120bd80ef5de5194697
SHA1 23e141c3a6ce368acc1c299f062ab85914bcb17e
SHA256 0a4bd08db6422f8e7a8a218ef39c1b99a5a675f12697f26be88f9afc2e1f9378
SHA512 7ae38853e5acca479d7fd81d48bb88c671cf4dce63342209bcff045ac581a04b7b0ed48f6c58253db950935c0522caaa4fbc6cf5a25151a8960ba56fc804569e

/private/var/root/Library/Application Support/Google/Chrome/Default/Extensions/nmmhkkegccagdldgiimedpiccmgmieda/1.0.0.6_1/craw_background.js

MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2

/var/root/Library/Application Support/Google/Chrome/Default/Download Service/Files/5a4bba51-1a38-40c9-8cb1-801b49d3e5a0

MD5 5adf364735dcbe6bf26ebe3f705c9dbc
SHA1 a891521fea2f61a2fd16ea9f0a3fc3c2c5fb3a46
SHA256 8d21fe1bd251856bfaeaedd6a72ab78f153a047b6042e0fc614f57a32b56d340
SHA512 5f77f8923ab3800ab754f4c60095077b529c5f5f230c6a0b6803dc28597f42ed682921267ed344e190d0f08e0a23eceace7bccbc9d22432029a3e6f4838420e0

/var/root/Library/Application Support/Google/Chrome/OptimizationGuidePredictionModels/acf63396-6067-42b6-9d6f-9f964827addb/model.tflite

MD5 6d7c2f9e94664539dec99b3233301b01
SHA1 85812b004742cc1c211c92911131ce270f8ba769
SHA256 a0956386dc64fd9f4883c8741f950cd60a56859616b159c9e4251c9eb0ac5534
SHA512 4d06917f30651c3bf13c509aae79793b3f1ec93de12179464b18fd9fd16c7bf466884b1c70e425d7e937adde341cf24bd08f19a132bbb9683e804f29b4ed0c33

/Library/Preferences/com.apple.networkextension.uuidcache.plist

MD5 ce7f5b3d4bfc7b4b0da6a06dccc515f2
SHA1 ce657a52a052a3aaf534ecfbf7cbdde4ee334c10
SHA256 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1
SHA512 db9de6afa0e14c347aa0988a985b8a453ef133a2413c03bae0fab48bda34d4f9a488db104837a386bb65c393e8f11b1ed4856b211c1c186423649c147d6aabfb

/Library/Preferences/com.apple.networkextension.uuidcache.plist

MD5 a60a7bcfc47eacaa66e5e3d701d3ba80
SHA1 7093ffc5beca33187c18461c7ff3259a1781ae35
SHA256 17e96efaf7f2e45e407a3c68fb57b78f09dea6fc1edf3732b888be4a4eadd468
SHA512 58736bd680d6c7a25b8d7db08fd4a258cf761dbaa44a5ece0c2b813ab12c20dc213ab40844dfc780687945cf2459f549f1a38bf3da16c5c332756f3b53e1c3a5

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/assistantd//mds/mdsObject.db

MD5 d3a1859e6ec593505cc882e6def48fc8
SHA1 f8e6728e3e9de477a75706faa95cead9ce13cb32
SHA256 3ebafa97782204a4a1d75cfec22e15fcdeab45b65bab3b3e65508707e034a16c
SHA512 ea2a749b105759ea33408186b417359deffb4a3a5ed0533cb26b459c16bb3524d67ede5c9cf0d5098921c0c0a9313fb9c2672f1e5ba48810eda548fa3209e818

/var/folders/pq/yy2b5ptn4cz739jgclj4m1wm0000gp/C/assistantd//mds/mdsDirectory.db

MD5 0e4a0d1ceb2af6f0f8d0167ce77be2d3
SHA1 414ba4c1dc5fc8bf53d550e296fd6f5ad669918c
SHA256 cca093bcfc65e25dd77c849866e110df72526dffbe29d76e11e29c7d888a4030
SHA512 1dc5282d27c49a4b6f921ba5dfc88b8c1d32289df00dd866f9ac6669a5a8d99afeda614bffc7cf61a44375ae73e09cd52606b443b63636977c9cd2ef4fa68a20

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.1FsqgR/7_all_sslErrorAssistant.crx3

MD5 636c653ec2c30bb767533901a18669b2
SHA1 4b5a01cfea4c5deb62f3aafa01ef24265613b844
SHA256 3eb16d6c28b502ac4cfee8f4a148df05f4d93229fa36a71db8b08d06329ff18a
SHA512 a4128fb20a5df9e573e92b45f5bc18dcdf4be6e7e39172d08847882f17361320141e89b35deef337e40c365d6f1ccdd1b991eb4593d805dfa2e39a5257c335ee

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.jp4Hqg/lmelglejhemejginpboagddgdfbepgmp_450_all_ZZ_kj33d3fonex7ltidmgyuompdoi.crx3

MD5 dcc22bf24006a92e9119e2b78fbee0b1
SHA1 6fb27088faf045ece828ff07e38e54558f296e1a
SHA256 36dd253d64a806545f17ee91078fb1f5fa9b07f0620eeea02dc70894da6a107c
SHA512 83b2c770cccfd0bec3e629413100d511ac94ad34a61f7f4588be346803a04ff2d432b38ac7d8df4b7abbd23208a470fc94f7f8a38f60e2372761735f544233a1

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.iDJafc/hfnkpimlhhgieaddgfemjhofmfblmnib_8838_all_lh3ate7h77j5ermoyabrqjea2a.crx3

MD5 3d52ec28069b4c43cc2a0995f4dd43b1
SHA1 1a881263706bb41c45ba2668f32695329980f84c
SHA256 2b7a43c2d0d4fdcf262f11b29bb21f2adf89cdcb9d8e28e4b1b05c337083f29a
SHA512 78dcd2a98a198f0494a3ce0f037116e8f15690ffe177855ed9c940b10554a48516e080d2cb30470aabc53017e12ea70579561894e2d776eff13c1b729ddb5f05

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.dL5kf9/khaoiebndkojlmppeemjhbpbandiljpe_65_mac_dzlxuetwsybdv7gfmhikquhdj4.crx3

MD5 f5ed8ad664370de2d16265ac99085dbc
SHA1 52deeff97bc4c2777b70b7d79bedeae161183150
SHA256 9fe1922c50cef6ab1c62d9b37a37e0a7d6e82639217b4b7fb1537183ae0dbf55
SHA512 d0ee804f80dbb6a6a9a5e6165829f840761526782933997b73e22fcda452be6a2b4025c51e22c7980d5a49b985d26b70a2d1f4e5d40f5863712103c1c50e67c7

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.VTWvef/1.0.0.15_llkgjffcdpffmhiakmfcdcblohccpfmo.crx

MD5 39fbc1bf4c6c8f919181e3e72630f974
SHA1 b73f2394a2c1ac341df75ba63eef4e5e9830fade
SHA256 3a118962ef814c91f6476bb9f0de58afa63103af6ac1b8729be9b39a86789e96
SHA512 2dbd8f772bc113f6500dace5d187b12c79e6e3a5c7f6f68d270beebc482334a1970499b28de5187a3619ff3ecd20aab10c31df8433d509dc011e1e88978ab70e

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.Riagje/jflookgnkcckhobaglndicnbbgbonegd_3031_all_fxnds2kqv7u4ysnclueltyurwe.crx3

MD5 b4bb69f85e0630714536391d7c3e05ab
SHA1 9d73b109ff53823eb2513beb2d9ba71cc9f27fb8
SHA256 6bb719c4496599cfeb2058e2ad4ab2482368d0c888e763cd7fb05c296e84b181
SHA512 bda0b3b7e9aa9a92bd4d400630a6f455a4404cd351ba2b5d9dd1b493b86c644ea0093eb6c5d07dd2e4c056ba0e3b88ed1f180513448b0775377cdf392a8f79ab

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.DGRDwP/ggkkehgbnfjpeggfpleeakpidbkibbmn_2022.10.19.1145_all_ac7cecrzrmfngskhgmtk6zmhfjoa.crx3

MD5 cb79d407a4d6d8526b42060b9210b5c2
SHA1 331e3d66e82e130042897faf86dcbd05d7b227f1
SHA256 e3a7322843834a5270a01c56533a34a24b1a253e3bda6f14046e10d818446165
SHA512 0ea283f2077ff874e1f2518565497864b11fd8a65f03d65e2b2996048bdba19849fcab81d9a8220cd51d4a09741b9cf222b1393f6ea4fde6db76dfe0590efdf9

/Users/run/Library/Caches/GeoServices/Resources/altitude-1285.xml

MD5 9a43af57707d2fb460832049d1f217d1
SHA1 056d813f8cb5198ca82072f7e3484f38ea5267f8
SHA256 7224f8828694ed74a8353567e4d84da188d15a993a4a75938f8409cb49218e7c
SHA512 1f33175f5d0958c79540a627552f71c6960b6ff19c9b2b0aa604c00bfeff216f6ea2ec3a22ef91ad8d7249597fdf5ad49ddbf5f4aef71b397e785152474954d7

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.x4D4Wh/dhlpobdgcjafebgbbhjdnapejmpkgiie_20220505_all_adfdqqtvlhuhhtrt6irlkpynghca.crx3

MD5 667e9eec04509aa9e2b318f580addd8c
SHA1 346267ecad10c54de52a3aeb766ea72449500326
SHA256 0c24e9bd976adffa987e08fc54dc0950c84cf18f9cdb4c5caabc6acf24887c4f
SHA512 a9d22d49290c164abf36dd7e887063ccdd2bf508eb2d16bbac6de749e5152805ecb38ca39352706150de29a76839fa6a56c084ea4f2757b61887b3a7912be917

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.vVNi9r/ojhpjlocmbogdgmfpkhlaaeamibhnphh_3_all_gplutbkdljxxbjolk3siq7kive.crx3

MD5 a40c655b337e082c76b6ab04042b7ae0
SHA1 3cc2a2b7178a29fd2d246cbc532684d6ae45bea8
SHA256 545666a4efd056351597bb386aea1368105ededc976ed5650d8682daab9f37ff
SHA512 fb4d54b573eb2275d8a3580fff138ecd7bded27ec58086b909b12c03c8005e35105c354a4a1ff76ada608ee8bbabeaafe208bb9e557661bb74e4ca39ee5eee56

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.8Jx39x/pdafiollngonhoadbmdoemagnfpdphbe_2021.08.17.1300_all_acatmzocbizfck6xlj6bync6egba.crx3

MD5 49ead9b7d2b2ec477daba795de846db0
SHA1 95c030a130b9171e8ba4dd35ba3ee93ea5fb2ddc
SHA256 54b93e249d02a0f9061e8f70866d4668a0260db9ae43483810ab78f97f3eaa2a
SHA512 661000c35e25564c6d76219a5fd327edff7287a29dae54b677a7399eb136d0c93f099eb00ea9d0b3c965d068ea505335bcd580931662aeea2c796588ba8ce049

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.45Gqi7/imefjhfbkmcmebodilednhmaccmincoa_29.0_mac_bfqwqczv2chgncq7qnwqjby3my.crx3

MD5 0fa505d26fd906c645e60aa05f12af36
SHA1 ecb1def63dba6d475dcd61c4d3a6938855e6f24a
SHA256 9738a550f51cdfb80146b1620b40a37d58c5136254ee1f0f03c20a864fab89d2
SHA512 6c49784a21465a2b7348720003f072a279a7aaeb88783b98cdb968a54cb1ce6771122a6f1bbbfb8dd36507576c81d6caa000166f2dc0f81a3feca4e8d5131a00

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.45Gqi7/imefjhfbkmcmebodilednhmaccmincoa_29.0_mac_bfqwqczv2chgncq7qnwqjby3my.crx3

MD5 987eabeeb2256b1613d5141a3ebdddc5
SHA1 2104c1d8ecb245f5f73e2e57d625106fce48d6f8
SHA256 5f2d72ab3b2553821524d835120642722a35a5f6378b0d7ebd9494aad2a6ff93
SHA512 de972c0bf5d219e7c69eb3665f30c620ce4f00b6ced7ca50cba9ba418a61e2537c5b2ef8f4990df11b598075fc202f375f790a0d3020750831c13eeee8ab310c

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.45Gqi7/imefjhfbkmcmebodilednhmaccmincoa_29.0_mac_bfqwqczv2chgncq7qnwqjby3my.crx3

MD5 83dc1d6e37e3780e7be1fd1cf59dff2f
SHA1 4820464962a4c35d887ab5c6634debe49483ed09
SHA256 549b3832f1d50230202e3e8a29826784eb0e8d2e9f4313439af1030e6bdcdf73
SHA512 60a84c9fa68303e9541af728a2fc0d155c0cea7abdfc178f0f1e4f183094d22597184f0aaa22c71b358c1390363c617d95d6a9acb4c43ba746f884683a87331b

/var/root/Library/Application Support/Google/Chrome/ClientSidePhishing/29.0/visual_model.tflite

MD5 a9803d560544e4d1fe551b2c113c5370
SHA1 a998fdb1e80dbca61267db112812a7ee34b82dce
SHA256 d38a4cda8912f9598b8701dac7d5ee90eff324ed1fb9d277b9784fe45a4e6c72
SHA512 65b8b6ecfea2aeae95a39581c39476a54721e07ee7c296650ccddea29a09b29a11cab15fdc89f97295bd61423dc13a66666faca371200bcb459dc1f25b6c89fd

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.Re6iJq/obedbbhbpmojnkanicioggnmelmoomoc_20240429.634529504.14_all_ENGB500000_drh7pqj4o7a7karn7sdqrnqyte.crx3

MD5 3e6d6a61cc262006521d4cdacd51650e
SHA1 f02ed95b7684766bea947be2035d2078bc8e4f82
SHA256 c9be68fb5ec359ee369c324d2d1a259b7dd9c100a8d1064e887f6311e6d63d75
SHA512 e84ed2b159664502bcaa8d2277e6972ad936f7817eec4b5bb3538c98a022d70b1d82b0ee950f613fa4a6f1de9e2127485573fdea8643edcbdb225958ed75218c

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.rOBRqB/efniojlnjndmcbiieegkicadnoecjjef_980_all_bikv2q6qdcdfnqijhhb3ydcvqi.crx3

MD5 87fd701f1c0d8bf6160d0475d81053d7
SHA1 817036e31b124050d39784df2a33cd7cbfb7c675
SHA256 c5a4836b63b63c1d68339aa301781096c97ea3f383d04cd6831851de88a4294f
SHA512 b4945df0eb02e1a79636fc3e076ce991ba6a52fd43b9166daf2d0714464cce387c77a33c5373a46129e45c5f6e6cb4e6ad8371ec9b91421b39769ae9045222d3

/Users/run/Library/Caches/GeoServices/ActiveTileGroup.pbd

MD5 80d8f9995652efdf8c68cb828ac84979
SHA1 825558f2a2ae2f5cfb2af87185d2ae8524bace8d
SHA256 9df6243fc4e44a7bc79ea48317bdbe4434ea26c655fafbaa71bc11d0e15cad34
SHA512 4f5d69443caa21cc6f5c77c6df161728de3d5ea3a1df1df9864dc515bff986dfa25420444e6e6767a2866343b714a501cac7c03b52977519d5fc9c7cc3a4faf1

/Library/Preferences/com.apple.networkextension.uuidcache.plist

MD5 520bb9b65b89f03050030e5a985b9cd1
SHA1 91defba6d4540d4c8ede177730d104d747e8f57b
SHA256 6bb23965fd46b9ffe67a1cdb2144943543894e063c05db3a4de54e94b84968a0
SHA512 81eebb3eda761a9ecc94aa9564deab4d476522d94025ec19e002e91b12b7fbf2bffda23e7c393c09cb91b6ecd953ec1bf39ef5f787058b70289a5a5d777f0cf6

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.76QhyF/eeigpngbgcognadeebkilcpcaedhellh_2024.06.05.140657_all_ccj7nw5iotmqmvpbhiiji4wfca.crx3

MD5 0b1bbd3a85c6b5b46ff609b906632114
SHA1 305db6992df90fc483d44991fd9e98e43715ccde
SHA256 26c197ab0b2bd999fd5c8b5932e5700a083febf68e6d35f56b2473d6858a02cd
SHA512 1953eb559161500e8ab1a5aa3738dde247f0682cb632cf0304167c6dd82fa12a08dc971da337c272a4f0945d299331c5f0aa55edbc0479df2354c4d4a365ddd8

/Library/Preferences/com.apple.networkextension.uuidcache.plist

MD5 16a15c7222b5f487f9e47219bec96c9e
SHA1 47bb4748ff46c6365fb2bf5b22ca60387b4f42bb
SHA256 9ae1d6f1888fc41b8d9c6315df10394ef187eb1f57ac0abe48c5606b3277463c
SHA512 41595eb4b33c09cf1d087977c2a49c14a2894083a4d73dc88a0c9532e6c6b546f872c7cec14a16f674ebd0137c04e690124b777e197677cb964eb9336745d919

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.gi4G2B/laoigpblnllgcgjnjnllmfolckpjlhki_1.0.7.1652906823_all_jtggsagwbg7dhs53nvq4e53lva.crx3

MD5 91e1255f92fc76b16509bbd174a992b5
SHA1 44cbc6b7b60470149850d375f2e2ae95cf1c012b
SHA256 29661be65c8fb50d3d4df2fe040a1cc6dd525f50a95850aae6a191301c3de744
SHA512 ac1588c003c345aaf9a7c4b5f2d338fdaba041dacd65db567ff8cc588b47e372863e44a4a87f611c1530fb42fdb1388814d3caccf8bb3498c7efe78fc321d9cf

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.ZGdJot/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.49.1_all_ixzyrcu7pvmgu5pjv6enfqq6wa.crx3

MD5 2db7e78c310ca8e73c069a604eac4d99
SHA1 a6d1e03514f8eba03ab81f1380fc54aaded823b6
SHA256 cd1978742a4afdbaaa15bf712d5c90bef4144caa99024df98f6a9ad58043ae85
SHA512 681eaddbf304f4513b008b98493272b44815460568876b93528851ff7806775de38e6ec588fe27a2cf3dc804415e83a420e45d754b25ad4bdf68ef2c78403aa3

/var/root/Library/Application Support/Google/Chrome/Subresource Filter/Unindexed Rules/9.49.1/Filtering Rules

MD5 6274a7426421914c19502cbe0fe28ca0
SHA1 e4d1c702ca1b5497a3abcdd9495a5d0758f19ffc
SHA256 ae2fd01d2908591e0f39343a5b4a78baa8e7d6cac9d78ba79c502fe0a15ce3ee
SHA512 bf1287f502013308cdd906f6e42998c422ef1e272b348e66122dc4a4e471d01333b418f48d1bb2198c72845bdc950612597e179e612aaa1ba6cf8d48fb8f0cf5

/var/root/Library/Application Support/Google/Chrome/Subresource Filter/Indexed Rules/35/9.49.1/Ruleset Data

MD5 c5e30274fe7b93847f6d7c02410d1209
SHA1 488a49f38459f29e110c706c51b61ca1ae3b0e26
SHA256 e634e3cfdd0d27d0be1f5f9a19748d19d564928765db343503f42a6e1f5dd4ea
SHA512 bc235bb3af269e9a828e6788dbae2b42cabc879b858102f4cc76c0fa02af0e296d20ffc8f134c0a3f9b408643e4810e8c46afeb0c285b892908b06ea1aa1b811

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.rGfjQn/npdjjkjlcidkjlamlmmdelcjbcpdjocm_1.3.19.240_mac_adygwryqqyfdwvvjh32xxi6rilea.crx3

MD5 91a8d56c19e60520cf00b78a506b87f0
SHA1 a794be44a680983ac0f87b1faedf064a65016623
SHA256 b158d145928f6c80d855f1fcc5b6813e73b7e14327d65fa9abb26c438e56bf29
SHA512 efe8b3be1ff7c30596230e091a5109b1328b3f603a4f3cad134ad99cf648b8b3a0dbdd79413f854a53dae4e1316862c6b6798660dd9f37283a97115905c65d06

/var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/T/.com.google.Chrome.6mNSGx/gonpemdgkjcecdgbnaabipppbmgfggbe_2024.06.05.00_all_lqepr5dqnivxhxcinrlckqnwo4.crx3

MD5 295e0511d2a30920cd83b70f0142e4ea
SHA1 3472f19e2fcd468ca3d1dfcf8c2cb5cc18ccefd6
SHA256 a3d6a61ef91958b5b310f743f33936d345f2f4f5b2417ac069660b7f9cfbdd4e
SHA512 88e526c1f006290be796f8ca43c02694630eb905ec726067d28a6c7c65f6704da9001e772436c4191eda5868fe3ff5c0941893492da91193d9d708ac099023f2

/Library/Preferences/com.apple.networkextension.uuidcache.plist

MD5 5b21a7d986c41307be285d416dcfbfd4
SHA1 99f5e69f60b6de45d6e2ef98b06d2a16b0b8dbc1
SHA256 32e02684c812ae318d21fd46c6b34bc663c8a36279535e4f01894c01ed04deb5
SHA512 f8003c0b2274fd15567bb629a44489cffddd2e45981345c64b4d2b35b78a4673046441660e496cb834ce13c25e130607cb948a273f9c1d08481c1bb92204429c

/Users/run/Library/Preferences/com.apple.security.cloudkeychainproxy3.keysToRegister.plist

MD5 d4ee18599476ffecd0e9fd20e4292c8f
SHA1 342236c1b2193eac10ec92088edfcfe15628c357
SHA256 7fb38e91b340133a57c49f3497ee6365dfbd0bf9eb0fd1a8bc330feb8d184db9
SHA512 96bf42eb1394fc99b0d8fa031afd6603fcb6792e4641c95d3b4060c15a26a0d37fd4a3a8d4af7ed52aefe2febda50aa9097adaa70502785e323728533bcfc776

/private/var/db//keybags/persona.kb

MD5 45470925605843090b70a58026b0aa31
SHA1 dd267ff58a8c0401e701735fea784657ec5c49cd
SHA256 773f492fbd23cb2e16a6f336ca9a931b86bb50fcb510b58eec0147eb3fa8daef
SHA512 e52e9a24da527a5c0e8529f9511525b2908f196b9422cd5a76604208635ed513eeaf0b6be672691713d32f37138f0e0774a8572e863c3e3cc3f7eedd7a79b03e

/Library/Preferences/com.apple.networkextension.uuidcache.plist

MD5 998634e1460a5a08d81137a14cacb4b3
SHA1 2cd3467b2f1912f13f1159c79aec196ce3d513f7
SHA256 630c57d07228ca165e718c4c7ac3b255b44a25169f75941d3e0730f26ed8a16c
SHA512 85eeca4ff386507dacb6517424cd9969bc0029e2fe5923f9d28c25df682e1225e84c9298d032f3706cd26780f090f0664bba089fb9a4826d7a2f85b22552d3eb

/private/var/db//keybags/persona.kb

MD5 82811cd2b1c4f1f74fcd27d1ed7c54cd
SHA1 c07761a6c87c3d34f2f73ce51c0ea99c3f9cef0a
SHA256 d83ccd6ee21779ec349294035bffb29a0e1456714111bf66ffe8f443f2549053
SHA512 cab877edd72b500c0701d08c44fc57acc3922de92181a31e3e5bb05674f082c6b2d28841e4eb7484a633d943adb0cceb3a060fb3256bc53a5d57a31b59f0e42c

/Users/run/Library/Caches/com.apple.nsservicescache.plist

MD5 bbec756c35ad38fed6806449eb13a663
SHA1 d4083874981ddf04f4d1e3e47aa2f938bd9264c7
SHA256 f63eab732585f35ee3dab545b742979a0d46665e92c32def5e91964813f12dd5
SHA512 4ac26d305c1952ac25a46dc349f72fbec9a4237224fce152911ea81f30bdb36523ddc060d4c2e69704a289185bbe047293e99b5e9063b0804f37d0ee3e4b5494

/Library/Preferences/com.apple.networkextension.uuidcache.plist

MD5 8560573c94ce4f8718171d4b897e1632
SHA1 cc20f040e32b48b4792ecaaa046f487d353efb95
SHA256 d9be52b236ea1a11d0efe01c5ecf33f337d56a273d2eea179a6a91ee760ea3b5
SHA512 e78d782dd37b1d0a2c4a993ef6e9e833224dacce71e0c4ecb1473bcf89f4007487ee1195c9888037ee4bd915cdf3cbc19c3d77eb9638debc2921efed79f7e0b1

/Library/Preferences/com.apple.networkextension.uuidcache.plist

MD5 73b4b94b54f93375bceee04f8a5e3551
SHA1 bca0aa56b337b3c89853bca1a510d6a65a360949
SHA256 ae0bbfe4b7a836d1dbbf9ec5911b529f9642b536b9369e4f12d19657501fc37d
SHA512 b4e06919da1d80d7d5a76de9eeb527967a75c2f3c6a8db14034cd441e2bb19480bf1f241ea19b0aad7a6e5ded6f8d6e57fa278b6c389a33b5b829ea67c808027

/System/Library/AssetsV2/com_apple_MobileAsset_TopLevelDomainDafsa/com_apple_MobileAsset_TopLevelDomainDafsa.xml

MD5 6da4e27518abed5a1fa0b9226160549e
SHA1 c468537526441d24d01498d56d33f097be7328c0
SHA256 8014e88991d4256875af803a488e360691bb26f14292b048165ec8194e4c1d14
SHA512 46e0d2103cfcc9228788542b0970b8704c74ae2b6829a39f3896792e2ec76f0d9873a02c5ea60b641d9377705795b116529e19c4d913a5aeef5c935c90d39e87

/var/db/nsurlstoraged/dafsaData.bin

MD5 7e6f706958b092cc383164b72f0747d3
SHA1 0b5610fe3452fcd8b30c39512b182ed2ea658d08
SHA256 3fa3a11ba183442ad6d6f0736d9a885c929157a52055867c8548ee4412dcaf02
SHA512 b9900d308bb49a051cf1a03134be994e387dc1707a45d81c8972dd05b6b3acb95f06120877f3ad3ee5f468200bbd1974ef82b170b32b51a36a8f892e849332ea

/var/root/Library/Caches/Google/Chrome/Default/Code Cache/js/index-dir/the-real-index

MD5 6b66770952c3592bb56c4a759979e8ef
SHA1 867a17d608d413043309cf301ed7613b1a98cd67
SHA256 713018d4d93a97e757adf06b7d99bfb4dac80fda008a183ad3c07beb6cb8990c
SHA512 59c78d28c64622a020ad85226ba3aae51753f951c26e0541232d6a8b106d47a6e5b1dc4d4d40d96a2959cdda7409b51157f499d6e688dcbe128a83544c903128

/var/root/Library/Application Support/Google/Chrome/Default/Site Characteristics Database/CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

/var/root/Library/Application Support/Google/Chrome/Default/Site Characteristics Database/MANIFEST-000002

MD5 3a57544d01fe9674d498821a952e3d36
SHA1 3f201cd409b973af8500876ca38f87ca0d6c9189
SHA256 fd8e720fc1456f55e072b36bef305d5a5d8b48371a4b9782707d9b28b46fd958
SHA512 94411d68add2de6c874830227985c1826afeaf627d63563d630ba19f0c1198983cab6257e186e584fada32e8b8b314650b3adf97a26140753249fba3de227c59

/var/root/Library/Application Support/Google/Chrome/Default/Sync Data/LevelDB/MANIFEST-000002

MD5 02fd7b4be9b3ff4ca905e896e3f7455c
SHA1 8f75a85f9fb422bdcca0d75d94b04cb646c40b84
SHA256 6386c309bda81af8937ba94c257fb3c7ae94b1f9b1b963d05580587d256ab540
SHA512 c4e0aea72409222201261a702691fc01743fc88d18926b6d6d804376b2516ec73c15894d91c3717d5154faeec8edfd4ccbe29ad91154fe1973a376df077c8d5b

/var/root/Library/Application Support/Google/Chrome/Default/Site Characteristics Database/000004.log

MD5 64e666f76920acec2bf06f76141731f5
SHA1 0d218987d79047160149702274fb9f6644033df1
SHA256 fbebc1d84348b8b0da9336d7e68ba29e48564d11c08240fabf221b64c73815ac
SHA512 1f82353232b919ca58c6a65a8bd4f00984c6f534ecc3f25a636d06b3b1b0942a9d3484811e947d167630530d154218a9b4013c2fca04c4db0e237d7fe9c0532f

/var/root/Library/Application Support/Google/Chrome/Default/Sessions/Tabs_13362612672884565

MD5 07cc36d105381d236f8004a4affe29a0
SHA1 489e2aa1fc192f9ef011a47c1791160de574f7de
SHA256 d6c9da358b041b55ea17e08b59f5e0fd1e16a78adf7588f702f49aad43818dff
SHA512 192be9a7a06860ee4b1835e91603127cbd941bb4a55510251ed37d4a61945830308503eb5e8beae77b47e99c6fc8dbb706c1d266819fec41f5eee3c2573b874c

/var/root/Library/Application Support/Google/Chrome/Default/Site Characteristics Database/000006.ldb

MD5 35cb6f6ca3a6e3a85074a6c715dc1789
SHA1 b8008fb781264842512abd5952f1230bf3bc58cf
SHA256 bccd8528bf012912e75b7bd9ceb3d5954d11fb638f03061b717b26c803ce430e
SHA512 ade12ada529fad8412f19690469fa3b77ff62990fd259f11e8e111c76827af2a66d2b1dab4b9f5831f53f128fb9234a95f814bdf937f199e80969f2104d7a1af

/var/root/Library/Application Support/Google/RLZ/RlzStore.plist

MD5 2de6a04cdba79ed13580c47dfd70cc5f
SHA1 bcefe0558555914d731c16b1778c49e77fe06b99
SHA256 97704a8960b4facceef54397a08fb5d0a456247c3627359215aa2a27df22656c
SHA512 605dc81b28c530fc8ebcf3c5a28486af8bbd3303ee5df53b5424e492e5dbe01baa0468fa4da1398451a62dff4d45067a2bf765f7def9ca0890883484de38a13b

/var/root/Library/Application Support/Google/Chrome/Default/Local Storage/leveldb/MANIFEST-000002

MD5 64486e4c658733375b5b98eb7dca49ff
SHA1 fcae1102348cbab75e16c45901c9ee9974a87bc3
SHA256 d420b162415ff7ed4b23da14cee4ffc3e89b288951ab5efe8965266367d6b370
SHA512 a216f7a9508c011889b6859f377d7e4ba6a3dba794a04206c759d7a41910b73c87bf62db0ad71054d33ad3375d7db005521c9851e3ee8f32f6388a586f78a3bf

/var/root/Library/Application Support/Google/Chrome/Default/Local Storage/leveldb/000004.log

MD5 d4ce2634cf57dfb028263188b8aa296a
SHA1 480df4c116fff1001983609c46e9b1d661c7b671
SHA256 d22c2022777d9850852f8c46fa2d529cab3e89b7c3a3b78cf80f53e00edc5b0d
SHA512 31104aa8bc9a34c95f054d058577f91e12d526dbfeeb6da5de49a5541fbd815ac0921db6dc052aacd3c5e94c6866390b95e29acc55e189e554a550baf2a043e1

/var/root/Library/Application Support/Google/Chrome/Default/Local Storage/leveldb/000006.ldb

MD5 b80320879ff8f950b541c2dc2c118549
SHA1 679c95e4bab10aff4d7e634e3574b123b17b8baf
SHA256 2448c386056f4ecb6dd8e3f75313a059cf9c920459835c6e5b63bc7d1007d262
SHA512 3d6cbb0b48a26efda185d1d27d53c20f5777fa89664b8853e7b2df3882e977d1df6042bc58b3fcf01b097c6792377bad30507db0064701a4857341578868f6df

/var/root/Library/Application Support/Google/Chrome/Default/Extension State/000004.log

MD5 a15ac2782bb6b4407d11979316f678fd
SHA1 b64eaf0810e180d99b83bba8e366b2e3416c5881
SHA256 55f8fa21c3f0d42c973aedf538f1ade32563ae4a1e7107c939ab82b4a4d7859a
SHA512 370b43c7e434c6cc9328d266c1c9db327621e2c95ad13d953c4d63457a141fbf2be0b35072de96becc29048224d3646535a149229fc2ba367c7903d3e3e79bdb

/var/root/Library/Application Support/Google/Chrome/Default/shared_proto_db/metadata/MANIFEST-000002

MD5 815f2fed6f3179803b326b6843de144c
SHA1 02875c5984591b29f67646bb663a145ce4256cf4
SHA256 8973bafa39975ca6a092a20a00b8adf2803efebf23fe735ade013cdb22dffd4a
SHA512 1c69705f60b4b4456d9dd3713c8763bc825ebfe9b7a2f6eb463d4893fe21cb12162300dae737c3eadfbcf5700a102c09aa98344236755f4019527be3812d7556

/var/root/Library/Application Support/Google/Chrome/Default/shared_proto_db/metadata/000004.log

MD5 f7c82984c4beada065bd21f4b86371e9
SHA1 12b0345826ae2d3142d8d39f268761115a82ee1a
SHA256 51b127e75b074e023a1b5283f1bc21738d8a27d72c46aa9acbc2096434a183a9
SHA512 d0f4389786f5680108b31210d3190677606edde4fbbd2d71dbe519c27ec68f095e74f8e6843a6b311dee7c8540cacf39ffbc14d9e0718bdc127797fe861134ad

/var/root/Library/Application Support/Google/Chrome/Default/shared_proto_db/metadata/000006.ldb

MD5 d671bcf53e1c8921930a2ead51d0c6f9
SHA1 85f8f3b9641f5788fa6934f3d0f968ec9a4ecb5d
SHA256 01264dac18d3fe420d83da632bbc92646e32b33f2a82d5372069b19339979421
SHA512 94b5e684995fde659edb4c642c9450d98f29dfffd70e2a3bf675fb93c80539b030c206ddd8642054d17a50c1d28c0a11296a2abeffb00a97705e4ce33e73d719

/var/root/Library/Application Support/Google/Chrome/Default/shared_proto_db/MANIFEST-000002

MD5 d618bd44784222603fb1475ba6d1ab6b
SHA1 1955c4424db6b1e02c2d535e6105d95819d3e5c9
SHA256 55de269dd56f291aab10eb93ab216cd13c285d4542723bf06fdba96bd88561e5
SHA512 220c4fbaf743dbed8242472ca967c74b0448725ca772d0282a7347394c721cb7e28007dd3f4f890b2983a4caa2e632c57d1706d1718567419762ae90f3778367

/var/root/Library/Caches/Google/Chrome/Default/Cache/Cache_Data/index-dir/the-real-index

MD5 c4c1e70899658f2e3bbd9767dd2ff1ef
SHA1 ad9d049c337f0534cc715caae356fdf7c2e6efef
SHA256 fb9ce151f38e62316baa93f6f8bec30b0390b27599b7aba44c0895fb0207fb6c
SHA512 568ec8dd29f67367e59633becd2f90d3a7d48f8b3180d37a9ba56832e0ab4d3f6855d5c453dddab92f11851e26c7938ad80a887f54e0c5f203944ebd48c4c1a5

/var/root/Library/Application Support/Google/Chrome/Default/shared_proto_db/000004.log

MD5 e95b491bef6d6b71773f597844a19c22
SHA1 6c718d468d9543db1d74955a1b0d61d71e788a12
SHA256 186b9d0d6ce3165ebf3f009190dd8acb8ca1aa4fe1c6eeeadb7a248f9a4cae34
SHA512 972c7712055c1e49615c3480224d247f5e7b2a6f7dfc370fe319c1c5edc9fc6d48c7df112abcd4519db7fbb8a46dfe0ba6ca1f1c82c8b2b069015e0309ab2783

/var/root/Library/Application Support/Google/Chrome/Default/shared_proto_db/000006.ldb

MD5 4f8daf0522862fcc7a2ccc030aba327c
SHA1 1cec0c43b542bdd70db1858459234b0c216b3437
SHA256 1ef1cfafcfa5ab3d57b37fb3acd5d5a91e80408a9b50a7680eb489ede7e88f34
SHA512 cc00c17f68e0204c37143bbe9198784d2eddfbc57c4d8df041b71a4a3d987d778fb09329f34f99008f72f83fa955b3c11cadb5e3de5fb1aae0946447640cfa6f

/var/root/Library/Application Support/Google/Chrome/Default/Sessions/Session_13362612670722341

MD5 47eb62138dd53cf832dc48d8673fe2ad
SHA1 975aa5daa11e9ab8fe9e7961c5a135273cd48152
SHA256 543c040b7fa7c3303eef87250767bc7f185a0f6a2856cd169cc4550cf16ce4b6
SHA512 932fc33e1a85188f6894fea9ac2b678a9de77c9aa2b234bcbaf53913ee1f486d42191dbc85a9a6ee1b2683ca85b5b7bc391f79fc5b5a002034538d4806b57754

/var/root/Library/Application Support/Google/Chrome/Default/Session Storage/MANIFEST-000002

MD5 2cb26e7d1874dc1c3d6f7226a6bdfa5d
SHA1 dcbfdc949c295b275c42e4792ee5354fb5589d53
SHA256 7367c29ddcb3e6150fef4dbc6615287d3da002a5f0d4b9b7e3cb49a6d8999675
SHA512 f562b27d3c6ba693233203bea78d95465d476dda592de4ec2c741d3a08e1bc2f51fe5a5279c82b104ace30a8f0e5300f0e0285aecb167ec28387f234b0672a75

/var/root/Library/Application Support/Google/Chrome/Default/Session Storage/000004.log

MD5 1ccda7f9b4f4aa6f9d034f89c1130c39
SHA1 809be6902977f41f33ce367f359a40fc35c7147d
SHA256 8144f41fab1be2a217eb69cb1f39d15f4bcd4e910b7947408ab9ee4b20a8f89c
SHA512 b9780a3fa090ad1627e5b2e099994c9810aea94f57a2ae0882a4ee0757ef4c300ec3625f049eb0bbcd10f551cb8f67a47d1019e0d1cd446328f02e3e0c8707bd

/var/root/Library/Application Support/Google/Chrome/Default/Session Storage/000006.ldb

MD5 b1c79283d47130e95ebadf8fe0c4201e
SHA1 63386c3776a8c185df14687b4c1eef1cde5031b0
SHA256 f1d724231f3d5afc2e7b305b7e4d19689a0b8cb11c933cb642d725e87eadc393
SHA512 42e3f9a19b2446a2e7ee6548211891a86df3491244772f95694fc158edff6c3b28b4c8b32a9e7bd2268758e4774b4fe3e0ab4df7e093e407bf2f061eda4b8583

/var/root/Downloads/Unconfirmed 347213.crdownload

MD5 afdc797a6033da74eed6cced910ef54b
SHA1 bf73faf5ac15322178e046c6d50606c5ddd309d0
SHA256 49cd9ef7080639aaf63ffbef78f478137630c46e76bdfe0fd6be9a66b4d3c38b
SHA512 3d023e1ec6cb31e8798daa27c803379e6535e64f793edefc19c29d2955040dfb1c73d4f283f769f98810b898e6235dc648bd78edb536a57c2ee9a63563d5994d

/Library/Caches/com.apple.iconservices.store/4C1142B8-3206-3310-B88C-73FE47BDE763.isdata

MD5 2e11bc929eaa0bafea20f4b6724d0008
SHA1 6448fd66ddb492c6e3d6af6abb166dc914919346
SHA256 4c1142b832062310f88c73fe47bde763cf161470b50a1f4c71ca1ce3ef0a1774
SHA512 4b7995c0ba17cb7d89ca8529e8d8d146236badd96b89d200f59b93011b35f6a3e1202d872774ecc9db01a30fb4db6ca25bad729e3422f66a667350b1a8e97f21

/var/root/Downloads/Unconfirmed 347213.crdownload

MD5 a6498873e1bf506763f4a97ce0a8d6c7
SHA1 70e9adf2ad29ad9fc22243baa23b51a4dedd9961
SHA256 141631421b7072d310f01c8e800567716879dbdee4d5587de70feb5a7660f45c
SHA512 07cd4b2d6fa0f6f7be9a99dc861c9f3f6036040d68e2bc3bbbda6c3bb967d846313b67d5897012cd5dc0c8af8b02467020471712f9a25ee8682974da8dacf39b

/var/root/Library/Application Support/Google/Chrome/Default/Local Storage/leveldb/000009.ldb

MD5 235855bfe86a600bef91c07ab9427694
SHA1 e59b49c77add307dc4095bf3da0471dd6cc6817f
SHA256 c008923d606c31adecd5ea8dc5e204120816f8fc93e3fce06e581e762d75949d
SHA512 ec36ce84fbcfadbf5206a2b63e4f5db458b689ad08dd614e9cf6d4fd71d317d264ebe235732e07d27c0275c05755cfd9d8f2964d57ea608f1969b8473c653179

/Library/Caches/com.apple.iconservices.store/6F9801CC-04F8-3096-B75D-1CFD52E47C09.isdata

MD5 bcc380a932fc7d13cd1361dd902e7d65
SHA1 95165c2dbd4480bd33d29955e650d80e5fc60320
SHA256 6f9801cc04f89096b75d1cfd52e47c0924398038cc87f201ed7b85545c17d9b6
SHA512 cf168aa8eb1ea6f5e99b6b52b8b94f8e5305875488a7297911d9ebf0b99a274bbb67723385df79e0b059d8f5752a44efb17362bb0ff00761a83c8afcf8b1da03

/Library/Caches/com.apple.iconservices.store/BBB2647B-22F1-3B5E-BFA6-ADCCC9DF9C39.isdata

MD5 ad563b49c200c89a067db62274ebc873
SHA1 c462bd2f160e81c09357eb21f738f08083a04330
SHA256 bbb2647b22f15b5e3fa6adccc9df9c39190ae6ef5b123052f12659b19763e4e3
SHA512 934edcad610ea463d17736a1b0a7f9d8410da49142cca99e76fa21591432e412b7682157612f4d9f34aafc3bb5b1376207b74c48818c824a18c35da36e1638aa

/Users/run/Library/Caches/GeoServices/ResourceManifest.pbd

MD5 b48805db91013ec03f5141c497fb07be
SHA1 2e79904257fd4f74d01437e5a6c88a080b1b48ae
SHA256 7df937dc645984594de5a08357736942a8011b2c5676c5c0048f011997dee011
SHA512 ee7f207f3971829916daa69472748e525404de17452194be4fc74a111b996b50733c835735d35ef81b10fd242ee18815a809f9459508ae7503da513b4db9e68d

/var/db/locationd/Library/Caches/GeoServices/ResourceManifest.pbd

MD5 81dbb2b2c921c273ca71f5cd71772f27
SHA1 142e06c04f3db483167647e98b5c320a362861ee
SHA256 f63cdb31c9fa02c24bdd7f02da6f9a38deeaef32f3c2bfc0575104ce8c461158
SHA512 46615e495a2ae3fbe53c9402e410f7848f1878d6d7067fc431b08745669babe15879aeb2f1e6e98a91314071be16cdcdae6d98df1c3d297d86882594380c7d2c

/var/db/locationd/Library/Caches/GeoServices/networkDefaults.plist

MD5 57487c5e523f4e461e97ab98b41803aa
SHA1 c631fbf25dc6f23be44ccc2670b334278800c63e
SHA256 67725d05a0ce28bf4ccbfcde82acfcaa627c0eeb7678d5c8e5b7649a7f158f8d
SHA512 9d9826379ab15e2da65a2a32bc3584b201d79e89e3a7d6e554b2398b7a0ada77241144be6d69fc749526029838293d5107f96f45392fe6a07a05dd2f4d07a3bf

/var/db/locationd/Library/Caches/GeoServices/ActiveTileGroup.pbd

MD5 8bc5512060f4120733b94917c99976b7
SHA1 b44e917901ab8181f55ce016535657de8c3b59c0
SHA256 5339c057605f7796c276c83f47754461f5301e67785a86081f1b7bf613010da3
SHA512 ac8f8d842d82ce8dc746d09db3a7253e085a4ab0fedbcc86b233a38b7a20abcfb2178bc059b29ea9db75ae8b3bba2c52f3ee03b5fe113c8750a1dd4c1ab114fd

/Library/Preferences/com.apple.networkextension.uuidcache.plist

MD5 2cc88231f2f23214f236542a80523f4d
SHA1 954540f668ea6cbe20ec58ccba50d58c12639e60
SHA256 8c2da5a32f03ee02a4b011f04f6f2186a8e24391d1a4f1bf9675ea4f7c45858f
SHA512 4dc4b93ddcb6a2b88e1a3669f14372fe80f804c98c9cff7c1785c34735415fa9dff1b047b34a2744159e853dea134172b4eef0e30b0d21db076f992eac6123d5

/Library/Preferences/com.apple.networkextension.uuidcache.plist

MD5 946b087b8ae2f5701a5736ce6fa3e5d8
SHA1 b4882534efa744ca4fc0e3a3fd34ae734394d5bd
SHA256 44b852982ee64d4fb28ae56b842664b2670650f5895c1a96111c4c47735eeab7
SHA512 cfe075701d36b78b6d3dbae7764a0178c97303094dc047c392e6f45bacaab995a6f9a43efd26ee4e9133042334da87b7571c46ac3656d1c05287ffe41e0d303e