Malware Analysis Report

2024-10-10 07:25

Sample ID 240611-rfk3eazbnh
Target https://www.curseforge.com/minecraft/mc-mods/simple-voice-chat/files/5358779
Tags
discovery persistence ransomware
score
9/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
9/10

Threat Level: Likely malicious

The file https://www.curseforge.com/minecraft/mc-mods/simple-voice-chat/files/5358779 was found to be: Likely malicious.

Malicious Activity Summary

discovery persistence ransomware

Renames multiple (52) files with added filename extension

Executes dropped EXE

Loads dropped DLL

Checks computer location settings

Enumerates connected drives

Drops desktop.ini file(s)

Checks installed software on the system

Adds Run key to start application

Drops file in System32 directory

Drops file in Program Files directory

Drops file in Windows directory

Enumerates physical storage devices

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious behavior: GetForegroundWindowSpam

Suspicious behavior: EnumeratesProcesses

Checks SCSI registry key(s)

Modifies data under HKEY_USERS

Suspicious use of SetWindowsHookEx

Uses Task Scheduler COM API

Modifies registry class

Suspicious use of WriteProcessMemory

Suspicious use of FindShellTrayWindow

Suspicious use of SendNotifyMessage

Enumerates system info in registry

Checks processor information in registry

Suspicious use of AdjustPrivilegeToken

Uses Volume Shadow Copy service COM API

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-11 14:08

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-11 14:08

Reported

2024-06-11 14:54

Platform

win10-20240404-en

Max time kernel

2699s

Max time network

2695s

Command Line

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.curseforge.com/minecraft/mc-mods/simple-voice-chat/files/5358779

Signatures

Renames multiple (52) files with added filename extension

ransomware

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Desktop\BeamNG-Techdemo-0.3-setup.exe N/A
N/A N/A C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\getD3DXVer.exe N/A
N/A N/A C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe N/A
N/A N/A C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe N/A
N/A N/A C:\Users\Admin\Desktop\BeamNG-Techdemo-0.3-setup.exe N/A
N/A N/A C:\Users\Admin\Desktop\BeamNG-Techdemo-0.3-setup.exe N/A
N/A N/A C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\getD3DXVer.exe N/A
N/A N/A C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\dxwebsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe N/A
N/A N/A C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe N/A
N/A N/A C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe N/A
N/A N/A C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\gldriverquery64.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\gldriverquery.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\vulkandriverquery64.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\vulkandriverquery.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\getD3DXVer.exe N/A
N/A N/A C:\Users\Admin\Desktop\BeamNG-Techdemo-0.3-setup.exe N/A
N/A N/A C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe N/A
N/A N/A C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe N/A
N/A N/A C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe N/A
N/A N/A C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe N/A
N/A N/A C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\getD3DXVer.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
N/A N/A C:\Users\Admin\Desktop\BeamNG-Techdemo-0.3-setup.exe N/A
N/A N/A C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe N/A
N/A N/A C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe N/A
N/A N/A C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe N/A
N/A N/A C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe N/A
N/A N/A C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe N/A
N/A N/A C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe N/A
N/A N/A C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe N/A
N/A N/A C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup0 = "rundll32.exe C:\\Windows\\system32\\advpack.dll,DelNodeRunDLL32 \"C:\\Users\\Admin\\AppData\\Local\\Temp\\IXP000.TMP\\\"" C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\dxwebsetup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000\Software\Microsoft\Windows\CurrentVersion\Run\Steam = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -silent" C:\Users\Admin\Downloads\SteamSetup.exe N/A

Checks installed software on the system

discovery

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Windows\assembly\Desktop.ini C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Users\Admin\Videos\Captures\desktop.ini C:\Windows\System32\bcastdvr.exe N/A
File created C:\Windows\assembly\Desktop.ini C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\K: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\N: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\U: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\W: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\Y: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\E: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\I: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\L: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\P: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\R: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\T: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\A: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\B: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\G: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\M: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\Q: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\Z: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\H: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\J: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\O: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\S: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\V: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened (read-only) \??\X: C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\SysWOW64\DirectX\WebSetup\Dec2006_d3dx9_32_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Mar2009_x3daudio_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\MDX_1.0.2908.0_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Jun2010_d3dx10_43_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Apr2006_xact_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Jun2008_x3daudio_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Jun2008_xaudio_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\MDX_1.0.2907.0_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\SysWOW64\directx\websetup\SET2385.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Jun2008_d3dx10_38_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Aug2008_d3dx9_39_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Aug2008_xaudio_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Aug2009_d3dx9_42_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Aug2009_d3dcsx_42_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Jun2007_d3dx9_34_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Apr2007_d3dx9_33_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Jun2008_x3daudio_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Feb2010_xact_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Jun2010_d3dx10_43_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Apr2007_xact_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Jun2007_d3dx10_34_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Nov2007_x3daudio_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Oct2006_xact_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Dec2006_xact_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Aug2007_xact_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Mar2009_d3dx9_41_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Aug2009_xaudio_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Feb2005_d3dx9_24_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Apr2005_d3dx9_25_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Apr2007_d3dx9_33_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Jun2010_xact_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Feb2007_xact_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Nov2008_xact_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Mar2008_d3dx9_37_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Mar2009_xaudio_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Jun2010_d3dcsx_43_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Nov2008_d3dx10_40_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Aug2009_d3dx10_42_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Nov2008_xaudio_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Nov2007_xact_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Aug2008_xact_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Feb2010_xact_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Aug2009_d3dx11_42_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Apr2007_xact_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Nov2007_d3dx10_36_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Aug2007_d3dx10_35_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Jun2008_d3dx9_38_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Aug2005_d3dx9_27_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Dec2005_d3dx9_28_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Mar2008_xact_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Dec2006_xact_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Jun2007_xact_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Mar2008_d3dx10_37_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Aug2008_xaudio_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\SysWOW64\directx\websetup\dsetup32.dll C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Feb2006_d3dx9_29_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Jun2010_d3dx9_43_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Jun2006_xact_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Nov2008_x3daudio_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Aug2009_d3dx10_42_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Aug2007_d3dx10_35_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Nov2007_d3dx9_36_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Feb2006_d3dx9_29_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\SysWOW64\DirectX\WebSetup\Jun2010_d3dx11_43_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Steam\public\steambootstrapper_thai.txt C:\Users\Admin\Downloads\SteamSetup.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_040_act_0317.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\resource\overlay_brazilian.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steam\cached\managedeviceauthdialog.res_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sd_r2_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps4_trackpad_l_left_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\shared_button_b-1.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\flag_inactive_left.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\switchpro_dpad_left_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\localization\steamui_hungarian-json.js_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\public\steambootstrapper_schinese.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\switchpro_button_plus_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\switchpro_r2_soft.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\shared_button_a.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\bin\cef\cef.win7\VkLayer_khronos_validation.dll_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_035_magic_0331.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_045_move_0235.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps4_trackpad_r_ring.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_035_magic_0313.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_010_wpn_0529.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\switchpro_sl_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\shared_lstick_down_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_010_wpn_0320.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\icon_up_hover.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps5_trackpad_l_swipe_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\broadcast\icon_requests.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\localization\steam_controller_bulgarian.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steam\cached\Receipt_HardwarePromo_AlreadyPurchased.res_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_010_wpn_0413.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\resource\[email protected]_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\resource\icon_steamvr_desktop.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\localization\switch_controller_romanian.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sd_ltrackpad_left_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps_color_outlined_button_circle.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_030_inv_0312.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_040_act_0316.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_100_target_0170.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\resource\familyview.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_110_social_0140.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\public\steambootstrapper_bulgarian.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\public\ssa\ssa_english_bigpicture.html_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\public\steamclean_russian.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\shared_rstick_up_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\sc_touchpad_left.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steam\cached\offline_brazilian.html_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps_dpad_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_050_menu_0070.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\xbox_button_select_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps5_trackpad_r_touch.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\bin\cef\cef.win7\chrome_200_percent.pak_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sd_l5.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sd_ltrackpad_up_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\switchpro_lstick_right_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steam\cached\submanagesecurityunlock.res_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps_rb.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps_lb_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\switchpro_lstick_up_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_035_magic_0326.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_040_act_0307.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\gamenotes.js_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps4_trackpad_l_ring_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_045_move_0220.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\flag_inactive_top_hover.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sc_rt_lg-1.png_ C:\Program Files (x86)\Steam\steam.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\msdownld.tmp\AS5F69E5.tmp\Apr2007_xinput_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS5FC514.tmp\Dec2005_d3dx9_28_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS5FCC19.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS604A90.tmp\Aug2009_D3DCompiler_42_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS605473.tmp\Feb2010_xaudio_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS5F64D4.tmp\Apr2006_xinput_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS60169F.tmp\Mar2008_xaudio_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS604456.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS605473.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS5FDEB7.tmp\Feb2007_xact_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS5FDEB7.tmp\Feb2007_xact_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS601094.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS604159.tmp\Mar2009_xaudio_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS605EC4.tmp\Jun2010_xaudio_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS5FAB53.tmp\Aug2009_d3dx11_42_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS5FB536.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS6007BB.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS601325.tmp\Mar2008_x3daudio_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS605771.tmp\Jun2010_d3dx10_43_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS605955.tmp\Jun2010_d3dcsx_43_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS5F7A21.tmp\Oct2006_d3dx9_31_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS5FC514.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS603B0F.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS604D40.tmp\Aug2009_xact_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS5FC514.tmp\Dec2005_d3dx9_28_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS60363D.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS605B0B.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS606750.tmp\MDX_1.0.2906.0_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS5FB63F.tmp\Jun2010_d3dx11_43_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS5FBAE3.tmp\Feb2005_d3dx9_24_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS5FBFC5.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS6009FD.tmp\Nov2007_x3daudio_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS5F64D4.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS5FE6B6.tmp\Jun2007_d3dx9_34_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS601E60.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS602565.tmp\Aug2008_d3dx9_39_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS5F6919.tmp\Apr2007_xinput_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS5F91CF.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS5F9B07.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS606B86.tmp\MDX_1.0.2910.0_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS5F8AF9.tmp\Aug2007_d3dx10_35_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS5FB536.tmp\Jun2010_d3dx10_43_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS600B84.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS601094.tmp\Mar2008_d3dx10_37_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS604541.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS604C65.tmp\Aug2009_xact_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS6060E7.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\assembly\tmp\5ZY4HSUI\Microsoft.DirectX.Direct3DX.dll C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS5FCC19.tmp\Apr2006_d3dx9_30_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS6013F0.tmp\Mar2008_xact_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS605FCE.tmp\Jun2010_xaudio_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS5FD08E.tmp\Jun2006_xact_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS601E60.tmp\Jun2008_x3daudio_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS602EAC.tmp\Nov2008_x3daudio_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS603DDE.tmp\Mar2009_x3daudio_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS5F91CF.tmp\Mar2008_d3dx9_37_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS6015A5.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS604A90.tmp C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS60534B.tmp\Feb2010_xaudio_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS60556D.tmp\Jun2010_d3dx9_43_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS5F83C6.tmp\Jun2007_d3dx9_34_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS5FBFC5.tmp\Jun2005_d3dx9_26_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File opened for modification C:\Windows\msdownld.tmp\AS600C6E.tmp\Nov2007_xact_x64.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A
File created C:\Windows\msdownld.tmp\AS601269.tmp\Mar2008_x3daudio_x86.cab C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe N/A

Enumerates physical storage devices

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0004 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0055 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0004\ C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0064 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0038 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0051 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0002 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0054 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{3b2ce006-5e61-4fde-bab8-9b8aac9b26df}\0008 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{3464f7a4-2444-40b1-980a-e0903cb6d912}\0016 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Capabilities C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\2002 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0004 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{3464f7a4-2444-40b1-980a-e0903cb6d912}\000A C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\000A C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0018 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\2003 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\DeviceDesc C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{80d81ea6-7473-4b0c-8216-efc11a2c4c8b}\0004 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_QEMU&PROD_HARDDISK\4&215468A5&0&000000 C:\Windows\System32\GamePanel.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\2003 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0065 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0004\ C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\ConfigFlags C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{3464f7a4-2444-40b1-980a-e0903cb6d912}\0016 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0003 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{80d81ea6-7473-4b0c-8216-efc11a2c4c8b}\0003 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\004A C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\004C C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{88ad39db-0d0c-4a38-8435-4043826b5c91}\0008 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0038 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{80d81ea6-7473-4b0c-8216-efc11a2c4c8b}\0004 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0008\ C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Mfg C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0018 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0055 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{3464f7a4-2444-40b1-980a-e0903cb6d912}\0006 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0058 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\2003 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{80d81ea6-7473-4b0c-8216-efc11a2c4c8b}\0004 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{88ad39db-0d0c-4a38-8435-4043826b5c91}\0009 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0054 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0064 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Capabilities C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\004E C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{3464f7a4-2444-40b1-980a-e0903cb6d912}\000A C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\004D C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{88ad39db-0d0c-4a38-8435-4043826b5c91}\0008 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{656a3bb3-ecc0-43fd-8477-4ae0404a96cd}\300A C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\DeviceDesc C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{80d81ea6-7473-4b0c-8216-efc11a2c4c8b}\0003 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_QEMU&Prod_HARDDISK\4&215468a5&0&000000\Properties\{3464f7a4-2444-40b1-980a-e0903cb6d912}\0016 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\0038 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0005 C:\Windows\system32\svchost.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\steam.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\steam.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\System32\bcastdvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\System32\bcastdvr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steam.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133625885476156042" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections C:\Windows\system32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache C:\Windows\system32\svchost.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steam\DefaultIcon\ = "steam.exe" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steam C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steam\Shell\Open\Command C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steam\DefaultIcon C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steam\URL Protocol C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steam\DefaultIcon C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steam\Shell\Open\Command C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\"" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steam\ = "URL:steam protocol" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steam\DefaultIcon C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steam\Shell C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\WOW6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance C:\Users\Admin\Downloads\SteamSetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steam\ = "URL:steam protocol" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steamlink\DefaultIcon C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steamlink C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steam\Shell\Open\Command C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steamlink\DefaultIcon C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steamlink\Shell\Open\Command C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\DefaultIcon\ = "steam.exe" C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\ = "URL:steamlink protocol" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\URL Protocol C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steamlink\Shell\Open\Command C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steam C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steamlink\URL Protocol C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steamlink\Shell C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steamlink\Shell\Open\Command C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance C:\Users\Admin\Downloads\SteamSetup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\"" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steam\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\"" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\"" C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steam\DefaultIcon\ = "steam.exe" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steam\ = "URL:steam protocol" C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steamlink\URL Protocol C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\"" C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\ = "URL:steamlink protocol" C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steamlink\DefaultIcon C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance C:\Users\Admin\Desktop\BeamNG-Techdemo-0.3-setup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\WOW6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance C:\Users\Admin\Desktop\BeamNG-Techdemo-0.3-setup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell\Open\Command C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steam\Shell\Open\Command C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steam\URL Protocol C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steam\DefaultIcon C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steamlink\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\"" C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steamlink C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\Local Settings C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steamlink\Shell\Open C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steam\ = "URL:steam protocol" C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steamlink C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steam\DefaultIcon\ = "steam.exe" C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steam\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\"" C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steam\DefaultIcon\ = "steam.exe" C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steam\URL Protocol C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steam C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\WOW6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance C:\Users\Admin\Desktop\BeamNG-Techdemo-0.3-setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell\Open C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steamlink\DefaultIcon C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell\Open C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steam C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steamlink\ = "URL:steamlink protocol" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\steamlink\DefaultIcon\ = "steam.exe" C:\Program Files (x86)\Steam\steam.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Users\Admin\Desktop\BeamNG-Techdemo-0.3-setup.exe N/A
N/A N/A C:\Users\Admin\Desktop\BeamNG-Techdemo-0.3-setup.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2244 wrote to memory of 4352 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4352 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4552 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4556 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4556 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 2244 wrote to memory of 4540 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Uses Task Scheduler COM API

persistence

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.curseforge.com/minecraft/mc-mods/simple-voice-chat/files/5358779

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffb70299758,0x7ffb70299768,0x7ffb70299778

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1504 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1784 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1860 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2908 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2920 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4832 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=5032 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5060 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5216 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5272 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5324 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=5340 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=5512 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4604 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=1652 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=4904 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=3764 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4680 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=768 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=2908 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=4596 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=4916 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6320 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=6368 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=5400 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=5692 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=5348 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=5680 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=6496 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=6564 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=6588 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=6704 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=6728 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=7124 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=8092 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=8080 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=8332 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=8356 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=8688 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=8692 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --mojo-platform-channel-handle=8612 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=8968 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=8680 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --mojo-platform-channel-handle=9380 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=8616 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --mojo-platform-channel-handle=9548 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --mojo-platform-channel-handle=9248 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=9460 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --mojo-platform-channel-handle=9828 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --mojo-platform-channel-handle=10276 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --mojo-platform-channel-handle=10464 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --mojo-platform-channel-handle=10644 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --mojo-platform-channel-handle=10796 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --mojo-platform-channel-handle=10960 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --mojo-platform-channel-handle=11192 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --mojo-platform-channel-handle=10760 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --mojo-platform-channel-handle=10608 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --mojo-platform-channel-handle=11524 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --mojo-platform-channel-handle=5780 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --mojo-platform-channel-handle=11480 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --mojo-platform-channel-handle=4752 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --mojo-platform-channel-handle=12008 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --mojo-platform-channel-handle=12068 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --mojo-platform-channel-handle=11540 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --mojo-platform-channel-handle=11336 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --mojo-platform-channel-handle=5256 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --mojo-platform-channel-handle=11528 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --mojo-platform-channel-handle=7768 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --mojo-platform-channel-handle=11680 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --mojo-platform-channel-handle=6044 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --mojo-platform-channel-handle=6508 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --mojo-platform-channel-handle=5440 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --mojo-platform-channel-handle=10012 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --mojo-platform-channel-handle=10452 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --mojo-platform-channel-handle=10100 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --mojo-platform-channel-handle=11068 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --mojo-platform-channel-handle=7280 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --mojo-platform-channel-handle=10092 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --mojo-platform-channel-handle=12228 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --mojo-platform-channel-handle=12020 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --mojo-platform-channel-handle=3108 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --mojo-platform-channel-handle=5920 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --mojo-platform-channel-handle=5716 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --mojo-platform-channel-handle=9624 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --mojo-platform-channel-handle=10972 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --mojo-platform-channel-handle=8472 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --mojo-platform-channel-handle=11996 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --mojo-platform-channel-handle=11680 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --mojo-platform-channel-handle=2956 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --mojo-platform-channel-handle=11248 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --mojo-platform-channel-handle=5116 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --mojo-platform-channel-handle=11948 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --mojo-platform-channel-handle=7556 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --mojo-platform-channel-handle=7596 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --mojo-platform-channel-handle=7592 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --mojo-platform-channel-handle=5972 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --mojo-platform-channel-handle=12332 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --mojo-platform-channel-handle=9228 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5092 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=988 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1652 --field-trial-handle=1848,i,10339599011285159317,10249596809233511819,131072 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files\7-Zip\7zG.exe

"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\BeamNG Techdemo v1\" -ad -an -ai#7zMap6318:98:7zEvent19007

C:\Users\Admin\Desktop\BeamNG-Techdemo-0.3-setup.exe

"C:\Users\Admin\Desktop\BeamNG-Techdemo-0.3-setup.exe"

C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\getD3DXVer.exe

"C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\getD3DXVer.exe"

C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe

"C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe"

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Windows\System32\GamePanel.exe

"C:\Windows\System32\GamePanel.exe" 00000000001B02CE /startuptips

C:\Windows\System32\bcastdvr.exe

"C:\Windows\System32\bcastdvr.exe" -ServerName:Windows.Media.Capture.Internal.BroadcastDVRServer

C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe

"C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe"

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffb70299758,0x7ffb70299768,0x7ffb70299778

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1532 --field-trial-handle=1828,i,7878270552715927763,13879748764425141454,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1800 --field-trial-handle=1828,i,7878270552715927763,13879748764425141454,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2116 --field-trial-handle=1828,i,7878270552715927763,13879748764425141454,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2852 --field-trial-handle=1828,i,7878270552715927763,13879748764425141454,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2868 --field-trial-handle=1828,i,7878270552715927763,13879748764425141454,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3984 --field-trial-handle=1828,i,7878270552715927763,13879748764425141454,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4592 --field-trial-handle=1828,i,7878270552715927763,13879748764425141454,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4748 --field-trial-handle=1828,i,7878270552715927763,13879748764425141454,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4648 --field-trial-handle=1828,i,7878270552715927763,13879748764425141454,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4980 --field-trial-handle=1828,i,7878270552715927763,13879748764425141454,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5028 --field-trial-handle=1828,i,7878270552715927763,13879748764425141454,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=5008 --field-trial-handle=1828,i,7878270552715927763,13879748764425141454,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=4908 --field-trial-handle=1828,i,7878270552715927763,13879748764425141454,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=5084 --field-trial-handle=1828,i,7878270552715927763,13879748764425141454,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=3052 --field-trial-handle=1828,i,7878270552715927763,13879748764425141454,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=2216 --field-trial-handle=1828,i,7878270552715927763,13879748764425141454,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2972 --field-trial-handle=1828,i,7878270552715927763,13879748764425141454,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5244 --field-trial-handle=1828,i,7878270552715927763,13879748764425141454,131072 /prefetch:8

C:\Users\Admin\Desktop\BeamNG-Techdemo-0.3-setup.exe

"C:\Users\Admin\Desktop\BeamNG-Techdemo-0.3-setup.exe" "C:\Users\Admin\Desktop\BeamNG Techdemo.lnk"

C:\Users\Admin\Desktop\BeamNG-Techdemo-0.3-setup.exe

"C:\Users\Admin\Desktop\BeamNG-Techdemo-0.3-setup.exe"

C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\getD3DXVer.exe

C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\getD3DXVer.exe

C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\dxwebsetup.exe

C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\dxwebsetup.exe

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k netsvcs -s DsmSvc

C:\Windows\system32\srtasks.exe

C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2

C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe

"C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe"

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe

"C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe"

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5512.0.2108124293\1228303157" -parentBuildID 20221007134813 -prefsHandle 1716 -prefMapHandle 1708 -prefsLen 20747 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {09cbc881-f8d3-41c2-85e3-7c18ba9d623f} 5512 "\\.\pipe\gecko-crash-server-pipe.5512" 1796 1230eee6b58 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5512.1.1954917996\1373126811" -parentBuildID 20221007134813 -prefsHandle 2140 -prefMapHandle 2136 -prefsLen 20828 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f612e5b2-1523-4ffd-a759-fab9e0db9eac} 5512 "\\.\pipe\gecko-crash-server-pipe.5512" 2152 12303f71f58 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5512.2.1605984197\1398513565" -childID 1 -isForBrowser -prefsHandle 2896 -prefMapHandle 2892 -prefsLen 20931 -prefMapSize 233444 -jsInitHandle 1312 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c423b7d0-9bdb-4b51-a689-662e147f0f3f} 5512 "\\.\pipe\gecko-crash-server-pipe.5512" 2908 1230ee5c258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5512.3.1487659609\1259027333" -childID 2 -isForBrowser -prefsHandle 3600 -prefMapHandle 3596 -prefsLen 26109 -prefMapSize 233444 -jsInitHandle 1312 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {7f53f182-e9fc-49a3-9798-de6483f8da95} 5512 "\\.\pipe\gecko-crash-server-pipe.5512" 3604 12303f6ca58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5512.4.1160243286\147328781" -childID 3 -isForBrowser -prefsHandle 3972 -prefMapHandle 3968 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1312 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {be6ff4a0-9f9a-4c85-9e04-5062513fa814} 5512 "\\.\pipe\gecko-crash-server-pipe.5512" 3976 12314689d58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5512.5.2063821605\419609853" -childID 4 -isForBrowser -prefsHandle 4556 -prefMapHandle 4824 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1312 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b092b465-e508-4cde-a69e-d53d0eccf141} 5512 "\\.\pipe\gecko-crash-server-pipe.5512" 4856 12303f60158 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5512.6.148842378\139058042" -childID 5 -isForBrowser -prefsHandle 4972 -prefMapHandle 4976 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1312 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f3d19d07-0e01-41d3-81e0-af0194607d68} 5512 "\\.\pipe\gecko-crash-server-pipe.5512" 4768 12311c2cb58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5512.7.1410625740\1553046827" -childID 6 -isForBrowser -prefsHandle 5156 -prefMapHandle 5160 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1312 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {90016723-6180-4afd-b888-7657726e19ae} 5512 "\\.\pipe\gecko-crash-server-pipe.5512" 5148 12311c2d158 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5512.8.1299045166\284094888" -childID 7 -isForBrowser -prefsHandle 5616 -prefMapHandle 5612 -prefsLen 26328 -prefMapSize 233444 -jsInitHandle 1312 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {96a7b2ae-9adc-4c21-9d5b-39c389d2df41} 5512 "\\.\pipe\gecko-crash-server-pipe.5512" 5628 1231202a758 tab

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x320

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5512.9.1149672443\1342659970" -parentBuildID 20221007134813 -prefsHandle 4044 -prefMapHandle 4056 -prefsLen 26768 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f2132e81-d3c7-4b50-882a-20e65eddb7a3} 5512 "\\.\pipe\gecko-crash-server-pipe.5512" 4024 12316dae058 rdd

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5512.10.83185940\326645480" -parentBuildID 20221007134813 -sandboxingKind 1 -prefsHandle 5912 -prefMapHandle 5900 -prefsLen 26768 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9ab42f68-eb50-4403-9b3f-92f7a029cccc} 5512 "\\.\pipe\gecko-crash-server-pipe.5512" 4660 12316dafb58 utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5512.11.1945527028\825756615" -childID 8 -isForBrowser -prefsHandle 4884 -prefMapHandle 4740 -prefsLen 26768 -prefMapSize 233444 -jsInitHandle 1312 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6ee7bfcf-dec1-4e1f-a6f1-b9fe5a294c3b} 5512 "\\.\pipe\gecko-crash-server-pipe.5512" 4880 123169f1658 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="5512.12.1235906013\1448697715" -childID 9 -isForBrowser -prefsHandle 5984 -prefMapHandle 5988 -prefsLen 26768 -prefMapSize 233444 -jsInitHandle 1312 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {3f91bd4c-8ae4-4c67-9dd7-2587fa77684b} 5512 "\\.\pipe\gecko-crash-server-pipe.5512" 2672 12316d97258 tab

C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe

"C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe"

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe

"C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe"

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffb70299758,0x7ffb70299768,0x7ffb70299778

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1604 --field-trial-handle=1852,i,11775527509001294687,5349351551934990098,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1828 --field-trial-handle=1852,i,11775527509001294687,5349351551934990098,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2080 --field-trial-handle=1852,i,11775527509001294687,5349351551934990098,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2968 --field-trial-handle=1852,i,11775527509001294687,5349351551934990098,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2976 --field-trial-handle=1852,i,11775527509001294687,5349351551934990098,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4480 --field-trial-handle=1852,i,11775527509001294687,5349351551934990098,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4648 --field-trial-handle=1852,i,11775527509001294687,5349351551934990098,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4780 --field-trial-handle=1852,i,11775527509001294687,5349351551934990098,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4708 --field-trial-handle=1852,i,11775527509001294687,5349351551934990098,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5044 --field-trial-handle=1852,i,11775527509001294687,5349351551934990098,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5092 --field-trial-handle=1852,i,11775527509001294687,5349351551934990098,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=5488 --field-trial-handle=1852,i,11775527509001294687,5349351551934990098,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=5292 --field-trial-handle=1852,i,11775527509001294687,5349351551934990098,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=4680 --field-trial-handle=1852,i,11775527509001294687,5349351551934990098,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3088 --field-trial-handle=1852,i,11775527509001294687,5349351551934990098,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3056 --field-trial-handle=1852,i,11775527509001294687,5349351551934990098,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3112 --field-trial-handle=1852,i,11775527509001294687,5349351551934990098,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4652 --field-trial-handle=1852,i,11775527509001294687,5349351551934990098,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5640 --field-trial-handle=1852,i,11775527509001294687,5349351551934990098,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5664 --field-trial-handle=1852,i,11775527509001294687,5349351551934990098,131072 /prefetch:8

C:\Users\Admin\Downloads\SteamSetup.exe

"C:\Users\Admin\Downloads\SteamSetup.exe"

C:\Program Files (x86)\Steam\bin\steamservice.exe

"C:\Program Files (x86)\Steam\bin\steamservice.exe" /Install

C:\Program Files (x86)\Steam\steam.exe

"C:\Program Files (x86)\Steam\steam.exe"

C:\Program Files (x86)\Steam\steam.exe

"C:\Program Files (x86)\Steam\steam.exe"

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" "-lang=en_US" "-cachedir=C:\Users\Admin\AppData\Local\Steam\htmlcache" "-steampid=4336" "-buildid=1716584667" "-steamid=0" "-logdir=C:\Program Files (x86)\Steam\logs" "-uimode=7" "-startcount=0" "-userdatadir=C:\Users\Admin\AppData\Local\Steam\cefdata" "-steamuniverse=Public" "-realm=Global" "-clientui=C:\Program Files (x86)\Steam\clientui" "-steampath=C:\Program Files (x86)\Steam\steam.exe" "-launcher=0" --valve-enable-site-isolation --enable-smooth-scrolling --enable-direct-write "--log-file=C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-quick-menu "--disable-features=SpareRendererForSitePerProcess,DcheckIsFatal"

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=crashpad-handler /prefetch:7 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files (x86)\Steam\dumps" "--metrics-dir=C:\Users\Admin\AppData\Local\CEF\User Data" --url=https://crash.steampowered.com/submit --annotation=platform=win64 --annotation=product=cefwebhelper --annotation=version=1716584667 --initial-client-data=0x318,0x31c,0x320,0x2f4,0x324,0x7ffb5c5cee38,0x7ffb5c5cee48,0x7ffb5c5cee58

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1716584667 --steamid=0 --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=1496 --field-trial-handle=1580,i,16570800314561098850,16526808449901758083,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1716584667 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=1976 --field-trial-handle=1580,i,16570800314561098850,16526808449901758083,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:8

C:\Program Files (x86)\Steam\bin\gldriverquery64.exe

.\bin\gldriverquery64.exe

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1716584667 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=2284 --field-trial-handle=1580,i,16570800314561098850,16526808449901758083,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:8

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1716584667 --steamid=0 --first-renderer-process --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2736 --field-trial-handle=1580,i,16570800314561098850,16526808449901758083,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\gldriverquery.exe

.\bin\gldriverquery.exe

C:\Program Files (x86)\Steam\bin\vulkandriverquery64.exe

.\bin\vulkandriverquery64.exe

C:\Program Files (x86)\Steam\bin\vulkandriverquery.exe

.\bin\vulkandriverquery.exe

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1716584667 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3376 --field-trial-handle=1580,i,16570800314561098850,16526808449901758083,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1716584667 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3348 --field-trial-handle=1580,i,16570800314561098850,16526808449901758083,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1716584667 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=1752 --field-trial-handle=1580,i,16570800314561098850,16526808449901758083,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:8

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1716584667 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=1012 --field-trial-handle=1580,i,16570800314561098850,16526808449901758083,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1716584667 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=3396 --field-trial-handle=1580,i,16570800314561098850,16526808449901758083,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1716584667 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=3300 --field-trial-handle=1580,i,16570800314561098850,16526808449901758083,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1716584667 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=4044 --field-trial-handle=1580,i,16570800314561098850,16526808449901758083,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:8

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1716584667 --steamid=0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=3812 --field-trial-handle=1580,i,16570800314561098850,16526808449901758083,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1716584667 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=3024 --field-trial-handle=1580,i,16570800314561098850,16526808449901758083,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1716584667 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=3448 --field-trial-handle=1580,i,16570800314561098850,16526808449901758083,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1716584667 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=1404 --field-trial-handle=1580,i,16570800314561098850,16526808449901758083,131072 --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 www.curseforge.com udp
US 104.17.30.3:443 www.curseforge.com tcp
US 8.8.8.8:53 3.30.17.104.in-addr.arpa udp
US 8.8.8.8:53 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.0.8.0.8.0.8.0.ip6.arpa udp
US 8.8.8.8:53 static-beta.curseforge.com udp
US 8.8.8.8:53 media.forgecdn.net udp
US 104.17.30.3:443 www.curseforge.com udp
US 18.172.112.13:443 media.forgecdn.net tcp
DE 18.245.60.42:443 static-beta.curseforge.com tcp
DE 18.245.60.42:443 static-beta.curseforge.com tcp
DE 18.245.60.42:443 static-beta.curseforge.com tcp
DE 18.245.60.42:443 static-beta.curseforge.com tcp
DE 18.245.60.42:443 static-beta.curseforge.com tcp
DE 18.245.60.42:443 static-beta.curseforge.com tcp
US 8.8.8.8:53 13.112.172.18.in-addr.arpa udp
US 8.8.8.8:53 42.60.245.18.in-addr.arpa udp
US 8.8.8.8:53 85.82.161.3.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 18.172.112.13:443 media.forgecdn.net udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
GB 172.217.169.74:443 content-autofill.googleapis.com tcp
US 8.8.8.8:53 content.overwolf.com udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 www.clarity.ms udp
DE 18.245.86.78:443 content.overwolf.com tcp
US 18.244.18.32:443 sb.scorecardresearch.com tcp
US 13.107.246.64:443 www.clarity.ms tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 analyticssec.overwolf.com udp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
US 18.244.18.56:443 analyticssec.overwolf.com tcp
US 13.107.246.64:443 www.clarity.ms tcp
US 8.8.8.8:53 bat.bing.com udp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 static.ads-twitter.com udp
US 204.79.197.237:443 bat.bing.com tcp
US 8.8.8.8:53 s.nitropay.com udp
FR 199.232.168.157:443 static.ads-twitter.com tcp
GB 163.70.151.21:443 connect.facebook.net tcp
US 104.18.3.78:443 s.nitropay.com tcp
US 8.8.8.8:53 analytics.twitter.com udp
US 8.8.8.8:53 t.co udp
US 104.244.42.3:443 analytics.twitter.com tcp
PL 93.184.221.165:443 t.co tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 74.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 2.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 104.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 78.86.245.18.in-addr.arpa udp
US 8.8.8.8:53 64.246.107.13.in-addr.arpa udp
US 8.8.8.8:53 32.18.244.18.in-addr.arpa udp
US 8.8.8.8:53 226.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 56.18.244.18.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 157.168.232.199.in-addr.arpa udp
US 8.8.8.8:53 21.151.70.163.in-addr.arpa udp
US 8.8.8.8:53 78.3.18.104.in-addr.arpa udp
US 8.8.8.8:53 3.42.244.104.in-addr.arpa udp
US 8.8.8.8:53 165.221.184.93.in-addr.arpa udp
US 8.8.8.8:53 14.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 c.clarity.ms udp
GB 163.70.151.21:443 connect.facebook.net udp
IE 68.219.88.97:443 c.clarity.ms tcp
US 8.8.8.8:53 196.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 97.88.219.68.in-addr.arpa udp
US 8.8.8.8:53 wrappers.geoedge.be udp
US 8.8.8.8:53 rumcdn.geoedge.be udp
US 8.8.8.8:53 tracker.nitropay.com udp
US 18.172.112.75:443 wrappers.geoedge.be tcp
US 8.8.8.8:53 btloader.com udp
US 8.8.8.8:53 c.bing.com udp
DE 108.138.26.75:443 rumcdn.geoedge.be tcp
US 104.22.75.216:443 btloader.com tcp
US 35.244.144.25:443 tracker.nitropay.com tcp
DE 108.138.26.75:443 rumcdn.geoedge.be tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 104.18.3.78:443 s.nitropay.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
US 8.8.8.8:53 apis.google.com udp
GB 172.217.16.238:443 apis.google.com tcp
US 8.8.8.8:53 195.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 75.112.172.18.in-addr.arpa udp
US 8.8.8.8:53 75.26.138.108.in-addr.arpa udp
US 8.8.8.8:53 25.144.244.35.in-addr.arpa udp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 216.75.22.104.in-addr.arpa udp
US 8.8.8.8:53 238.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com tcp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 46.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 99.201.58.216.in-addr.arpa udp
GB 172.217.169.46:443 play.google.com udp
US 8.8.8.8:53 consent.google.com udp
GB 142.250.187.238:443 consent.google.com tcp
US 8.8.8.8:53 www.reddit.com udp
US 151.101.1.140:443 www.reddit.com tcp
US 151.101.1.140:443 www.reddit.com tcp
US 8.8.8.8:53 w3-reporting-nel.reddit.com udp
US 151.101.1.140:443 w3-reporting-nel.reddit.com tcp
US 8.8.8.8:53 140.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 www.redditstatic.com udp
US 151.101.1.140:443 www.redditstatic.com tcp
US 151.101.1.140:443 www.redditstatic.com tcp
US 8.8.8.8:53 w3-reporting.reddit.com udp
US 8.8.8.8:53 styles.redditmedia.com udp
US 8.8.8.8:53 ad-delivery.net udp
US 151.101.1.140:443 styles.redditmedia.com tcp
US 104.26.2.70:443 ad-delivery.net tcp
US 8.8.8.8:53 preview.redd.it udp
US 151.101.1.140:443 preview.redd.it tcp
US 151.101.1.140:443 preview.redd.it tcp
US 151.101.1.140:443 preview.redd.it tcp
US 151.101.1.140:443 preview.redd.it tcp
US 151.101.1.140:443 preview.redd.it tcp
US 151.101.1.140:443 preview.redd.it tcp
US 8.8.8.8:53 70.2.26.104.in-addr.arpa udp
US 8.8.8.8:53 gql-realtime.reddit.com udp
US 107.22.1.94:443 gql-realtime.reddit.com tcp
GB 172.217.169.74:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 alb.reddit.com udp
US 8.8.8.8:53 external-preview.redd.it udp
US 8.8.8.8:53 b.thumbs.redditmedia.com udp
US 151.101.1.140:443 b.thumbs.redditmedia.com tcp
US 8.8.8.8:53 94.1.22.107.in-addr.arpa udp
US 8.8.8.8:53 accounts.google.com udp
NL 142.250.27.84:443 accounts.google.com tcp
NL 142.250.27.84:443 accounts.google.com udp
NL 142.250.27.84:443 accounts.google.com udp
US 8.8.8.8:53 84.27.250.142.in-addr.arpa udp
US 8.8.8.8:53 o418887.ingest.sentry.io udp
US 34.120.195.249:443 o418887.ingest.sentry.io tcp
US 8.8.8.8:53 249.195.120.34.in-addr.arpa udp
US 8.8.8.8:53 www.beamng.com udp
DE 116.202.226.165:443 www.beamng.com tcp
DE 116.202.226.165:443 www.beamng.com tcp
DE 116.202.226.165:443 www.beamng.com tcp
DE 116.202.226.165:443 www.beamng.com tcp
DE 116.202.226.165:443 www.beamng.com tcp
DE 116.202.226.165:443 www.beamng.com tcp
US 8.8.8.8:53 cdnjs.cloudflare.com udp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 8.8.8.8:53 apps.identrust.com udp
BE 2.17.107.226:80 apps.identrust.com tcp
US 8.8.8.8:53 media-cdn.beamng.com udp
US 8.8.8.8:53 media.beamng.com udp
DE 148.251.47.138:443 media.beamng.com tcp
US 2.22.144.12:443 media-cdn.beamng.com tcp
DE 148.251.47.138:443 media.beamng.com tcp
US 8.8.8.8:53 165.226.202.116.in-addr.arpa udp
US 8.8.8.8:53 202.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 14.25.17.104.in-addr.arpa udp
US 8.8.8.8:53 226.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 138.47.251.148.in-addr.arpa udp
US 8.8.8.8:53 12.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 www.mediafire.com udp
US 104.16.114.74:80 www.mediafire.com tcp
US 104.16.114.74:80 www.mediafire.com tcp
US 8.8.8.8:53 the.gatekeeperconsent.com udp
US 172.67.199.186:443 the.gatekeeperconsent.com tcp
GB 172.217.169.67:443 beacons.gcp.gvt2.com tcp
GB 172.217.169.67:443 beacons.gcp.gvt2.com tcp
GB 172.217.169.67:443 beacons.gcp.gvt2.com tcp
US 104.22.75.216:443 btloader.com tcp
US 8.8.8.8:53 www.ezojs.com udp
US 8.8.8.8:53 privacy.gatekeeperconsent.com udp
US 8.8.8.8:53 translate.google.com udp
US 8.8.8.8:53 download2391.mediafire.com udp
GB 142.250.187.238:80 translate.google.com tcp
US 8.8.8.8:53 74.114.16.104.in-addr.arpa udp
US 8.8.8.8:53 186.199.67.172.in-addr.arpa udp
US 8.8.8.8:53 67.169.217.172.in-addr.arpa udp
US 104.21.63.106:80 www.ezojs.com tcp
US 172.67.199.186:443 privacy.gatekeeperconsent.com tcp
US 8.8.8.8:53 static.mediafire.com udp
US 8.8.8.8:53 blog.mediafire.com udp
US 8.8.8.8:53 fast.io udp
US 8.8.8.8:53 mediafire.zendesk.com udp
US 8.8.8.8:53 api.btloader.com udp
US 104.16.113.74:80 blog.mediafire.com tcp
US 104.16.113.74:80 blog.mediafire.com tcp
US 130.211.23.194:443 api.btloader.com tcp
US 8.8.8.8:53 g.ezoic.net udp
US 8.8.8.8:53 twitter.com udp
US 8.8.8.8:53 www.facebook.com udp
FR 13.39.145.251:80 g.ezoic.net tcp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 8.8.8.8:53 cdn.amplitude.com udp
US 104.16.79.73:443 static.cloudflareinsights.com tcp
DE 18.245.86.101:443 cdn.amplitude.com tcp
US 8.8.8.8:53 cdn.otnolatrnup.com udp
US 8.8.8.8:53 api.amplitude.com udp
US 8.8.8.8:53 www.mediafiredls.com udp
US 104.16.53.110:443 cdn.otnolatrnup.com tcp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 104.26.3.173:443 www.mediafiredls.com tcp
US 44.240.109.3:443 api.amplitude.com tcp
BE 74.125.71.156:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 106.63.21.104.in-addr.arpa udp
US 8.8.8.8:53 74.113.16.104.in-addr.arpa udp
US 8.8.8.8:53 194.23.211.130.in-addr.arpa udp
US 8.8.8.8:53 251.145.39.13.in-addr.arpa udp
US 8.8.8.8:53 73.79.16.104.in-addr.arpa udp
US 8.8.8.8:53 101.86.245.18.in-addr.arpa udp
US 8.8.8.8:53 110.53.16.104.in-addr.arpa udp
US 8.8.8.8:53 156.71.125.74.in-addr.arpa udp
US 8.8.8.8:53 6.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 173.3.26.104.in-addr.arpa udp
US 8.8.8.8:53 go.ezodn.com udp
US 130.211.23.194:443 api.btloader.com udp
US 172.67.142.121:80 go.ezodn.com tcp
US 172.67.142.121:80 go.ezodn.com tcp
US 172.67.142.121:80 go.ezodn.com tcp
US 172.67.199.186:443 privacy.gatekeeperconsent.com udp
US 172.67.199.186:443 privacy.gatekeeperconsent.com udp
US 8.8.8.8:53 translate.googleapis.com udp
GB 216.58.204.74:443 translate.googleapis.com tcp
US 8.8.8.8:53 g.ezodn.com udp
US 172.67.199.186:443 privacy.gatekeeperconsent.com udp
US 188.114.97.2:443 g.ezodn.com tcp
GB 142.250.200.34:80 securepubads.g.doubleclick.net tcp
US 8.8.8.8:53 translate-pa.googleapis.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
US 8.8.8.8:53 bshr.ezodn.com udp
US 172.67.142.121:443 bshr.ezodn.com tcp
US 172.67.142.121:443 bshr.ezodn.com tcp
US 8.8.8.8:53 3.109.240.44.in-addr.arpa udp
US 8.8.8.8:53 121.142.67.172.in-addr.arpa udp
US 8.8.8.8:53 74.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 2.97.114.188.in-addr.arpa udp
US 172.67.142.121:443 bshr.ezodn.com udp
US 8.8.8.8:53 analytics.google.com udp
BE 74.125.71.156:443 stats.g.doubleclick.net udp
US 8.8.8.8:53 otnolatrnup.com udp
GB 142.250.187.206:443 analytics.google.com tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 ad.crwdcntrl.net udp
DE 65.9.66.68:443 tags.crwdcntrl.net tcp
IE 34.253.110.95:443 ad.crwdcntrl.net tcp
IE 52.213.38.247:443 ad.crwdcntrl.net tcp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
GB 142.250.187.238:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 206.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 68.66.9.65.in-addr.arpa udp
US 8.8.8.8:53 95.110.253.34.in-addr.arpa udp
US 8.8.8.8:53 247.38.213.52.in-addr.arpa udp
US 172.67.142.121:443 bshr.ezodn.com udp
US 8.8.8.8:53 script.4dex.io udp
US 8.8.8.8:53 hbopenbid.pubmatic.com udp
US 8.8.8.8:53 tlx.3lift.com udp
US 8.8.8.8:53 hb-api.omnitagjs.com udp
US 8.8.8.8:53 ghb.adtelligent.com udp
US 8.8.8.8:53 htlb.casalemedia.com udp
US 8.8.8.8:53 hb.yellowblue.io udp
US 8.8.8.8:53 onetag-sys.com udp
US 8.8.8.8:53 prebid.a-mo.net udp
US 104.26.9.169:443 script.4dex.io tcp
US 8.8.8.8:53 prebid.smilewanted.com udp
US 8.8.8.8:53 hb.minutemedia-prebid.com udp
FR 13.39.145.251:443 g.ezoic.net tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
US 107.151.11.18:443 ghb.adtelligent.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 104.18.36.155:443 htlb.casalemedia.com tcp
DE 3.124.64.248:443 tlx.3lift.com tcp
DE 51.89.9.253:443 onetag-sys.com tcp
US 104.22.30.209:443 prebid.smilewanted.com tcp
US 104.22.30.209:443 prebid.smilewanted.com tcp
US 104.22.30.209:443 prebid.smilewanted.com tcp
US 104.22.30.209:443 prebid.smilewanted.com tcp
US 104.22.30.209:443 prebid.smilewanted.com tcp
US 104.22.30.209:443 prebid.smilewanted.com tcp
IE 52.48.2.3:443 hb.minutemedia-prebid.com tcp
DE 52.222.236.91:443 hb.yellowblue.io tcp
NL 145.40.97.67:443 prebid.a-mo.net tcp
US 104.26.9.169:443 script.4dex.io tcp
US 8.8.8.8:53 cadmus.script.ac udp
US 104.18.23.145:443 cadmus.script.ac tcp
US 8.8.8.8:53 ghb1.adtelligent.com udp
US 104.18.36.155:443 htlb.casalemedia.com udp
US 8.8.8.8:53 169.9.26.104.in-addr.arpa udp
DE 51.89.9.253:443 onetag-sys.com udp
US 8.8.8.8:53 77.190.64.185.in-addr.arpa udp
US 8.8.8.8:53 151.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 155.36.18.104.in-addr.arpa udp
US 8.8.8.8:53 248.64.124.3.in-addr.arpa udp
US 8.8.8.8:53 253.9.89.51.in-addr.arpa udp
US 8.8.8.8:53 209.30.22.104.in-addr.arpa udp
US 8.8.8.8:53 67.97.40.145.in-addr.arpa udp
US 8.8.8.8:53 91.236.222.52.in-addr.arpa udp
US 8.8.8.8:53 3.2.48.52.in-addr.arpa udp
US 8.8.8.8:53 18.11.151.107.in-addr.arpa udp
US 23.227.151.194:443 ghb1.adtelligent.com tcp
FR 13.39.145.251:80 g.ezoic.net tcp
US 8.8.8.8:53 58f562c9ce06e47266e8578aac9c9943.safeframe.googlesyndication.com udp
GB 172.217.169.65:443 58f562c9ce06e47266e8578aac9c9943.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 cdn.ampproject.org udp
FR 13.39.145.251:80 g.ezoic.net tcp
FR 13.39.145.251:80 g.ezoic.net tcp
FR 13.39.145.251:80 g.ezoic.net tcp
US 172.67.142.121:80 bshr.ezodn.com tcp
FR 13.39.145.251:80 g.ezoic.net tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
GB 142.250.187.193:443 cdn.ampproject.org tcp
US 8.8.8.8:53 adssettings.google.com udp
GB 142.250.187.193:443 cdn.ampproject.org tcp
US 8.8.8.8:53 194.151.227.23.in-addr.arpa udp
US 8.8.8.8:53 145.23.18.104.in-addr.arpa udp
US 8.8.8.8:53 65.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 225.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 193.187.250.142.in-addr.arpa udp
GB 142.250.187.206:443 analytics.google.com udp
US 104.16.53.110:443 otnolatrnup.com udp
US 199.91.155.132:80 download2391.mediafire.com tcp
US 199.91.155.132:80 download2391.mediafire.com tcp
GB 142.250.179.226:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 132.155.91.199.in-addr.arpa udp
US 104.16.53.110:80 otnolatrnup.com tcp
US 104.16.53.110:80 otnolatrnup.com tcp
GB 216.58.204.74:443 translate-pa.googleapis.com udp
US 8.8.8.8:53 woreppercomming.com udp
US 3.161.82.124:443 woreppercomming.com tcp
US 8.8.8.8:53 www.ovardu.com udp
US 104.21.96.72:443 www.ovardu.com tcp
US 8.8.8.8:53 www.opera.com udp
DE 3.120.50.71:443 www.opera.com tcp
US 8.8.8.8:53 id.a-mx.com udp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 gum.criteo.com udp
US 8.8.8.8:53 id.hadron.ad.gt udp
US 8.8.8.8:53 id5-sync.com udp
US 8.8.8.8:53 id.crwdcntrl.net udp
US 8.8.8.8:53 match.adsrvr.org udp
DE 79.127.216.47:443 id.a-mx.com tcp
DE 3.71.149.231:443 ups.analytics.yahoo.com tcp
US 8.8.8.8:53 csync.smilewanted.com udp
US 8.8.8.8:53 eb2.3lift.com udp
US 52.223.40.198:80 match.adsrvr.org tcp
US 8.8.8.8:53 ads.pubmatic.com udp
US 8.8.8.8:53 visitor.omnitagjs.com udp
DE 162.19.138.119:443 id5-sync.com tcp
US 8.8.8.8:53 js-sec.indexww.com udp
US 8.8.8.8:53 s.console.adtarget.com.tr udp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 ads.us.e-planning.net udp
US 172.67.23.234:443 id.hadron.ad.gt tcp
US 104.18.38.76:443 js-sec.indexww.com tcp
DE 142.132.249.184:443 s.console.adtarget.com.tr tcp
NL 193.3.178.3:443 ads.us.e-planning.net tcp
US 13.248.245.213:443 eb2.3lift.com tcp
FR 185.255.84.152:443 visitor.omnitagjs.com tcp
GB 23.36.248.193:443 ads.pubmatic.com tcp
GB 23.36.248.193:443 ads.pubmatic.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 124.82.161.3.in-addr.arpa udp
US 8.8.8.8:53 72.96.21.104.in-addr.arpa udp
US 8.8.8.8:53 71.50.120.3.in-addr.arpa udp
US 8.8.8.8:53 231.149.71.3.in-addr.arpa udp
US 8.8.8.8:53 47.216.127.79.in-addr.arpa udp
US 8.8.8.8:53 198.40.223.52.in-addr.arpa udp
US 8.8.8.8:53 234.23.67.172.in-addr.arpa udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 119.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 c3.a-mo.net udp
DE 79.127.216.47:443 c3.a-mo.net tcp
US 8.8.8.8:53 cdn-production-opera-website.operacdn.com udp
US 8.8.8.8:53 www.googleoptimize.com udp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
GB 172.217.16.238:443 www.googleoptimize.com tcp
US 8.8.8.8:53 secure.adnxs.com udp
US 8.8.8.8:53 assets.a-mo.net udp
DE 37.252.171.85:443 secure.adnxs.com tcp
DE 37.252.171.85:443 secure.adnxs.com tcp
US 104.19.158.19:443 assets.a-mo.net tcp
US 8.8.8.8:53 lb.eu-1-id5-sync.com udp
US 8.8.8.8:53 gum.aidemsrv.com udp
US 8.8.8.8:53 static.smilewanted.com udp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
US 104.17.43.93:443 gum.aidemsrv.com tcp
US 8.8.8.8:53 rtb.mfadsrvr.com udp
US 8.8.8.8:53 pixel-eu.rubiconproject.com udp
US 8.8.8.8:53 sync.mathtag.com udp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 ads.stickyadstv.com udp
US 8.8.8.8:53 pixel.rubiconproject.com udp
US 8.8.8.8:53 cs.admanmedia.com udp
US 8.8.8.8:53 t.adx.opera.com udp
US 8.8.8.8:53 ssbsync-global.smartadserver.com udp
US 8.8.8.8:53 image8.pubmatic.com udp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
NL 89.149.193.84:443 ssbsync-global.smartadserver.com tcp
US 80.77.87.161:443 cs.admanmedia.com tcp
FR 154.54.250.81:443 ads.stickyadstv.com tcp
US 74.121.140.211:443 sync.mathtag.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
GB 185.64.191.214:443 image8.pubmatic.com tcp
NL 69.173.156.148:443 pixel.rubiconproject.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
DE 35.156.10.230:443 rtb.mfadsrvr.com tcp
US 8.8.8.8:53 76.38.18.104.in-addr.arpa udp
US 8.8.8.8:53 213.245.248.13.in-addr.arpa udp
US 8.8.8.8:53 3.178.3.193.in-addr.arpa udp
US 8.8.8.8:53 152.84.255.185.in-addr.arpa udp
US 8.8.8.8:53 184.249.132.142.in-addr.arpa udp
US 8.8.8.8:53 193.248.36.23.in-addr.arpa udp
US 8.8.8.8:53 120.66.68.104.in-addr.arpa udp
US 8.8.8.8:53 85.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 19.158.19.104.in-addr.arpa udp
US 8.8.8.8:53 93.43.17.104.in-addr.arpa udp
US 8.8.8.8:53 sync.smartadserver.com udp
US 8.8.8.8:53 spl.zeotap.com udp
NL 81.17.55.173:443 sync.smartadserver.com tcp
US 104.22.51.98:443 spl.zeotap.com tcp
US 8.8.8.8:53 secure-assets.rubiconproject.com udp
BE 104.68.78.171:443 secure-assets.rubiconproject.com tcp
US 8.8.8.8:53 ssc-cms.33across.com udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 player.aniview.com udp
US 67.202.105.21:443 ssc-cms.33across.com tcp
GB 172.217.169.2:443 cm.g.doubleclick.net tcp
US 8.8.8.8:53 eus.rubiconproject.com udp
US 2.22.144.22:443 player.aniview.com tcp
US 8.8.8.8:53 ssbsync.smartadserver.com udp
US 8.8.8.8:53 ice.360yield.com udp
BE 104.90.26.20:443 eus.rubiconproject.com tcp
US 8.8.8.8:53 image6.pubmatic.com udp
FR 149.202.238.100:443 ssbsync.smartadserver.com tcp
IE 52.213.20.15:443 ice.360yield.com tcp
NL 198.47.127.19:443 image6.pubmatic.com tcp
US 8.8.8.8:53 dis.criteo.com udp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 creativecdn.com udp
US 8.8.8.8:53 sync.1rx.io udp
US 8.8.8.8:53 api-2-0.spot.im udp
US 52.223.40.198:443 match.adsrvr.org tcp
US 8.8.8.8:53 match.prod.bidr.io udp
US 8.8.8.8:53 b1sync.zemanta.com udp
NL 178.250.1.9:443 dis.criteo.com tcp
IE 52.213.189.168:443 match.prod.bidr.io tcp
US 50.31.142.255:443 b1sync.zemanta.com tcp
NL 185.184.8.90:443 creativecdn.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
DE 18.245.31.128:443 api-2-0.spot.im tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 50.31.142.255:443 b1sync.zemanta.com tcp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
DE 18.245.31.128:443 api-2-0.spot.im tcp
DE 35.156.10.230:443 rtb.mfadsrvr.com tcp
US 8.8.8.8:53 u.openx.net udp
US 54.174.231.237:443 sync.srv.stackadapt.com tcp
US 34.98.64.218:443 u.openx.net tcp
US 8.8.8.8:53 84.193.149.89.in-addr.arpa udp
US 8.8.8.8:53 81.250.54.154.in-addr.arpa udp
US 8.8.8.8:53 214.191.64.185.in-addr.arpa udp
US 8.8.8.8:53 8.213.145.82.in-addr.arpa udp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 161.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 230.10.156.35.in-addr.arpa udp
US 8.8.8.8:53 211.140.121.74.in-addr.arpa udp
US 8.8.8.8:53 173.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 98.51.22.104.in-addr.arpa udp
US 8.8.8.8:53 171.78.68.104.in-addr.arpa udp
US 8.8.8.8:53 2.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 21.105.202.67.in-addr.arpa udp
US 8.8.8.8:53 22.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 20.26.90.104.in-addr.arpa udp
US 8.8.8.8:53 100.238.202.149.in-addr.arpa udp
US 8.8.8.8:53 15.20.213.52.in-addr.arpa udp
US 8.8.8.8:53 19.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 90.8.184.185.in-addr.arpa udp
US 8.8.8.8:53 168.189.213.52.in-addr.arpa udp
US 8.8.8.8:53 255.142.31.50.in-addr.arpa udp
US 8.8.8.8:53 117.174.228.46.in-addr.arpa udp
US 8.8.8.8:53 91.149.214.35.in-addr.arpa udp
US 8.8.8.8:53 218.64.98.34.in-addr.arpa udp
US 8.8.8.8:53 128.31.245.18.in-addr.arpa udp
US 34.98.64.218:443 u.openx.net udp
US 8.8.8.8:53 jadserve.postrelease.com udp
US 8.8.8.8:53 ap.lijit.com udp
US 8.8.8.8:53 sync.targeting.unrulymedia.com udp
US 8.8.8.8:53 ads.avads.net udp
US 52.25.68.82:443 jadserve.postrelease.com tcp
US 80.77.87.161:443 cs.admanmedia.com tcp
IE 34.254.218.2:443 ap.lijit.com tcp
IE 34.254.218.2:443 ap.lijit.com tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
US 8.8.8.8:53 cs-server-s2s.yellowblue.io udp
US 34.128.133.112:443 ads.avads.net tcp
US 8.8.8.8:53 id.rlcdn.com udp
US 35.244.174.68:443 id.rlcdn.com tcp
US 34.197.100.197:443 cs-server-s2s.yellowblue.io tcp
US 8.8.8.8:53 bttrack.com udp
US 192.132.33.67:443 bttrack.com tcp
US 8.8.8.8:53 cm.adform.net udp
DK 37.157.6.232:443 cm.adform.net tcp
US 8.8.8.8:53 us.shb-sync.com udp
US 8.2.110.33:443 us.shb-sync.com tcp
US 8.8.8.8:53 112.133.128.34.in-addr.arpa udp
US 8.8.8.8:53 68.174.244.35.in-addr.arpa udp
US 8.8.8.8:53 2.218.254.34.in-addr.arpa udp
US 8.8.8.8:53 82.68.25.52.in-addr.arpa udp
US 8.8.8.8:53 67.33.132.192.in-addr.arpa udp
US 8.8.8.8:53 197.100.197.34.in-addr.arpa udp
US 8.8.8.8:53 232.6.157.37.in-addr.arpa udp
US 8.8.8.8:53 237.231.174.54.in-addr.arpa udp
US 8.8.8.8:53 s.ad.smaato.net udp
DE 13.32.27.108:443 s.ad.smaato.net tcp
US 34.128.133.112:443 ads.avads.net udp
US 8.8.8.8:53 33.110.2.8.in-addr.arpa udp
US 8.8.8.8:53 108.27.32.13.in-addr.arpa udp
GB 172.217.169.2:443 cm.g.doubleclick.net udp
US 8.8.8.8:53 px.ads.linkedin.com udp
US 8.8.8.8:53 pr-bh.ybp.yahoo.com udp
US 54.174.231.237:443 sync.srv.stackadapt.com tcp
US 13.107.42.14:443 px.ads.linkedin.com tcp
US 54.174.231.237:443 sync.srv.stackadapt.com tcp
IE 34.249.60.18:443 pr-bh.ybp.yahoo.com tcp
US 8.8.8.8:53 s.amazon-adsystem.com udp
US 8.8.8.8:53 ssum-sec.casalemedia.com udp
US 52.46.130.91:443 s.amazon-adsystem.com tcp
US 8.8.8.8:53 18.60.249.34.in-addr.arpa udp
US 8.8.8.8:53 14.42.107.13.in-addr.arpa udp
US 8.8.8.8:53 s.e-planning.net udp
NL 193.3.178.1:443 s.e-planning.net tcp
US 8.8.8.8:53 cookies.nextmillmedia.com udp
US 8.8.8.8:53 u-ams03.e-planning.net udp
NL 35.214.149.91:443 x.bidswitch.net tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
US 8.8.8.8:53 ssum.casalemedia.com udp
US 8.8.8.8:53 dsum-sec.casalemedia.com udp
US 8.8.8.8:53 euexchangesync.digitaleast.mobi udp
US 8.8.8.8:53 cm.adgrx.com udp
US 8.8.8.8:53 c1.adform.net udp
US 8.8.8.8:53 pixel-sync.sitescout.com udp
US 8.8.8.8:53 cdn.indexww.com udp
US 107.20.43.192:443 cookies.nextmillmedia.com tcp
NL 193.3.178.4:443 u-ams03.e-planning.net tcp
IE 54.217.19.5:443 cm.adgrx.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
US 34.95.81.168:443 euexchangesync.digitaleast.mobi tcp
DK 37.157.2.228:443 c1.adform.net tcp
US 8.8.8.8:53 91.130.46.52.in-addr.arpa udp
US 8.8.8.8:53 1.178.3.193.in-addr.arpa udp
US 8.8.8.8:53 4.178.3.193.in-addr.arpa udp
US 8.8.8.8:53 192.43.20.107.in-addr.arpa udp
US 8.8.8.8:53 5.19.217.54.in-addr.arpa udp
US 8.8.8.8:53 150.216.36.34.in-addr.arpa udp
US 8.8.8.8:53 168.81.95.34.in-addr.arpa udp
US 8.8.8.8:53 228.2.157.37.in-addr.arpa udp
US 8.8.8.8:53 aax-eu.amazon-adsystem.com udp
IE 52.94.222.140:443 aax-eu.amazon-adsystem.com tcp
US 8.8.8.8:53 simage2.pubmatic.com udp
NL 198.47.127.205:443 simage2.pubmatic.com tcp
US 8.8.8.8:53 cms.quantserve.com udp
DE 91.228.74.244:443 cms.quantserve.com tcp
US 8.8.8.8:53 dsp.nrich.ai udp
US 8.8.8.8:53 image2.pubmatic.com udp
FR 51.255.68.171:443 dsp.nrich.ai tcp
US 8.8.8.8:53 140.222.94.52.in-addr.arpa udp
US 8.8.8.8:53 205.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 244.74.228.91.in-addr.arpa udp
US 8.8.8.8:53 171.68.255.51.in-addr.arpa udp
US 8.8.8.8:53 dsp.adfarm1.adition.com udp
DE 85.114.159.93:443 dsp.adfarm1.adition.com tcp
US 8.8.8.8:53 ad.mrtnsvr.com udp
US 34.102.163.6:443 ad.mrtnsvr.com tcp
US 34.102.163.6:443 ad.mrtnsvr.com tcp
US 8.8.8.8:53 sync-tm.everesttech.net udp
US 151.101.2.49:443 sync-tm.everesttech.net tcp
US 8.8.8.8:53 233.38.18.104.in-addr.arpa udp
US 8.8.8.8:53 93.159.114.85.in-addr.arpa udp
US 8.8.8.8:53 6.163.102.34.in-addr.arpa udp
IE 52.213.189.168:443 match.prod.bidr.io tcp
US 8.8.8.8:53 p.rfihub.com udp
NL 193.0.160.131:443 p.rfihub.com tcp
US 8.8.8.8:53 csync.loopme.me udp
US 8.8.8.8:53 bh.contextweb.com udp
NL 35.214.139.208:443 csync.loopme.me tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
US 8.8.8.8:53 d5p.de17a.com udp
SE 213.155.156.167:443 d5p.de17a.com tcp
US 8.8.8.8:53 rtb-csync.smartadserver.com udp
NL 81.17.55.173:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 cm-supply-web.gammaplatform.com udp
SG 35.186.154.107:443 cm-supply-web.gammaplatform.com tcp
US 8.8.8.8:53 ipac.ctnsnet.com udp
US 35.186.193.173:443 ipac.ctnsnet.com tcp
US 8.8.8.8:53 49.2.101.151.in-addr.arpa udp
US 8.8.8.8:53 131.160.0.193.in-addr.arpa udp
US 8.8.8.8:53 208.139.214.35.in-addr.arpa udp
US 8.8.8.8:53 131.169.93.208.in-addr.arpa udp
US 8.8.8.8:53 167.156.155.213.in-addr.arpa udp
SG 35.186.154.107:443 cm-supply-web.gammaplatform.com tcp
US 8.8.8.8:53 core.iprom.net udp
SI 195.5.165.20:443 core.iprom.net tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
US 8.8.8.8:53 sync.crwdcntrl.net udp
US 8.8.8.8:53 cr.frontend.weborama.fr udp
US 8.8.8.8:53 mwzeom.zeotap.com udp
US 8.8.8.8:53 um.simpli.fi udp
US 34.111.129.221:443 cr.frontend.weborama.fr tcp
NL 35.204.74.118:443 um.simpli.fi tcp
US 8.8.8.8:53 uipglob.semasio.net udp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
US 8.8.8.8:53 pubmatic-match.dotomi.com udp
US 8.8.8.8:53 sync.aniview.com udp
US 8.8.8.8:53 ad.turn.com udp
DK 77.243.51.121:443 uipglob.semasio.net tcp
US 8.8.8.8:53 match.adsby.bidtheatre.com udp
NL 89.207.16.201:443 pubmatic-match.dotomi.com tcp
NL 46.228.164.11:443 ad.turn.com tcp
US 96.46.186.182:443 sync.aniview.com tcp
NL 188.166.17.21:443 match.adsby.bidtheatre.com tcp
US 8.8.8.8:53 173.193.186.35.in-addr.arpa udp
US 8.8.8.8:53 20.165.5.195.in-addr.arpa udp
US 8.8.8.8:53 118.74.204.35.in-addr.arpa udp
US 8.8.8.8:53 221.129.111.34.in-addr.arpa udp
DE 79.127.216.47:443 c3.a-mo.net tcp
US 8.8.8.8:53 rtb.openx.net udp
US 8.8.8.8:53 image4.pubmatic.com udp
US 8.8.8.8:53 ads.betweendigital.com udp
US 35.186.253.211:443 rtb.openx.net tcp
US 8.8.8.8:53 sync.a-mo.net udp
NL 198.47.127.20:443 image4.pubmatic.com tcp
NL 188.42.189.231:443 ads.betweendigital.com tcp
NL 145.40.97.67:443 sync.a-mo.net tcp
NL 145.40.97.67:443 sync.a-mo.net tcp
NL 145.40.97.67:443 sync.a-mo.net tcp
US 8.8.8.8:53 i.liadm.com udp
US 34.231.116.105:443 i.liadm.com tcp
US 8.8.8.8:53 201.16.207.89.in-addr.arpa udp
US 8.8.8.8:53 121.51.243.77.in-addr.arpa udp
US 8.8.8.8:53 11.164.228.46.in-addr.arpa udp
US 8.8.8.8:53 21.17.166.188.in-addr.arpa udp
US 8.8.8.8:53 182.186.46.96.in-addr.arpa udp
US 8.8.8.8:53 211.253.186.35.in-addr.arpa udp
US 8.8.8.8:53 20.127.47.198.in-addr.arpa udp
US 8.8.8.8:53 231.189.42.188.in-addr.arpa udp
US 34.111.129.221:443 cr.frontend.weborama.fr udp
US 34.95.81.168:443 euexchangesync.digitaleast.mobi udp
US 8.8.8.8:53 sync.adotmob.com udp
US 8.8.8.8:53 a.tribalfusion.com udp
FR 45.137.176.88:443 sync.adotmob.com tcp
US 104.18.25.173:443 a.tribalfusion.com tcp
GB 185.83.71.234:443 sync.adtelligent.com tcp
US 8.8.8.8:53 r.casalemedia.com udp
US 35.186.253.211:443 rtb.openx.net udp
US 8.8.8.8:53 s.tribalfusion.com udp
US 8.8.8.8:53 sync.e-planning.net udp
US 8.8.8.8:53 dmp.adform.net udp
US 8.8.8.8:53 trc.taboola.com udp
US 8.8.8.8:53 dmp.v.fwmrm.net udp
NL 81.17.55.173:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 aa.agkn.com udp
US 8.8.8.8:53 beacon.krxd.net udp
US 8.8.8.8:53 usermatch.krxd.net udp
IE 52.16.8.109:443 dpm.demdex.net tcp
DE 3.127.112.86:443 aa.agkn.com tcp
US 151.101.1.44:443 trc.taboola.com tcp
US 8.8.8.8:53 obgpm76tt0a0sgozk8l.redinuid.imrworldwide.com udp
IE 34.250.214.12:443 obgpm76tt0a0sgozk8l.redinuid.imrworldwide.com tcp
US 3.144.50.143:443 dmp.v.fwmrm.net tcp
US 3.144.50.143:443 dmp.v.fwmrm.net tcp
US 8.8.8.8:53 105.116.231.34.in-addr.arpa udp
US 8.8.8.8:53 173.25.18.104.in-addr.arpa udp
US 8.8.8.8:53 88.176.137.45.in-addr.arpa udp
US 8.8.8.8:53 234.71.83.185.in-addr.arpa udp
US 8.8.8.8:53 109.8.16.52.in-addr.arpa udp
US 8.8.8.8:53 44.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 86.112.127.3.in-addr.arpa udp
US 8.8.8.8:53 12.214.250.34.in-addr.arpa udp
US 8.8.8.8:53 token.rubiconproject.com udp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 8.8.8.8:53 ps.eyeota.net udp
DE 52.57.150.20:443 ps.eyeota.net tcp
US 8.8.8.8:53 pixel.tapad.com udp
US 34.111.113.62:443 pixel.tapad.com tcp
US 8.8.8.8:53 143.50.144.3.in-addr.arpa udp
US 8.8.8.8:53 149.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 20.150.57.52.in-addr.arpa udp
US 8.8.8.8:53 62.113.111.34.in-addr.arpa udp
US 8.8.8.8:53 cookie-matching.mediarithmics.com udp
FR 54.36.150.185:443 cookie-matching.mediarithmics.com tcp
US 8.8.8.8:53 pb-am.a-mo.net udp
NL 147.75.84.158:443 pb-am.a-mo.net tcp
US 8.8.8.8:53 185.150.36.54.in-addr.arpa udp
US 8.8.8.8:53 158.84.75.147.in-addr.arpa udp
NL 69.173.156.149:443 token.rubiconproject.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
NL 69.173.156.149:443 token.rubiconproject.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 107.151.11.18:443 ghb1.adtelligent.com tcp
US 8.8.8.8:53 37ce7bb989fad79561414c3857164045.safeframe.googlesyndication.com udp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
US 8.8.8.8:53 s0.2mdn.net udp
GB 216.58.204.70:443 s0.2mdn.net tcp
GB 216.58.201.98:443 googleads4.g.doubleclick.net tcp
US 8.8.8.8:53 70.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 98.201.58.216.in-addr.arpa udp
GB 216.58.201.98:443 googleads4.g.doubleclick.net udp
DE 79.127.216.47:443 c3.a-mo.net tcp
NL 178.250.1.11:443 gum.criteo.com tcp
DE 162.19.138.119:443 lb.eu-1-id5-sync.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
DE 162.19.138.82:443 lb.eu-1-id5-sync.com tcp
DE 79.127.216.47:443 c3.a-mo.net tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
US 50.31.142.255:443 b1sync.zemanta.com tcp
US 50.31.142.255:443 b1sync.zemanta.com tcp
US 50.31.142.255:443 b1sync.zemanta.com tcp
US 8.8.8.8:53 triplelift-match.dotomi.com udp
IE 52.213.189.168:443 match.prod.bidr.io tcp
US 54.174.231.237:443 sync.srv.stackadapt.com tcp
US 35.244.174.68:443 id.rlcdn.com udp
US 104.17.43.93:443 gum.aidemsrv.com udp
US 67.202.105.21:443 ssc-cms.33across.com tcp
FR 149.202.238.100:443 ssbsync.smartadserver.com tcp
NL 89.207.16.137:443 triplelift-match.dotomi.com tcp
US 8.8.8.8:53 137.16.207.89.in-addr.arpa udp
US 50.31.142.255:443 b1sync.zemanta.com tcp
NL 35.214.139.208:443 csync.loopme.me tcp
US 8.8.8.8:53 odr.mookie1.com udp
US 34.160.236.64:443 odr.mookie1.com tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
US 8.8.8.8:53 a.sportradarserving.com udp
NL 81.17.55.173:443 rtb-csync.smartadserver.com tcp
NL 35.214.139.208:443 csync.loopme.me tcp
NL 81.17.55.173:443 rtb-csync.smartadserver.com tcp
NL 35.214.174.141:443 a.sportradarserving.com tcp
NL 35.214.174.141:443 a.sportradarserving.com tcp
NL 81.17.55.173:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 wt.rqtrk.eu udp
DE 57.129.18.113:443 wt.rqtrk.eu tcp
US 8.8.8.8:53 64.236.160.34.in-addr.arpa udp
US 8.8.8.8:53 141.174.214.35.in-addr.arpa udp
US 8.8.8.8:53 match.sharethrough.com udp
NL 35.214.174.141:443 a.sportradarserving.com udp
DE 3.77.214.116:443 match.sharethrough.com tcp
US 8.8.8.8:53 simage4.pubmatic.com udp
US 8.8.8.8:53 113.18.129.57.in-addr.arpa udp
US 8.8.8.8:53 116.214.77.3.in-addr.arpa udp
GB 216.58.204.74:443 translate-pa.googleapis.com udp
NL 89.149.193.84:443 ssbsync-global.smartadserver.com tcp
US 54.174.231.237:443 sync.srv.stackadapt.com tcp
NL 46.228.164.11:443 ad.turn.com tcp
NL 46.228.174.117:443 sync.targeting.unrulymedia.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
NL 69.173.156.148:443 token.rubiconproject.com tcp
US 34.111.113.62:443 pixel.tapad.com udp
US 8.8.8.8:53 live.primis.tech udp
US 8.8.8.8:53 s.seedtag.com udp
US 8.8.8.8:53 sync.outbrain.com udp
US 8.8.8.8:53 cs.minutemedia-prebid.com udp
DE 13.32.99.20:443 live.primis.tech tcp
US 34.149.50.64:443 s.seedtag.com tcp
US 8.8.8.8:53 s2s.t13.io udp
US 8.8.8.8:53 cs.yellowblue.io udp
IE 54.171.90.29:443 cs.yellowblue.io tcp
US 50.31.142.223:443 sync.outbrain.com tcp
US 34.107.140.113:443 s2s.t13.io tcp
IE 54.77.210.117:443 cs.yellowblue.io tcp
IE 52.213.189.168:443 match.prod.bidr.io tcp
US 8.8.8.8:53 casale-match.dotomi.com udp
US 8.8.8.8:53 s.company-target.com udp
US 52.46.130.91:443 s.amazon-adsystem.com tcp
US 8.8.8.8:53 dmp.brand-display.com udp
US 34.96.71.22:443 s.company-target.com tcp
NL 63.215.202.137:443 casale-match.dotomi.com tcp
US 34.160.19.107:443 dmp.brand-display.com tcp
US 8.8.8.8:53 64.50.149.34.in-addr.arpa udp
US 8.8.8.8:53 20.99.32.13.in-addr.arpa udp
US 8.8.8.8:53 113.140.107.34.in-addr.arpa udp
US 8.8.8.8:53 29.90.171.54.in-addr.arpa udp
US 8.8.8.8:53 223.142.31.50.in-addr.arpa udp
US 8.8.8.8:53 117.210.77.54.in-addr.arpa udp
DE 79.127.216.47:443 c3.a-mo.net tcp
US 8.8.8.8:53 dsum.casalemedia.com udp
US 8.8.8.8:53 id.rtb.mx udp
US 8.8.8.8:53 ow.pubmatic.com udp
NL 79.127.227.46:443 id.rtb.mx tcp
GB 185.64.190.84:443 ow.pubmatic.com tcp
US 8.8.8.8:53 22.71.96.34.in-addr.arpa udp
US 8.8.8.8:53 137.202.215.63.in-addr.arpa udp
US 8.8.8.8:53 107.19.160.34.in-addr.arpa udp
US 8.8.8.8:53 46.227.127.79.in-addr.arpa udp
US 8.8.8.8:53 84.190.64.185.in-addr.arpa udp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
US 23.227.151.194:443 ghb1.adtelligent.com tcp
US 8.8.8.8:53 ghb2.adtelligent.com udp
US 107.151.11.18:443 ghb2.adtelligent.com tcp
US 107.151.11.18:443 ghb2.adtelligent.com tcp
US 8.8.8.8:53 www.mediafire.com udp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 e2c78.gcp.gvt2.com udp
US 34.1.16.64:443 e2c78.gcp.gvt2.com tcp
US 8.8.8.8:53 64.16.1.34.in-addr.arpa udp
US 8.8.8.8:53 beacons.gvt2.com udp
US 8.8.8.8:53 google.com udp
GB 142.250.178.14:443 google.com tcp
US 192.178.49.195:443 beacons.gvt2.com tcp
US 8.8.8.8:53 14.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 195.49.178.192.in-addr.arpa udp
US 8.8.8.8:53 31.73.42.20.in-addr.arpa udp
US 8.8.8.8:53 145.83.221.88.in-addr.arpa udp
US 8.8.8.8:53 clients2.google.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
GB 142.250.187.206:443 clients2.google.com tcp
GB 142.250.187.206:443 clients2.google.com udp
US 8.8.8.8:53 105.83.221.88.in-addr.arpa udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 3.200.250.142.in-addr.arpa udp
GB 172.217.169.46:443 play.google.com udp
GB 172.217.169.46:443 play.google.com tcp
US 8.8.8.8:53 clients2.google.com udp
GB 142.250.187.206:443 clients2.google.com udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
GB 216.58.204.74:443 content-autofill.googleapis.com udp
GB 216.58.204.74:443 content-autofill.googleapis.com tcp
US 8.8.8.8:53 www.microsoft.com udp
BE 104.90.25.175:443 www.microsoft.com tcp
BE 104.90.25.175:443 www.microsoft.com tcp
US 8.8.8.8:53 cdn-dynmedia-1.microsoft.com udp
US 8.8.8.8:53 web.vortex.data.microsoft.com udp
US 8.8.8.8:53 c.s-microsoft.com udp
US 8.8.8.8:53 accdn.lpsnmedia.net udp
NL 23.62.61.129:443 cdn-dynmedia-1.microsoft.com tcp
US 8.8.8.8:53 bat.bing.com udp
US 184.30.250.70:443 c.s-microsoft.com tcp
US 184.30.250.70:443 c.s-microsoft.com tcp
US 184.30.250.70:443 c.s-microsoft.com tcp
US 184.30.250.70:443 c.s-microsoft.com tcp
US 184.30.250.70:443 c.s-microsoft.com tcp
US 8.8.8.8:53 cdnssl.clicktale.net udp
US 8.8.8.8:53 d.impactradius-event.com udp
US 8.8.8.8:53 fpt.microsoft.com udp
US 8.8.8.8:53 js.monitor.azure.com udp
US 8.8.8.8:53 lpcdn.lpsnmedia.net udp
US 8.8.8.8:53 lptag.liveperson.net udp
US 8.8.8.8:53 mem.gfx.ms udp
US 8.8.8.8:53 publisher.liveperson.net udp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
US 8.8.8.8:53 www.clarity.ms udp
US 13.107.246.64:443 wcpstatic.microsoft.com tcp
GB 178.249.97.23:443 lptag.liveperson.net tcp
US 34.120.154.120:443 lpcdn.lpsnmedia.net tcp
GB 178.249.97.99:443 accdn.lpsnmedia.net tcp
US 151.101.1.192:443 publisher.liveperson.net tcp
US 52.167.30.171:443 fpt.microsoft.com tcp
US 13.107.246.64:443 wcpstatic.microsoft.com tcp
US 13.107.246.64:443 wcpstatic.microsoft.com tcp
US 35.186.249.72:443 d.impactradius-event.com tcp
DE 108.138.7.18:443 cdnssl.clicktale.net tcp
US 204.79.197.237:443 bat.bing.com tcp
NL 23.62.61.98:443 analytics.tiktok.com tcp
US 184.30.250.70:443 c.s-microsoft.com tcp
US 13.107.253.64:443 www.clarity.ms tcp
US 13.107.246.64:443 wcpstatic.microsoft.com tcp
US 13.107.246.64:443 wcpstatic.microsoft.com tcp
US 8.8.8.8:53 175.25.90.104.in-addr.arpa udp
US 8.8.8.8:53 129.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 26.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 70.250.30.184.in-addr.arpa udp
US 8.8.8.8:53 120.154.120.34.in-addr.arpa udp
US 8.8.8.8:53 192.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 23.97.249.178.in-addr.arpa udp
US 8.8.8.8:53 99.97.249.178.in-addr.arpa udp
US 8.8.8.8:53 72.249.186.35.in-addr.arpa udp
US 8.8.8.8:53 98.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 18.7.138.108.in-addr.arpa udp
US 8.8.8.8:53 171.30.167.52.in-addr.arpa udp
US 8.8.8.8:53 64.253.107.13.in-addr.arpa udp
US 8.8.8.8:53 fpt2.microsoft.com udp
US 8.8.8.8:53 logincdn.msftauth.net udp
US 8.8.8.8:53 acctcdn.msauth.net udp
US 8.8.8.8:53 acctcdn.msftauth.net udp
US 152.199.21.175:443 acctcdn.msftauth.net tcp
US 152.199.21.175:443 acctcdn.msftauth.net tcp
US 8.8.8.8:53 acctcdnmsftuswe2.azureedge.net udp
US 13.107.253.64:443 acctcdn.msauth.net tcp
US 8.8.8.8:53 acctcdnvzeuno.azureedge.net udp
US 8.8.8.8:53 lgincdnmsftuswe2.azureedge.net udp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
US 8.8.8.8:53 lgincdnvzeuno.azureedge.net udp
US 52.168.117.170:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 64.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 175.21.199.152.in-addr.arpa udp
US 52.168.117.170:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 aka.ms udp
GB 2.17.6.114:443 aka.ms tcp
GB 2.17.6.114:443 aka.ms tcp
US 8.8.8.8:53 download.microsoft.com udp
US 184.30.158.37:443 download.microsoft.com tcp
US 8.8.8.8:53 114.6.17.2.in-addr.arpa udp
US 8.8.8.8:53 37.158.30.184.in-addr.arpa udp
US 8.8.8.8:53 download.microsoft.com udp
US 184.30.158.37:80 download.microsoft.com tcp
US 184.30.158.37:443 download.microsoft.com tcp
US 184.30.158.37:80 download.microsoft.com tcp
US 184.30.158.37:443 download.microsoft.com tcp
US 8.8.8.8:53 164.189.21.2.in-addr.arpa udp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 content-signature-2.cdn.mozilla.net udp
US 34.117.188.166:443 contile.services.mozilla.com tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 34.160.144.191:443 prod.content-signature-chains.prod.webservices.mozgcp.net tcp
US 8.8.8.8:53 shavar.services.mozilla.com udp
US 8.8.8.8:53 push.services.mozilla.com udp
N/A 127.0.0.1:55874 tcp
US 8.8.8.8:53 firefox.settings.services.mozilla.com udp
US 44.232.194.163:443 shavar.services.mozilla.com tcp
US 34.107.243.93:443 push.services.mozilla.com tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 34.149.100.209:443 firefox.settings.services.mozilla.com tcp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 autopush.prod.mozaws.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 34.117.188.166:443 contile.services.mozilla.com udp
US 8.8.8.8:53 166.188.117.34.in-addr.arpa udp
US 8.8.8.8:53 163.194.232.44.in-addr.arpa udp
N/A 127.0.0.1:55880 tcp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com tcp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com udp
US 8.8.8.8:53 consent.google.com udp
GB 142.250.187.238:443 consent.google.com tcp
US 8.8.8.8:53 consent.google.com udp
US 8.8.8.8:53 consent.google.com udp
GB 142.250.187.238:443 consent.google.com udp
US 8.8.8.8:53 www.minecraft.net udp
BE 2.17.107.155:443 www.minecraft.net tcp
US 8.8.8.8:53 a1897.r.akamai.net udp
US 8.8.8.8:53 a1897.r.akamai.net udp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
US 8.8.8.8:53 assets.adobedtm.com udp
GB 2.21.189.25:443 assets.adobedtm.com tcp
US 8.8.8.8:53 e7808.dscg.akamaiedge.net udp
US 13.107.253.64:443 wcpstatic.microsoft.com tcp
US 8.8.8.8:53 s-part-0036.t-0009.fb-t-msedge.net udp
US 8.8.8.8:53 e7808.dscg.akamaiedge.net udp
US 8.8.8.8:53 s-part-0036.t-0009.fb-t-msedge.net udp
US 8.8.8.8:53 25.189.21.2.in-addr.arpa udp
US 8.8.8.8:53 s.go-mpulse.net udp
US 8.8.8.8:53 minecraftprivacy.microsoft.com udp
BE 23.55.96.141:443 s.go-mpulse.net tcp
US 8.8.8.8:53 e4518.dscx.akamaiedge.net udp
BE 2.17.107.203:443 minecraftprivacy.microsoft.com tcp
US 8.8.8.8:53 a331.dscr.akamai.net udp
US 8.8.8.8:53 js.monitor.azure.com udp
US 8.8.8.8:53 e4518.dscx.akamaiedge.net udp
US 8.8.8.8:53 a331.dscr.akamai.net udp
US 13.107.246.64:443 js.monitor.azure.com tcp
US 8.8.8.8:53 s-part-0036.t-0009.t-msedge.net udp
US 8.8.8.8:53 neus2c-displaycatalog.frontdoor.bigcatalog.commerce.microsoft.com udp
US 8.8.8.8:53 c.go-mpulse.net udp
US 8.8.8.8:53 neus2c-displaycatalog.frontdoor.bigcatalog.commerce.microsoft.com udp
BE 104.90.24.133:443 c.go-mpulse.net tcp
US 8.8.8.8:53 e4518.dscapi7.akamaiedge.net udp
US 8.8.8.8:53 e4518.dscapi7.akamaiedge.net udp
US 13.107.246.64:443 s-part-0036.t-0009.t-msedge.net tcp
US 8.8.8.8:53 203.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 9.228.82.20.in-addr.arpa udp
US 8.8.8.8:53 133.24.90.104.in-addr.arpa udp
US 8.8.8.8:53 x.clarity.ms udp
BE 104.90.24.133:443 e4518.dscapi7.akamaiedge.net tcp
US 20.114.190.119:443 x.clarity.ms tcp
US 8.8.8.8:53 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com udp
BE 104.90.24.133:443 e4518.dscapi7.akamaiedge.net udp
US 8.8.8.8:53 684dd32d.akstat.io udp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
BE 23.55.96.141:443 684dd32d.akstat.io tcp
US 20.189.173.4:443 browser.events.data.microsoft.com tcp
US 20.189.173.4:443 browser.events.data.microsoft.com tcp
US 8.8.8.8:53 onedscolprdwus03.westus.cloudapp.azure.com udp
US 8.8.8.8:53 119.190.114.20.in-addr.arpa udp
BE 23.55.96.141:443 684dd32d.akstat.io udp
US 8.8.8.8:53 4.173.189.20.in-addr.arpa udp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
US 8.8.8.8:53 onedscolprdcus02.centralus.cloudapp.azure.com udp
US 8.8.8.8:53 onedscolprdcus02.centralus.cloudapp.azure.com udp
US 8.8.8.8:53 x.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com udp
US 8.8.8.8:53 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com udp
US 8.8.8.8:53 browser.events.data.microsoft.com udp
US 8.8.8.8:53 onedscolprdcus17.centralus.cloudapp.azure.com udp
US 8.8.8.8:53 onedscolprdcus17.centralus.cloudapp.azure.com udp
US 8.8.8.8:53 x.clarity.ms udp
US 8.8.8.8:53 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com udp
US 20.114.190.119:443 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com tcp
US 8.8.8.8:53 clarity-ingest-eus2-e-sc.eastus2.cloudapp.azure.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
GB 172.217.169.46:443 play.google.com udp
GB 172.217.169.46:443 play.google.com tcp
US 8.8.8.8:53 clients2.google.com udp
GB 142.250.187.206:443 clients2.google.com udp
GB 142.250.187.206:443 clients2.google.com tcp
US 8.8.8.8:53 store.steampowered.com udp
BE 104.90.24.180:443 store.steampowered.com tcp
BE 104.90.24.180:443 store.steampowered.com tcp
US 8.8.8.8:53 store.akamai.steamstatic.com udp
BE 2.17.107.184:443 store.akamai.steamstatic.com tcp
BE 2.17.107.184:443 store.akamai.steamstatic.com tcp
BE 2.17.107.184:443 store.akamai.steamstatic.com tcp
BE 2.17.107.184:443 store.akamai.steamstatic.com tcp
BE 2.17.107.184:443 store.akamai.steamstatic.com tcp
BE 2.17.107.184:443 store.akamai.steamstatic.com tcp
US 8.8.8.8:53 180.24.90.104.in-addr.arpa udp
US 8.8.8.8:53 cdn.akamai.steamstatic.com udp
BE 2.17.107.184:443 store.akamai.steamstatic.com tcp
BE 2.17.107.184:443 store.akamai.steamstatic.com tcp
BE 2.17.107.136:443 cdn.akamai.steamstatic.com tcp
BE 2.17.107.136:443 cdn.akamai.steamstatic.com tcp
BE 2.17.107.136:443 cdn.akamai.steamstatic.com tcp
BE 2.17.107.136:443 cdn.akamai.steamstatic.com tcp
BE 2.17.107.136:443 cdn.akamai.steamstatic.com tcp
US 8.8.8.8:53 shared.akamai.steamstatic.com udp
BE 2.17.107.147:443 shared.akamai.steamstatic.com tcp
BE 2.17.107.147:443 shared.akamai.steamstatic.com tcp
BE 2.17.107.147:443 shared.akamai.steamstatic.com tcp
BE 2.17.107.147:443 shared.akamai.steamstatic.com tcp
BE 2.17.107.147:443 shared.akamai.steamstatic.com tcp
BE 2.17.107.147:443 shared.akamai.steamstatic.com tcp
BE 2.17.107.136:443 cdn.akamai.steamstatic.com tcp
US 8.8.8.8:53 184.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 136.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 147.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 steamcommunity.com udp
US 8.8.8.8:53 help.steampowered.com udp
BE 104.68.92.92:443 help.steampowered.com tcp
BE 104.68.92.92:443 help.steampowered.com tcp
US 8.8.8.8:53 92.92.68.104.in-addr.arpa udp
US 8.8.8.8:53 cdn.steamstatic.com udp
BE 2.17.107.219:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 219.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 162.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 11.97.55.23.in-addr.arpa udp
BE 2.17.107.219:443 cdn.steamstatic.com tcp
BE 2.17.107.219:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 test.steampowered.com udp
BE 2.17.107.193:80 test.steampowered.com tcp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 ipv6check-udp.steamserver.net udp
US 8.8.8.8:53 193.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
N/A 127.0.0.1:53038 tcp
N/A 127.0.0.1:53031 tcp
US 8.8.8.8:53 api.steampowered.com udp
DE 23.212.216.106:443 api.steampowered.com tcp
US 8.8.8.8:53 106.216.212.23.in-addr.arpa udp
US 8.8.8.8:53 ext3-lhr1.steamserver.net udp
GB 162.254.196.68:27031 ext3-lhr1.steamserver.net tcp
GB 162.254.196.68:27036 ext3-lhr1.steamserver.net tcp
GB 162.254.196.68:443 ext3-lhr1.steamserver.net tcp
US 8.8.8.8:53 ext1-par1.steamserver.net udp
FR 185.25.182.20:27030 ext1-par1.steamserver.net tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:53 ext2-par1.steamserver.net udp
FR 185.25.182.52:27019 ext2-par1.steamserver.net tcp
FR 185.25.182.20:443 ext1-par1.steamserver.net tcp
US 8.8.8.8:53 ext1-ams1.steamserver.net udp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:53 68.196.254.162.in-addr.arpa udp
US 8.8.8.8:53 20.182.25.185.in-addr.arpa udp
US 8.8.8.8:53 4.4.8.8.in-addr.arpa udp
NL 155.133.248.38:27038 ext1-ams1.steamserver.net tcp
NL 155.133.248.38:27024 ext1-ams1.steamserver.net tcp
US 8.8.8.8:53 52.182.25.185.in-addr.arpa udp
US 8.8.8.8:53 38.248.133.155.in-addr.arpa udp
US 8.8.4.4:443 dns.google udp
CZ 2.19.217.119:443 tcp
US 8.8.8.8:53 119.217.19.2.in-addr.arpa udp
BE 2.17.107.232:443 store.akamai.steamstatic.com tcp
BE 2.17.107.232:443 store.akamai.steamstatic.com tcp
BE 2.17.107.232:443 store.akamai.steamstatic.com tcp
GB 142.250.178.14:443 google.com tcp
US 8.8.8.8:53 232.107.17.2.in-addr.arpa udp
BE 2.17.107.232:443 store.akamai.steamstatic.com tcp
BE 2.17.107.232:443 store.akamai.steamstatic.com tcp
GB 142.250.178.14:443 google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:443 dns.google udp
GB 142.250.187.195:443 tcp
US 8.8.8.8:53 123.35.104.34.in-addr.arpa udp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 ipv6check-udp.steamserver.net udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
CZ 104.64.126.192:443 api.steampowered.com tcp
US 8.8.8.8:53 ext1-lhr1.steamserver.net udp
GB 162.254.196.67:443 ext1-lhr1.steamserver.net tcp
US 8.8.8.8:53 ext4-lhr1.steamserver.net udp
GB 162.254.196.84:27036 ext4-lhr1.steamserver.net tcp
GB 162.254.196.84:27028 ext4-lhr1.steamserver.net tcp
FR 185.25.182.20:27025 ext1-par1.steamserver.net tcp
FR 185.25.182.20:27024 ext1-par1.steamserver.net tcp
FR 185.25.182.20:443 ext1-par1.steamserver.net tcp
NL 155.133.248.38:443 ext1-ams1.steamserver.net tcp
US 8.8.8.8:53 ext2-ams1.steamserver.net udp
NL 155.133.248.39:27037 ext2-ams1.steamserver.net tcp
US 8.8.8.8:53 192.126.64.104.in-addr.arpa udp
US 8.8.8.8:53 67.196.254.162.in-addr.arpa udp
US 8.8.8.8:53 84.196.254.162.in-addr.arpa udp
US 8.8.8.8:53 39.248.133.155.in-addr.arpa udp
GB 142.250.187.195:443 udp
N/A 10.127.255.255:27036 udp
US 8.8.8.8:53 clientconfig.akamai.steamstatic.com udp
US 2.22.144.95:80 clientconfig.akamai.steamstatic.com tcp
US 8.8.8.8:53 95.144.22.2.in-addr.arpa udp
US 2.22.144.95:80 clientconfig.akamai.steamstatic.com tcp
US 2.22.144.95:80 clientconfig.akamai.steamstatic.com tcp
US 2.22.144.95:80 clientconfig.akamai.steamstatic.com tcp
US 2.22.144.95:80 clientconfig.akamai.steamstatic.com tcp
US 2.22.144.95:80 clientconfig.akamai.steamstatic.com tcp
US 2.22.144.95:80 clientconfig.akamai.steamstatic.com tcp
US 2.22.144.95:80 clientconfig.akamai.steamstatic.com tcp
US 8.8.8.8:53 steamstore-a.akamaihd.net udp
BE 2.17.107.136:443 cdn.akamai.steamstatic.com tcp
BE 2.17.107.184:443 steamstore-a.akamaihd.net tcp
BE 2.17.107.136:443 cdn.akamai.steamstatic.com tcp
BE 2.17.107.136:443 cdn.akamai.steamstatic.com tcp
BE 2.17.107.184:443 steamstore-a.akamaihd.net tcp
BE 2.17.107.184:443 steamstore-a.akamaihd.net tcp
US 8.8.8.8:53 steamcommunity.com udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google udp
CZ 104.64.126.192:443 steamcommunity.com tcp
CZ 104.64.126.192:443 steamcommunity.com tcp
CZ 104.64.126.192:443 steamcommunity.com tcp
BE 104.68.72.197:443 tcp
US 8.8.8.8:53 197.72.68.104.in-addr.arpa udp
BE 104.68.72.197:443 tcp
CZ 104.64.126.192:443 steamcommunity.com tcp
BE 2.17.107.146:443 tcp
US 8.8.8.8:53 146.107.17.2.in-addr.arpa udp
BE 2.17.107.243:443 tcp
US 8.8.8.8:53 243.107.17.2.in-addr.arpa udp
BE 2.17.107.184:443 steamstore-a.akamaihd.net tcp
BE 2.17.107.184:443 steamstore-a.akamaihd.net tcp
BE 2.17.107.184:443 steamstore-a.akamaihd.net tcp
BE 2.17.107.147:443 shared.akamai.steamstatic.com tcp
BE 2.17.107.147:443 shared.akamai.steamstatic.com tcp
BE 2.17.107.147:443 shared.akamai.steamstatic.com tcp
BE 2.17.107.147:443 shared.akamai.steamstatic.com tcp
BE 2.17.107.147:443 shared.akamai.steamstatic.com tcp
BE 2.17.107.147:443 shared.akamai.steamstatic.com tcp
BE 2.17.107.184:443 steamstore-a.akamaihd.net tcp
BE 2.17.107.184:443 steamstore-a.akamaihd.net tcp
CZ 104.64.126.192:443 steamcommunity.com tcp
BE 104.68.72.197:443 tcp
N/A 127.0.0.1:27060 tcp
US 8.8.8.8:53 cdn.steamstatic.com udp
US 8.8.8.8:53 steamstore-a.akamaihd.net udp
BE 2.17.107.232:443 steamstore-a.akamaihd.net tcp
BE 2.17.107.232:443 steamstore-a.akamaihd.net tcp
BE 2.17.107.232:443 steamstore-a.akamaihd.net tcp
BE 2.17.107.136:443 cdn.steamstatic.com tcp
N/A 127.0.0.1:53038 tcp
N/A 127.0.0.1:53031 tcp
US 8.8.8.8:53 steamcommunity.com udp
GB 2.22.99.85:443 steamcommunity.com tcp
GB 2.22.99.85:443 steamcommunity.com tcp
US 8.8.8.8:53 85.99.22.2.in-addr.arpa udp
N/A 127.0.0.1:27060 tcp
US 8.8.8.8:53 clientconfig.akamai.steamstatic.com udp
US 2.22.144.95:80 clientconfig.akamai.steamstatic.com tcp
US 8.8.8.8:53 cdn.steamstatic.com udp
BE 2.17.107.136:443 cdn.steamstatic.com tcp
BE 2.17.107.136:443 cdn.steamstatic.com tcp
BE 2.17.107.136:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 api.steampowered.com udp
BE 104.68.92.92:443 api.steampowered.com tcp
US 8.8.4.4:443 dns.google udp
BE 2.17.107.138:443 cdn.steamstatic.com tcp
BE 2.17.107.138:443 cdn.steamstatic.com tcp
BE 2.17.107.138:443 cdn.steamstatic.com tcp
BE 2.17.107.138:443 cdn.steamstatic.com tcp
BE 2.17.107.138:443 cdn.steamstatic.com tcp
BE 2.17.107.138:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 138.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 clientconfig.akamai.steamstatic.com udp
US 2.22.144.103:80 clientconfig.akamai.steamstatic.com tcp
US 8.8.8.8:53 103.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 cdn.steamstatic.com udp
BE 104.117.77.32:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 32.77.117.104.in-addr.arpa udp

Files

\??\pipe\crashpad_2244_SZWNNPJIDVMYWMDR

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 8f07cf6e53ca495f242fbe878d70b7d0
SHA1 8216cc9b964cc95cb85fd19bbbc1479546a7c767
SHA256 01270b530037b69b59aaeeff1290ce0293aa079b73b10a4a1429914834b9bfbb
SHA512 116b4429ef5cc212bcfd19a00b0bf1b0a5539538698e57e2f642f5fa80d7d75a3d8e234dac841db5ee9718f96e4f28a7793d34e938a9248da5e4e7ae31832773

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a8419dd7b40eb10dd27f80002c1072e1
SHA1 68584e48162921ffb45fd8a3f3f6c0d4aff2d855
SHA256 e9c114ccef1c979801ec7ec2ff9ae2bf94365792ad7d59b88af52a0989bcdabe
SHA512 752fa4e6cdadf49a6f42f29008b957cbccb9d94160d81cc7bb62675c4918387f693f7c72d1ddff08a12086adeea3466534b83199340ce89ff6a380e77629c9b8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 10b3520502ffdb4bddcb5bf9699e3431
SHA1 a41ee15a46a390ae6cbded139ebbac8a69d0f8bc
SHA256 e7a7ebd46d20a1e596ba4fa2d275c0bd27eebec6671048f56c9ef53cde41f302
SHA512 75514c068371a73b982e8fa2620b53e04976f19170bad77f9e804726beabc8dbabe1b09b5362e60505adb0b2a4311215fdeb848f8fb034ca037058d1e2bc73a9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 6df1d8f3e2aa63043586b2ffa11b9e89
SHA1 765d900b0ea33f908e3fe735befdb08efbd61a06
SHA256 cce6ac8b36e55abe996cca92b367354ee6d8ef7211221f9bc644de615dc5f28a
SHA512 0f6ff878efdf49e9c4cdab7458b7c70d73e2ecbebdf5e0ad3365088ea8ac87ba251c48755dd786aefa4ae573fb0412471a8d727f035a445c79d7de0591bf233a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.reddit.com_0.indexeddb.leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000033

MD5 6a16cbefd2e29c459297b7ccc8d366ad
SHA1 40da0213a9e5ea4cb6948f4a8e92b5e8b97e6cfe
SHA256 9462da5aa6e2a762b02a24b7305bac86349e5b5ea182d36fd6a163de550cde60
SHA512 6a9de0231f9987554a20208a89c6c802d28c57ecb6f9e95771c94156b65c61ac1e18298ce6d3f0559d3a08052845cc2014dab335e119fde731d745e4857b7d74

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 868df555b80e0a5b1d9f847a6b2f8d67
SHA1 3f86af21bcc1dcab802c822846437b7d660574ef
SHA256 ce0fca773c69cff36403c8093d8d56eb2828ec303cba925681b0061a1709fe65
SHA512 f00b7b392b2ba40cdb57eb4a1b704da0855e3698ab8daa8b3ee030277f7eeb3f5d470c3a55beb152a2e6f7d1437ca5c51c8856c61b61cdbd682b97068caf5315

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b19b9797f223c6d9c85f0d7bfe770216
SHA1 b8cf35b95706490956cefb1d1b899543b0bb8704
SHA256 a2651f050d83cec11892e453a5a72f228fbe7c4f4e434cd18578c7f01ca21d24
SHA512 a6c8a7dcd608e273691e1afca6afb32d7c722e0c791e4a553bd7aa7c422644c244cdb6525c9cf15b808317d8fceba85b52e2e871073aa675a7652cdee328ec6e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 546beadff27d82ecbc98f2c8f7c5d505
SHA1 371c93e170eb3618c321aa0ffcc1977833114e0a
SHA256 f2493036fd9d5bd98710ddafe4f99cd172d98d2529f1baeee68c1996d3c99400
SHA512 b8d2c8fdc644eb448388fec018b81c8278578cf71c661ccb19b01c0a21676979d9c11cba8442e5363bd1091cbe02934853338682c9e37bfcc64583eb33c32643

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe583728.TMP

MD5 e12bf5e227d5d57ce93e1a85e0abfc72
SHA1 063070b74acb61a340f8d7608987f50b398e2b0e
SHA256 2f358d142f5145cd1348abdd2b334800fd8807e3af4ae6caeb8ae30679f8cb63
SHA512 d7c9288308b507b2e075ed10a310481d56529a9ee38ab11e646f87da522c83807088262dda97fe6e06ed72cb9e2804e16a4f033bd6587c2bdbdf0979e019b020

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe585cc1.TMP

MD5 0d8bef8503a8975683e4c5280616ae2c
SHA1 2b34e00f8849e3406ec210129db5f3d417ab564f
SHA256 5e374edbae85b1a3d9c9a0eeecdaac6d07525ec6ea98efdee31d23da052f1150
SHA512 c47b30d917aed8754b05b330ac681a12e526e4e6e2b7dacbfa52c86e81e5dca325c1940209475b25d2f487d227bc9cf19642c96b7c168191955ac2006b22afa8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 cf47dde8831982fd3342dd016621c670
SHA1 4afe99de6a14bd0b311734a71b919a41bdab8f46
SHA256 64e9c2ad0a07c3f9ebbd439fe609d783d7c064879244e34e2aa795ef64935ef1
SHA512 122234567231cef6548574d89ead53e8730f7eee768ea7f589794125ee2e8af58dfc0f250a19e1a0e60f85a866495eb904a010b3a061b576ba08acd390fd024c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b69efb49777be150b5140eb61c4d57b3
SHA1 149cd304095d7d373efc78f7b0470e18679f3ade
SHA256 bcd30d6a7a41a03cdc48abfef35f28b363715e06ec502523cd3d6803a31a15c7
SHA512 c8c916bc27fd27e0c1888a9cc84267829a46052fb56d4cc6a3552c397e23e385abba8877b04b6d3fdc622b0ac33b0a6fb2115699763338998dda617a22953dd7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c1c1259f5da2f3648ff81dc3e91f07f6
SHA1 f25cbccad0026e9c5bbc2b0b1032a6355d90556d
SHA256 f7ebe5b156c60cdd30f5a6ccaeb670128f5437d6ba1aedaa3d3de07185014528
SHA512 9c3a2ef0602e4234b220610176deb40a60658d8ee7a59b78586654800995e2ce27688ef35ff808e8c26cf2b9227cff9af5f4ca30aaf2b1675392681f9e929bec

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 d126499c7497c6ca840e339f0caf0686
SHA1 ccefb4c3459a19521eab367c151f0c817c07ce2f
SHA256 aa08d255e9831bbd32bd5123e4da545b9888ee7cd1aba6bede44c892867862f4
SHA512 f486965e69c1c831fa9a6254731f4957df1ee3b8a46b77ace5ccbfff279f6170b48fda265b1a8323938daf926b22af128219c410f9d8d88aaeb9b65702503b3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 d5f07e23d78d5883001a99c9416b968c
SHA1 715ee23e36f7607145924786856dccd1b049b7f7
SHA256 34640fb8c7d4cb42285228fbd0e6e37d678db54190aaff928a7a234842b0fd3a
SHA512 0be060413f668f8f3ad217d40b0e60eb689f44f8209a9a8426aa14e2e62fab008eadbbc2703e62b0e66eba98c21afeffac4dfa7f22dd5717c511a24578ce9e4e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 69f72186d4b159f72ef5d2464a94f8bc
SHA1 297fdb40982f61a9d84a8e32e7c312b428acaac5
SHA256 28dd6de50c4da5cb72d6f0a030de68bbc10b86eeda7dd1621a66f790750bf2be
SHA512 5c720911c557c40ca50bae846f19f46225ba61cdf8bf030128eb8a255e6b7fb21dba0b3cd96e7fd8ad25e45d63b7e5fa5d23f44d56fd9754b7df5d46b76581e4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

MD5 419cb87eea0a14990a3be016793cb112
SHA1 2e35de87be431bd96dd5ccf4250b6b1f42e7413e
SHA256 87af132c8cb0c13cd8bacafbd5e279f5325fe969977b91b5586a87d447aec484
SHA512 af5d4e9887ee8b64b4cd5d098512699206c0484ded49c605ea14c15bb605713448bdafd5599ce6e253fd4af73b627169f48b86fc779d45cda4971d917a79694c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a3b6ca538ce5aff4f8eccc35290256e0
SHA1 95d48edb97082e8aab6b63580739270e877d27bc
SHA256 9c04a004293d8829ea1363a95dc522aeab8e4e26f0e9a3ff929533bf0b2a2379
SHA512 daaec892d8948801365bcf7257555e65bcd32c30e73dc85951afc3a5d7d93e5a8711376abab42e07fe6d8279b0c7d3ba9bfffd75e338577a5f07c77c750bd157

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 51b5b415c453f907116b2d577797ef69
SHA1 d261061d25ba2710a05b516700a518bfbc1304a3
SHA256 5decee35f0be30425b76c73d0e6cdfe38b0fe113f91907ab7a0ee7eb159a500a
SHA512 a2cb3a8b6cee91e52e4df03834326d260c40addc22cd21def9dfb61f674529f677793f297f5bcd26388a004de6cf06fb96b3825d469d6d7c832f4abf49d25d00

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 ec3ab71124723ac731e49f67c7ea4548
SHA1 2b96eebbc62347e7d01a432c52594ff55d03edb6
SHA256 b140e99cf503d689ea82aff09403cad23adeb216f555273c1ef4a7dd0bb8b1fa
SHA512 9ddd7cac1bc3f7c04ef937b2a83d58fa1852da1521b806e4e5124a29382548c44ac6e60502ad35234a38b79ecd9f78ff5aa59197b65fdd60192567aa2e99a503

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000056

MD5 ce1093c800c0933d7c9674eda75790d8
SHA1 371c2dcde092f51b18852e2617bc6c0c176f5873
SHA256 57781a723db9a2483067bcbc89d1f30f7e2f22ae2d18aab1e45ad894d8cdab89
SHA512 fdbb31c607cc9a4bd75c42cbc552fb40d82e53804d156244ed2daa124c75e1680b908589f7a3ad8888b9b03ebfd1f4b3e83e19f84e3a746cf210d0b8a1678533

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 0d7cfb848f19cacfe4cc94e2d215b8be
SHA1 97b43df5f6b6814296375feb1630deabdbc120ad
SHA256 c8208f7752b0a40f35b57dfd73e3956bb0d495d5cda84df7c70c49e57cc345f7
SHA512 62a254925d97895606bd1b44ab87d3ffc8bc3d04b7c40d8716b6d6cc28066fb30165ddef2279e3d0984f59d9147686c568da26f8ac17cd07116d11af04ab08c5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a2f712b7b3bb30344127278361db1ae4
SHA1 32db75aaef6c8a5af31835ffcfa31f3738a9cbb9
SHA256 601eb5e3dc54f14e321b179b0d2ab8be760bcd593b9eaddf88cee737a10bf019
SHA512 ee5a1e1e94e6bb808a2d1d070d9d9c30e0c2f65afcb03f88c4f3692917c6ae7f5c8a6690321ed6becd631d6b696efa78665669a85d7bf6effe6f0a0b7db6457e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 7cad19c6c0251f7b0656d8118998dd5d
SHA1 82ef55b0b47fbfe89a0848c31565898e0d98317b
SHA256 fab7dc338ecd25228c6dbf78dcde99a679d13ae40ad7942be0f475bf51ccb379
SHA512 d30c52466d3b89764b3d685e8616c76fd8a47c17b6e23df437f08069673c53bfdbaeefa56d5dba70ba2725773f1acc632e7351ebb1467d14b0d1388dbda3e214

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 21c7616a256d0c61a01f6c46491d1ef8
SHA1 da6e5e7acd6833e87d2412b6529a0903f560052c
SHA256 99a6f6bdc44b8090e7612c88741286a430b14c6f2fd80634efeab7e35ac821e5
SHA512 0b6f237560eedc6c25ebbbc97231ca149482938444e3abf2eaf35678c37b958d80a0b470ebd904997e968107121c4452bb1d2f6ecea03ace1f5b01a6a82c7195

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 16b22204cd5d3536d573407bf7d48c69
SHA1 86e7c1fe246d2852b0a1b988dbfbde23313931fc
SHA256 a79862e60f4390c9f5c6ac24e9fa41da86a4cc14c03f28d885d52778ad1044cb
SHA512 1133dded807fb75f12b360bdc21b08b4ca2e46f6a3b8711a43403170d979e76424ad76bc1d4bc9aa2b60fd12795f161d1e2a6101d68a4ce6b81514a4fa58be94

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7797964765d9083189a522e030648b52
SHA1 9dc30f547e6964d8c54620c80c47e734d1da5f1f
SHA256 f39eac3a59b7dfe5ab93b93658db04d3fd58923a3d1ef57d81125bb0c887470b
SHA512 ef3607173f037fe749542459ffb4049cc327cc125e109c02e9f7076a90ad174bb2fe6b52f403808be9a30b29d18698e31333840550b6cefb24035ec2c769af40

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 0bec9d6bb9436e25427f6d5dd56ee123
SHA1 2cb0d258811d0b3c1ace53a97429a3cdc6b8e18b
SHA256 c81237bb2427889bc749913ab48dea86c7befa98bc4ed237c18a32a902256f5c
SHA512 dafce0dc903185829cd509ab771f29d4752f39b9ba2a9c712024d76e4836fc20d77f76dee5d4a15d0ac06d61a8987f984a624b55f99e3305314f5ba993ea3b23

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 16691ffb636bd53e5abd8784276a3c88
SHA1 b9bae89f4aff92a8ecd61a349626c568e88fb424
SHA256 22731b8a6594d697d4d54cdd5cf4669d673261b9e7a1cdd947ae4ea6e67ccb62
SHA512 04f2bca1b89c3253ca97ec0d496e6bd4466e72062997f1d14feb58b7869e9fd94225bbb423ef5cda0047291a7ec96b929339d6feb53c0758302031535a2b4326

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c1fe4a400327ed9ea588c725e90cdd81
SHA1 f875a9d997cce67a7deb40b3863895991cc69483
SHA256 26dd22208b74abdf5543c8cf9a46a2036208d9e2bee789a1aa1bd4ad152574d2
SHA512 20f658d28b22e12a44dbcbaf2208aba14dfe8629fda4b0203f27d5385e5b241ffd4cf4f49c547e26a47d4ce79f104f75aa297b8892ac779c9c42f4a307fd23ee

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 4a8ae8700d747d6a7a8a851d43431f4d
SHA1 49c7625275ad7141517530717dcb7da547101b9e
SHA256 0bc3c11b01f5e944eff4f2c5b3c19dd9e40746878fcc108125d02cefecec7470
SHA512 65ad72ea06e6d8b3ae249251de13291d527bb13b3991d10e3c5cccc096a32a20f1e313e302f221ac10f479f4f5e408aee26a87ad4edb7587540d0773336852eb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

MD5 1c92872348d93e0211b65f9a34c2961e
SHA1 f37f0de35e8aacd4e1e8ef5913260bb5aad80126
SHA256 9571db73f1d885469ffae00bddd9d5ea0b65727840cbc67437ba238e1feb8212
SHA512 8304a9c24d31edcd95481cd351f2177fa062a0639a4fd1fdf7d02252b6d12e2b570f2d4e66c1c8887f98e452aca773230047459731d1fb41df2b896738ae680d

C:\Users\Admin\New folder\BeamNG-Techdemo-0.3\BeamNGSandbox.x86.exe

MD5 585dd371280f2b6276029e13af57ea83
SHA1 f9695969fa4ab6fb387d01cc43df7cdcbce5c646
SHA256 020698081e800550c7c7c5b8b83290a6f9974fff0647c222616b09a66916dea6
SHA512 7f5e205893a5668ab57b3e8d8c08b7e74a4b132eb6c1f29e2cf29e8270d4b3f630e4a61d1505fd3bc8b9a5a879779f4457ab8539e9833300e582b997eb37172d

C:\Users\Admin\AppData\Local\Temp\nss6D4.tmp\ioSpecial.ini

MD5 97d53e4b0a1eb7f043adad8eb50642b6
SHA1 d292521293483d022d84a3aac09fee4c2ba36d76
SHA256 58eb07f97a04032c8f27e8289e59947be36506d3abf7a5a296301243fb581582
SHA512 5a77c3bf7e7c0364c908d8bb6b3173a337c37513a112ea84d393c00c0f8b216a8db7ca3c848da466c9e3af7535b3120a44a19da00b424ab02f80caab8f452abe

C:\Users\Admin\AppData\Local\Temp\nss6D4.tmp\ioSpecial.ini

MD5 fe2e5d073774adc2bf99bbdb251075dc
SHA1 58472ce58050249323a62d9f4af0dc8f0b0700ba
SHA256 de6e5b5a8c3b1d08470aea0ef8ec53495f460446a1fc3474a0067afd8d851c91
SHA512 fdda2f33f6f90ee0fbafbe1b5ab26ff450b46b044a01f59c272b506344dd6c1d6c597ee53b4c2b25c6d542b8fcc562a2f5d6d20183069fcb75b82d37fd00cf61

C:\Users\Admin\AppData\Local\Temp\nss6D4.tmp\InstallOptions.dll

MD5 325b008aec81e5aaa57096f05d4212b5
SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf

C:\Users\Admin\Videos\Captures\desktop.ini

MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 07f4a7843e19b5989ac3298164eda6da
SHA1 309edde0d1cb28ac1514e497b702c2b16d85141a
SHA256 1334bf2e8819b594386c25f64d126148938f89db3914690200b6651adf1db9af
SHA512 38b55fa7eba9dc8eed0e245ff5835d6d6a083c967a4d8b8076d79cfc3b407d40d40fccc4af7911fd02915da70f95c9ea38568dc40412840a9b82f8cc87356c60

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8740b1c6a03fb61e5f59e98777b622c1
SHA1 9f75c694d6c590354507a92bc272145602ad4200
SHA256 fd7a96b065c40b599da3bc227e7305da51f2665dce7430e8649d18e56648239f
SHA512 d876ecbaf99f7c6f602fe829b4f571d1cb2c203be4c8e63495914f824d34fad10d93b7ef07f71c37fab074a85be503d38003821a9c53a3ef8237f051ddf16276

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 141ea39ef9212506be75a49fab45bfbd
SHA1 c8c6211f68a0f6835ad64e1277b8f059c2d107aa
SHA256 d9ba5a39d7c53c5b739fbdf8378499833e597299dc38d44d59119cb88ce979e9
SHA512 dccbf3a4a8bc7ff48fae77df3ffd42a079a655d106655f8ff03ac242eb1cfece12d977b3a122a52bab903d2a24f4be75a25f1b4ccf180757cec7a475e19949b4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 8e812a2461073674afba44574a9b74e7
SHA1 4419f20c3a0d3031ad09a467d5079ce205261c21
SHA256 e1faa377f8047413647b18111881e47cf5ec3f36cf93eb7d19fbd3a666e8df1b
SHA512 b5b6b206f9da77c47079f0adf0a660d71f5307a784b2365ff98dd60c6a5e3061be77bf92daf90c8db4d909ef14567f2cfb964478e1522cd71da4fafced148f5e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 9eb5d8faf58b0344373cb4986c5ab06e
SHA1 60072dff22028b08c92d0d3d1aae96720a1304e1
SHA256 80b7c55415331af0b4863a98d0f9659ca77f9986d7dfa40fe7bc58f9671a5438
SHA512 f91bf582ea48fe9c47554361c23efd0c3b361d5b5aac4d7b9456bcfe01da72296c29bdd77a2b5f6a08e017a4a59c8c228ef840f6ddc5f1fad3576e154882cfa9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 136fef7053b5ec7a0d451ccea533989d
SHA1 76a2ee0beffd208f0e2da9783a5445e54b0c230f
SHA256 935f4adee1106ddf3d24e5bf9e365fedf0930d1a4462518d847f5d664bfc7322
SHA512 c196f98b8f3a75b9eef050557a3c99f48717a2f1b4e89134b7799bdb951948440b5912ab037b6855410c1bd8b77391d74793873f715e9e9dbe51922e49da44dc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 20908ecb4300daaf4699ba70bdbcc871
SHA1 cea427a84246a69100d0aa46c428eea920c212f8
SHA256 8a07c06ff80a3bae9bd396f21ddde01d9f1937bced0b8679e4cc6df70508085a
SHA512 0a095d94e5abfe7e65fd4e6cb3aa5f2784e5670d7043b7c0c30b9d7cfef237d8679e4b0127d0fb3f0d68214179cdc6df334226fa2dec56bd83f7a729bcc81edb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 8cfd13626405d81ea0b7b447a18caa1b
SHA1 1f7a0263c7cc6882cda06137587343430339cc4f
SHA256 e06bc29e53ce1b06193d70cbdf7c1cc28d15e715de829cbc7f52e025926f9023
SHA512 a8bd59357ad06fafafbcd3ed7079b26477aad3d062a92fa6094e9f44938084661e8eec41afb677b17d002cbec60afdc7181534ee66fdac7cd47d6b5c60a1ed17

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b1215da0fbfb742df36a4349a7fc48ce
SHA1 d5a5c4d13a7623237bec640a2723ecf9c42220ff
SHA256 5ee0a25bae6c8d40ea40fb2cab65533535455fea7378ba382984b38e525bb1f7
SHA512 41389c82b95f45005875f71817a8e17d34d0db42a0cffbcec816bc42ce600ffd3181e7d40db4afdad8115e1e53de2d47bfe5a785fa53982b89eb3db3042de30a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 0f365d94d568b2b77e530e548865a9b9
SHA1 2db70d7828600d7d174a4ef099518081a8ab159f
SHA256 77ba36633753cde612e668a8d4eff06b3135e75c3c90d0e2472c564c20d9766b
SHA512 a09e161cb6b24e1729f814d7f91bed745761a7253960044b6e6ab083fc62873b391a53b00247d2c9be18024446324312a36f6b6b3891b028cbfc8f6b38ac2cfa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 143ba9509636f08d3bcd3b170a6fc1bb
SHA1 52077e93d2a62d397aea63bae69cf649c17fd536
SHA256 3d5c8cb7386b3913ae945969a29e442009a7aa0ea0d8860b2585a07ab44df4cb
SHA512 fb41735cd44b218cf5d39919482f814b885a5e3d1dcd595d6f737618b755e1c19967317c9d2bc7fb957b8e1478f2e9b598a29f84e8b2b4749281d2e3d3b9ad6a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 ba4aaed902969ebea1e495acc25dbdc9
SHA1 0a693311baf46713a738ea2be883a4b8303b5a64
SHA256 3141d223630e93acd0bad05231ac429992477c45a1218e181b57cd72076a6bc2
SHA512 ffd9b904c1d900e9531a15b91d272dd76bb0a2845ad68dfa7779c10b73b334efa403b3956028f67a68fb0a006e7ad3ac0c15d28836fbc6d7f66a2f3319245270

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b9eb31b6f13b0fb6da45bbf44480675a
SHA1 a8b4b52764ae609dfb8b60ca45de6aa0d4bcb633
SHA256 bde2cb468927b8e50805a99a07b9bbb76cc70bb6241936ef7f635db931b1f332
SHA512 c7c7562877b98b907c7c2f8f8057cb61b6a9cf4342d3e3dc60012862f58a54fcbd0e4b0504c535724579a8acdfc7547e63774c95a41493a743ae54cd0e477b97

C:\Users\Admin\AppData\Local\Temp\nsm3156.tmp\modern-header.bmp

MD5 88cf59b16a47d83840eaff1b8662b5dd
SHA1 11f1d78a2940a3b8503e0541c8093a1c2a72c897
SHA256 49de46eedd422ef2a957744cd6fa3ddbdbb6f77625dd345343e47e77537565d0
SHA512 03339bbccae247822f46d7d90f0ba554f808aea4c5df55331f5a2d86bf98c756c63b907db5c5aae6c3b06f9feeff3efc0ea5e90e8f323334e0a004df8eb0c8dc

C:\Users\Admin\AppData\Local\Temp\nsm3156.tmp\modern-wizard.bmp

MD5 00bda674b5710125b7d392e1d6b111d8
SHA1 bdd2eeff19d46547d6d2f793f133211192fd5a60
SHA256 3553ee46bd501340334709202172a326a516021d13b80db811c8bf5287e5bd2b
SHA512 91e85cdd567390cda199500badaa6455cadf1cb6e7fb27c97eaf33a78b79a595e0ad8eb053c6d33076c494d07be3371dd841a7bbb75ef10e0b275459554bc025

C:\Users\Admin\AppData\Local\Temp\nsk5F3C.tmp\ioSpecial.ini

MD5 d372884b8dd9459efc35b54298cc55d9
SHA1 f3e478006bef54dd86bc5e6a1b04e32fe18fdc70
SHA256 d03407eb978b95db34be400689a4049c75662eb7b0b719d2a6a3dc6440d0182e
SHA512 8dc1bc083828236baf000ed53363af497e977ca196fbd9cf773121d4584bd019593725dd95a84e73b78a3fa65d8b2ba7e6e451a6499d75691b9de21cdb3d7048

C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db

MD5 8227dfb4551a95419f46270f3fdbdaf4
SHA1 19eb36357949ae896b5858d99f363c6094a30d59
SHA256 2324e374d85c23a4b8a9fe9d4452918e98b8dba53d3ac2a346ef243da6ceca6e
SHA512 ddd9608a369b2f8b4fa972c047cf36cf79defa6f8b994fbbf41ea5e290cac61c01f5255e81a99d257f44bf41efdcc040f805e1d5c556597c1efcaab469d6782d

C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\levels\GridMap\art\shapes\misc\grid_10_d.dds

MD5 eaf939d103e8c9dba1e47f3a409e804b
SHA1 78d9bd217448faee3aa506de04a8b0a007ae121b
SHA256 4d9dbcad986b21fc0c5455efe967aef97c9d8393790c9bb22034dfaa12fa3cc6
SHA512 10010dbc9c387487bc0becd81f3b2e5c67735a9e6889cbf09d9f4dd6365db8ad8fa3fc9d095b2ff5c4d8a8f7cedddac65d63dc2fb652d21d83c17f1829527477

C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\levels\GridMap\art\terrain\Rock-05-D.dds

MD5 03de42951816e1e6073572bc58103831
SHA1 2cfe42bb58466bf26b4af5eda9cd384dca7b3048
SHA256 3af4563c53eaec4a46373fea932507163359c0b2196d29a09be13a3543fc9a35
SHA512 3b88f61a752a9f87e20c91820943142f6247a74e1155bfaac049892ec8a740eec0297dc851d294c6d2585a66a3bbc7fbbb563cdbf2ad86b4bb7fb3a6bccf744f

C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\levels\GridMap\art\terrain\Rock-05-N.dds

MD5 293a40fa18dbe47de03bb56bf99dfe01
SHA1 42ec64c5759c0c8bd7d269744fe5ed92396c0357
SHA256 a99ee04971c38db3334d7cc16d70962659c19bd7dbb33f5e804bebdc91726085
SHA512 cbcf413d000f553f02879de730ea5b3012157d35db00807b551ad77f5f8ef556a5d718c26dad0b37573be7e612928111fa22e48e252a0b78c7a61f46036c2465

C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\levels\menu\art\grass_field.dds

MD5 be17aa8f7d566939f6cbebb03dd18c79
SHA1 cc9d70af1fb6a56c24cf8cbd477d4633b615304d
SHA256 843cc15503810837fee0e57cfcdb074751ea5ab43cbe72d45542fafcc1a869da
SHA512 9b6144e5c4d2b6c4e7b684c506f7cac5ba6deae32fc75c365d2a3df862c217e59719d38bcf699fe2125e773da5e9deff3a2d5a667b1d688a91b729d4fe8cdcb5

C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\levels\menu\art\normalsfix.dds

MD5 708a7191ba544783f61f5cf3cb3b7c2c
SHA1 7c2f2cb653e92f61a2a48091c696dbb55f96ab30
SHA256 e07816ed48d6a6a2f524482da5a39db372808ed5848b71d30b2eb718a54c03de
SHA512 14f3fc89b496824fc70662b3f35685b71af41996898e846636ca6c9858c87aa8e65f8171c240b2c7d6d6a38cc415805c9fe95823d4812025d566651ab062e4ac

C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\tools\classIcons\GuiFileTreeCtrl.png

MD5 a3b1856614117df47cc45fea438c858e
SHA1 37092211523603d0cb76f04b6c1a4e155bae7af3
SHA256 1dc6e9a8b0399b5e2affee2b6b2f44f295dc049d2e7d6b853e3feab60bea8b7f
SHA512 016ded5dae1ada055953bd11bdcb33fcf92fd73c799894f1ae4ec127ccae6561aee9691c0e99a98dc819abc43bade1defb743e79b8f632b31fb8a9deeb1b41b7

C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\tools\classIcons\simSet.png

MD5 3de6670d1f253ea695d44ffbbc4d7887
SHA1 1534a438be5e537d78bc5da32468953788f57e45
SHA256 9f9cf5c3ec24069ad854a7b021d98cf3daf90cc4f7c01c9f68f928c6efeb2ec7
SHA512 af0186449d2a6fb36eed1cf6651eb4397b4e027310f3066b5ecb428aa941ca869fae365fb6351e892e22cb8ffc05fb3ea9b77f1f0061c22f22b9b3c4f1418961

C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\tools\gui\images\add-simgroup-btn_d.png

MD5 6f6d649ce7d1c1b060f7ab47892199bb
SHA1 f3c041aae33622512b4acd0c442e231a1f31d5b5
SHA256 e03c91ae3a57f3f0a5cab68ce197fa5d62cb67ee68295478f740f14687c34347
SHA512 ad3532edc607c1773cc4776a41b9a540dba8c924eb3bfe3c3a24c9b2f275668c742f74008bafe5a3f0cdb39e2935bad1dc6b513f52457893a7b93c431917b350

C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\tools\gui\images\add-simgroup-btn_h.png

MD5 9d7d082f89b1a7a8f7255b4c110bb084
SHA1 0f6eb9580e638df3c21f89e7f31e5e1271f1c9d5
SHA256 ff71fda88811a44ac6618255fc43f610b39c783189d2517219d766bdeb85f120
SHA512 25366946ed3604d36c9b6bd7b289ecd9d4dfc88f752da76638c84f527901377d28916328cf23613c59c55f5e1863c5ea3228bd96e98373d1b5e2810740851ad7

C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\tools\gui\images\iconAccept.png

MD5 6f301f32e8d23e8a955f1c3e16f7e543
SHA1 8af61a7675d011b342a6d52136079ca5b9400c4d
SHA256 8818a9d791c72037df1c6c6a4224eace8c4de9db0a25a8c6509fedd3ec2c3d32
SHA512 9c6a40fa8b7e3bb714343be4a9cb26d18af19100a7a765cb50f987ea7676b8d0637a4629f13c4cb4eeb9d546f52aab2f9f8a17bff6e9e2df2a725249e95c2291

C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\tools\gui\images\iconCancel.png

MD5 67dc33984fc49e54ed9b594be5748ff4
SHA1 ddae607adcfc8448baf7acb6cd9f3b3e79d97894
SHA256 fec1aa4a88a7add9e660c2b39055e58dd6b2902fbe1ba50b17d4876b15438a46
SHA512 3d01cacaa08bb31b1fcf57bb5c061b6ba2b68c01d91ae92c386345e924caa9ee2d032c1bc836ae7d13337ad8f2cf2f5820f6a18c7e3a67c9ee1e5bfea764996b

C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\tools\gui\images\iconInformation.png

MD5 a0b68074c6003a01a7d8dd2a6f3422bc
SHA1 c67412abd3c6e7a53f07af04bc3796e0323c998c
SHA256 612da29d2a06060caf50201d326be96bb7611915e5a3e9b6f7992099e38bf4d8
SHA512 2c7d2638a8d884df5b71213f50a20b5f6864348b9166f330341c6f87edb15debd61e9f5bace577e1be869f4026e896377aa1f5d0f08fa70d9daded6fd10eb5d8

C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\tools\materialEditor\gui\cubeMapEd_cubePreview.max

MD5 34912b449aa52b5b9e7cdfdf0341846a
SHA1 3a17e89ee33d496d84a6557b1b17999eec39345a
SHA256 d6977f255e592a4bc512816c49ce66aabf53b4e2bea70089aec2877801604d36
SHA512 92e848879ec3ea14cff9df7620c35bc0dc13bbd64f64547a50a3c5f6189060071e6ac4be981074af6c80027aceb474453331a4c3346915dd4c307ff94d31a682

C:\Users\Admin\ffoldeoldr\BeamNG-Techdemo-0.3\tools\materialEditor\gui\matEd_torusKnotPreview.max

MD5 e6c92adcc9e2c59af66e85d2c2625e28
SHA1 16521e825ff28910643370f4b1e1064139a7d93c
SHA256 3eb4608355aeff2403fdab31f923ca19556932ccbd656d54a8d33711bddb5afe
SHA512 f8833450023387f30d57247fde94de14487d7c411750479406237687784f2589fca958f3be020d36fe496578a0a0b59dc74ccc3f73a10cae6d1d976aefc13114

C:\Windows\SysWOW64\directx\websetup\dsetup32.dll

MD5 a5412a144f63d639b47fcc1ba68cb029
SHA1 81bd5f1c99b22c0266f3f59959dfb4ea023be47e
SHA256 8a011da043a4b81e2b3d41a332e0ff23a65d546bd7636e8bc74885e8746927d6
SHA512 2679a4cb690e8d709cb5e57b59315d22f69f91efa6c4ee841943751c882b0c0457fd4a3376ac3832c757c6dfaffb7d844909c5665b86a95339af586097ee0405

C:\Windows\SysWOW64\directx\websetup\dsetup.dll

MD5 984cad22fa542a08c5d22941b888d8dc
SHA1 3e3522e7f3af329f2235b0f0850d664d5377b3cd
SHA256 57bc22850bb8e0bcc511a9b54cd3da18eec61f3088940c07d63b9b74e7fe2308
SHA512 8ef171218b331f0591a4b2a5e68dcbae98f5891518ce877f1d8d1769c59c0f4ddae43cc43da6606975078f889c832f0666484db9e047782e7a0ae4a2d41f5bef

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 d6f81567baaf05b557d9bc6c348cb5f1
SHA1 0c840165fcd34d996c85b6b44b00c7206bf772b6
SHA256 e60413bec64775bf1933ef4f9673c8bcfbe0ce71e950fd589bbd14c0f9a00359
SHA512 09b84cc9199592821d7de38cbe24332097b276bb25b6d09f7dcdc3a6b17369ee944a6f8120f13ea6a5c15eb759a90d7ce29cc845a5c0680ff2fa53e2623171e2

C:\Windows\Logs\DirectX.log

MD5 1b35552e48faa9e9924aa8cb361e0179
SHA1 09bd7ea2938ca4d57e3f7b9c1b0f55f12b6cf4b5
SHA256 508a9814aa7a093ef2e1e0e0d108977b064bb684575cbfaa667bae993075fa66
SHA512 b8d4ac603d01d7c29a0c5918ad459c8b736be530b16688f4bed90174b0d0a12ac35bb9d226eaa29f484cacf0a6b23f8c52cc566570f3fc26e8c39633ebf5617b

C:\Windows\SysWOW64\directx\websetup\dxupdate.cab

MD5 4afd7f5c0574a0efd163740ecb142011
SHA1 3ebca5343804fe94d50026da91647442da084302
SHA256 6e39b3fdb6722ea8aa0dc8f46ae0d8bd6496dd0f5f56bac618a0a7dd22d6cfb2
SHA512 6f974acec7d6c1b6a423b28810b0840e77a9f9c1f9632c5cba875bd895e076c7e03112285635cf633c2fa9a4d4e2f4a57437ae8df88a7882184ff6685ee15f3f

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxwsetup.cif

MD5 2c4d9e4773084f33092ced15678a2c46
SHA1 bad603d543470157effd4876a684b9cfd5075524
SHA256 ed710d035ccaab0914810becf2f5db2816dba3a351f3666a38a903c80c16997a
SHA512 d2e34cac195cfede8bc64bdc92721c574963ff522618eda4d7172f664aeb4c8675fd3d4f3658391ee5eaa398bcd2ce5d8f80deecf51af176f5c4bb2d2695e04e

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxupdate.cif

MD5 b36d3f105d18e55534ad605cbf061a92
SHA1 788ef2de1dea6c8fe1d23a2e1007542f7321ed79
SHA256 c6c5e877e92d387e977c135765075b7610df2500e21c16e106a225216e6442ae
SHA512 35ae00da025fd578205337a018b35176095a876cd3c3cf67a3e8a8e69cd750a4ccc34ce240f11fae3418e5e93caf5082c987f0c63f9d953ed7cb8d9271e03b62

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 cec960807fa5bec11ad4a31c3512da4d
SHA1 a3ac60a3518747d3bbead5edfd17e155cf7ce9f7
SHA256 f960075a7b1c2590e18700f3230f7baea9aced3e6ba5dc93dac193027b5cec48
SHA512 2da2d935f9b96bd36536f3a7a494775c8ed9bfef6538ffe66307b73cd5c82210fc43bbe6706d74d99dd5b924fb78a0d1beceee8c0e22d91e17b1346dd85690ec

C:\Windows\Logs\DirectX.log

MD5 f578061e8e8c31cbb8a2547f6cffb430
SHA1 9b332091c32cd7c2b925715c18eed47f29b17133
SHA256 8e247110e96fa8bce77f3d0577e123254464cb2ea692592d665ef845a5e51da6
SHA512 59d25a1e0efe45b0c9f2d2dc5fe0a371c9ecc1f6ad7fd81897ff0517d5709c49bf207aee9cb3bb2deeff221a00992a64d9a53096ee94c50518c6f2f7d0fb5ede

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\dxupdate.dll

MD5 7ed554b08e5b69578f9de012822c39c9
SHA1 036d04513e134786b4758def5aff83d19bf50c6e
SHA256 fb4f297e295c802b1377c6684734b7249d55743dfb7c14807bef59a1b5db63a2
SHA512 7af5f9c4a3ad5c120bcdd681b958808ada4d885d21aeb4a009a36a674ad3ece9b51837212a982db6142a6b5580e5b68d46971b802456701391ce40785ae6ebd9

C:\Windows\SysWOW64\directx\websetup\Apr2006_xinput_x86.cab

MD5 e207fb904e641246f3f7234db74121fc
SHA1 1be8c50c074699bdd9184714e9022b7a2f8bf928
SHA256 3fdf63211b0dd38069a9c1df74d7bc42742de003cef72ad1486aaa92d74546fa
SHA512 ed95d53bc351c98c0322753265b0a21c98df97d0e2fbbc58a6836bff374b7540b0cea21371cd4a7ead654210a42e1f9809cac6e4eae2ecf0ef2b88e220dc37f7

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 8edbf083b200f13b4e48010cf3c42332
SHA1 7902f5760e9771ff1d4026ff75778f436f749b0d
SHA256 9732f05584afcea70b945009299835b7e0fa05aae20d956c710ee127d1e607ff
SHA512 0fc08168a63228641e4d65b1e75c90d9ff8bbe16475140530ccd2f63c11a2c51c660d4a7bd1fb347d8467600460ff156a18716399013a268280f9a9e0363ca7a

C:\Windows\SysWOW64\directx\websetup\Apr2006_xinput_x64.cab

MD5 b0669f7d395078bee0087b089f0b45c5
SHA1 30506fc3dce9532ef0a8cb3973347ec9c3c9875f
SHA256 e63a67783ef7624559f95ab697bf8afbdab7ace31200283ef840e6b94aa16e5a
SHA512 d7efcfd85b3cb6cb9b1936b701a9d7d91a6094aa08d8c933edf8493c6ad57be05a579980a404b35e9721f71b45f4cae28399fca3ff5df20a9a3138b90f86b94c

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 a2f81d61adb271cf23e42c94e7aad855
SHA1 c5565b10b6292a73905902caf2d6b4e1e2f77569
SHA256 97d97b1c7f27857c71ad255d8127d6aee07ac9d9ff89cf26122d2b67725245dd
SHA512 017d88238780208ad5b449dd33410fcf00786e9c36190cbdb411f2859937dadb7739071a3f5a11787a18a20076f43bdc407586f39714ba902c6fb438e22fa811

C:\Windows\SysWOW64\directx\websetup\Aug2006_xinput_x86.cab

MD5 16b968ca0c435ee45e77a84c2d0364a9
SHA1 90b17a60a34f6335787a6b2d489cbcd3a4ea98c8
SHA256 6dd7c0abe37d3df7aa6db7bb352260f4a15dc965ff9d30aa32fe9595c1a18300
SHA512 3bbbfdf8b5673641ec066c3fb52e6b0d5ce0bc6ed6bff17ab4ac3fa69a8628b09e5ec8322fc39d2a206974b54d297caaff9410197e26d090fe74f963cd535045

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 84e7f66b5ed338ed3eaeca26cd1e6660
SHA1 f682429a9c2061bf8615744c0ceb69ccd15c4c6d
SHA256 2cc62335a6f4c282413540cee8933bf2ddc862a320901031a5f380848540c794
SHA512 ed9f91ed7cc5e99efeaf087cc1dd07475af6ada26fc03b8ea49bcdcdca09ebc3ec97cbddd5b4eba42274de4506d8d6682ddf2550ff06cb74acf5e1d2131b91a4

C:\Windows\SysWOW64\directx\websetup\Aug2006_xinput_x64.cab

MD5 a9d582e44e46e36f37edb7cbc761179d
SHA1 ed1bef64385e94ce89afa704d38408e23b31fa79
SHA256 c26633d38e0a91b9be70382e916a83d50e219609f7e05cfb2d27dfafbe480b43
SHA512 20011bfb547dedce8e6fceda22c3a3a83db140e8a20844f3b0e8741b4474c1fea73d84708b801e83eae3cd2d8a2d6c851c3f7cd0154c0382a78bc2c2df6b01e5

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 452a2a41dca75a2993494a82995193b5
SHA1 9efbbf3210012cedbaee4b4ddf4af842750622d8
SHA256 feb3c1ea7c6485de137868ae7c3959dc88a16982d3c7ae59c1e0cb654d68db5a
SHA512 c0752d0555510c56d8b459c266cf4e09f04d52ade4f2415b6ba6f822eab59ba50956a9a34019eed8623a80aa32a0f8f86445bee80d0a3205d9d0f30809185695

C:\Windows\SysWOW64\directx\websetup\Dec2006_d3dx10_00_x86.cab

MD5 75c33157d8a1b123d01b2eac91573c98
SHA1 e3e65896ce0520413979c0143c3aa9bd3a6a27d3
SHA256 02daa8b5ac3752f76c3bfd9a505ebf22b1b4b41e44eb92ce2799033b2330d186
SHA512 f0f1f1dea5938e1c7ff2adf7c8d421c2e68e6d3a8cdf18d0f2f3fe1c6837a4f37b367d2d974c35832d1d85a619948dd0f250c7d6dc4ae39f618f5a2893eac7dd

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 aceda5efefa3fecfa06cb939f8bff9f4
SHA1 2a0ea6ec07b0c5a369d264f2c3b1b7817b56a7a8
SHA256 a99703529f06346901e4e262d93f1b8c8e4da3e96ca4c071106c4382ca2558c9
SHA512 f2f03242ac609a606eea90d8f98090f70704702df189e9c87d81d248d2a98a2af74a5974c1464fa29428be10d21aa35284ea0d28d95e81d753906c21c7f401e9

C:\Windows\SysWOW64\directx\websetup\Dec2006_d3dx10_00_x64.cab

MD5 681407075e9b19e5ef2218832f6fad71
SHA1 e4f4d292a36cd9a3034007ef9d2005694307eb52
SHA256 f9bd5bb083bd55d1d2a690bc66d6d9da0b1a8b49f09e811e788c030669121118
SHA512 e983e7dd3f40510816ff3ae836600a186dba827b484b0c346c20e43e229189a86d4cb5cf219c1fc35b77ab0668866446f6e9206b279931c927d4ed66ad3625f1

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 ea20168be941c59ea61bfce11c7deac3
SHA1 f144ca4aa5a1c30bfa4b5163bd219ae1d4913bcb
SHA256 f926561442ba3d43ee6ea8d4b42588b25d5b8a382577fcd89ee3bf2c263084ae
SHA512 dbddece15382d174f9eee716395c4a7a0dbce9c0e8bdd640cba59f134b9e09d300a7daf5728fa0d992f393f40954804ad183bcc18bb759d373f0ef687e87070e

C:\Windows\SysWOW64\directx\websetup\Apr2007_xinput_x86.cab

MD5 b362ec93463d8b6381a864d35d38c512
SHA1 7ce47ebceda117d8b9748b5b2d3a6ae99fc239df
SHA256 b6c1166c57d91afeeeaa745238d0d6465ff2084f0606fd29faf1bfa9e008a6c5
SHA512 cc57733912e2a296a11cd078372c3b43f1256a93ec5becd0d1b520eb210fce60938aa1caa6dbbca03292a05495b5ecd212ee5f77e3ebabb11ef31f1975b2d09e

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 408cca21957bb22716b5d605a9c51bd5
SHA1 a5dbe2a7163afb41f1f615cc0c0d098c60fdfcb5
SHA256 6b38ba9035194a880c460dfd5d48569d6bfedfa099a9931332e79626abf042ee
SHA512 b36c8940e6f3a3d92361d6825da8fa685350b891188c0d3d0a783dd3d461423f1e1bd80d861d2d76300aaf7ea77e17a0fe22b6bcc2f11ab6126cfce34072c9bc

C:\Windows\SysWOW64\directx\websetup\Apr2007_xinput_x64.cab

MD5 fae84e0773a74f367124c6d871516b7b
SHA1 caf8b9d7d4af965bf445d052d1e835b680d6bbc3
SHA256 86ee073c199b5080fe4f5be6ac24bb1117fea42e4bbcd828b4f0ec26c669b22c
SHA512 caf1381cae7417b57faef56d0023bf90c90406748f8813ab85c687ddb81e2498d2f1d5f4bc154903fd5a19836e6f245cd6f5d3927a383f1acc3bcc41b58fd09b

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 57fb131645b8289383e2e621f4c28104
SHA1 71abb1cc810974e75ff084595e16f46bd88da653
SHA256 39b61c1336e7bb95487dccaad47d33cff953589c17f51496a95342fcb17f148e
SHA512 0178f994bce78ef5adbcea90c994a6c7d99813e256f3f86e9559e306f3b795f6f506bd4b78a13a117b4afed36c4b6889b36ffc3c09fab69f94aa0f2404593390

C:\Windows\SysWOW64\directx\websetup\Feb2005_d3dx9_24_x86.cab

MD5 7029866ba46ec477449510beee74f473
SHA1 d2f2c21eab1c277c930a0d2839903ecc55a9b3e8
SHA256 3d4e48874bddcd739cf79bf2b3fd195d7c3e861f738dc2eab19f347545f83068
SHA512 b8d709775c8d7ca246d0e52ff33017ee9a718b6c97c008181cd0c43db7e60023d30d2f99a4930eba124af2f80452cbf27836d5b87e2968fb0f594eca1ebf78dd

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 5799df5b88730847dd657787d59d6878
SHA1 a1bdcbd884c81e29b7e5bc256ecfa0055d8bdefb
SHA256 f064b65618e11a6fef9253c955c36c8af441113aa7609822f2a02bf48c0ee3ff
SHA512 5e0c140dae074b27c81e652cb676855e78f32f6d9a5379654d9106a65f874dda7cb80e5dd8752a25f0c5ddaeae35bbdd43a967af182c79dd5de3636b64d1eba4

C:\Windows\SysWOW64\directx\websetup\Apr2005_d3dx9_25_x86.cab

MD5 9c5dca423d9d68349d290df291ddbeef
SHA1 d9f1cae586470ea309ce9f115525b0504fffaea4
SHA256 5487ed4e969a822e5c481cefb1d4da3066b1d5ec8c55798b246915ecb58a8665
SHA512 9f50599321f45fb7451b0a1c0f1dcbd6b4a4e60ee27b0ef5aa29168c1bce5b08f34329916ea2ea655cd632d0a19c81953c2a5f1277f6a96fb63afc098236509d

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 18b6813f1219a60d1964765f8f74d5ea
SHA1 2b42ab30711bade49e5e6dc1bcf0ba5912484add
SHA256 7c079edb82fb33dbb50e014099db55afb1f338a31b5ee39ac5bc77297195daae
SHA512 46752cb9512a6eeb4a70e1f03f8bb1ad52d9cdae9f1f5a440bbdbcf11de84851390e5634a59bb75463dd7a25fd3ba181c30fb7dc27b087ed1f7c2e5fa4976109

C:\Windows\SysWOW64\directx\websetup\Jun2005_d3dx9_26_x86.cab

MD5 029359ebca4ba5945282e0c021b26102
SHA1 6107919f51e1b952ca600f832a6f86cbbed064b5
SHA256 c44eabf5be3b87cd845950670c27f6a1e5d92b7758ba7c39c7849b1ee1c649c0
SHA512 fa007f257f5267119b247ec4ed368e51fd73e6aea3097e2fc4e78078c063af34d161fd1bdcaf3097bb575d2614dba226a624d060009ee4f7beda697efcf42bb7

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 04160ac95ebefb785d2f251b99d34d1f
SHA1 66aad4137987399fe894886c1848fc26e491744a
SHA256 101654a7dcc364b91670353a4cd396204207866229ab9be7a648b5f66f9d9fff
SHA512 7199b7f9d6bec65215788d14919d0610e67f98cae58f99cf91044bf42b86a9c7579a400322d19bf0b30b983e46e48e4e8ad0ce2d65ade0312f3ef6d488094106

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 d55dd0f19164f6590f3c2b2175ea076e
SHA1 e847a31ff947ab2011587b32bd10e159feb66fa4
SHA256 ebf31697329a1e22e6ab4cc3c97d140fa76366072c518477425779a9288df983
SHA512 7cffd63923efc25684d22292019390a2110149f377d02d2a1928d834c023f5f970bd6fba34b5e1c55d09a82cfa2491cd4f740d7fa65c90fec7c087ad84c241ee

C:\Windows\SysWOW64\directx\websetup\Aug2005_d3dx9_27_x86.cab

MD5 3e91448a7481a78318dce123790ee31a
SHA1 ae5fe894790624bad3e59234577e5cb009196fdf
SHA256 8c062b22dc2814d4f426827b4bf8cfd95989fd986fb3aaa23438a485ee748d6d
SHA512 f8318bd7ca4271fc328d19428e4688da898b6d7fb56cc185ad661d4a18c8169392c63515d7dd2d0b65cbd1f23892d7a0a5d3d77a4cda6230ba03b3b917e5c39a

C:\Windows\SysWOW64\directx\websetup\Dec2005_d3dx9_28_x86.cab

MD5 b1ccaaff46fe022439f7de5eb9ec226f
SHA1 8bb7225df13e6b449d318e2649aeb45a5f24daf7
SHA256 645f8d90b07c69330a8c7c8912d70538411c9a6b2813048da8ad3c3119487f93
SHA512 2b59c07584d45705273a975a0223e4443db190675558ab89d92e1572de4843be3d0d1267818b19185e4e438a8bcfa2af5fb5ef2a119da270be4540576fd78c77

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 6a0ffec5520dd9526d53fb206e92a225
SHA1 3935892003d2c3f6e87c24309515d1668e07dda0
SHA256 13f74a30aba7102226de97797839832b44d9987ce7d23c2c711903a5709b25d4
SHA512 63267ddca50a97491d91cdced635dbbdcbb335cd92c831e32c3e1710c71ef8558d332da0496276c2630ce5f4d840f7eec99788a433a768ab543a6c0affa0d6fc

C:\Windows\SysWOW64\directx\websetup\Feb2006_d3dx9_29_x86.cab

MD5 f6cc1c08d0f569b5f59108d39ce3508b
SHA1 e9cf7edc8c9c4b57a9badd8386a2117ec5785aab
SHA256 4114e76799af3da9db3dae51305dad70a05b757e506e4a327092d536cca7ee75
SHA512 86df72d5b15396acb504c1ac9de7ff5c0cc9c95a90fdd82daedc55baad490cc47a71cb511571d37e25dd9bc1ee9652b9723e33879bc1756a7881a8e61ebc59ed

C:\Windows\SysWOW64\directx\websetup\Apr2006_d3dx9_30_x86.cab

MD5 b3d644a116c54afda42a61b0058be112
SHA1 9af7ddc29eef98810a1a2f85db0b19b2ec771437
SHA256 ca7b9c6a49e986c350147f00a6c95c5b577847b5667b75681a1ee15e3a189106
SHA512 a2d2f12b7b37bd8f5c8465dd13ad31942df11ee5ed5423deeeb178e6b594587706d2c5116258be1562caa5eca691358af3cb83b77898d1012ff521017d199165

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 208a0178719bedce2be85ef5fe6a63a9
SHA1 2766e44abc141b7882b7358af2949b35f685b451
SHA256 8411cfad15a867ee01d7bb5074ab8181ce6cb45197777bd9e7f5116aaebed3ec
SHA512 f93c9d7f6f037d8d14d7c519f15fc9154986fef11387bd1bd2aaf2ccbee87852839805e3a1ba1a7748b08773e60ee3ff92199947f7b89703e62af7f52ae16100

C:\Windows\SysWOW64\directx\websetup\Oct2006_d3dx9_31_x86.cab

MD5 f778928c9eb950ef493857f76a5811ad
SHA1 ea82d97077534751297ae0848fb1672e8f21e51e
SHA256 4891e2dea9d1798f6a89308e58c61a38e612f8433301ea2376ae14c3dfcb3021
SHA512 1f382a287fc6763b8e8d66825e8256dfb7d0dead6b6a6b51dd7c4a5c86d536cc7ef4128be0ce495fe17c859018750072dc7b43e3476d1ba435f209cc4eb6d43f

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 df7aaa2082cae0042f101ebcf91e50db
SHA1 678a1b45628af7b8209a42a74f97fc71278373ec
SHA256 36a9f0b234a4b274ad23d470224dcdab49a81a7f54bea7df9f0247a33a3ebf87
SHA512 cd9d8c227a2f046df3d1abf6a11d9c0780dcf0275dfb9451ee55b527a55d322918ae148ff1a685261ae6bab5d906b58dc2584ff77f1bb19783bb97b3160f4f0f

C:\Windows\SysWOW64\directx\websetup\Dec2006_d3dx9_32_x86.cab

MD5 a5bead938afdc63adfecc1daf5049d7f
SHA1 b3d5bf56f6b9bf87c33009a088ba7785b6363b4e
SHA256 a1cc7603302ee53d54f4353c223d95e223706924d99b864220b13814ef93eefb
SHA512 c9244bbcfe60f347ec8785b1a41b6e243153624ea73b16db4d624239a69fa76d2df2e54039d8f4d2c495890ac17b676e390f796118b4e16d9f03683247190362

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 63518869d9d2e89f54dc6ac7a72ffefc
SHA1 5b33084c8ebadf526d02caab42682a675f1722d0
SHA256 6a19ec15b0a4911b2647f240bc43ad7d0b861d131acae2bb8f0eea2c94249399
SHA512 420fe218edafd10376a64065cfce60a92bd4b488b7eeac6df0b46c1c823c9274b307454588e90b92d0a97ed34ab9254b472daa58d3815dc9dbdb9dfc53c64526

C:\Windows\SysWOW64\directx\websetup\Apr2007_d3dx9_33_x86.cab

MD5 a5915ec0be93d7eebe8800ce761ee6dc
SHA1 e8bbc21c2b5f0e5801286f07e3da09dbc67c3961
SHA256 efa2e6de548401376a575e83a79de019aa38f191d63fdef3bd2b07d8cb33e3d7
SHA512 02259ff3c8478cba134a8f8408aa624b7165ced97c0aed8c9626034599dd5439f84d1af9eefc4191898b0a524e5ffafb9875ec00e740cebe97eac4c2dd0e31aa

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 66f8bab0d42590d51e5aed1ca6dfdca6
SHA1 47ff83321ea2c4218330a3f5a3c876c6a9a35b2a
SHA256 58fad17da80f0ab474f029b87f3b02d33876d4f098a9aa4f0923af347493c457
SHA512 e5eaeb30d1f32defbdc2e4794289be97d34b38c3b896f9c99c995a33a9d6d65fe7a300acc1ff2794ac0f315e5f7c366f023241d29264ba4b5b2c7f4bc445df1c

C:\Windows\SysWOW64\directx\websetup\Apr2007_d3dx10_33_x86.cab

MD5 f784b8a0fd84c8ac3f218a9842d8da56
SHA1 fb7b4b0f81cd5f1c6a900c71bfd4524af9a79ece
SHA256 949068035ce57bbb3658217ec04f8de7a122c6e7857b6f8b0ca002eb573df553
SHA512 01b818aa5188cde3504e289aedca2d31a6c5aed479b18a2c78271828ae04bebcd4082051b7f4eeca8a31e8ee5adba158420ecdcb21371c735e4781ee5f661dbf

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 4974f9e6020cd08ff20e80e177c973d8
SHA1 ee476af6c3ba5c94e12aa2a022b87aa57eabaf45
SHA256 6ecf76467882fca643e9792821c18df630b16b0e4f446ee50c8d7b8a62e50e64
SHA512 ccb985c8d7d9ffe9f0d62284cb8d824b14df54104c238a9687d5967b56e77591017038079bdd3dcbad4d9fcde04a52cb46930e90425342641c89c0a305a4d956

C:\Windows\SysWOW64\directx\websetup\Jun2007_d3dx9_34_x86.cab

MD5 fe8feb215fae59866dcd68c1604d97aa
SHA1 cedaca678d15e78aa458b965abb467e8964a1fab
SHA256 1c1e1c6f68ba556a0af09a38c32eb421c543a4848c4b42d25867c98dab3b3a50
SHA512 9955336b561e4fd3ba3da7fc086643e811048a25a7e68344d2cc5cab091980baae1c04ce41328b59c896662e2875886b78ec869852b2d1daaa46af38c894a3f2

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 fde094f7a3483e5f43b8c775f6bb18ec
SHA1 000d48cf8547bc7371fc0cc854156840c391f615
SHA256 3f6c60f017ac9e5f8019e41e11367843a5bbb1c80c32c5e9cf16b8a0fab67d5d
SHA512 8c510e0be0e9bbfd49186ccc6f2b142aaca448905f5ddb6bbbafa315f98793ed79b589934d6c1defb8106250ffc1988fafaf1fb166be3b950cc4385a01d15aa4

C:\Windows\SysWOW64\directx\websetup\Jun2007_d3dx10_34_x86.cab

MD5 19383cbada5df3662303271cc9882314
SHA1 123c97c33f7ef2ba345b220450f181d440412e6b
SHA256 8ec971c91040618338ac2369188f3e5d7c85a5b1e3b9fc8e752dd845d295cdba
SHA512 a4c6acc9ff656e05d75ae0081c65c200b584209c99fd001494c4d206f2ce8a78d2dd3644e51018574928f3b9e9373bf7ec8c5147a3590b54d1c6d50e61342853

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 470705fd47fb6cc7fccd65e4cb8382f6
SHA1 d2966f90572a01b49ab314aea0beebd2395c5765
SHA256 35b2248915becaea7f1fea2fdde13aa5d71d6e762a7eed1d275f88f8b34449b5
SHA512 76486623db3452fa6ca37f1f5e8cfb718c58e15c9a93fa21f34730d49f021fc818d08fe363a5e0e546cd55ed1e6d7cf488d91fe7d97b040fa3769a8c24ab6adb

C:\Windows\SysWOW64\directx\websetup\Aug2007_d3dx9_35_x86.cab

MD5 3ed592e6cdae66b1c0671d9ec417a738
SHA1 9f083ffe00a8e5eabf282130cd16044b488b6e0d
SHA256 4914d2b5c3251b00c0cc236f51afe469728d92b50c953c66d213f079ac928eac
SHA512 0144dd9a83f953eabaaff3c41f17a363100c9a2ccd932321a4afe990d8fcb5a430e842de9146c983409b6366cd974e318a535e6475b10839a6679844cb7d23b7

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 2b821c74d2e062c62994d7c95b079ddd
SHA1 63187467c9079b80cc4a052ef2d163e6884642d7
SHA256 8e781f69d16f7836dfadd36f83c68c601580bec6de797d4ee64a48737d31e5ae
SHA512 f8cc702053f37298302fe5829e55ac9186de318a873451cb80a5455c1eaa98798bb8a76b43fb2a5740addfd51957f25e87f33386b364dc5125cc36c43df01083

C:\Windows\SysWOW64\directx\websetup\Aug2007_d3dx10_35_x86.cab

MD5 ddc4af0d53b477e5af77942e7118b66e
SHA1 81ad8201dcf653a6e977c4506a274d0bac12643c
SHA256 9536166ee7cc1100cfe24e01532e8e4deed6baa838b4c025581f2ca046a25915
SHA512 1e082d7e7855bc0af6ec09d4a69fd4a1b0a3a31e4de8faa52fa0bdcd601c501ada6216dddb83058f37ab4a371068e0f344bdf42f2551943be19bd719d99ba93c

C:\Windows\SysWOW64\directx\websetup\Nov2007_d3dx9_36_x86.cab

MD5 c5e127067ee6cacdd2f8962e6005542e
SHA1 22c571e4da75a6e5dfe02e3e3587f40c2939c745
SHA256 f52cc1304b533083b3fc5553c49433c0e4e46d66d567b9de0b558ca518db1544
SHA512 e70df11af8cb5d51c3111b8327371ea40292580f06d7d265f2449b89a4941c4740bde904367fbcb4158512939bbd7c7a3dc20d3642475789fc075a2ae8e27860

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 a84f2239c4f5d1179ffc05a09a6945b6
SHA1 ea6ab540ad81b6e30cd349d1884d53a96b3789cd
SHA256 5d455aec145c442f759e0b4464ba5eb8b10b2df1cc4801d0ec134c77a2a9295c
SHA512 9be16704682e7eb84b3a666c04900a55c32d6cbdec87363993d8702954dae97539f338108724247ae6095289269ddc25f4dab8501f51d751600ec86249a5214c

C:\Windows\SysWOW64\directx\websetup\Nov2007_d3dx10_36_x86.cab

MD5 3d9a0c59156d03da0f19c2440e695637
SHA1 55b050991cb17410c75adc3913066baedb482ed0
SHA256 bdf7fb01c02783a4f8c9f5e7911f5cae3e2a7cbc425b90b36f9ea6eef2c27de3
SHA512 e9a662498c43865e917f0778b772d6964517e41289cbf5a0b8a4e44d8c4b4e9a5049c76f2ecbe4acc7e9cfcc3f1d87a75c3f8703e66804ce758969814ba14fda

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 cfea96998303761e9a9b20a726ffa079
SHA1 0995eb14bfd245b795d1157ad539c8c511ebd506
SHA256 5f31262fbc7876338e63845e7dbbac366dbd1e2d9efdd062f07dba4c1f225239
SHA512 e04010f1a06620ef8783bdd041446a9462c008457302795602730df8fc4cdb1f1c113fb8218c85822a3c2aeacebc27d49bc93b266419f55c42a190ecd230d943

C:\Windows\SysWOW64\directx\websetup\Mar2008_d3dx9_37_x86.cab

MD5 8ed75e3205c2b989ff2b5a7d2f0ba2df
SHA1 88846203588464c0ba19907c126c72f7d683b793
SHA256 91a50d9efcdfbcdf22a91d6fbb0f50d3c2aa75f926d05cc166020bf7aaf30e28
SHA512 d0cf0e3aad9c8c43a927d1bbbd253b9fe4c97b638ad9a56f671ebeda68fc9bc17cc980d93095fbb248dd61dc11b7e46c22d72cee848b150f7a13ead9e08a7891

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 cd45778ad52aa6468971e2685807968e
SHA1 54e914f6d4d88bbdb97f50abff953d775f7b7b24
SHA256 5ffc9c8ddadad4cc26dc6758b142d86b882a0cc840c53503b923e5e70c6507ab
SHA512 c588a88fb1d1ca74ce2bcda0052aaf994cdfda94d80657f176e4579be17b3dcc9d7803872fa68ffb62ec6985c7770662ad491a309816f1239f1edf5886e91eda

C:\Windows\SysWOW64\directx\websetup\Mar2008_d3dx10_37_x86.cab

MD5 8234b9b90bcbb5077e1b5faa0b66d1a9
SHA1 e9207c572fdec592b7c17a7f9c6f875c8a55b1f0
SHA256 6a2727269e6cac7c4d2e316333d29bac0dc1cd7f51c36c0c08b0388203dedad2
SHA512 74c94a6e092d7c828fc1e3faee4b21917afc3cacec04f260754190d0533f93a58289763ac620e5a577f7865902023b30548cda4d9e968c90ee13050ad6d1e8c5

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 f13f8934cd9564ef66210fc820fe97b4
SHA1 ca0b88fa3759a45709bd1a27723ceb8051f7bb35
SHA256 e2edbf8e8bcf7edbe0671b9731ea75e377157c5fb89bf332aae3882c68647300
SHA512 007607cb7a26f9209325984902baa5719b7861e9a799138f6cae82e14a023db37cc5a54389a1df21328008107fdbc247503d4b9c0f2971ec13df322859423a08

C:\Windows\SysWOW64\directx\websetup\Jun2008_d3dx9_38_x86.cab

MD5 e2fb2e37c342983493c776bd81943978
SHA1 2a8f3c45cf979966d4d4d42a4d34f05c72c7e29e
SHA256 57e57a6348e55aaaca6bed5e27bbdd0a4bd0dde69c77f4d26c805be6384be927
SHA512 2d297f607c5a098a3d2b19e7f88aa12f720af3c23fe6ddce7d4659a9184d1cf8f8a76f35b8acb639b48cdad8998c919215a03b89207e2bb1829ea3d8a9efb95a

C:\Windows\SysWOW64\directx\websetup\filelist.dat

MD5 6460e2c4de84713242c3154059b4e12c
SHA1 bf58b021238b18f37dc6d18384db94534f9edf6a
SHA256 57bc21b86044daf245e01b6e546994ae1ae05a5d7f9c4bf4f82f6f3435935514
SHA512 073b7cf4c06c2d7b54cfd6f6b43d32370f58d60aed48a2fad4a611540187702c3eac88a865f8afc0cda8cf3dccee4156fc38075145fbd4ccc7997e3685a941c9

C:\Windows\SysWOW64\directx\websetup\Jun2008_d3dx10_38_x86.cab

MD5 b0e2b612daf28b145b197a4db0a9b721
SHA1 f69266e4af3d2de31a2a2e416f10b0f44737739a
SHA256 e8dc1063c9434eed8d633741b19cdfa1889581041e2214b87b5159e3ea087f3c
SHA512 6e31f18cb75ce69d291d0abd15edadf02c0693033351dfb2f435312a47540aa223c8176209725c14a05fa6494153a3e191b2fb7cb8c5cee11fb42371ce67392b

C:\Windows\SysWOW64\directx\websetup\Aug2008_d3dx9_39_x86.cab

MD5 4379902c4180a9a6bf40b847372cec5a
SHA1 c7fc8184d5620154b9bfd6fbc8820a78c4eee592
SHA256 61e703e8d231412f135b4aba629122d9cb69ac9ee39fa3cbbe6b95de05097a8b
SHA512 9269f49a5ca90143c50b817e9f5aec0fc4c32ba1b6d3a21cc5448cad21a16a902540c8cfc1825b124ce39e0bdc479ade4354b6be15b2067e3033e04998e0710a

C:\Windows\SysWOW64\directx\websetup\Aug2008_d3dx10_39_x86.cab

MD5 5380053ac4c344bd38604022476b1c1d
SHA1 043dc8f49bca3bf0bd85e858f5c2eedf68565c0d
SHA256 84800c55f773d5d6913e344e41baba58cf07cec2e6c7114ca3bf48e8f355419f
SHA512 f3ce2def6e2e8a1d2c07f627e3c437a1bba0b2e456020a84121346472be3d28e0fc69623bd408f35a2c639c83dd2787f998dedfe42b7625dc71500824b035fec

C:\Windows\SysWOW64\directx\websetup\Nov2008_d3dx9_40_x86.cab

MD5 75556d89fdd442967a23993c9111d997
SHA1 003de53653c0cc84f8c3d617d1f76fb475f1a7cb
SHA256 863ac3438f57158d4f53900c6924bfdc132ab43a5af57d4658e65842836b4fa1
SHA512 6086114500dbbf4db9d0a9c3f72732995bb9a3ab5c135ead53143749b95651b37b64be7a52ca09388de90216fd00486fdfcfbc87d42d77fac469f82b5290e06d

C:\Windows\SysWOW64\directx\websetup\Nov2008_d3dx10_40_x86.cab

MD5 5dfeb46e60795266da03f2d0a67e7acd
SHA1 a77758873e5544e8ad22acf469c4a0fd0c944a88
SHA256 ec52b075a3e9c7fe468b317e0ff977964b1003d560065128741f4392bf47c49a
SHA512 6ec058811ac017be3cd3a46559cd73126666f41b0fa58d92c1168cf2a2e0e2357b19f65531c786ec81a438975dbece440c5e7b6c653afa5428ce6c444179af6c

C:\Windows\SysWOW64\directx\websetup\Mar2009_d3dx9_41_x86.cab

MD5 901567428d8c82756d7bf5a406441bd7
SHA1 6e3c22147f3da77ac8f20d615ca32b5ef2a0ed28
SHA256 32356344aeddf709c9d5302d8f3fcc1ff1be2e82d8d17833a2086400af248794
SHA512 6fd4c429e32480bdff4e58ba8bc0d28fe97c9ff5ef1fabbb856230efa669246a354f99b723e7483d548b74c121ac8ba9cba2b5bc3c18f35ee828302d392cf6ed

C:\Windows\SysWOW64\directx\websetup\Mar2009_d3dx10_41_x86.cab

MD5 45e83cba5710a1de7d3990a288122e85
SHA1 23c4bfbddcfb11acb7c47c409825f039af7eb908
SHA256 b7da29103cdf374de0c09713cb985035eac45fb8b394d3b8157d8a7562a89899
SHA512 8c56d376d349aa00948e1f3c6168dade76ac9a26ade1aac5a385dcf0253602f5a2973483d083425195db6ad7717494fd3cf674f5549774ac608cefa2a88bf0a7

C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx9_42_x86.cab

MD5 9bc8213933598d050827d20a4573486c
SHA1 e6f9ba62756a00c53746419dea221881aeb336cf
SHA256 9c96b6fc4df5c0efca9f0d653976772b2b964243214f99066e4ca4aa6df791dd
SHA512 a1920d042963cdda41df44044de5b94b4cee6efa102f633214e384918d93d2d6a31eb388bdbd00c7e9c199281e3b71caa5242e9a42e7f0be27edf90a3cf6890c

C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx10_42_x86.cab

MD5 f264af5a36b889b4f17eb4d4f9680b4f
SHA1 1df087ea99d321ec96d0d2f1c66bee94883d6f08
SHA256 bb46189eb8cb7769eb7be00cfbc35902072fa9408313ef53f423e5ae5c728f61
SHA512 73ae1cf3cafba148f4e5b4d8ac12a7aa41f6ecac86c139c6a7714f90f3dc61c444dc152a3ad3c2ca800c1a1f4955a2b508735f8490666b57d1420fb7a7bfc269

C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx11_42_x86.cab

MD5 dd47f1e6dc19405f467dd41924267ad0
SHA1 85636ee0c4af61c44d0b4634d8a25476cf203ae9
SHA256 39ff69ba9161d376c035d31023d2fdeecb9148a2439abe3afd8f608f7e05e09b
SHA512 f77c4cef5cb7e927948f75c23a190e73d6c75b4f55915859046533a10aa3c5abac77d8bef71a79368c499c85009213e542094b85b94b69e62aa66b60616777c3

C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dcsx_42_x86.cab

MD5 73ba11ce0e936726fc9fcb882f8b91ea
SHA1 4a4babe3ac751e60ae6b5b0d69c93fa53d7fcd21
SHA256 a9a704b73531d6bf59a421ab5c046c19a16d2b0b07f09816dbe9da4550a24b17
SHA512 9a198eb93d5623651d2981a277eab4c345c08161254d0127d90c97344450ac1a7fd5c8ac840048a43a347e3296b286b646ea0fba88f0c7bce1ceed1484112d56

C:\Windows\SysWOW64\directx\websetup\Aug2009_D3DCompiler_42_x86.cab

MD5 87bdae64fd47a75f867a290ec7b8a4b7
SHA1 dd9e69e1815e8bc161e8eb89a0f2a296074bb95d
SHA256 6bd32337826f5a5141fc06391919a249e984150905c2546dc8bfc33d41a24e82
SHA512 c8f7a490722741df4e03823880c6d623ff16ab648a40c1b1c8f7bf26c92499eb34c4596bf239337cd23a57974757958ad9a30d42a4141dc0e7522f998ed3893a

C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dx9_43_x86.cab

MD5 bf124b64fc3774f61d30de0a405f0c6c
SHA1 2f8a8babfa4e51555fcf125e8373d9c5f7f7434a
SHA256 457c5ce48eaa0fe551b46dffc1e4dca985d261686d8d4e6bced533ee1f682fce
SHA512 935922ce74bd399e8358693562f86c9b4b6308a6e33586a5dd61924f8b6b2cfd6cb2e472fd082b9ea32c0abb9a799a0ba9103b4c316342f8072a7a3782c2116c

C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dx10_43_x86.cab

MD5 591a61bd06c73c70f93dac5af2d8e924
SHA1 c9d36ac5e2acac31a7413d22ed1c09c71cc96ffb
SHA256 f0bc06ceb484d97cf01526f9223df7b4357d166c4391869f2e7d514dc1fe769b
SHA512 3e2e3318a700a6ed82a21018403ca99728c8a56b7df81f99a5d705b586cee1141586dbf19a01ef1f1a72ddc8f45ddb51ba5769ae4634b02233ef1ac4e0fba5d4

C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dx11_43_x86.cab

MD5 061bba3836b3ffcbb01b150467bbe951
SHA1 00d8fbcd4068b3199d3d393bb4b86bf82985480d
SHA256 b80db68cd82caf8bedaee62808171b20c546a76499c3ad53014e3bd2fbd2918d
SHA512 aec8327e1ccc0b33b3e32d66a5ee25c4b70a227b708d10f61ebad2d998f3be68145fa85c50baa16a21ee766b336b1432fbec02c75d698793092015c832b6fc26

C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dcsx_43_x86.cab

MD5 e34c0cf1bd5a68c80bdc709a452eb322
SHA1 4dd4553ec7e2e42d51a716b1f4cb58588bcaa164
SHA256 799b517227812252481c9c9b22cf16ff185ffc20b9273612c8a37153b53aad93
SHA512 3488a52f6fd3681b10624546b923368245f969330d4909e91c5b58f159cd24b258a8a2274d62243ca5ca9f1fb40f9f248b3bd92283f775dd24baf68ecc5fd03d

C:\Windows\SysWOW64\directx\websetup\Jun2010_D3DCompiler_43_x86.cab

MD5 e7dfa140cb0ae502048ecdf1e42360e6
SHA1 4db08318f78f076fcc6ff29737b3d6d676f59c54
SHA256 293ced557ad732abd2737333df39b08216f31601d7ab65b743fe51b4efb8b6f0
SHA512 39b69a5cc4a50de72d031c41879ed7644b577a9e3e3b44bfecc61d5312c7c32c964dc2cd37db711f7e486f444ca77fe732c642f3e494e6da1bc1cf774d9ef75c

C:\Windows\SysWOW64\directx\websetup\Feb2005_d3dx9_24_x64.cab

MD5 dca673a8f9f834f9370862d1c97fd9e7
SHA1 1a0cf0fdda2c9e8abdf5cc19fcdbeaf1bc1639e7
SHA256 be3de63f136a2b41d3229e477ce2cd7f67ded031b4b370e640c39b80368238cf
SHA512 255270bdbc1dcd6a3213d8f0da2e48c6445b0141c5148edd1dabc9ca4643667651694b68013412a4f2ec90ccd60a757f64a9a76e2576c4fcb056dde726a6f67b

C:\Windows\SysWOW64\directx\websetup\Apr2005_d3dx9_25_x64.cab

MD5 e961a77647e7fc2597a68ff572f730e1
SHA1 976d1cde1ec28a4992e1cbc345637447115f14c8
SHA256 a239e99d02fbfc9d30d5b705aa743fc070386faea1a66b3d67099ab446568a12
SHA512 cf72ae18e99942d959bce58678f544a10c98802d919adc30737389d6cc0d492f8d7902e0e2cd04501fe6429b96c782649658d2d35c879a202c23e88570a15b94

C:\Windows\SysWOW64\directx\websetup\Jun2005_d3dx9_26_x64.cab

MD5 05103e47f259fa22d27c871e4cdee7d9
SHA1 502fa5d15fe56dcf64431bb7437e723137284899
SHA256 794e23d8b08f88bb0d339825b3628c24cd0297195657f9871ee6324786fada36
SHA512 180e0abbd97b6781c6639c6ab2a2355400b8e32784a8469c3cbedea23b121cac5ba17f6aa509610d0a1e5830735455690f574054d6224a6a5d2ae70edb601835

C:\Windows\SysWOW64\directx\websetup\Aug2005_d3dx9_27_x64.cab

MD5 a9f4068650df203cee34e2ca39038618
SHA1 cd8caeceecd01dac35b198b42725cbeb5b7965a7
SHA256 3500c1a7cfb5594521338d1c29946d1e4ffa44d5b6bc6cf347c5bbbde18e94dc
SHA512 c92fb461b53051a22fb480ba5b6bf2706614ae93be055b00280be4dace19c1f2a9327106a71851b0e42f39e4172ea3a027f7ce878bcbcb252b723eea49dbcf1b

C:\Windows\SysWOW64\directx\websetup\Dec2005_d3dx9_28_x64.cab

MD5 d964ed45ff274da2c8f48e2cbd00aa9f
SHA1 5c2e5607065238fb24a0b65ddfc904406615e2a9
SHA256 daf10a54089755f9a8aceff0c7695f1aa42d35e3179da5b9bb91e409036ae547
SHA512 a74e2dd4bfb037e5f5a1deaa86f9c4a354f023b62e1f2075509fb707eee1725b1136441d1059bd3929af1a44f6372dabef9cd15d386a77b2b22a532b74cf16aa

C:\Windows\SysWOW64\directx\websetup\Feb2006_d3dx9_29_x64.cab

MD5 33618039dac4e97c813e5bc1a499e6c6
SHA1 c792b9d0134df698476c2fa4179de6bce8aa583b
SHA256 a5ffaf9d58da5d79402c4dc93e79960f971d2701d4651bb33d18925af641f11d
SHA512 35b490903721ca5faef73815d4f9c6f52efab1fe82a4fdbd7566a1b028525afd29a72dc68d4b7d219cfa5cb33fec241d6b2784f15f9795d368dc356b3df30b5d

C:\Windows\SysWOW64\directx\websetup\Feb2006_xact_x86.cab

MD5 fec720c0c15c43569ea9fab7ceafea95
SHA1 c65235b40865725a00675f1bc013ba8b77307669
SHA256 6456fc26622f3a72b9449ed0e61874cf1adba23cccbfcda1324f033fe0788fda
SHA512 8edee940930e3c610e709e2c6348abab479628bfac71a0c507f46af8d80f1f0c6e31c7c44af5f884668ce472b281ff18cb44a97ab68232d455b7bc8f89a75268

C:\Windows\SysWOW64\directx\websetup\Feb2006_xact_x64.cab

MD5 582102046d298e7b439c819895f6061d
SHA1 09900f44668350118589f18c693b131d7c1f9238
SHA256 c91a6380c65853e41e2f9593b954f3b5af49bcc894476d8eb78cd9f8b6dd7da4
SHA512 8aabbcbc88489ff8828d532be5c1bc0d33d7960f41c7b38348aae73ba4777999f4358466d061ddd8291dbd434e7741ee2c3215a10f8287be36209e0842c4eb2d

C:\Windows\SysWOW64\directx\websetup\Apr2006_d3dx9_30_x64.cab

MD5 5ec6f520f3afcc6494ab0d43b690ebd4
SHA1 2359e14cb6da44aa89a3815e905d6ffd81960d02
SHA256 27d99894e2a68601f46487c9999723dc83bcc9c6f903f2e2622d05668035b015
SHA512 9db4a9581edae2681491d5e13228642737d0d186e0e1672b063482b2e699274acfcb81dfa9631902e93e009adc0bbd9447061830c8ce2fead6743e2d45aaed60

C:\Windows\SysWOW64\directx\websetup\Apr2006_xact_x86.cab

MD5 a2132a62f9ab0bddc3207166dc014581
SHA1 53b19ac3e6c6752011ba641ee3c409ed10c95dd9
SHA256 52c71c89ccc22fed3d7c985a22c464451af34b63b3a26a3799bc25d881221ebc
SHA512 76fabd7f440b6f9b409b0b2635ead4ef332563a9bed738a722a7c6b9a077094154bf735caf02c67191b08ab0a19fc03e05ef3d984f6e34dcf3bd587a05d2f424

C:\Windows\SysWOW64\directx\websetup\Apr2006_xact_x64.cab

MD5 6ca70cdb3fa575506ba4035e9a50d8e4
SHA1 a2a20f5f95a1ab293a188a55bf593a82ea0dcb7f
SHA256 f82b2043b470bf0e711c3d05d758a379920340212437917b5d98af0c14e7bfe0
SHA512 a453ced526332ace37861a0a862fff3710ef74ed57965f28dd279f526a2f33c390e82fd2c49bee75476e5b4c349c40a71eee49edac720236a16780dfd700fe62

C:\Windows\SysWOW64\directx\websetup\Jun2006_xact_x86.cab

MD5 cfcca19d60ec3d822ed5ec8bbadec941
SHA1 ab0e87182877991810af48f1478906c1e671829e
SHA256 23495764aba10ff35cf9d23aeeffdf38716219d8a155ae29162f01f7fe6a30cf
SHA512 2acaea2de2d77bbe8206e8309d48a4cba432d72fb9bde2576bce7a31ee29fdcb0d44c2b996e8dc21a31bcdb03c806e11ad53b74d9c4c972436d5202825900c01

C:\Windows\SysWOW64\directx\websetup\Jun2006_xact_x64.cab

MD5 d404cced69740a65a3051766a37d0885
SHA1 288818f41da8ab694c846961294ee03d52aea90d
SHA256 5163afa067fe2f076ab428dd368ba0a2cf6470457ba528a35e97be40737a03c0
SHA512 87998e67b359c2a0d4f05dc102f6c4db4f260903385b7558a2c1a71436001d5b18f42b984e6b279a8197243593c385d41f51de630fa31c5ca5140f6970f87657

C:\Windows\SysWOW64\directx\websetup\Aug2006_xact_x86.cab

MD5 e16f0875713956a6f9cd8c5acad36e51
SHA1 984b821eaef3b549ce0b12f72a405a93e51a9dfe
SHA256 31b16f93be7f5f9bb78e9ece6da96565d50a0bc1f66b206b7a21c601a308dc53
SHA512 dd626d5552eaf0c1dbd32bc4dd84811bace74c6350eddac692d3c3e8c393f4a19c26e8f2932f54a14648448912e6b87c796c6eeb6da9b2c55ec4565983b76189

C:\Windows\SysWOW64\directx\websetup\Aug2006_xact_x64.cab

MD5 4ba26f9dccaebd7be849a076ec82d6ff
SHA1 42fb0d0089d8bc92735820f475968f59af4e4365
SHA256 13e7eb934a7596e7c3b7d8a0962e68da841d9c73d154825dc982ff6d05cff221
SHA512 4e4fd8a31ac3c2f8cc66d434103c0097ab3fbe2c2e8140aae2f95fc4ac1927aae9cdce8730dd7c4dad785d9a653d90b0f914b258bb5695c68ca93f605ac82dd4

C:\Windows\SysWOW64\directx\websetup\Oct2006_d3dx9_31_x64.cab

MD5 edba7bc2a22f3186420c271b7291dca3
SHA1 65483db4269be348528fd205239b811d775421ca
SHA256 4f5cffa56fd44f7775f12fc511a1e3f030c05ac78484f6866b12b82979067c22
SHA512 90a9fdad3d7f933da8c3731e42d262034907d8088b85d7100be46c57def02b436c31eb9ff144b9d67fd931f92a1677ec0cd762d9aaf066bb026f139499ba3a66

C:\Windows\SysWOW64\directx\websetup\Oct2006_xact_x86.cab

MD5 4fd2b859952c008de0542053b15bf0d1
SHA1 0800cec84b51fc6362c871fab87a09db5c4ad6d4
SHA256 f6b6ebc9c239c5263aafaa63fd691da5aa715e9c794d5fd663e86559d5c6ae56
SHA512 d656c3bfe4593ea9084a5d09f0173c8f6b7d6229fc7e3f6757ac03089cfa94a7337bbef0456785b79d777b976f5a8259056d2ddcfe0f74d78c304a02bcee0ad8

C:\Windows\SysWOW64\directx\websetup\Oct2006_xact_x64.cab

MD5 cc568d26b5b4cda021d528cf75b21699
SHA1 dd47a33950c9e3a88defcaa7ea331fb1f1bbab97
SHA256 662d4e5d005cdba02fabb0d7a68a7b48ecafdebe21718d892833d5c482e5add7
SHA512 24b53bbd82dec594d9909352d1f2afe69b6f082db99aab3385826c4e8d22f5c075f3c5a24c8104dbeef2d894980319af141c65d768a51936c75092a846f3c8aa

C:\Windows\SysWOW64\directx\websetup\Dec2006_d3dx9_32_x64.cab

MD5 2290064562f2d6d197765f4edebc5bf0
SHA1 70c2e3c3eb521ba4c46c428d57166631f86512c8
SHA256 da1ce01be39f41f967282849715e8310dc1887bfeb92c4e0166d2c31f00647f7
SHA512 b25a517de79668e3abd88acde835df4a0d69e70ce0e001db31d5debcd812bce46f4ada5e07c036c7bbe88d6dfc9f6531b2198f03fc27fa46070c790b45955dec

C:\Windows\SysWOW64\directx\websetup\Dec2006_xact_x86.cab

MD5 082b7d69f96799aa2ab1a8ea1fa2ab88
SHA1 75c7032b749259977c947a5103f9a4b92c2025de
SHA256 b98e55c654b9ee6f6d040665d932bea7a1299c56cc9996eea900ac4f5649c7d3
SHA512 57c96a4c99ab9a7d33a8cc81a3b4e2ab58fe3a2fbc7f79ad688c7d0257d281c662d4ce0737f68c00d15f715bc6177d2ff9cc32a69cfb77216265fa56ff79dd8a

C:\Windows\SysWOW64\directx\websetup\Dec2006_xact_x64.cab

MD5 f34ffbdb67dcf84092c9d321e3343d3f
SHA1 52fafa930c3464e070e1e4692d4600b12678e9d7
SHA256 bdaf9c41f83e65de2b73aaca2002541d48c65f551cfa0578b3259d3bfca54ead
SHA512 a78d32ee71f5b4214e9b8b95fb8bdd4b629d34529fad7a494219175ce5cc129a3f5c500d426afe0de6a680977fb86abf0b77be353d8d19d6ed1a11c421c6e757

C:\Windows\SysWOW64\directx\websetup\Feb2007_xact_x86.cab

MD5 a09f7eab35816d682e7432dbb36b047d
SHA1 db67b9434abaa8e7f166956a1c8d01f536162c21
SHA256 0e3655490667ddf17150aec089889268bdd7f1e8367d2bed6f3eb68a5ff28288
SHA512 fb1cdbfb3cdd60783d1c8696ea6efb746331880c79aa74052808ca09092cf1a2336bf784104d16203740998129b718dc0ad4a632e4031e85ccf340c593f05e57

C:\Windows\SysWOW64\directx\websetup\Feb2007_xact_x64.cab

MD5 cc622a75240ca96fa8f28bd984bed5bc
SHA1 424f216c5c0e02ae654612eaeb04900c9dafbc61
SHA256 3454d5101716a5c17bcdee8632668d981f99e8558d8d05e20a33ed718ed8c2ac
SHA512 eab36cd6bc3ae6f67d89996785f9c7d51e140bfb839a866b4e4ffa7809846df861d30d1fce2e1a498e8403deca5ccbc50b8f37f4c1b4ad3cd3a63b150c49ecef

C:\Windows\SysWOW64\directx\websetup\Apr2007_d3dx9_33_x64.cab

MD5 f33c12f535dc4121e07938629bc6f5b2
SHA1 6b93fbe3d419670a71813e087d289b77e58e482b
SHA256 3ca2acf6b952d6438b91e540f39abcb93ee12e340ba1302f7406f01568e5cf91
SHA512 df1753ab43d5b7fde2a5eb65a77b37ba28599bc0683a4306f101c75f82b0f1a2c8ddf5741981073cc5df26e9ea38c9a495ed0fb1689d2e7fc7d6f693759c822a

C:\Windows\SysWOW64\directx\websetup\Apr2007_d3dx10_33_x64.cab

MD5 906318e8c444daaaea30550d5024f235
SHA1 3f3dccf0a8a1cbf6f603be1da02e1e2bf89d24fc
SHA256 1a37565c5b868b6a5c67f3e24b8af547506799444cb77c7086e7b0cec852f239
SHA512 0a7aed2f49ea3dcbca1607fc46f166a44bc9d08589db05051b422c8ad84adf322352f71333367c612f9579b4aacb4cd6b82489ddf168ad67fb4d42ab52999c88

C:\Windows\SysWOW64\directx\websetup\Apr2007_xact_x86.cab

MD5 8922189c0a46d26b2c52c65515d87180
SHA1 27830c01afb15158186a045b7224ef33793ad211
SHA256 39f970bf4cc42e9325ada84a603c6c691bf94921385a52325f402f7432ace697
SHA512 53d51caa2cf448681a709f2b9737ef75dea4e9a46e2b29e6588b13e941671643a64d3597649aa2ae0b1fe9e5d591ed00bad9ff3344ca62851e03a68279142cab

C:\Windows\SysWOW64\directx\websetup\Apr2007_xact_x64.cab

MD5 fbb6aa140d5d0aa28a7561ea15d69e72
SHA1 26804276edbb1ee23b96690b40a01bb9c723f7da
SHA256 7781f0494648989583d4ac7695b9c5310eea76b6a102e15ea0fc7376250e4584
SHA512 08d6f2ef3346229f71e9fd6904d99bcb69f0a03cbd2d428f0a3ba58836694b801446165814aee120b4c5eb7046184b08fb49248f5e1941579b9caeaf9fba1b1a

C:\Windows\SysWOW64\directx\websetup\Jun2007_d3dx9_34_x64.cab

MD5 8dbaa3047397ee4cfca2efffcc2dfbd1
SHA1 d88fad72d7eaf38b8469b2b8492311c39c42be04
SHA256 fe4b15931e048c97cbbc26f753093e7d41eccf174402542631284f8bdb9ee692
SHA512 1ce01bf0bd4c0d832d95b13e958da6cb69c0d3949b128fcf40ec59ecc0ad8989b27c91eac28cd98777d57dfeb811cc1077fdb87348a11b6370d806771d7e742d

C:\Windows\SysWOW64\directx\websetup\Jun2007_d3dx10_34_x64.cab

MD5 1ab35d11274d1adbd316b19c44b9ae41
SHA1 14165ec367ce179588c8a5806fc968fdb49b4aca
SHA256 02ed1b5a850edb52ec174de177e91842edc7c5f4c06ceda5b16f3427dbcd4c99
SHA512 71c8fac7c95211d323c4fb6a02916e7d43ee399bbe0f1d983b5ac210f5039b23355f40b36f023f3c36e19787e2871a60cc389e51d6327652cd84d9e3b93d5a4d

C:\Windows\SysWOW64\directx\websetup\Jun2007_xact_x86.cab

MD5 001cff513a31ee082133e7ba3b0d71a2
SHA1 4517610a25239a16c26ca9890e1f0e52dda3781a
SHA256 245b0c554cbe2677939a70e5c4c6666b1b43d10d47980223f8cdeadb2d0eb76b
SHA512 7119f6ca16fe6d968310f34828f30d8144531b89583cfd529056d2e31d5164fc65136fa9015b69849f724ec641a9291ac644c91cc3fa8ebdd4daf9cf5a665a7f

C:\Windows\SysWOW64\directx\websetup\Jun2007_xact_x64.cab

MD5 b9648d12df695290be0479c1e78894c7
SHA1 932627d40a83411f9f4006792adeeb4c3a74cf37
SHA256 3f2ca0accef2594fb014296f4111b7fbb59729c5d928b22f7283c392494fee7c
SHA512 240b622b02c5fa3d036043ecbe5bf29fee447147af36e795bfae83fafa35934fc22a3e9cc2d846bd880d7808897355e16696c555146ee69864472d4600ad25b6

C:\Windows\SysWOW64\directx\websetup\Aug2007_d3dx9_35_x64.cab

MD5 ddfef236e7d70471aaa1741a8abfb735
SHA1 5f7acde3116a6d4363410d984b9c8919674ec9c9
SHA256 28b6ff092de67717c47649c87e7114c34325edda199ce2943403c4f3f4c3e0b2
SHA512 00990f7e6f266c67385813b0ba399a2a2c970dcfaaeb7fab183e2ec0cc50613cb0ad57200bcdc731900d8f7e609c95e8ff9cddaa52bce2ccedbcf4e9f74008ce

C:\Windows\SysWOW64\directx\websetup\Aug2007_d3dx10_35_x64.cab

MD5 8f715d741b7401547a263fd4af02e7ba
SHA1 39c031174008a0e7bd603a5670f578c0cc6443dd
SHA256 c97275f60e2f25732b3b264b8bdf9cfdaa39d6e5b189c08fab5cd7a04fae9bf7
SHA512 27cdb534361c1f6205585e1baabd83b03f6715d29afb61351f660bed1ccd1ef035c6541ad7e4c551bfdd2aa8fe77a903d23eb27618ed369c37a369d373467c8c

C:\Windows\SysWOW64\directx\websetup\Aug2007_xact_x86.cab

MD5 12fb614027a3f3ca6b510bdbbc3cac81
SHA1 aeb8241e273e12d984f3551b2e9ef978153a6ff8
SHA256 c35652b18c6a2d108812f415ddd435ce0eef5489e37142300ba67d66986ef43c
SHA512 f983f518ac3573a6425ffa0ca049ecbc9d4b857bc473767ce2c67fe4118731ecf902ae739b4d817288bf6cccaf5d9e90ed035bbe23fdf7026d16b80c08c441b8

C:\Windows\SysWOW64\directx\websetup\Aug2007_xact_x64.cab

MD5 527e5861d4999e7b410f5bda36cd6d7f
SHA1 403303e3c349a283c275c673261b600b3589095e
SHA256 e8ef9c88a6b958916c1959d1c6c7f1666d22e0f70ce8a8c83183f49ed71f6287
SHA512 38b1d719a477990eb5033cf870b070103d13fedac7bd99e61d54e7afe27d3a1c73a250981524c9fe9a29722efe01a033531ddc97fd3e550d4ba5df28903c5bf9

C:\Windows\SysWOW64\directx\websetup\Nov2007_d3dx9_36_x64.cab

MD5 a24b26f20ffd17ff3725a6dac823749d
SHA1 e0a9f241a083a58bd62046b0fe50afe73561c901
SHA256 23ad953d03c9da720002834eddabe71bd649dc9cd31abc7a09a8e77a948414c5
SHA512 5fdc1571574ae2ba50bcaa90e2cfe2dfb30a66574b6dad682c5b1b68c0ce1c8378ca8a766485968ad20432672b42a030a6edf6275b3f78daef055c45f37d0d3b

C:\Windows\SysWOW64\directx\websetup\Nov2007_d3dx10_36_x64.cab

MD5 9ad15681fa177c198ed2c1780f92262d
SHA1 5391c59fc75cdb5426f71e09b67384b2b9fea98f
SHA256 bee9bec21771bc5365847be692e785ea619d625df629981a167429df6f0cc9cc
SHA512 eca7104fa4e306326a92c1967d339d32b9e9ba1e42965fca820847f9f9b085d1ed30867db10129766f9dcc9b6320d4bd43f05103317e53b79f1355d1f1d69f05

C:\Windows\SysWOW64\directx\websetup\Nov2007_x3daudio_x86.cab

MD5 bb6131295182fe609e802e39f7b3af9f
SHA1 925dc4dbd64492f4d013063ed6562427269668dd
SHA256 90f472ed8b0beeea5db1b462da44577160337c767b27ce70ed58d68d0a03e7a8
SHA512 0b61e722b2ccbcf8de5d56244d9bcadf5d97c43da0ef01363f1f0d79f686b70c74d3ea5d6482ee28d2620c647cd690f5fd807e2f5b4328044aea5bdb6372d04d

C:\Windows\SysWOW64\directx\websetup\Nov2007_x3daudio_x64.cab

MD5 523deb17de80955969d860376fc0768b
SHA1 8964d237c360208e42d1a879e541dc710f1aab05
SHA256 122e09bbf46b3c3edae6c28ad060482dac24d4331c682fe0231cc5b6fb53c5e8
SHA512 c46522b916bd840478c06256305c187f950e525f7780a1763589c3ead8cb425a245944549accd58cb626769d368b03a047cc3b1fb38cd2ec4c4bcfc5668a2b7e

C:\Windows\SysWOW64\directx\websetup\Nov2007_xact_x86.cab

MD5 b3eb2dbd7a3a366ef2a2e1efe54a4e4e
SHA1 7edfde36ce6f8904b86610ead23aecffa0a21c63
SHA256 6dcb9461eab4aceb999784ecd74d985b3543899542ffd66203929f409c70c8d8
SHA512 b69cdcc7a2519a48dc13f60bde5dd0dd84af63386b1d98a507103492ad8a9ae5bbfda78761ce15db9abe5f201d509fda8013f3489aaf21db85cdd25dbcc29cb9

C:\Windows\SysWOW64\directx\websetup\Nov2007_xact_x64.cab

MD5 3d098aef8ad101782fb2187d7666ec64
SHA1 e6565c1c8cc68a0013490be6b3d6819dfdad94b6
SHA256 9fa6f4116a4eb1e72f75cbdcb2e34198a243d169276d4f493ecb8a9dff3722d4
SHA512 eed7ad526c5dba959e5d5b963154ccd87c4177a286e2f59a59ccbc7226e7a738ec89ee9d859113b72eb5c15caad444929c456beafbe125853976cc9e1f4936f0

C:\Windows\SysWOW64\directx\websetup\Mar2008_d3dx9_37_x64.cab

MD5 600b24bef0749c2fbf406e0173478843
SHA1 d373147cc4ff0cf42d084edd75af18f1d0a347aa
SHA256 7ef2e2a5d4843f58b3eaca34f5a9c63e9abfa726a3244b762a6de70bb9a95123
SHA512 e156ee9e70a1b2be4b2d4b538b6f6ad4f4d877bb0d31297464840e3eabdb9239d73e54a9ede97c4eda688d7afa8483e271e31fdf9c658b240aa9510f161ab19a

C:\Windows\SysWOW64\directx\websetup\Mar2008_d3dx10_37_x64.cab

MD5 756fe364f6a8bd2e70ecbbe895e134d0
SHA1 eaf82f86086510c0522b5dca8199110874b11b37
SHA256 6aff708a5bc25b4ecee972f930293324f86bc45dc97d687dab782108606c5902
SHA512 3d1c0a3ca8da93a85a459b252ca9ecd9177a450dc1a8f73add303a601ec64285fedd2dd97ae0a2c72661dc579e03fdd63ae6df900f645975885ab7a178e47352

C:\Windows\SysWOW64\directx\websetup\Mar2008_x3daudio_x86.cab

MD5 5262e69c5834aa27a833c1e589cc2574
SHA1 757bb50815568a7aac35c1d85adce68466fa39b0
SHA256 1ababdfd6ca26f1c56f618f8c9f90dbc063d964bfa31caa787b0a8a1bee519be
SHA512 82f75f1fe7524e32514eff95ff7013ee1a095085937c1d31c7209c6403b6de9bf5ff0391fdb4bd3ef3d2cfbd941924732ea2b9d30055d90e04405abc426dde95

C:\Windows\SysWOW64\directx\websetup\Mar2008_x3daudio_x64.cab

MD5 bdc5ed445942d7384d946acaf03363c0
SHA1 b7e021195bc4574a5676ad57eeeade1835299dfd
SHA256 312c2dfd80126d25a1cfab0fadf5c99bf1f81b404e121afec908f5b5d04529a2
SHA512 e6f792d767f5f4d3fbb08ba555d6aac3a8a873c11711eaf8936c738a9205fbe6ef7e64a9b56c58fd3f858bb7c20e595afc2f3c9d9010e101c2eca737d1676895

C:\Windows\SysWOW64\directx\websetup\Mar2008_xact_x86.cab

MD5 486b18945e3f5ef496727202eb8e1473
SHA1 d1741959717a62b3981542b3a9d75f58d5aee637
SHA256 d2140d9b4420b022d6e6135a67029033b5b0ec083893eceadd1007eee41ef4cd
SHA512 e262c6b5bea9c60e07985eaa5f84fd7d8191a17739dab8985fbe60116352cffc06f05f309c6aff00a596d8a0b61982e86ebe26097554f1a46b337d155ee437d7

C:\Windows\SysWOW64\directx\websetup\Mar2008_xact_x64.cab

MD5 3fc4683385ca18bb91a64aabd6287ca5
SHA1 1dd91f7af09a1d6ed2d205bc385b526d3400336f
SHA256 b6f81e365b7fc224f66bd6560e5040dabc9370b3f21f9bd85728349200dd7632
SHA512 4c6be51c33444d62967ac4dcd3b0ae127963ec831f4c618cab2989726130fd5a50d3928e1e66111d000f14b8fd3882aca1b0725ec6025359b30017cbc5380afa

C:\Windows\SysWOW64\directx\websetup\Mar2008_xaudio_x86.cab

MD5 dc71ac34a07bad6d68fc0520a5b0fb2d
SHA1 fc74844b5bc6c504568fff83ff629e802b859f39
SHA256 bce9c695d24972eacef357da0f83ab9d9cce2ee9a46176ffffad3a0abd64f48f
SHA512 15b9e540e0b194e2b6a66a41a143184c4ec26c8124b6d7827cea43d7bd1f0bceb33c5617522fa5787ad28423a48f4e735c4e782b12abad53defd1f9ef0ef9c11

C:\Windows\SysWOW64\directx\websetup\Mar2008_xaudio_x64.cab

MD5 3b2c203ed13d8901ab7c27616da80b6e
SHA1 f4c659eccd07abd1429ccb0a403c6fa80e821631
SHA256 e9a2e00f9c96bd5c91c4ae069c1c2ef6451e0207e8c18074f14d0d0ac08301fa
SHA512 967125b6ee2e3c4ca7c80037ca0a9d4d766ebb333ed68832ba1c7e321cb6ccdaa6ccc6242b01f61c779515e34185c63d71e99a7a2cd267f289967413c3606aad

C:\Windows\SysWOW64\directx\websetup\Jun2008_d3dx9_38_x64.cab

MD5 93e07225a9cdcd077af0d83b232da2a3
SHA1 8ebc7e6376203c68a2e3cc82dda75b2e7b285aa9
SHA256 f33a6b6ef55bd4e75a2e67d269b917fa6113f2b1c9b745b19d3ce6a6365d1cfc
SHA512 6cc39c9eaee38a9ae8755ebe6091bd60ce780332a8cf70934f8b08bc920a148fe8ba78967f2290609f07ab992880ffd64c55b6243fe3b0d46dac56a12aff5367

C:\Windows\SysWOW64\directx\websetup\Jun2008_d3dx10_38_x64.cab

MD5 ae0baabeaa94d668f9f1948442fe9b79
SHA1 34dd1c1ef542cceaf8202f41761c0c76cd9611f0
SHA256 a75a8109e3b4ce2a805555577d45853bc2e67451ba287b45aa3ce4ca14ce87b7
SHA512 da4fbcad45a08d8c691324aed44c227e6b6a22b2578804806f492bb7c1644a8f9a8aa7540d6f35c0fbd243448a79e56bec2e7e2b26bda40f637242f1207c789f

C:\Windows\SysWOW64\directx\websetup\Jun2008_x3daudio_x86.cab

MD5 dbc81af3e6112058cb652136fc9e99b4
SHA1 ccdf0a69cbf4ceb933dbbbc15fd96df52931f4f6
SHA256 75f048bc8261c1877126a82d3e7983f22f830596eefeaffb799947d9a13afd51
SHA512 879f04a0c66b76aceece022397f87e52f15be73bbe479fe03f01163746e21f6b5178091f30a5118b32f116a4ed27a99c1baee5ea5da9d2e277b6f534daa4b841

C:\Windows\SysWOW64\directx\websetup\Jun2008_x3daudio_x64.cab

MD5 8f47579336d3e8bdffa6ec7efe59ba29
SHA1 4379c4f9c5425668abbbdc965f8bd9df0b7b0855
SHA256 7363590b33717a0c2e07f3b2dceb3689a526b255f29c84092022a37bf6e9b9c1
SHA512 257e5b70b727b44bacc49fe30d73d4cfe0637bde62ebae58218bcd24f4d97a3f9d30a938b9a8a6e0479b3f6b0410bf8093e7d74752bb1df73c1906dac809ccce

C:\Windows\SysWOW64\directx\websetup\Jun2008_xact_x86.cab

MD5 54640e3a5216776937ee5f026ebd22f4
SHA1 bcf0ea32672f6ddc01bc4e4e23fc67301769f42a
SHA256 fa86c9d133cc5ca499b1f57d52a6024cae3f5605ff0e5bc466f07e3f7bac121c
SHA512 6b4fb153aec1f860fa57462a70937de3a94d61164c263850ef883e72569871913df5390bbd92a6b2574ffed5e8f39e434e435f16a0ef232121eeff3e71db0049

C:\Windows\SysWOW64\directx\websetup\Jun2008_xact_x64.cab

MD5 a3ecdff8018bd0ad0d1a34860e4cda6e
SHA1 36db6dd7d33e4ead7fb2629205b8c6717a62dbce
SHA256 09e15921b2a8204235c7128b804f26e72599f05f55005bd29fdb05da8c812460
SHA512 01da2b3ee535dfb0648fe340f3fb34fe98dfa7d5e0b87d5041ee8032581bf5bc0cb03678dd19b9faed3e0b9dacc36819cedc705fa5f093f8244e422ebf30d9c4

C:\Windows\SysWOW64\directx\websetup\Jun2008_xaudio_x86.cab

MD5 50de676bbab28205c1d045c35eadc944
SHA1 ff963262b0d5d73e27a827116eed38ee1e182258
SHA256 6d128830655e6cc400c1677ad91341e7b69f3d3f5acf32bc44ed2a32b5e776eb
SHA512 5f544aa2c671a5ce3b6431059ba042b00e973920b1e77a57b42b387db493d03e2a8ef1bde824d7752646eda20e7ac3e17b5729e391a2e3e20ef953c65b7542e5

C:\Windows\SysWOW64\directx\websetup\Jun2008_xaudio_x64.cab

MD5 be0eeff1ac4f42be998940f6564e89b5
SHA1 62f054a4ecd6aa187c3d1704378c458786de5337
SHA256 7679e7b1e03399a5d0d7b802308ee1503a9c5c59935d16c330db760876bfb37c
SHA512 c3ff516aa3730e908ca626349f037311f5521849ad970c64dd44e63344b29dec6a40454cdf436732302514b976ad7d8913d7416468241ebe4d2f043056510192

C:\Windows\SysWOW64\directx\websetup\Aug2008_d3dx9_39_x64.cab

MD5 85ffa26e1821c06035bbb25ca9241c34
SHA1 272016aa12473f9c3ab33be1ae1ca11a2df3eeff
SHA256 03f30dd485a82b6505a881f525e432bb84447e108bf086ef341a39951a1863ed
SHA512 537e708761fdc3b5f1a3908f565e0d2c09a5a7cc4566fc65176e81cffde8702b918377d9aa701032708ef253b91f2a7153995e39fe4ac2cd311d51e791bf1473

C:\Windows\SysWOW64\directx\websetup\Aug2008_d3dx10_39_x64.cab

MD5 dda02cd5814439f8368259285e408845
SHA1 6c9de1bcabcdd5333c24f253f38ddd256e6c6787
SHA256 c6602fb00efe93ea7875e29974c073b4f83991bfc064470de94a95dbacd51712
SHA512 8809577e13859067d9af53c4d6d6da047e9c88d264e7facf102ff34101c530e2691f1b6442ac2694ad3342f83b1f5ed3333d6f12d2523cc1a6af1a29b0aa6c24

C:\Windows\SysWOW64\directx\websetup\Aug2008_xact_x86.cab

MD5 5e96c7336834510b8af861083d87e8d1
SHA1 1c4065905496690b59b0c7ed25399ce6593a4a29
SHA256 736b3c20aa536c1569465badec5bffda858978b2d9ec1e48ad639ccde301d6f6
SHA512 683cc10a5fb529055bec363dba6b26dfab6f764fbc256ac9c224d70fe7422d4df6e1303cfb707450d1150d79bf8239bb55653e2f0af87c4dc28969ac0db17306

C:\Windows\SysWOW64\directx\websetup\Aug2008_xact_x64.cab

MD5 1284916b97980a2dd714ee7d9f3bef97
SHA1 80216e9bee9ab8a7a94c11039126533308411034
SHA256 1b640b0022c876f74a41db17672bb0685b74d3759a7818f84c8ffc51a9aa0d51
SHA512 aa367c5eeaa123eb983a188bdf9558deea1052ef0332ae144ffe2681039c374fa80adc0daabe12e91c9505107c2bdbcd4780b58e58738183ea8ca927d14a0bae

C:\Windows\SysWOW64\directx\websetup\Aug2008_xaudio_x86.cab

MD5 60aa66cca3684683e233daac694bdf09
SHA1 a14140e7eed90414b10ba0c248ad0cba888c1516
SHA256 a1550abc06e39ca576d24efd2801d139c64c7dce643246a7ddf2de2d03a7ba23
SHA512 ca846a0e0ad82b4c96ba1ef01e6bb0b98852676598c4e3e80877018f6d4ab25a2f4eaa8f80115cc3304aa75169a584560de65f2a63bfb43f26b2e1a2f7edb5d1

C:\Windows\SysWOW64\directx\websetup\Aug2008_xaudio_x64.cab

MD5 154c82143b1b0730e7df3459cad48253
SHA1 bad95ba1b8294f8574aa93c6aa3dabc1e2ae95a4
SHA256 42807ba4736a40b7bb9b4b558c0daffd2ca75987dafe47a6571f3c45f178d29e
SHA512 db6d734003542c8891ab86d3cd2fbc96a020da852bc4098c9451035ec40f33ec0de44f770973df932abdd3c1ac35109a12c542278d0c898e54e6f8bd49c20c97

C:\Windows\SysWOW64\directx\websetup\Nov2008_x3daudio_x86.cab

MD5 7b59a5d0824ab10eb4dcf0295d2c0a09
SHA1 0c084c3e1a3da5aff22aa924a5209c57d44435d8
SHA256 8fbe56582e93b3277caf8660f689cc9e9fa6a33056d40a88d48f669a005430cb
SHA512 db4a91267afd98205e98716e0080f18d8efac9b2043962e8b909910619d04ad3f99692b1a9b0b612c8a5fa32b31150805e375b67ac6b897dc1c70bffc9f24f81

C:\Windows\SysWOW64\directx\websetup\Nov2008_x3daudio_x64.cab

MD5 c931e5b595c62925df29ee9040a0bc12
SHA1 2a06d78f47160cadcd0f9ec634818c9b79b7f61a
SHA256 4da03f7a174d276dbbbe469c12670fa85fe247428fd5033e93ccc3ae4d5f84da
SHA512 5d9ec84116df04b955e026860ff7b2750cb87261d2a91088936e7b5ee500548686f4a7a4884b1c54081701f3982c8991613c0c77c93fa32df70084e63717112b

C:\Windows\SysWOW64\directx\websetup\Nov2008_xact_x86.cab

MD5 6323491029405204cfb35e995062b79d
SHA1 b281a0781b01d2d5f55723f5674df508873e35bb
SHA256 3e804174d83cf4908cce7aac97756541a58c16372368904a253d10d64fb4d2a2
SHA512 c0b39e2c1912d04d39ee46f8e30e554fbfcb8d011c05a133774ef78ec761abb7d619aacd68a8dca48b6515ad003006a500386bcaecb9356c0cbb41684bf797f1

C:\Windows\SysWOW64\directx\websetup\Nov2008_xact_x64.cab

MD5 45eb89f9552c6536092dbb848dfca448
SHA1 40c7f5144e80614870bfe1ff1d0eb400deb8fdb6
SHA256 636f4829ebbf2e9a1ebe572a0f0b7f8289089339cc38c7075f48fe4930134cc2
SHA512 e4e771a0b6b93db895620c23a32ae4bf3a455a687480c7c1363e53e9b8d9206cad53989bf27b326e1583c4a993c59d68ce6d3f054698c405c8cf62e3cb256e6d

C:\Windows\SysWOW64\directx\websetup\Nov2008_xaudio_x86.cab

MD5 350f4eecb4407263a2417a284d355186
SHA1 ec76503b1f170010d778eefb6c3ff1d4aabd309b
SHA256 cad128dc2e64a47f65bb44f43a5a0650b045a5dae34ce13f34817642c56e4721
SHA512 c6a1c97bd08a02135062b5294e895e60e6c4361626bc15c0693b2a3aecf610b5e9604c1d71aafb1a62a9154cb2fd8067d77894698585286fe2900683982c1c29

C:\Windows\SysWOW64\directx\websetup\Nov2008_xaudio_x64.cab

MD5 97ab92ee81ab716560b9c51ba6e644a3
SHA1 681cedd9212cab09139585a69bb55898fe7c4a40
SHA256 63229aa8bd8e675b292c263fcad6b7868394ad29987d3f4db55f618359cb0681
SHA512 ca783306876f76b59e5c0ce4f6a49461bf5fa4c2206f289fc40c0f0f050687fcd798dd1b07e2229aeb0a0b736dc5123d4acffc0e737fa70f51ea7abb6d410372

C:\Windows\SysWOW64\directx\websetup\Nov2008_d3dx9_40_x64.cab

MD5 2d7ffccf9db1906fa49be695354e5290
SHA1 8d0a8a4b7241e31bf931cc3cbc2dd50cb48896e5
SHA256 9499871ec59f7f115f51399f21730734fa1037eb0c1ef9f1bd12c0479b216a6c
SHA512 5df399c1b62652a91fd3250fe696aaf283f028910f0e25762576bc7c74588822dfb4010ea33c05d222bc60fbfd6d3fcd757bacf4773d7d2fff734eeea078beb8

C:\Windows\SysWOW64\directx\websetup\Nov2008_d3dx10_40_x64.cab

MD5 9bdcd6514ca65c183866b1988ca23d43
SHA1 6678a610be410bca5fafa0761afc10eefcf1bd7b
SHA256 86f96aed9c4e381623a6476bdeb375c3f49eb0f252301ad4db2f7974362790b1
SHA512 e4a9d9087633d7e6302ed58de60ae7d35bbc1257d209b082cc67f36bf85572912a703f990254e15abd8e3d0e5510f4f9db8e2efd1d567f647a2da2608e49bd7c

C:\Windows\SysWOW64\directx\websetup\Mar2009_d3dx9_41_x64.cab

MD5 212bb7229cd29cacf1a5ec4e1c6e52e5
SHA1 c79ff23f737b991e8a7f38b9e674677482405f20
SHA256 53da650f9aad168fe8034da45abbabc950729780ecc4f645f1470e851fd67ac3
SHA512 6e1396e665f7b7d6cfda0591ec4c4082f8e3cf0eb2e64b7eb771cbb16f73af2a1c35ed2499062cd51d2c7c438425e235fa21bc48cda6ac3fc60d6518bf609fdb

C:\Windows\SysWOW64\directx\websetup\Mar2009_d3dx10_41_x64.cab

MD5 70456abbb34272f7a6c2a48223c08f23
SHA1 3d4ae2460131b32293a2f0b0c3c3b4f8b4dc484f
SHA256 25ef5135a88061ede0c4fde037be62e3a11701748ff83eda1aa9cc496687265d
SHA512 e660fa94c8d579aac1a6c8f8bbe55e2488b744a8acb59631eb82231a5c3363b3b923d43e6fa044afa5190060c8da67c0800c0255d8ee666d44f45e177a8241bf

C:\Windows\SysWOW64\directx\websetup\Mar2009_x3daudio_x86.cab

MD5 fa5256647c0eccc35c2b1c581a846f91
SHA1 0d5a854808650098afb36c25cea9f67d2c9ca7a3
SHA256 2984d216a782ca017243f4685ba592801b1ac3ccac2bf20a8a134fecaff03510
SHA512 0ee38e439e202e4a06a1e9965112a663dfd4f7bfa5a6f34694f8429786ab0eda3a6ab13469d0e750d9efc8834cb482fb8894e76673aeaaddd9fb814bd6b13204

C:\Windows\SysWOW64\directx\websetup\Mar2009_x3daudio_x64.cab

MD5 e28e921c4c92007597e71d499edc77bd
SHA1 d8c0e4ad125b21a32f14d967b7f1f9dcace4a86e
SHA256 53a41f2989a2f68e4e927c89b2e38bbfcee7a2182ec588db233f26292f9d7911
SHA512 da023cdf89845bc7c7d2541348455c17730d4890df5b8be00e807d7c453d8d1da1cf12600a600f22580f9805233f96dd3394ef95c511e267f33746701b6f1d64

C:\Windows\SysWOW64\directx\websetup\Mar2009_xact_x86.cab

MD5 c1ff75f8ceaca8bb6194efc53563a3f3
SHA1 789890284ad15df5acaa580dc47ddcae1f0d0c41
SHA256 250c430741fc09d74ef6f43559a365ee908f52d96cfdacc7b6d8bf5e1bd3e5e1
SHA512 5e51ec6d2a6c71ccc070a48539170dc9738c7b500d6bb3bdf9fa15a85e435b4418399524d278babf0b79ca91880206d7c57a7a27104093dceb1ee1f9aecba1f2

C:\Windows\SysWOW64\directx\websetup\Mar2009_xact_x64.cab

MD5 a9d30e5a134b5d7c5381e4dd018ab673
SHA1 2fa0a0050281d98c2b00e1a0ae0b99d0b6a594a2
SHA256 19890202eaec445617d364ffbde498e8eff48ebe5112a42fb4b99b4258aa0757
SHA512 5257241c6d2638439e6274c084a096fa753536c0d5f7ffb1f4242676a9a27ed4691cac7ca614df039278b87ab628a8e75fdc6e223413abd82b26b970869abe1e

C:\Windows\SysWOW64\directx\websetup\Mar2009_xaudio_x86.cab

MD5 528d1c8ba95c79a237ee6f83403b919a
SHA1 cf2270f9d664e90e6481ee37c319ebc0dba1efb6
SHA256 e7aacd3af1c4e2031e4e4365d47e8af1023272c795f823b41f1728d48d127b67
SHA512 f7fb7c5cdea9dd4a58c597019cf50c50a568bedbce2fe86c9c9aa459f16c66a23ddb89e45970de251de49d0b2f92c250a836ee1f727c43bd3b062ab716aa6bb8

C:\Windows\SysWOW64\directx\websetup\Mar2009_xaudio_x64.cab

MD5 04850620fc179a2812ca31b9ed375ffc
SHA1 cc04b25b10b16166e36499256a4693297a7023f1
SHA256 2c1610997f383e55d5e264b3cc52d9bc5262ea72bad6116a0d84e623f61b0361
SHA512 d27ae04e183771bee6ce15f611f563657c0fc4914d5857b018e7fe374122ec9ce56ebb2c5f990f46689255a84ab3d3e8d9746b41b0559b506df55aa7cd7b0d03

C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx9_42_x64.cab

MD5 e3a8689d2876c6d3baac0b36b5c4bf1e
SHA1 22746af0bc59f5ba90a1f48a9cebdb87f40e56c9
SHA256 54a61b655ca36f76a489b46c6174dd601a831210f16ecb9d839cdb7e19d47904
SHA512 76fdb7b7cf64751e1d59e70968a14547e889d2645468e5125c280d8d585a3dcecfbd83cc1a08d552db7ee91be78d769372dfd9e4c0e86a5b80ea32ec7a78073b

C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx10_42_x64.cab

MD5 55fd3e53e8b2bfb1de4143b5f2b7c829
SHA1 c3711ebcfddb1d52e9417bd02509b768e683fc40
SHA256 98ca8f4d1c6cd13fa721a35a23992d9edd14cc7465d3752e5978d89c9bc91960
SHA512 eda2cf25132359899806296aefd0af98ab406ede587a582d701a5f8584e0e0dbddd60ef0225a59b0669965afec97709c38e20e8a3470c26b4dee35205c1eb01e

C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dx11_42_x64.cab

MD5 4196833920bc3bf77ffb56e3693e4160
SHA1 fcfa14f51cd79582c64f7956a5781622b682b1b7
SHA256 f2f4753e201d6e7f40f4011cc4b4fa95f4519da0481d98cb24dbb6679518ca93
SHA512 242b19b6f8132577e9a7c7247dc714a95c7a4b81416b79dbcaabcfe14c03405b965d0ac751193947af64356f34bbbb25acc021b0bc7e452e35340058f169989d

C:\Windows\SysWOW64\directx\websetup\Aug2009_d3dcsx_42_x64.cab

MD5 8182931eb4eae0ed69b183c49f7fbbbc
SHA1 91630f1e8e48883c4398b85451f1b0e6a8445d6e
SHA256 23d902f8b95dbd5ac925e7d1bd4952eeac762e11e209be973fd438396a1e6e50
SHA512 1bbd9da1aa2e3d956a79cff74ed8b6ce958b1f40103824328157ba87ff6c7c375c4d1c790c8c079658fb67ab01e1349ae29395480ea8e6308cfe714a742b56c6

C:\Windows\SysWOW64\directx\websetup\Aug2009_D3DCompiler_42_x64.cab

MD5 2e09221105524389268d24f0b1fd4861
SHA1 6efcdf3e9a018a3af6b1ebeeb3030552905cf44b
SHA256 ac103963d4ab1846c4a6d5bc042ed2fa543f88424e37e05af5165ee62989b503
SHA512 9b4d319c9c575b59c4000adda1d6075efe197179ea0d4442cb06b42569a4e5e3d437dda73cde7b5991ac7b76ad02fcd00dd7d048fef6eb51e93f5012dc67f21a

C:\Windows\SysWOW64\directx\websetup\Aug2009_xact_x86.cab

MD5 234963b689c5fd79cf71a3f555b2b418
SHA1 e9a4a8118da844571beee04a8e79675729396c15
SHA256 1520e988f112dde8ea11794e4b6dc9bc6ccb2ae7e0be7342d4696b719e5a86d0
SHA512 dd00fb9da7f14daaf3ff535e4ef31c1eb35757836242b8b1f491e4061128781b59c117aee0ad7789d90852babc459ea5614ed5fe4263a8d7219e045b0a5a80bb

C:\Windows\SysWOW64\directx\websetup\Aug2009_xact_x64.cab

MD5 503d5dcdc151739cce29b6bc144413bc
SHA1 2fe0261a0e81da501448861d710bae9627ff658d
SHA256 34d922a89d6b354572c17b890b0efc21bea237b94859010278fc1a4435ae7724
SHA512 fc7d8896ce2710a6189a812bb57b80b74489a9311610eece7db32ec0f830525e9c73e10755031ac3bbe8649344f02c44df2450e5b6e98b17c706e4755fbce0ff

C:\Windows\SysWOW64\directx\websetup\Aug2009_xaudio_x86.cab

MD5 2136cdc81fb2badbabb1ca9da463034a
SHA1 7a2d39f51d390fa28d627ab349523eda6bb9304d
SHA256 68785e0781b43c34cb184ae167363c23d5b9d18ddaf8474a5f1d6b90a939e8b7
SHA512 82a600478e77ee623552ec7be8cd63f85a0028d552cb3764b0e36400020746e2503c505aa31f9b3569c65ca56e34a900913f712a4a9f60471ca4126e3e582de6

C:\Windows\SysWOW64\directx\websetup\Aug2009_xaudio_x64.cab

MD5 3f50dca229c21b19c6ff1da50f9b7022
SHA1 c9db30c33c27923da5303cfb6fdffc0642af7315
SHA256 348bcd596d4b3f1e10059a0ce3c4383d383c4964c00a77ae7281e3472f6b8b25
SHA512 c7d322d0f8d14a3fb65578dcf84c31f6f57d674e315d0f5bd9c4c2b9f05c006febca671d486cc6da5ffee5af46a45ca967446820860609d62ac9414f633e36b3

C:\Windows\SysWOW64\directx\websetup\Feb2010_x3daudio_x86.cab

MD5 c0f5452d6ca76e8cc63ed7e6b6fe75fb
SHA1 05a175375eae4953bc2aa5b6777fbad268d7b7fe
SHA256 3cdd51afca42c61a7fcf0e7348ee4f2095d1bb9deba31f7c09f5694a028b0d35
SHA512 bf75bd537f253c2a989416bbb0cf68e530c8e9acee0de0cabb245a4ba06d827b7eb35e940472a6c9096112be58fd96c50ad398ea14acad0739c154cfbe405aca

C:\Windows\SysWOW64\directx\websetup\Feb2010_x3daudio_x64.cab

MD5 f0ed6ef41acf1e74ff9bdfc16aa8cd02
SHA1 8f888a9ef499ef705a512352ea976eb7168d6860
SHA256 a46a4b55659921966428301c02409c32a642ff7699419f71ce8775944117ec41
SHA512 577373645ac7c617d6cd98e92fa52379d1b098232c0d563d31bb0171379d04d5f43aa8142a95943c8ae702b82e94a1f46f8516f1cddf53d8d63a2474f8643421

C:\Windows\SysWOW64\directx\websetup\Feb2010_xact_x86.cab

MD5 022f58555cb11343e2bf69562eeaaac1
SHA1 1cef7f8e152b72c3d8892702e9c6cdef6bf7d8ad
SHA256 d5a7cb9a858e3dc2fa875c8aa915b6999137b616327aa79d382379a1ce3974b5
SHA512 7308bb60c33bf063ca1e13fdae7aee032d4725e967149ad8db8bf3935b1c5cee8937dd8772702413e0d4b440110ea2af4bf58ff0bae89b9b6eecbba9702665b7

C:\Windows\SysWOW64\directx\websetup\Feb2010_xact_x64.cab

MD5 16384557c085f2268ee68a6f200060a0
SHA1 68493582ea6e17342227f326a2aebe3830b7d0db
SHA256 dc678bde00cc64b91d29c5d98be82b19de00518d1706643e8eb8ddd4ec577327
SHA512 d0ee2f2836fa5804f8c5d817f2c51dfb2b63d1f2c14516f467b757445e08f346596a9861e86873fb9c78556390a3c60862dc8bffeca0b1cba92a8df061f206a1

C:\Windows\SysWOW64\directx\websetup\Feb2010_xaudio_x86.cab

MD5 1a65ed07a006532b97beca96bfaeda85
SHA1 66bafce1212a29513f26d7bf8d1b80c96238facd
SHA256 738f0ca04f3f568eb5c1a4d8f1af30e4930e4f7950e96776a5b8adea16efc8f1
SHA512 a8082022c5a7b2cc0a3f8bacd3bc85d1788ddd3f4abdafe2b83497d4e1fcc9bf574ad86592d850ffdae85f45d445d0f11e89c219107ac7ec6e7ecfdfb69ed9c7

C:\Windows\SysWOW64\directx\websetup\Feb2010_xaudio_x64.cab

MD5 c501686b2ae5f884c3cfcf67c300fdac
SHA1 1817a5dde8fda83dcc6075836146eb17621e229b
SHA256 b99380971dccf9500604a39bcdf5db6f5d96b14519ec0bd575587638a0238099
SHA512 e41b18c0c1b69d89d5f64e1cc4dc815faa7234e13fc63f46ee0913e1eb99fa0ce585cfe94d5bf124246692e04c580716f334700f4aec3eee7aef77d8c2b53cce

C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dx9_43_x64.cab

MD5 4ebfa56903a486e4ff5c0ed4c57ff8bb
SHA1 ea0edf56084d4a7011953fc34ef4ae5e0004f753
SHA256 810a07865b7fcaf0d7abebc86682479a05bccba71c69aa2d4ecbec3c88c8270e
SHA512 be06091faff54db09aff6c034addbb1a143de17d05f4ee9239509a108dce5f479cec2789fd27c2ea3fb66ae47de12631dd4f4599cce80368020e620c1a6a0a35

C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dx10_43_x64.cab

MD5 15e92aada1119117964d28291f8adba9
SHA1 a4bcfd73e2d1adeacda9046cbf44c9fd21b3e075
SHA256 c689eea749f1ad76a162d1c6dff31dd92d0ebf85f5b539c4c953d55bbb921b57
SHA512 d0653f6aa90f9389a3ffec1bfca92b3ef22e0a2c7892dec2d156da3e2d757a26cd39a00ca47e3a4e153460599e48657f5dc96c8aa9f7c2509db0ba1ab0ae5ec5

C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dx11_43_x64.cab

MD5 1c119486920ae4e41cd2c328777509e3
SHA1 a89e8cb197576d78c6d1d2e45d671d7e187efc74
SHA256 37ae82574cbbfe2cae6019a168a6d1bde38f88f8e51f13335001943980a665e1
SHA512 d81c623005db87ed057aba3fa807ef3b4534ecb8473e9a3283457543590d6d73b9a9deca333e312a2616f74f1bd407de9ada7bd1c52126e04c56fdea78119bec

C:\Windows\SysWOW64\directx\websetup\Jun2010_d3dcsx_43_x64.cab

MD5 89111c646b93b8ebcb306f0f743b2d7e
SHA1 f9e83beac4d9665eaf54c6578147a6ad539d463f
SHA256 ca1b0022af12f048586761439e152d1157eddb7153c031e075ab8d946173d31e
SHA512 3e79235d4c73d26506c3d537491987c06c184f0bb2eb7f40babdc70682215393f6e9ef49deb57c83d7d29ff15740b472a59a7320b5d006a0f094614396b06be0

C:\Windows\SysWOW64\directx\websetup\Jun2010_D3DCompiler_43_x64.cab

MD5 b6c9433b3ae42a99b0ca86700b265d9d
SHA1 595ef071c6798b31be6db2c721ca8a1fc51c8210
SHA256 9b56aba20f49739cde64f07ec317b6e20b0713fb9ae697318d811a0f103a6dbb
SHA512 04dbf5a877ae71f0b96680b34946f64a5477d1a23669eb89f4b2746084784efc0bd78db548671cb2eb8d3701570478a07485874b2d293351ae2bc1c6c2845630

C:\Windows\SysWOW64\directx\websetup\Jun2010_xact_x86.cab

MD5 3188814f4f1b69543688a55af1ffe23b
SHA1 57108fe718c3fbc3ab17b849d72dcb03315a1068
SHA256 fb320286968952ae93c7cdb4078bd99e689a0946157574760b844f7bf39c7ea0
SHA512 dcad3777a739bfeddef3bf7c87db289c88b9a5dc0d9e196acd2ab0d3c685cf14d361cd539ff07b0f23ad36b2bd4163c9c8475e014e22da272de78bcba8ca7793

C:\Windows\SysWOW64\directx\websetup\Jun2010_xact_x64.cab

MD5 79ed229e336b3c13524d5769e95fa97d
SHA1 1407132b85923d199509c700806c705af3a67727
SHA256 3e8fcc374e84e1170067a057acfa3b5464220d6bf5324566a05242e8208799b2
SHA512 676472162b9d54e9cbf23c853236f10009e5646be45f97be5d08dae7e5f87a947dbcc9d63cfff5b7d739ab9131ea6e3b9a499cfd813c678c9a4c5dd6eb338907

C:\Windows\SysWOW64\directx\websetup\Jun2010_xaudio_x86.cab

MD5 11e2b64c1e1c07f5843adde7e247c8ed
SHA1 ead54df66fbf52fc503b2d364da64a7de4f19fc7
SHA256 c364833271396d78811a9a3388341cb9e1cf5e6e0fe2d7986cb4dd2f931a0dae
SHA512 e3a988dd221599678a7b691f2b0b5eae5e8fdcb5352c7e9c38868c2cfc0fe9417a5954d3e8240157c5d9753d55f540c25ee1944c9ff3f2ff14df5d7051a79991

C:\Windows\SysWOW64\directx\websetup\Jun2010_xaudio_x64.cab

MD5 461c07c13afd70954f34d55986a0515d
SHA1 d74a8f99e72d182c21a30e4cdcf9f7ca39dcea54
SHA256 7cce405577fae04e58fe31a099febba96d3ea7cb94ed2184b6bfba32d9f20acc
SHA512 aef4b8bdd17af066f5680485cc45266859f802f2a79178472f5c00b9146ab52f8e04d36a973ef8ff45eee29940fe072180d4e7e0e89366fa2e8aba8bcdb890f6

C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2902.0_x86.cab

MD5 74a550d8ca43f210e526bb000af42303
SHA1 ca3dc6136846ad196939cf71ccc04be6b108bff7
SHA256 afa44ed18e3217892499062db4337b94025726df991a0bd4dcc3a9f8c27c41b9
SHA512 58757d831931daba43ceffd512d47e29bdb91cb7b1505d69079a14f911e149d718e1566323b9bb1d0292333c76603e7634da5798307b6dd6c97f885ce25c87fa

C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2903.0_x86.cab

MD5 6df41acd290de624df34e57569225f7b
SHA1 b33a256ceec451e467dc2aa2339a3736915ade25
SHA256 84e240f8813bacb2fe0f20081ca20cd0fed4b9e10c96aded8516b25375c407aa
SHA512 0b2647e0f6ddd936023d70f4a6c3f69275ef65433dd45cb47293a933f2d7b2d0d0385f80c8cb8be8538c4d4420d2da17484dfa056fc7dfddf1ca974b4698954e

C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2904.0_x86.cab

MD5 0ee4994d37940795f01cd2be93b7d847
SHA1 082f6aa6d9d92cc23ac1ca858244a101dd8f5dbe
SHA256 cadffad57691af14fdc0f41250e644257a3068da134a5922f343f2e69b1b5441
SHA512 ee23312d54c0d0140f80317fd0cea299a362d8cd1463cfd79a9062eff2305ea188cae4f83f3cf2c301e6d82d29820fec726844971e286ddf729df9a17afaa167

C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2905.0_x86.cab

MD5 70a647ca8587b3be1d2209c998b86b50
SHA1 5850552af0aad715c2406a3f50d7c6af1595444b
SHA256 f10aee00b78b734acb3bfdd81ce0ac22648376486d0c308f9975b05181ecbe13
SHA512 470c027ed3113af38c5f3c4fd3348d3cc8affac081dfe3b7fdbd1787da3bf78489e5379d8f306d917586ef8810b31a7f303125c94739f6dba15e3ac4745d996d

C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2906.0_x86.cab

MD5 d7bf6789f6c6dce7ec335f842e91c9c8
SHA1 c0297ea86238a166da27b9428dc891256b52b364
SHA256 bcfd420ecb20116a78b54678cbb04204e76368809aee1e1bb36810a4d433de2f
SHA512 b07bf7444afebd52a11f64c57d76cab8976a222d8f9fa0e78e1dcd7bd2c126dc28d7df7b778f10bb8f69dd7b7163c76e5f7edb260e31ef66c458f4fd72899b36

C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2907.0_x86.cab

MD5 d82fa9747fd442d8cca1cc35b97440b2
SHA1 a3e2ab8588a1bdf435e786c000c38144adbca457
SHA256 b185fce1d25a4411c1a2f53ec1e4232de9a3078d7db7aa469d53c5fb041f792e
SHA512 234e7a4dad6e9f83ffec2c769e775b18783b6a03e50d7e8186fb7fe01747fbb5ac46cff6f8437ca932f037da6c565f4faca694da4580f2876e31c252fafb55f7

C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2908.0_x86.cab

MD5 3bb868c2953151575cb8833fcda21fc3
SHA1 403c8a2123f59d2a3abeef22630cd6f62cfc1d92
SHA256 fd1c15037800a0a689126b09f29a6329452cbaf42508242d9cc185f557f04954
SHA512 33021b90441bea79525dcbad841164d1b8568907edc5c27c0374c7cbe93bc381d93081f8f7b20f14aefec3b59153dcc9b2fa44c80b1ef7fcda0f8a6038ac24cc

C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2909.0_x86.cab

MD5 3f8bf012bf573f071e98df62843ece92
SHA1 b6004908bb160643899b04b6edac9fdc7e3d86fa
SHA256 1e9c063428322da24df17c5d49c63a53e0f0751d26f741d90216b9c4ff1a9136
SHA512 dcea9b2fd7379f8a0d7eafeea4340f3ab7d71069ff843550e2c7a2ea21e1fba7a779a5352bd5758bc88eb8dbde0ec1d1f3e8164b1766e1a47f676a44c36c30ce

C:\Windows\SysWOW64\directx\websetup\MDX_1.0.2910.0_x86.cab

MD5 4ef2b868739e09e4020f2f0b0ded4a46
SHA1 39d201d0666cabadc0dbb81ee2bc691b9be10191
SHA256 1829a24a8ed3a2496ce92aa0c5142d8f512b11cdf23eda5e579edb5b11e2b589
SHA512 3a2f894854f9932840c7c7341f2e1882102e4f12dfd45f36deecff520da6d3237d9ea3867041f53037c808789e6bc57e7ba067d9c8f621350396126032c5223e

C:\Windows\SysWOW64\directx\websetup\Apr2006_MDX1_x86.cab

MD5 c0fb3fbba00268b9992fd0bf2e2d2efd
SHA1 fa6ba1c5e193353f01b816fe782ed296ae7814dc
SHA256 90e08fc3b98267756c6017f4d37b157eba3586c262474d1556b21d9c35d84da2
SHA512 00d23eb3c3312170e4a6a2992721255e307085f6f128cd3203d6e9b16eec7f0ec54b8a3fc09a5be51da2225b55fd89b13c278e25853771e414d0a5a93e3a3b0f

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\dxupdate.inf

MD5 e6a74342f328afa559d5b0544e113571
SHA1 a08b053dfd061391942d359c70f9dd406a968b7d
SHA256 93f5589499ee4ee2812d73c0d8feacbbcfe8c47b6d98572486bc0eff3c5906ca
SHA512 1e35e5bdff1d551da6c1220a1a228c657a56a70dedf5be2d9273fc540f9c9f0bb73469595309ea1ff561be7480ee92d16f7acbbd597136f4fc5f9b8b65ecdfad

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\mdx_1.0.2902.0_x86.inf

MD5 81700fd8d24ccd5ed83ce202dadcc625
SHA1 380473dc3560cc64fd0beca96674554d87085c28
SHA256 3bd14cf2a96544ece692e1911500f7196370a111017fb6b0e23db0f0d0f40dfa
SHA512 8ee1bd03fcd6125d22d1d35437537f594a84e67573ac72d440d45d419b88f5d3d1f5fcd8804e1a0b873714c1a71c63a488b8068f0c465e94940ea6e2db1c7860

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\apr2005_d3dx9_25_x86.inf

MD5 bae5034d79a545ce120f2c336de0f68a
SHA1 7276af2015696d5041214fa92eff4375b3d8b183
SHA256 f484ef48e0c6e2be8207d8c8c7308dd966d52bea1fde221b927d3e49f1cab0b7
SHA512 be58875949d23732ff63a6f505b242a44811cb9603a9863d6a78a4c9193b6336b89ec9a82666865888590a7b81ad99d466a3847e7c22d0de399d476364280a22

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\apr2005_d3dx9_25_x64.inf

MD5 f052926f0715b88b23ad52855b34df46
SHA1 c411b1ddee73a4b317d652bc3ec159ed58efffa8
SHA256 3d97810d00ceb3e7674a2ef81427d4180f77f93f9454837c5933fbc6a1ad5c1d
SHA512 8fad81eeb503d81b96c098190b5c4155f4bfe1cf2f36fdb5834a176c7c78d11b52efb6b3ba6f3168d7a21a1fc5e53fec770d125feaecd7d1cfad9cb1106d0b94

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\jun2005_d3dx9_26_x64.inf

MD5 134624a22aefee1fad4eb11445b8d342
SHA1 3f0f65ab8be678250660ba47f33f229643c118b1
SHA256 addafcf0cfd36587c12eb2692922f0fb134874d11005a0544cc054546a493933
SHA512 24bfc2d96b3078f82ba031045271460295f3a1e6dd3c8c30d8d50c98daa9051aeca93ed8ecae8722b70083d3b0ba41735f81068e7514e81767e1e119e45ad6f3

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\jun2005_d3dx9_26_x86.inf

MD5 62f8ec9c0d3bd54ace90cb15f5caa208
SHA1 e84f4a60c79f862aca0f917d1d30898af4036fad
SHA256 262ed4a65dd45e19f196cb2d9946326693ee31a86b51bf77116dec2727971cb6
SHA512 3de4ad76b207c2a0ecc10835cb787d61faa02e3531f6242a606ac0686cbfa156f59c30695effe5560d9a8481800b356873b7590beb8a739b33c0b1fcccea3fab

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\aug2005_d3dx9_27_x86.inf

MD5 e45a175750a672cbb2553087a8c5cf8a
SHA1 70d487f99e101bf39650594c27674313181a8ff6
SHA256 d02232a6587c460c026601517178318bab2ac29c59d269c6e3d1a3a993a9a1c4
SHA512 199882ada178e41be14af82001829d009379445028d3803d2a86eef899c01600cf2aa86123311b728e888498674379a35d40ed0964c2f88da24758fe3c7093d2

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\feb2006_d3dx9_29_x86.inf

MD5 f4c258b663ebf54c55d7d09b05b26ff6
SHA1 85af1252cf3d9ae7afcf8d576cdc17910203ad03
SHA256 f12f4bd86d5cd748b0fcf7106e9dff333c27c0886541339ba1f40c443bdc61cd
SHA512 cbd491fd8e847a4659758bfe0f5a4b56c97e539e3b3aa7ca601c329d858c882cceefb9ee8341d794235b7c2403a090f45a0ba8f2f44de3e3b1685d027d8bd19f

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\dec2005_d3dx9_28_x64.inf

MD5 9a3ccc90b71d554e968eca0a812bf0b3
SHA1 0ed1ca28d7f6c8b4e017cd48b8504340cb4d736e
SHA256 510b6d528be3f2997b8bd811486dc3c13eb27a9de22d1bf030e6db0e632cca4d
SHA512 0f10d2ec9f72651927599b69dc3f4e037febfb9c2a18e02eaa49962903c1cf77b63ae6335c06effdfac26b87418ef2c7a2d53dd799a28d275632d8255ffa8be4

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\feb2006_xact_x86.inf

MD5 9dda266ba05cd917cca889659e3b98c8
SHA1 2a2ba2ccb3c9d87c03198b9ef3b9c6e21d693055
SHA256 45146fd446fc8533dc5f97d88bee9ae220161f24797114d0bf3afc7c479ed69b
SHA512 26fa18c8058397b8b5d89baf1fb9cd689827b48781dbe40ddf884c0a3ff9cf8d8451c6c084a693e4fdf107ad181fcce35a2fcfb371548df948416b5713d8ce38

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\feb2006_d3dx9_29_x64.inf

MD5 0d951a2eda3638d4c976a5ffc1a9f8db
SHA1 fca89fa6bc6d4c25758b7baaff9136c3d73140ff
SHA256 ef36ece1a6bd8af3b0b9247b081d28ed511b7e18c43eb3aff364c9ce8d3a06c3
SHA512 89e960fbf9421a208476f7f65acf8047d231f3d6fd87fb31b01185ce88f5ebb1fa7513224124889082f41f1dcd579cc8bbb638f1af73081b4630fb07934dbb80

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\dec2005_d3dx9_28_x86.inf

MD5 e0b6120a048295ebbc629a9f8fbe53ad
SHA1 3d9cbcbdafc1f9058af74896a5859591e164555c
SHA256 d4d03c4ab3c8486d6331548e967ee17e011fdac90f63c0a9a44a744815a7da7a
SHA512 66c0b9501bb08d41bb708d0a724fe6ac27abaf735ca224074e594cde932ad1f9eb9db5defba8a8a71a0a12904f20324ee4d129a1ac9fcf816fe74d648379908c

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\aug2005_d3dx9_27_x64.inf

MD5 7cfa60cdb7e697b40a268eb8814446e5
SHA1 e8e77082361d5a5ebf6163cf880f9700cff5741b
SHA256 0a8ffec8d7ef3a0aa005f604a045dcf80cf5b6473b4f26e30c58eee23e253fae
SHA512 77aaea559ef94d405194351b52643512a71990833dac22a331d5b78d569263db11bf969e26224ba8a362bf538782010ca074286ea605490d40c10f7d2d53d255

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\feb2006_xact_x64.inf

MD5 7d46669082d530935e79c74c4fd83bf2
SHA1 194a05e3b019beb07da96c3bef780e6154a78b9d
SHA256 b7ca1a4942057592c5b83b4425350da41c61779dcae608112141d727091842d4
SHA512 590a9628fb90d4140d6f96238caac46f8ab23a59e3a9d94a28d1638006085efdbfad259b9633e4a56585f6cc10119d67abf3fa873a426a1946af589c17f84fa1

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\apr2006_d3dx9_30_x86.inf

MD5 a49046c25439fa900b1d1bf826506ce3
SHA1 deb71dad1d55dc5af2f80a1c3010c0d899bec187
SHA256 373cca07c0ceffa72901441219a4457de9ff110aededae5e4818588da39cd344
SHA512 d3e04f2e7b358faaefdd683e7ede8a41c2f65b7c8072754b03b2a5de416651f92712fa7d9bc6027d7326dc5bd8a497161685c04cbb7bb36a384aeee8dd77b086

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\apr2006_d3dx9_30_x64.inf

MD5 5d684b07779ae5b421e23167e2b9b44a
SHA1 1e3570908b810cc799f047221351cac7a3583787
SHA256 b70b8f62a2459580d22999301f1823bcb8a9bef54bd33b38e0af274a3a12e010
SHA512 6688f5a9952b36a0a83e806c9be99d9ffe9ba4982b76a9c7e8cef5f824c17ffe9e5ad9ef4e4974c6e2a9cb37e8c05584d8d83033182d1c5d00a786bd2b693e23

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\apr2006_xact_x64.inf

MD5 09c9b7346b65f5ba209934f16e711c8a
SHA1 9d6cf0fe295475c438fce214d9d24d5579f2f29e
SHA256 d9c3216ada5dd7791ca852a8ea97765f94a7b56fed27b20916b5067eb82b14d0
SHA512 26b84a457b5bd17a5deba56926af156a2144213a2b75fb015641a7817fd2307cfb439ca22ec0bb584dd21f8f9e4c7b3cc749a350b26cfcd0257f5fbda23fd9c6

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\apr2006_xinput_x86.inf

MD5 53294b978995caafcb6a9ac8f67b8580
SHA1 c165d2c615261f135f60442ad0a6e589d681a850
SHA256 b604779115d32d439f77b33257c96f928ec4ce564189f7d0d357099c1da140c4
SHA512 a3da7e02ecfadb181ed13855b093908fca0aae2ee75e6bc4f873fe69a34cdc08f3bf504aac2ea98f9573437d2ff000e43ae8450c87036ead48e6c2b80ec523ed

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\apr2006_xact_x86.inf

MD5 f67df97463d42bedc122fbedc37096c4
SHA1 42cde962b355cb3c6a7a7a88c8dc315f811a7494
SHA256 037db252501fd0e30303c11706d804d9eabbf319d0b4e88181ef8f297b4fef8e
SHA512 93815abbd6b6666438adb146bff476aa2728aa7475178259fea623dbfdae819bcf1accddddb7695ef23bb2913d234264ad2ec826bda6eae5d99459798b032144

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\jun2006_xact_x64.inf

MD5 a983924d66305104b4e21a551dc66448
SHA1 23deca69eea790ae7afc30cffa55e87ac8520cdf
SHA256 fe9caa55be17684622fd7339b1b96e1f0d107dc33c065706d24a435d523c6e12
SHA512 83c2117df0fc37979ccca7d861598a8a127d135456f72597366ac65276906435ab99fa353f246f9f61634fe96f8376d38253300f177d5cedac194cc92407f3d9

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\aug2006_xinput_x86.inf

MD5 f87111f61ac57d80199cead8e63ec45a
SHA1 4a525a78a90fa87290f60f0598fe285f9f46c90a
SHA256 cc66d67daa1f4c31ff5e59c2606c3930f72204a5057c29b9d58dde37a47b1cb7
SHA512 ddb1b7259aeec662fa271f6a6d271e9d48c4b8ce4d47d452dc2ab15611421baa13cec0024e668309b7444b31fa5b24f41b032796c81a36e94d7e577d9c516712

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\jun2006_xact_x86.inf

MD5 fa59f92f7d32613a12189e75eaa700dd
SHA1 f2c3947427e7eca9fd1ad53427d1dec28a5f0f55
SHA256 6bdce6f6779712e38c6d9e6e5961217e417254089f096c719f25566e952cb257
SHA512 e8dcbd918cdd7d98a94d53413088e2f75e4d1a15d4f69b6927f3cf19760d9f2fc577659fd533b2e4e2997aa29f285b0fbb35830331997549e429dbdcc7ae9853

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\apr2006_xinput_x64.inf

MD5 019f21ca754cc2e21d97c3a2a97d5ef6
SHA1 54d97b4018e0cd04c63f1221cd8da7a0990a2cb0
SHA256 f9d01e93e547045e1d232242c900530dfdfa54698586c7049281965e3bd01ca2
SHA512 0c0ef6a8bbc05eb81cdba8aa2c3f4a0d39f4859b6de495c79f813894253ad1ddca4851841064cadfb1901ea1f056c68560aae1e68bd12c590a143a6b7f0b16f6

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\apr2006_mdx1_x86.inf

MD5 2ca62bfeb43facdd1fc06f20fb20397b
SHA1 ffbb8f6a8a11f949ca180a7e73279c4b775bbbb4
SHA256 2546a1875bf868edc621a1cd0ee262151faa08762bcced0117e1304eace0c04d
SHA512 3d16b07bbfd172dfa979dfcf4384baff35538de371dfd0b266e5110772f0751f9e5274fa92b06d1f289f8aaa585ca1fe382f8469561e74e343f37e8a05f85dbb

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\aug2006_xact_x86.inf

MD5 ddb0d03b1d4a6ce09da5cbc61f5525c0
SHA1 ba5e1361e394301d5b9d9a4aec68ae21f19c70a5
SHA256 34e7227e03812fce5415b0a4c3d15a9e9b259350ac9873db2a98b2ea76ae2284
SHA512 2160652a7f8adfc346e0af6f822875c34d2d13f168b9895b063925979d4fcf33a7da777ce7d43c9ef2b23186ac00378e8c2d4ee115bb2ff794e863e8b6feec5e

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\aug2006_xact_x64.inf

MD5 d40e6c659cb7a757d8e751b050495927
SHA1 a9c515d786bc8f5c739fcf5ac1b6e15365f9e14e
SHA256 6fe310a67227203bbca3389dfe3403fa268cb424f4b525cca2d5407ed26670a5
SHA512 fb58acb95f1914da3c650168ed50fb6f75df68773daa8e8389db9c7c7c4d0e8bf93e46458fb76de676acc65132d781a7624f67289860a19e03520ecdbdb66896

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\aug2006_xinput_x64.inf

MD5 90d7a7386af9b951f939d869567894d1
SHA1 ef70a6efb5f7b32193bdec6c5ff13a4abeb4f00c
SHA256 35f25b9538e55172cf36729519581444e26b38a9dae5cccc4ad75dfa34ea08e7
SHA512 10920d0116aab01eb1130eb91b26bd91d4b3ff8e09a77db5b79f88c94c463389548c2b3ce494162d4b2c3fda903eae6c2d87492475c56fc901c37fc8306555ce

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\oct2006_d3dx9_31_x86.inf

MD5 8f7aa1f0f2389f3cac574652f5d6672d
SHA1 921f2161cf46c6314a330ff52c83f8a3f1058f0d
SHA256 a1c61096019a6ae1a9f31e3fe67aa2bb7e9e451967959d7088344f3f20ab572e
SHA512 a85c03ccaa27adf3c75287529f18e84f526cf91785e0f4281db0eb86feba78522603e21def19bd2a33e03ceaedd9109b8af1dbda4a3fe93fe6eb95366b6df747

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\oct2006_xact_x86.inf

MD5 6181c4b93bad5332b34180ac0bae5077
SHA1 259c8de2dff2a5dd8d4971fa1ab3fb0d193ae90b
SHA256 66998b21cbe6f05b12cdb4bb45549dcb1b4a92f8a1b910334150a8d767fa39e9
SHA512 8508ebc77b667907c5c2f587131f24cb25c5a67ab2f7d8b94216931457f486b37b9701397ed6ef527c9c6786f82a938a52d2b6cb0afddeff4101cb100e3ceca8

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\oct2006_d3dx9_31_x64.inf

MD5 e2a0e651573cffbf81578b864b50cfe7
SHA1 1c739f17f63ce7c5ba00638259628f7fc919cf74
SHA256 c031987e68e476365cd885e41a072f85fdfc9e480c93871d024a5ccf26d17118
SHA512 abfc6452d055bf6a3fadafb9562352bda90ee0edae5a0fec798951ef9d39701835212533a60eaab67c5c0fcf01ccb9115fcea3779b024ee1e11f217cb676e7f0

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\oct2006_xact_x64.inf

MD5 535ca39d61f752c3f1ba4956871fa27e
SHA1 4941efb676adedb9a46d7cc7415d8af03957b3fc
SHA256 4c388e9eaf3c39e75d003a58020e491b675b3a6054c702062a9c90e86f691d96
SHA512 f203958ca9c7d37daccd342a4deb125b60ef839b5b674a2a0220d7f0d770d5cfcd5c1f691470200bb4d8711f2f6a77d8b968e17020dbcec8c40b127a09f5f9de

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\dec2006_d3dx9_32_x86.inf

MD5 c28f4fd1644e2a20b1c897438e197e1a
SHA1 5178534444ed7dec8c63f02defe7bdb864c47123
SHA256 ef09d783bf5cff2cfba99946e5e71fda577b196a49c88bed1c51b5fd29cecf94
SHA512 7cf93260efb1d794a17ba25b1fa02ba03b0ceeed8131d274b805155072a9a2b92a899471a8b23add8bf46c6a5a3cda63499043eaa754001bb43cafd882c8e708

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\dec2006_d3dx9_32_x64.inf

MD5 39929631df326b944470256c4f9cbbf3
SHA1 932de27abf59c889c02ed747f0ac04f5e494492a
SHA256 ff00313af4a90f426492d72969f5efc6c56a17f2dd91f20cb5c0a38d9f1f2b6b
SHA512 8dd2755a2b2fb90c6880cbbde65d127f55d12df2bab4560ddf86d6793b2cd4733929d97efef5fd8eeb417731a571888c893188df0361ee57eb4437fab331cb13

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\dec2006_d3dx10_00_x86.inf

MD5 1b702c5bdf738a8abf4a3108097a6b7c
SHA1 c1d9c9d5e07117f273064bec36ac92b5ed624d38
SHA256 33291a47388edecc059f1825c1979142d7a9cd4a850716f9dce687deba1fa750
SHA512 498483dc823e76316e977dcaf7fbc557c3e60c67129a678701d5168105edc97f97479107330d5eb3989dc179273cc9b74d055827f036f2f3551a0a3d398f04f4

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\dec2006_d3dx10_00_x64.inf

MD5 eec826f7141bedeeef38c5a3528b5034
SHA1 529081aedecb7b9fbc7d9707eeb6415f98bc128e
SHA256 2a43ac72ab9a6f4771c02b6e10884921b733b86dbd7ebdfc5502d011cd5c8d05
SHA512 62cbe09326cd04c891faa124c65554fd631382a2e078c70ef72a1a07d57239b3ce599b57be3fccc755075174df1d63ac3597dfb3aef9b4ea34ba4597d804d2c4

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\dec2006_xact_x86.inf

MD5 211700aaa53bda6894be85df3dbdc792
SHA1 4874325e984b4f0d884cc732da474b3bb59d3848
SHA256 4c0a40094228a51f567bec65c2cdf289d268812c1af579e3c6b76cd3adb77e12
SHA512 8f51d965cd1ee20cac11256afc5e422d94d43435729d653b25c5347e108fa50e59c3bba18fbd7fe4e2a1a6bd54da1622b80e029a5914e973f3faf5884a262baa

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\dec2006_xact_x64.inf

MD5 ca414f7196d9b2a7a9d4057ca0714fac
SHA1 7eae4a5bfcd42915adeff5377036ecb4bd656999
SHA256 f2f2040b8d13705f00d8e20a53f22093aa0f8c8d6aa6224992ba727ace7b75f6
SHA512 1efb725a49a8ea7125074436bfe988af360b1ac22629d34a754cabaf3c151855d08e826a0e244cdf9b624b531de14d23f32c1c16c82f6832c8604cbf52882e11

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\feb2007_xact_x86.inf

MD5 5f1df74b0110f56ae0b6556dd2dbc14c
SHA1 c8c7d383f5e37c06015e1304b599568999bd4e09
SHA256 64b6020f43bbab7f7c2368fcfe7224165fef555b2bef813aa13b2d9f6295d46c
SHA512 06572fbaa625c85b05f5f4eaf880083607b6d010a8d4bfdb28cfbb1021b08e533f3491080faecb24055acb897b337d83caf9306fadebc1f1353763e8908850a5

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\feb2007_xact_x64.inf

MD5 42161a1071084cb4f32b0d7d748d9b62
SHA1 e7e29605c21b7a2c370dcf979a40c50b93ceb298
SHA256 184c1684c57de07983edaaa1ae2751b263497673ee8418af023a63fa03553f53
SHA512 2aa8e864dc28ee5d0583d044e3d8a9399d8d49b9fb1c522c1c640eb7b079515ffb0bac5280a220c23e15ea4c7ad45c7f1722e05e9f9baa069f4a2670e4976358

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\apr2007_d3dx9_33_x86.inf

MD5 044cae9c30c88bda73727243f5e5206d
SHA1 de744e349cf4ea458b10657d510966d21ad08d67
SHA256 349a09a2791d697bffffc61410a536cdcf258f0d7c86dda44a297e8aec4bdf00
SHA512 18e501142004afbcd28b41bdd3a9b19e2eebc047d7858ee11a9135f19759cfd8c643ff074a51e937bbcab7162888fd95effc146be21fe63dfc300ef03ed44056

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\apr2007_d3dx9_33_x64.inf

MD5 e40a6f3215c3f1397eb18b3388f95032
SHA1 4845590abf12bb5725d94d7aeb953a5686918537
SHA256 2d87efca75d8b9aeab3262841d52a7c56bad34ac6b9691f4df2d89b14c950f8d
SHA512 942f54a3984a29e1973ec096709de890fe870a9dfc84a8c5597244251cbd69f84543cc5cffe620a076d0a16dea6e393c6790553d6d9e2fea1af1c0f00a12140d

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\apr2007_d3dx10_33_x86.inf

MD5 fda5776cc944ebf6d84fb45c8a1a35f5
SHA1 f3b603dcdcfd6a310c2b0945f1a3b97276041ecf
SHA256 3286ba521fda888b1808f12955a58d7da4df7d2fdb472c7837a1e0e1a6317a06
SHA512 b051b04ce06ad21d08ace3a28d490214556f4b5be060ee05f8a4ff872d1cc72df05624021a9a0cc1efa4e63772f55cc61f11edf03537831a44ddd6ab409e83b1

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\apr2007_d3dx10_33_x64.inf

MD5 00ad98b94609033c2819745587b0eed5
SHA1 2a07dda60a97dc2b4a7cf3cfc6245e72cea0efb0
SHA256 3e61c4d723d282c36c5493d82644ea96715b7b548e50494d22b4a83d4e2b8237
SHA512 e7fea5f9186c324423c0b129dc3e8594df49dc84c61400f4635ccf688075b256d7923ca8f4483bf7b2fe43862e71aa134cf2c9545a23c622d0cc04dc7d6dac1b

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\apr2007_xact_x86.inf

MD5 99f23af200574f24c4c5d9ee12fd2cb8
SHA1 f0e50816ed808748f9379733921c9302551cd937
SHA256 008db10780aa8fb6f20b7aa5f5d513ca77efb36c8dddfb9ad89173ecaf700af5
SHA512 5e97d157ed8ad10f9cbb9490a16141fa52b2f32e09edc7e7f5e4b2d9c9bf38bbb85706d76543ca4ffe9b54d5fbc4b763b7df0893f1e7e56ae4c8ac1a720dbaf2

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\apr2007_xact_x64.inf

MD5 dcfa000ba60f73c2c02ab590faa1ae10
SHA1 154b9ff40cd92bfaa572b289662d0305fa2fa017
SHA256 bf6ca1165632efccb0292ae8b739ce68d78ebb95dd39b8e4c1717d78a026db10
SHA512 34f6cf1f3fbbdd79d04dd55315b0074abc21b9c26df6e2fc9d66c6d15f36ad35edea741000a84a25ea9a68a94d46f500398a27c8865a30746574741dffaadabf

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\apr2007_xinput_x86.inf

MD5 e188f534500688cec2e894d3533997b4
SHA1 f073f8515b94cb23b703ab5cdb3a5cfcc10b3333
SHA256 1c798cb80e9e46ce03356ea7316e1eff5d3a88ccdd7cbfbfcdce73cded23b4e5
SHA512 332ccb25c5ed92ae48c5805a330534d985d6b41f9220af0844d407b2019396fcefea7076b409439f5ab8a9ca6819b65c07ada7bd3aa1222429966dc5a440d4f7

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\apr2007_xinput_x64.inf

MD5 94563a3b9affb41d2bfd41a94b81e08d
SHA1 17cad981ef428e132aa1d571e0c77091e750e0dd
SHA256 0d6e1c0e961d878b319ac30d3439056883448dcf26774003b73920f3377ecac8
SHA512 53cac179d7e11c74772e7b9bd7dd94ffbc810cfc25e28326e4d0844f3f59fd10d9089b44a88358ac6dbd09fb8b456a0937778f78ecc442645764f693ccd620b8

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\jun2007_d3dx9_34_x86.inf

MD5 b1d65a13b527d75ecdc30cabf407d103
SHA1 db6df8ce6c28cb4a0275aa134c2d42a0ed957fa2
SHA256 a568b7b8a0360ad94b1ed6388eca6ca9d8770937360a426a0fdadef9a4019bba
SHA512 7d80f772b36c408c258f7db1180bc09996620634e6304761f5c10659d0885bb8d0b19bcad50a13a5d99ee92dc8e15587534d966bd32c5a8910308eab623a7f86

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\jun2007_d3dx9_34_x64.inf

MD5 d203c1993f21a870871ebb0c99de313d
SHA1 e69a5bc70fe66f89fddd81330dc148a1e788a56c
SHA256 77f3fa1756181a90d2ee63c26cddfdaba0d720c9a49121db28746cd02b3e071d
SHA512 e03c341f2d8df6e8174447d32bccb56b096073a35a3d8193860bd4628d812d1fa381bd35a55e17b4f27c5c5fffddb25223d932e995736fc608030501954d45ba

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\jun2007_d3dx10_34_x86.inf

MD5 55e30750af2bf57321ad1097a512d725
SHA1 0af3c73afaae0e8a1fdabe25beeb96b32eafb9ad
SHA256 808983dfd3db7c3452589ea4e14ab4af8ef47dbad3b639f9a3c55685c9b73867
SHA512 0ad8b51a550243d3f24ec5934f2b5e53f1d8e0b87997a7cda38840b3160121f1e221e6cb09d3f5b384df74be2ed10d4dd92fb02aff98bd0ededab751ddaa7149

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\jun2007_d3dx10_34_x64.inf

MD5 bf312732fe77f600a36f2a7b98a346dd
SHA1 5e9c70959111dbe60ad86258cb5bb20d0e9caa0b
SHA256 0f75b7ef71e183476ec938705024eb8a10a77d7602a336be876c7f5d17429725
SHA512 10f3d128da5180ecccda522164269e4940b69a7f55af9501de648e572ab5275f02c113be5342969c73e118fb7ec49209883c4a8d6c4648fb898289f77ce7a3d0

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\jun2007_xact_x86.inf

MD5 757a5f0cceaf39b5c7c9bd61650fd12e
SHA1 a7b3dda77f0f2334466d324eefeb3e5f6809d880
SHA256 33b980fb973394d9d8cb4645914d4cf6793bf92bd311e0431ce9cacc59fdcbc5
SHA512 f4f969b017c9233bc4a2267118fe921689b3237d28fc2b251ea3b6227e0b17dee84dfb8df6491928791891dfcd265688069b92d8a88cb9dfdbfff07b24a4dfcf

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\jun2007_xact_x64.inf

MD5 c8ca749e73883789faf6561a375d9b51
SHA1 fabee2ac65f1d4267da8df07cd3e4cf4eb19148f
SHA256 405d8cbe3c87b16afac2a9254497412a42de4ae2d8fb470a1234dc3260e0b90f
SHA512 56a0fd5b8f065b82f5f9b73dbcbf912045847180a6614dc48ed7b27fea3909839615aab0c8d0a122d9fca952e9591da5152b4c618e84a2d7aa409dea4fa4237f

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\aug2007_d3dx9_35_x86.inf

MD5 815d75e4264b1f9c0bbcc529ee7a290a
SHA1 cc956156066c87ce1bd2b7628453f1824a426412
SHA256 c0d87c1b079b54b75b86939199ca5ee1f796ae3de9c4ed0ae074a4fa01823c73
SHA512 bdaaca529cd52df20cf1e35b45e1824fe48d09442666b18faa3e948937026b09d880a27f1d915816bc6e1d98b0b486d590f867aeaa046317b7f48d6a0f949391

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\aug2007_d3dx9_35_x64.inf

MD5 0b3f4e715a43024fd00f769e62cd8b9d
SHA1 ef6de20d95a920e3b69307737976bb243783160a
SHA256 e34ad9e49f31cb9211e0f350405c344d93fc65075e470c8fe09dd78af68f2c80
SHA512 336df101ab341c5f22d516089fd31fd9f0541a01d3ac4ab4e171b73452ba3bab3cad84af50f1e9da17c46bcfbe7a1b52284e2ef2af49c67c6d6cce2969e14ec9

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\aug2007_d3dx10_35_x86.inf

MD5 741a5ce76295b86694cd7540870eeec2
SHA1 2c165af0047c98d2864379ea5fec33bb1507bbf9
SHA256 7987e2c475705bf8f049a15af946ec0cb5ccddf27c0b5c8126694421df601770
SHA512 b7d0a0bdcd060ee263860024abe5b054aeb2c8c8c7ccdff9cfa9886188d7177b1bb8799909b3c95aba181292b5bb9f9426ecab0a6a2689970afca5a1739fc4d3

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\aug2007_d3dx10_35_x64.inf

MD5 703b4ea6a182ee3b48026d01319579c0
SHA1 3184959599dcee4e74b251ff14dd2aac81e2ad68
SHA256 af4bdfeb4283f04e24475279931e042f17052224cf708f0c444fba2f2e221289
SHA512 a6e67befdb1d757bc08f6a726e6d79c4f51324edbd1f48730616e27079bfa60262b88b4c49cca046e3da3832e375dfc29b2ff48b7007443606da94793ef7ed84

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\aug2007_xact_x86.inf

MD5 8898bbb8acc1b54b3b9b6a2f6b0e2cfb
SHA1 e5ace499d26e573544be76c8e45cc5278d15022e
SHA256 c246c38e41ed71bde4b3cce4fe337826173896a04c26f8b2a00b06bb0cec024d
SHA512 b0633c44541cdaa2d2c3174027d849ecdf5ccf2149da4a2932f59db600cafd8b959aa0382973e23fec7a76ed7555e96065a4d8aa077f50c2a14e5080673aef30

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\aug2007_xact_x64.inf

MD5 a78f12b4514614db269bf55faf383875
SHA1 0425c3e3ccb15f691d6f5d30b71856138063002b
SHA256 2fcc4bdc6516418d3b4935c301e14f30e3bbd0adfd264bc34067b27b0b266b8e
SHA512 9d1cc2704541b71b246c2cc8e6e1d667cd7e691e42865aa5b0a800cf26386cf00781ae7727b7f90711e987148e98f4253e05b6d3872d3f69b0584bcf97b3fbea

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\nov2007_d3dx9_36_x86.inf

MD5 08ffe480ee5e54fc19a2feea46adced6
SHA1 c939391c489bb321f70707183b0d3f4b5f13911b
SHA256 843764f70f56d430c0695e263c895a135a631f793213d1005fafcf9c210d1ac9
SHA512 c05aa34b860b5620c982731af15889da5571395fb35faa24d43ccbb1b42dcc756769a0b9153c28112d7347f28d4ba933d8b15fb36a3e511ac99eb148f848ed99

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\nov2007_d3dx9_36_x64.inf

MD5 345ecd585eec22fb33a62e59c2758b6d
SHA1 2d6ed63996903c32b3e7ae24d86c924b11d53e7c
SHA256 d1b544b3912e73e5984cd759096120febe6f17e41a3cf920ef82431b9b569c1d
SHA512 6d88cd48bc32a008989ec4bb71afba0afeeaa12f17833fb4072c38b237bd006f192f4e4e7a65d8aebe5d6dac1d13098eea370b03ced343a5541e0ef23e813364

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\nov2007_d3dx10_36_x86.inf

MD5 582814cd47564fe8e3424cb2eb090501
SHA1 87a2114434564bb0a5cb4ea337577dd405f5e42d
SHA256 96f48bb810055699d37e9e27a65947483a0b4df304870e3b5448d3051b3e4926
SHA512 203d522271aacc0200bdd684934a8478b54a258f55ecca49a178ccabf418a328cd02ebd2a9656bd9dcd40c33de21d33664c5b16c1e7877de424d37b4f9b3e7a8

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\nov2007_d3dx10_36_x64.inf

MD5 60e353607750ae5e63cb8e56f443321a
SHA1 8f1b07f8cfbd66e9a7e3c15118bddd99b04d6871
SHA256 7a49ae818e199cf9f9bd831f94cb6d03a1e72a141d76546261979b30642757b7
SHA512 038aecc1264f608c6028ec2288f0d8de6c9202bb3d1e96fd247e889afa06f1ce592bc9e224f37e83f29c0984cca6c4e85ab11eb28570aafa20b076f2b2e5b6e8

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\nov2007_xact_x86.inf

MD5 7e2a5eadf9f1eaf90d5eac15b7a9f558
SHA1 907cf74056bf7ad91e47c98aaad9a092ab42fd02
SHA256 24714f229e479338ed89bdd6143140505fd63f517b7e71170ea6c072a1748b06
SHA512 63c2f438e6feaec2b9fce15617940c97862a54527d549fb6ea149e4d18199c1752e255c6cb167ff20b9cc1f74b87ffc97110b65652bc5c3883cd14894d21f8fc

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\nov2007_x3daudio_x64.inf

MD5 55402001ac41f0bcd1f457a36d298848
SHA1 a18fbdc9631610f2550f05cc3aed5a665afee7a4
SHA256 1cc72ca78433fbb72ee6b654c908748ea846c87c80424816745f285ed3bc910b
SHA512 96cb7ff1d43a7c1642d8ce9cb3c23ba460f6c083a7927fe0ad7a3ebb85649c384ef0542ee3e7dff6b99413b95a2a333327cd28349665901f466782fe96ee491a

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\nov2007_x3daudio_x86.inf

MD5 4287ed3f6647fcd80ec6b0f7f2606964
SHA1 27b2e4212295478645a017a4df820af6bdb4dd0b
SHA256 f882bdbc8230d24b24e20f9d0db447586e9493801900a8ba381eb493bd41f5d5
SHA512 c816d7127fb7fadb971b757ba76d4b918fe18bb16e5d2249b4bd80b0b6c47208e7ba5e11b521d9cd0a23d464c392f98a3c617b91c0ae799f3aa10401b4e2bcd7

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\nov2007_xact_x64.inf

MD5 bebd51d24aa338f6192e291d03684b6d
SHA1 cf2c0efb60f44748b0ef3f95276b0512719f130d
SHA256 841d579573afd51499c7cd8ee986a41db63cedb722e8fac351d3632ff470c161
SHA512 28fdc41091d761faad79c1af33da0372086689113df2f1cb40513d50727e5aefd652a977ad5c92bd62f1c5ef9cfc24c23bc6758ddd6a4d1ac5db0b5e401432ca

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Mar2008_d3dx9_37_x86.inf

MD5 020d1260794d5780937f0f7a919cd62d
SHA1 511ecd1186deaf129a5532b79fc776a9ab8fa9be
SHA256 d55858e166a2fe00d4acc30da756f0ab2c4dd5a79a9874eab3100722c74a1b75
SHA512 201e24e51dd859c35fa9d0a403993cb0b2eba67effbc598ca4491f05bff4f0805731b1e7cf6026b7dff9fbc3167c16b43887f080fa40ac11c6ffe09297401f9f

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Mar2008_d3dx9_37_x64.inf

MD5 ec75fe979fd2c2372ea75c72a905c832
SHA1 954642c9087489285c8f0786b63aee108ec08d04
SHA256 a4fda3373241c2748a969ddeeb6ef41b3cc1bca6608362ba87db75f69023fe9c
SHA512 dcaa772d21d1be7fe59f1ad32d10e7cb454ed2a4d98b3add201f8bef03718c29f9915fb4cb779111a954a9d93d898393ac2ba593c2d4d378b88bd492b7b5381b

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Mar2008_d3dx10_37_x86.inf

MD5 1242da12c637d5976af936f60f387c26
SHA1 a6890fa9d41f6785d54a7d3e1b229b64010089ab
SHA256 bae3bc2b7071d2d1c657a87a8c8af6c0fb5373f11c9aa5f61b406924717d0792
SHA512 7fcaf6ac1a8166e8c68d650dfea40bf329565d4ef92316ed0188a252736c9e288cc8f7d017b0de4af05245d1bf94a85b2dc72a93c618a1f2caeda45fd84a6a09

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Mar2008_d3dx10_37_x64.inf

MD5 b21f653f707315be4c85ff4630af305b
SHA1 32b0d69a786a2cd37d2fdf541931d90ae8656944
SHA256 f37681f4d49f71d48b1960c3efac74f28af9fa764b29ed3a40b5f424fc8f60c9
SHA512 e68348c9413f77749218fa34e55e416c7bac95f234522bb6eccbed1185a3f3af2a393511d3b83dbfc64580e1725f9f53e7e586570d696a3fee76761e8b0902f4

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Mar2008_X3DAudio_x86.inf

MD5 9ab8a749708995453ee8a995a877af2b
SHA1 eb8a0ad7f7b38aa190e2fb8a4a2d11cc9fa9b493
SHA256 0b6e28f00364a9ff436c3d99f0d4e80bf615f1450f420122324853cc0b88b16c
SHA512 9b0ed586fed0ffe25d4076b202afcc7ad580dbb05593e392a12d64b639098f8b7687463f213e53dfbb85616c5a3781adaef8f1ffd293c082a84291472266480b

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Mar2008_X3DAudio_x64.inf

MD5 2f7b3369825c6b74f4b645ebf52c8e98
SHA1 105972c77223b943df6533d517c698241ddee9b1
SHA256 b7dba312a71ed109c9c54cc5cc096096eb8cf0962396e8dc996f8fa28307547c
SHA512 88a47bc3520f9fbc082f1ddca7e083cff9bdbe5c4a0a851925ea14d8e0f327f2a9982e5b4ac457e4950acdcf6788299c4e13a15ff38bb76c8d212f1466cfcec2

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Mar2008_XACT_x86.inf

MD5 e3ad8befca2528572d6c51a15e072c94
SHA1 9718337261b8b93b546a5c20bee8b44d26707053
SHA256 6b0cc0dc993e172855864fa078c4e5c8f2f46bfc3200bf2ccdf3292931ee3cb2
SHA512 de4915424d8a53ede76394fac14c4de46838f21afc8bf30f560d2d00df4f366dc9ab48bb343be3580087a7d5862a14c08f83b5d9cc8e78aa4cce4e6b71b70c59

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Mar2008_XACT_x64.inf

MD5 d5debb90aee2d6a73bb448aaa99f985d
SHA1 950ff1a768bdabf14ca2cc6809431c3be8b19d9a
SHA256 1038a41e63ee8abbc8be85a86fafb2ac1d03defa6b88deb270f96a6ed1a97122
SHA512 dca65e91d4eb619fb34615a3c8683e04af84e843346b88bf4d52cae0c27e52b5a7a417c531eaf50cf45932e3fd6f5fff1bcfeeea4fe65efffbe791c8ac1a8101

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Mar2008_XAudio_x86.inf

MD5 35c6f6f109257f242cfb2ad2062d50c4
SHA1 222406bf52449ff0d5a7ca8ace6cbd3dd5f41708
SHA256 472bcfb54b5d63377da128596dfb30c8f200f79edaaf6d29de1afcdb71a3413d
SHA512 71180d47d8c177d84e68bcd6b9f948dc8c946f7a6c4091e20e04f1c8098b9ba92bde976194b06595834ba4b159a702c091d04ec823ac377b7ba7713f057f99ee

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Mar2008_XAudio_x64.inf

MD5 8eab978252843c5c47a913e4eee460b5
SHA1 b5ac7e6a36157c41d56e1113d7768e67530640c0
SHA256 10a2db49dd3bea59133bbd82b3fc0f8a959b65b0c250c11a9a6f3123b961e6e9
SHA512 d1b7be4eaba7126f3f64d625cb9c9d16dd40dd1dec96b4d647f9a5e24d6b945faebb65f25348d9ffbe092b03b1a54414cea9a2e4d1eb1deb102ab5abdb34d810

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Jun2008_d3dx9_38_x86.inf

MD5 c7fc0a82355bafed08a5597930b80263
SHA1 037419fc93581e053b4cd31c57222c8b8761e242
SHA256 06faf7f7ea5503dcece13d6537e57cd2581d5188a5d839fe7f118298a721b51a
SHA512 51829843dd7e2e501d6054f500fa523bf63f19382890880cac0e3f207a00dbc544195489de67c7dcf876d9061f2af12bd346513e1c98047b0c185669be5d8cc9

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Jun2008_d3dx9_38_x64.inf

MD5 df5538bc9e0494845a8e2d607e06e561
SHA1 a056a64230f03835dcf9bbc5d84edc2eb0c09484
SHA256 ddad68974990a21a8d4a91c47ef1034ddf0475551586f04e86b8cd2f0c990d6f
SHA512 4f19379034eb47e01de81a611facc2c8300c7b10306ebbabd232a249debb4acdcd3de42b71d851011be5b3abcae1ca232ae6891be79adfd754369dc0f16b249f

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Jun2008_d3dx10_38_x86.inf

MD5 d12a6b9889eeb330b4a4e86e9bd175ae
SHA1 62a4a7cb8fcc0edc240caea13b2b487cd012fb00
SHA256 f5f54664ec67f6333a9f0607d891bd0dc2acfee8cce09ac4ee0372b5d0aa12fd
SHA512 86274606e76b98b71dc4eec5180b3a52cb6627ac5ecc8b008512b7bad404e03b834b7129ce326a3c9c1cfa8b19bd5e97467a9390bc8a0e749771ca06d9f73491

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Jun2008_d3dx10_38_x64.inf

MD5 e2b760696e2300b1c9b6c2531b39d029
SHA1 1c576840cf04b73de362b28b943bd69b09b3883e
SHA256 0de0ada970774620c0905227666fc30910e64f3cfa4b99e4c5481685d12e3ded
SHA512 94e4bd9834c21acc7709fd28dc557455929f940be0a4a794105188dceed7e023f87a489a1de44a9f93f3780f6f9088ab3d4e829a0089bec74a25ba4297a0dd73

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Jun2008_X3DAudio_x64.inf

MD5 0225e16dbd17754f202f34cc1fdaa60e
SHA1 d8d7e02849d9594b346023e9e69a5b2a4fffc45a
SHA256 f4526ad18f081b84a139e6d98923569fc8ffc7644e20499e2f68abfb3e87753e
SHA512 2b308f4c4592a80d4215781ba7ace57f93a7449b2ce36a7c78203e1f16f1b7321dff6c32272180c9cbaee5d31afbdcd11f3d474004fe13c63752d3c0201d2033

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Jun2008_X3DAudio_x86.inf

MD5 7949a4d37b517c39295f0d656cbde501
SHA1 27313949fe172d687e9faaaf91044ef56b7c973e
SHA256 0064b7db5bfe52b6f40f61d962901c7baa116abbc72328f50586b6fa65f894bd
SHA512 93d947c95b7ae357bd47a5a050437cb05192eb6c84e9222a46d70ecc7c54bc2a5cb1d3f65cb2a4db5fe18106ed9be5a7aefef08f9634b28cd5cf128bd00352fe

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Jun2008_XACT_x86.inf

MD5 59c4f83a7fa2a8dee4970d37a96c2b55
SHA1 75b42f58c61d8c8ae185cd8560dbfedb7c4d6d9c
SHA256 79cb10222e466d54908d30ee433830e9673d5a538fabc5f4568521c2aff66eb1
SHA512 9a9b7ea3b354cbb29d88797533332abd4d1ad195b28ee6af05a0c6f83343b1e2ae0ce172e9941eb5f0d7ed3fb0382c1319fe4808ea2bf8988a1dc63b78c8c095

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Jun2008_XACT_x64.inf

MD5 9b2753cd7967a014a6391b44900ce258
SHA1 d6d227999ad32de75e05ae7d7fc43640e8893ec4
SHA256 90577c4c3d5d0de80c805caf0cc713582698ef7224fecf4ff911ba6309c5c920
SHA512 31136e55f01d382cb20f7109d0369a3ab7c8997dde1b65e9214e410ab686add4ef6950241c0aa9fc93ea0cfe3134d98ae1f3f48b44e92a620715bf159d6f5914

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Jun2008_XAudio_x86.inf

MD5 e82ee7f4d71ae8bf90378bb6dc107d57
SHA1 6fc8e3437dc9d87213064e69bf0769d20fa7a739
SHA256 e5e435c4536f987e1087218b025e6dc66c24c3e300e839391891f1b3bfd360dd
SHA512 baea9f4d6c744f26b55426c9666f135c07f3e8af15fee04cdf34c0af83567815dadd5a4ac8a6547a49d58e0c837a28fb18c4fe1f50fbed8da9991bd2aed8ab7e

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Jun2008_XAudio_x64.inf

MD5 c564c4dd81be3fe65783bca776be371e
SHA1 b60e1e1e34b8c56fac53dd7af79e1e05e04866bb
SHA256 9ce21064f2feed9bc9426a6e92e9c850aae31abeb80c7906ff917fbf4cc03913
SHA512 5b790aa1a6215ce8687cf3503267e31d1d7b41b5e4675bc634be957fbe14c53556989278017f2c97336df13d16eeaf975e0602a4cf9c8356598c392977df4dcc

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Aug2008_d3dx9_39_x86.inf

MD5 b28ef6e3eebceb622d1431fedd9f545a
SHA1 c6ae73cbbdff4632911dc1759a9ccdd73056ac8b
SHA256 8a23d386626328f9519076f33d5c3b71c639f2347741442c3374974e6f61bd53
SHA512 4f2bfced9eedabd6ca807a1b88cc063d15a31ab0bd8e2b60c65d6daddac9a111c434a0fa7d7641813d9880612464351ea30368bf6f0ed9ffc69bfb4d51882d12

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Aug2008_d3dx9_39_x64.inf

MD5 9411bf36f2075b7e42468277e8020e40
SHA1 c38bb84e7381baf0d2720e5f1822781a639c04bc
SHA256 4cbb1c6804b9c76bba4e41f0d2a45f1daba7350af9da4ae6966651f7f4da041a
SHA512 c860da71a89c41e81c1c89b3e1f4e93e747d7dca1152a4ba063f53f899fc701fe24f14abecfe883571af518df4c2d766432ddbae2ccb2c52bd87d85f6ad015b3

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Aug2008_d3dx10_39_x86.inf

MD5 baa493c7a361f1ac0c5efc94f1568f97
SHA1 16dd101673b96b54bc5a38c20ec3ed785c6bf7bb
SHA256 e83f8d48323887af89648c5bd7af713b42d20ccb757be34675f1fa527e6cc33f
SHA512 2e8db3d1ce2830caa9a0f698bc31e2b907e39a233fb056fae44062b3ff732b3b62f12fcb2eb948c1728df9b64c4d8ee873c0f95e56c2ad1727140236ecc71095

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Aug2008_d3dx10_39_x64.inf

MD5 b01ca47b1cffd13ec5d8a6a592ae8449
SHA1 e1b615488ba42c44922522dd47b2e99f1b5394e7
SHA256 a5eab981c313538afcd7abc7742854d251c736835ffc1f549a4768fdf49c3e71
SHA512 2609474f1ce19473ff8f5f4550f9eca077bcf063bff8ea7fe890493e1119e80e6b233141a8e9dbe7d9f1e167c4941fead6cafe506f98053e623728b7edcf4ea2

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Aug2008_XACT_x86.inf

MD5 d2aedfbc8bd56092d658bd60b464dfa5
SHA1 54f8e1cd59f43cbe02767face39fa42f50ddd229
SHA256 f1daaa8d96108a4a338f62a4a1339143ddc566e194ca00dde5427136bfccb0af
SHA512 41d74bf9899e8d904bb0bfeed5e053ac3c453e0d591526aaf5305ba33128abfe29cea09bdc23e2131f91626a66f0ff58f6cc02fda9692e58fb2c476795e2b6d4

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Aug2008_XAudio_x86.inf

MD5 e0947065f559b93eb93a7ceeaa8bfd44
SHA1 39bb647363b00924c7c0b3792f8017d7c7d9e3b4
SHA256 f211a7d99b3ffa0180bd91f68b2c285564227e075d499e950e76fde04e7707e3
SHA512 620810dcd56857b2d3d5f1271c5d4979cc90977acebfea81edb472d02da8e6104e89984816a91ab57a2469253a391bcc378093f1adaeea7c0d35f7f1b794969d

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Aug2008_XACT_x64.inf

MD5 f616331f6e6916d1d27fbcf357cf1478
SHA1 e5530aa845bca9b1c89abbbc189f65584008cedb
SHA256 cf09d632a4b2cc670d435f356f309dc58359735834baed10343fdfbf37eddaa1
SHA512 c39fd664f43c4cfad8e65d5d6b3ca845abc0b341cb663acc7e274a00c3218394d3d04cca850312074a294bcee4e5a0796a3c90d6263de63f8f83078d9c44c8ec

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Aug2008_XAudio_x64.inf

MD5 fe4812a5425f1b6d9562b9609db16ba8
SHA1 01a206feff15ead479848ddf056a560701960fc2
SHA256 311bd58ed7437a1cc79692ae360a02efbc8ec51194abcb80bad78b2208a94d58
SHA512 2a98b997af381504ec8e2c5b182c73717ab81a455ae77c57036aa904f87dc8fdfd16a7835cc1e631e9435257da8bc631946b32d8f3bb72d260d1114c4c3c4390

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Nov2008_X3DAudio_x86.inf

MD5 e8adbd1e68258d5657a34ea722f3bd32
SHA1 ae4e88d17663889e841992436b524a35506ee534
SHA256 d0361ffe046b7a7a374a4938d419e4121365892e4f2138899f670619ab34ac6a
SHA512 62b132cbde7afebaf20a437b810ea42b7c782eff4fa1f83e2e586b2fd9303829ac90c54704e28f53010a8487e04bf92b791c85fff4c949a12cdff2132c2b09de

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Nov2008_X3DAudio_x64.inf

MD5 fe8f918218c40fcc007bf16e9cf0b76f
SHA1 2b66a5a714bc7a0ebdccb0029e179bb3f32009e5
SHA256 d04d052fa3065cdf00e96bcdd7dabf3583ef10b6d80fd67cb03c32f09f2e602d
SHA512 9845d8d2c0c0c618594e692abb382e4244d95f5a06c48d7ae694dd09ada670ff23bab07fbfd09310f60f6684267ed0709a1d146da6fbbecef4790b9373840b2b

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Nov2008_XAudio_x86.inf

MD5 052b3294a9345385406ac2056e724804
SHA1 79372406f5cf40deefd8ada18ba238e80360ac70
SHA256 950b5aef596fc5048732f6cf263dfca5bcc25df7dc17df91efcbc3551751a3b3
SHA512 9b0cff2968acd2552609169a138d40fcc25ff2c35b70ba61cabf769f4e5b54774f32392508867b6ed9198b3da5a858b3a7079d7c4a4ddb31f63e4d4985efd2bd

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Nov2008_XACT_x64.inf

MD5 d28248a55a7747733c0e4356c1a15d70
SHA1 befab66a5faf1889c6eb2208698874b00024b78c
SHA256 2d8a68e726728e4f4be05e35fca812b855046ce4bf697f0dea14094dbd7e1d79
SHA512 f7b89d96e287ddf8200462c4eb0415f2fec81b7a69e5fd4bd5bd33cfc805287d287dc403060b01639cdb67b14ebe65e42f75c3a1fabbcaf8692d315cd5bf45a7

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Nov2008_XACT_x86.inf

MD5 87c8d16c6db20854f9610bd5be6e5ae5
SHA1 c17d78456637cc2a67b35d48f9cb3c730526425a
SHA256 31680e7a90d24eda04c910e1f3e6c02774cfc5c36ae08e7ac043665264702f83
SHA512 061d80816e2e5a7a2df68cd91a95e5f17aae8610a18b254abb7d5929826b14da5755eb01912eb369d1fb5725f2a4c144ce92e0d08b61799903d83fc91f35413e

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Nov2008_d3dx9_40_x86.inf

MD5 d9f6cb1edf9f92a045f4b2b8ec17cdb9
SHA1 fb362c8de21847523211fa512cdbf73e5b49aa60
SHA256 955637638635025f01f82febab4a4977252a765439d90ce940fba752723b9db6
SHA512 e22fa0520dd3f905b5170e3ede4d9b9e40b0522c9b39308d150c01e5bc381949d70ce04818efa9eb2a08bcc3b26f2179db9a5aa1a5d14d757ee2dd2c5c3cfae5

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Nov2008_XAudio_x64.inf

MD5 318d70544da7620126540b0712200e7b
SHA1 707c4a04f02e10b08a16528b0da8b284cfa315c9
SHA256 ed20b160dd26a5ed3c220a1fd9b5fc880b3280ebf56c2f73e76b6d4da5ef82bd
SHA512 4acbf6b35043ffe9c740e3e48fd9320e10f5dbe317dd89dcb97b68495b60cc2cb2cd98e57fad030ed053636b710d344b96667b69bec4b7727ba2508f35f23aeb

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Nov2008_d3dx9_40_x64.inf

MD5 4f4a9d3074a4ce8fa141a17b0c2e97c5
SHA1 e77b4e76ef70fb08befd69a03b9f5dcf02c81428
SHA256 d071b30f56763506da0c939b8d35b0540bef3ef0d51a5cfbc45816ca91f891a3
SHA512 7b961d3b9ed247e75047a5bac6d65ed741fb3c210fadfb23d4b77653af7001fd557fecbc2bfacac00188894374ec7ef3b0a5c1b1f6ddb0c9ad3ee3dcd1f32027

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Nov2008_d3dx10_40_x86.inf

MD5 7a3a4c3b7c9c979261ab1fe477809731
SHA1 545004e59315dea0bcee6bde61bde3c45f79d107
SHA256 a4eed39cf36adccac4317e5822b30aa37ac5b001bcf4a24f7b5ccac6b8b71e9d
SHA512 556cf8ff26de695e39aa42fbbfe0bb986fca9ecdc08209c28404aa1b285cba8bc4ba62659fd0d929d138c781446fdcf2a30c0e1aa1487f6f1d75c9f15145c7bd

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Mar2009_X3DAudio_x86.inf

MD5 c1501e224e63e7c7fbdbfb7734a8e4f0
SHA1 c6aff4de1b44499d304649b782346b0a6decdbd8
SHA256 aabd029d75f25244bae4ca17dbf9c4feebec0d5f121fcd388c175c3360be1bac
SHA512 e29f985810029a43a987ba45c905aae84d0615330e6fcedf81806a403f59c8861fdbb31935b0c610378d8131d38ac6798c778f5c6fada9f51838cd8a8cfcaa99

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Mar2009_X3DAudio_x64.inf

MD5 5e65d9cfe5f15381afe2016508800dca
SHA1 93a44fa2bd9559929c4ed459a336e1cc27738f90
SHA256 4da1a6bbcb7e84073dcd1898f854702ec32f5324478b2fa39c4a9868abeecd3b
SHA512 9ab50d72212f79f949679b7e7c19f698f2b1c6f1d695555d925b7cdcff800a14fc98535476150a15c563eab74d8a98316f44027b0e3ad2834735a6f94aa07646

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Mar2009_XACT_x86.inf

MD5 25b4458970583bd63b3e21ca5eda19b4
SHA1 a41a7c318342365d64f94da5c2b9d0490895d684
SHA256 764c3caeb1725a11701ca7119fdc49b3219553b79f9a5c1a02b20991391e5a21
SHA512 4239e25d6701e28a58424361d2bbcd27abcd91308ee2b5abde611304b0c2caf3cd807c8aaf3665569a565664b12c53e17aca73703ece809b9f26487d9f9a3778

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Nov2008_d3dx10_40_x64.inf

MD5 f0769f57bd08036d669104f9bc942228
SHA1 18fd51cbdb46f1ffd47103dc026f1cabf4e4868c
SHA256 7f902d9ce6f6d71be1d16997ffc9661be2540522c73cc185516415a52dced2a5
SHA512 427acfacf52759a1ebd749022c375767fc283a625b6773e06f8965926e0b96a969a27a440bd661015b56eeffa6decce7322e43974172966520c9ea5f6164914e

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Mar2009_XACT_x64.inf

MD5 eb9c537b01096960889de48d1a13725a
SHA1 205f797be95c576f2b15760a25440f532011332c
SHA256 9369fb0a9d3353627c097fc19780e5e7126af47766ef6a4a95ff3ddcca56691e
SHA512 c82ecd2c952b1df01e6c7f7858341c62b36330945dfd0c6bdc404d14bee5682ca06a19448961e03a2093ea00040fd38ce60c126b9f155607b7435b28f74055f6

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Mar2009_XAudio_x86.inf

MD5 ce1394e17492dac92e0257482272617c
SHA1 f1babf395b608a9966cb5d89d85d131ce8263576
SHA256 1b66e4d80f9843fc73b0a6097fb8ed5f3d2cfd5cfb5c328904d2c370bd87bb3e
SHA512 c5b800c6d519d147e37b459b3c667d2e05b6e344ac38be69aee40dc1e20b232c9a123f0f6ec8fb5909ba8d76fbb24a626ffb2f76b08bb3d3984d6ad6541d6a9c

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Mar2009_XAudio_x64.inf

MD5 8d2a8bbe89cd936282ff828c10ae57ad
SHA1 acdedc9919abeead28ef07da56ea33f88c45c3a7
SHA256 4a554d09934581a87a4cc98749b525b6794947b64b8414d380edfd502713f9b6
SHA512 69ee567df6d9edf90a6a2a882b745597fe0720af3eaa0f23ae7241e7519aee5af435566bb1e0cd8b2f6bf6956b21f73d7af9d8e9511afe48a54f68f440aea2c1

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Mar2009_d3dx9_41_x86.inf

MD5 b37a5ff044eb65521a290c79ba1a3e00
SHA1 ed505464894bd3e52654834487f3821ae117edfe
SHA256 bd29711cc2ecd924990167ffa95f48842e24aeed3acef1023717040240b4bbb6
SHA512 eae4408cfa7f9c39b101489688cc570a184b8a57f3d20d3b0452a581fb80c4f485dc2f512a39669a92a5bde81fbf474e1585f566ff482e87610780c23126c21e

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Mar2009_d3dx9_41_x64.inf

MD5 d4a1295d35748a262f28c2d3ed7a116f
SHA1 f6794d7a852b3f56e93fcded600077220ebfef74
SHA256 12fe918aeb224a9bd4d2a8142f97c95d58a9a69e591e7e4f95014c155bb03519
SHA512 79a2c575482ebeb4157971c07df42c76b42fca1b00e213f3f311935977bc27c86ecee6b387d93e9dadee06bdbcd6d4edbd72ca0a66925eaee547f1bd195e7f02

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Mar2009_d3dx10_41_x86.inf

MD5 6f64b88a71edf6070f48277cc7e22125
SHA1 1c77aace8a83ecb9a388bdee2aaf38e78af08ac5
SHA256 0170a4b551b58d92a753e86793bf3af762fe3f8d781512f710a4d661aec8d626
SHA512 4349bed85d5c42f921005ad6915571b680cbf178dc1c9fc8f218dbda7cc34b76647edfa324d3c529dfba18da800bc010623a6ee8b34a5ede0a447d1e7dc93827

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\Mar2009_d3dx10_41_x64.inf

MD5 d9bc0224ff859db21a9f684ff138cbae
SHA1 dd4f2ecdc2a7801588166d92d6e6aaf769bb3627
SHA256 53dc284b87f5787804823977d2fbb528e393829367db5d2ac5dd79c581a27616
SHA512 29d5c1e3b54e79e322a966d954935a31aa7108aa31f04e711e36efbdabdbbd3282ff56df9d640fe48f8707d55a7af435c83b7f281177d4d5bf01364786596ff2

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\AUG2009_d3dx9_42_x86.inf

MD5 dff48361a5cb0dea034dc6f16de99477
SHA1 afa417acf7e9da37923255a623ef34c7f6446c80
SHA256 5989dc367a8f84815bcfa1c46ff756527c6250c62973220d1af354b70027eaf2
SHA512 750b69eee07e7d6e7fbdba722e2e1ce377729dca5fe52b4d57d23dd2b80b28b3af8403aa43c469a5042ad35eb09ba4dbefc40a014a137e1b5d87e0f2de203856

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\AUG2009_d3dx10_42_x86.inf

MD5 b3a2e761e5da007cc6036c5703e12eed
SHA1 447e852f9bdc357b00864d4dccc7486f1313918b
SHA256 a80a00464775da82c02f628c5bc13cab0d0643ec2a44b28d2acf7c77d467becf
SHA512 28a106886578fb38f144602d2b29c72a906bb24a50b16ea7d3f71f8bd7f194fc0d7c8451dd1c3e9ecc59be3a866c07a23dd394a17d39eb7b55cde7b347bed3a1

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\AUG2009_d3dx9_42_x64.inf

MD5 ecbefd1db4cb52d5089b1d4b20a08656
SHA1 85134f773bccff3e874d27d7e79dcd1e9485c903
SHA256 4887cbec8545b02152eb16f6296987a43a256b69b408330eaee362184f298d98
SHA512 a50afd834f0d892af5eb33b9c6ffbb330ddebcebd123fc7f706f05efac9491b49dfdcfe6196f3b6a3c9f7ffedf4fa723e0499f03417552404c0fb4f4fa3c046c

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\AUG2009_d3dx11_42_x64.inf

MD5 520790b3b1eb8bb9ff00e4730d17e256
SHA1 51872475e3c31bb749f0bffaa42ab4ae362b2dea
SHA256 f9c13939779d4526107cf7d3554c122efb564cff02228d02b0b6ff211904f5dd
SHA512 da76b41ba262ac7adcb2b48b8e3845b7c57b1c45a664a1f0bc90d420cfeae1ee454c2089ca37ca5df264759f016c781ab1bf17c026d9733df7271e8ee3320dec

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\AUG2009_d3dx11_42_x86.inf

MD5 9deabc0af1186bc22a6feacaddc5839a
SHA1 2a1fbc0737777513390210fe7fa48fa8805b15b0
SHA256 edf6764083b47c04fda52b149f565587c6a07d4455357fe3c27c9e56cc57a94d
SHA512 8a3dc2b4d25a2a4ed94cb70e88b051d9df9985f3c6a8af0725bb521e029015755b415c23a44ae8318aea4a04ec9b9c1ffc895df41d28c384d78a465dbb29ed3f

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\AUG2009_d3dx10_42_x64.inf

MD5 8d272f58bf5ce42962d7d9835e9b489e
SHA1 7e0969289f839b5dfe606f6ce6ed106460f97682
SHA256 2bfdd3d3bf485439013045b3a08942f457385bb89ab76d9479fbdd85f09e9d96
SHA512 0554257a41df07860233f26330020a45e2dab2613a6028f79914aec7552d5c54525b137e450202db1283b602c3d95908acbf9f1eed20dd79c21fda5963fc2b5e

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\AUG2009_d3dcsx_42_x86.inf

MD5 a156f288883f2c1e867896c114509aaa
SHA1 02d7a136da0bc6c8cec933a880c62b90ea8d329c
SHA256 ff9da1b0328fd918cf9558ee57387a4865afe98db1410cc16b1e921c5a744c48
SHA512 632fd6b2940a851bc82c2d57a962dfced3b2cc61010e037ef9065b4a8da5a0f112bc2c66984cf76334556bcde35d49dece1841ffca9c149526a56d3824178b02

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\AUG2009_d3dcsx_42_x64.inf

MD5 32b0f585bed3e042371e125ebc7e0f80
SHA1 dc0f6d3a501cceb50a92848f045725f93182f150
SHA256 f7a5a84bb654837193e0f40b579777f5c6cc2c7341cf90503d6a6709d319797f
SHA512 ff7ebc445ead8c5109585ecdc58c7bb20f9cf9debebe587ace38c64f70277ee6a9c9359af0ff55a1d4bdd2d01b958efdce743f30cf5b20bc8656fe4124ec5670

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\AUG2009_D3DCompiler_42_x86.inf

MD5 e7f9ca8ca804cc404f855be173f6ac61
SHA1 5cbe6a3e7cd65a66bb6ed17930ccfacb8c756fcd
SHA256 bb8834d2366f6899c507bae176a13dadbd44488451a263eac830be95f4bad43f
SHA512 cca663b914f6f6d1b86db83e4f2976b103af041ca171257b9815a689788018434228182bac943fcdc7770d43180d53f887ec987e9639edc26ecabc7d20dbc4e1

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\AUG2009_D3DCompiler_42_x64.inf

MD5 bf489f4a6f1c8772091caf9d3f96628e
SHA1 c0da8b93f1e17acd81e5664ff7f014cf470d12f8
SHA256 8977772e5392b8e79364b3b8d97300e97ad891f38d5a2dd306549401e46b05ff
SHA512 2e21de522c0be4b797262528399d7ec8604fbf466e8de49cc12b9c2e2daa3a8f0977e952bd36135ed4887516d31ff8c782273325d2afad48f8b3202f35b4ffbd

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\AUG2009_XACT_x86.inf

MD5 5b6e899df58c5dd0201934027490278c
SHA1 8379d615b05654bdbdb6512b98abdb93a9179796
SHA256 1eb88b5460824fd32eec9b90e7ef5cb529f51215046e539d39fa27a409709766
SHA512 2326b2b5f046ea663bc8723155098ab58341ace400fed48933575dc55b1cd14ee8f8d67194303783a1d1f412e395eddd8952127eb35d8ec745208a6889dc63cf

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\AUG2009_XAudio_x64.inf

MD5 af52205973fa73d4227dd5e105f6a37a
SHA1 2e16e2914fcb65e55a117b24b992d6e8cbec8c55
SHA256 4348663aa7cfe22916fb13d93307e7384376fad9d6fa34c6196f80df42c61a33
SHA512 92b8ce27f01fec9c17c2677eb4e9e3f1dd592a94a3ea12e9580c8e206a8895c99b0498b2fac30323814c8da16a48555bf5a76eb72afcf5b99ee2e05c67cb4ef0

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\JUN2010_d3dx9_43_x86.inf

MD5 a11deb327119b65bacce49735edc4605
SHA1 0be2d7fa6254b138aa53d9146cda8fedbba93764
SHA256 6b33d32da02f664092d44b05237990f825b4062c105a063badcf978648b5e95b
SHA512 b0134a3d6f2d576e5fafb601014ab66fef91d661013acc8a7a9129940369a1d9ed5c0f228bb1666a4e891f09b4b18e83f0cb2080047aa84fa45ab663e5739a31

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\JUN2010_d3dx9_43_x64.inf

MD5 ce097963fc345e9baa1c3b42f4bfa449
SHA1 e7624afc3a7718b02533b44edfe4f90d1afda62a
SHA256 272650a2d9b1cfea17021f4bf941b21f2206791e279070d4e906ce0ce56ac16f
SHA512 f3c4f00eebd9d465bc2415d59c417bca0f5a07c8e13880b28704f770763609a653d4b06f53d98325b66c2c7094895190900c47980f81463215e919f00966ee7b

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\JUN2010_d3dx10_43_x64.inf

MD5 13c1907a2cd55e31b7d8fb03f48027ec
SHA1 ca37872b9372543f1dbe09b8aa4e0e211a8e2303
SHA256 a65f370a741d62c2be0ca588758d089dd976092cb910bb6b1b7d008741e18377
SHA512 545aaf268d141e2aae6800e095a1ae4eafe6bfe492d95dfe03789ccb245cc3ef3f50f43b10a41a3b0efdc7f8c63621b437323e133ba881f90a3b940095b80208

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\JUN2010_d3dx10_43_x86.inf

MD5 53a24faee760e18821ef0960c767ab04
SHA1 4548db4234dbacbfb726784b907d08d953496ff9
SHA256 4d4263cbb11858c727824c4a071f992909675719be3076b4a47852bf6affd862
SHA512 8371471624f54db0aca3ea051235937fc28575c0f533b89f7d2204c776814d4cd09ee1a37b41163239885e878fb193133ad397fe3c18232ad3469626af2d2ed1

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\FEB2010_XAudio_x64.inf

MD5 1c4dc3c97e96135a784867d68d193bef
SHA1 5019f79ea9b624999fe58420daac619c5695994c
SHA256 da63330fd2a1538b714ee6cf2e09256446a04a55f866b3f70237d8a7165cb3e3
SHA512 d529d68ccdacd41a7bb688bf226a23f4d08639213d96e3e428c16176681c5f7d45ca8527291322b2a6d4dd14fea1cab3cf183006bca3b5a45fbf2e05c2ee1437

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\FEB2010_XAudio_x86.inf

MD5 e6e942a2cfbb587bfcc4203b5bb34fd4
SHA1 2e0172ea1936911a98e11a6e98990703e24172c0
SHA256 74c827ef94881099761e04397ef8f162fd0ccaf4876a5503c4b53a5216d2acca
SHA512 3d70d76e6f459819a1703c5019a2e10fe518ee6e8eb5d3313fe57d3d1b6313b52c4904398a26841c78a9ecf9d715e1201e834ab3df47265e070ec94417a78e4d

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\FEB2010_XACT_x64.inf

MD5 45f4f5d8439b3a33df8f1d9f39a162c6
SHA1 e09440edc243b072aa589ed139ab9fdeff3193d2
SHA256 c7efd1ec4e4d31644a5054d32cc1e6795464472c05439573ae93e1727a5eea4a
SHA512 f8b7ab66b7fd182efddc2a851c6468a311705267afd5fb81554713b338f24642c5e7b5d5000b85e417154c4285457f9fdcdcf9f42c155c801f7a295e6ae3ea34

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\FEB2010_XACT_x86.inf

MD5 82c10b720e33be099f69e4010d44ecd2
SHA1 e95a2eb23db3fd610d71089500aad523f93c9469
SHA256 e850fdb84bcac0f667927e53fee943efd3f43be6c6a0ae1e17f3fff83ddb2635
SHA512 853261c439b26cdc8991ac289b9f9925976452ed613481b0cf09e75444882805ffa15633eba441d8e1a04641f5f6378b68e2270a6a48d3911d7f9c2c0b1235bd

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\FEB2010_X3DAudio_x64.inf

MD5 49460e9297b0faab5a5d73e7aa2caa67
SHA1 a7e211f3d4ae808f67a798924c4d3314183df873
SHA256 68351f03f4ef83e4b8c359e3e130441081690a1866b838a1b35d64674ef3abbf
SHA512 92c4c0751e9123e1eb09da312bc44041d13262e26cefb807dcd1b354c5bd12c0d7197f1d3d457ddef89714b77ffe45db9c717332963c6daa507ae02a6d5fc941

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\FEB2010_X3DAudio_x86.inf

MD5 e84adf38d499ae39090ad60fd76d76e3
SHA1 6af4d58bc04aac2723e8b97649f1b35fb1aca84c
SHA256 d4da3e530982812d1e2a31570b80af541fac1b13c72997d2aad7ea3bfeaf4a4a
SHA512 6714992e7aee7bd0798fbec68f92c97ee502127580e21e1b6693ed6737312b44dbc9fd9ef579fe552590e9e5a4904df94e4116334265a34699a04aa76ab87c24

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\AUG2009_XAudio_x86.inf

MD5 6d9bf03bfc9465df08d17b18c431926b
SHA1 184ff4a21ae4756179fd179d1c3d007842a7ec2c
SHA256 842cc52100b5774bcda19e40837bd552b308e74829d5b35a505822c7436892e1
SHA512 35efd74761fce6b8c7371cbfc5c8c50a0142a3fa3492dda3e566b031bb1dfd58633960230985d899348073de38295e25f76d716b153640a9e0e8ce6d59954f5d

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\AUG2009_XACT_x64.inf

MD5 e8623d8be34f89b38932adebb2ab2df8
SHA1 f7d844b8c77bbf1bdbaf4c615be7591299185bb1
SHA256 5d57466af1801ff3a92b1540907f0e4b91d90189177d68c6b4c8833e5d57dec3
SHA512 a398b5057707743dc3077f04e3796fc231da56b54d58c826b13ec610bbdadb0513c56183156be2e45b47ae96971a9287097ffdcd709f496e96f8f7233375f1a0

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\JUN2010_d3dx11_43_x64.inf

MD5 590fe1ea1837b4bfb80dc8cb09e7815f
SHA1 792b5b0521c34c6b723a379dd6b3acf82f8afb1f
SHA256 2c4cf75b76203cba6378693668c8c00b564871c8bfd7fbda01e1e841477b2a3b
SHA512 80bee8f1ad5bfaba6b3ac5a39302a1427dbaa5919d76c89b279dc753170ec443924eadf454746ce331a6682ee729ab79bd390a5d3b55db8d08fd6f4869101f53

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\JUN2010_d3dx11_43_x86.inf

MD5 fb5d27c88b52dcbdbc226f66f0537573
SHA1 2cbf1012fbdcbbd17643f7466f986ecd3ce2688a
SHA256 3925c924eb4ec4f5a643b2d14d2eda603341fbbd22118cdd8ae04aaa96f443c0
SHA512 8aa2200f91eca91d7ee3221bc7c8f2a9c8d913a5d633aa00835d5fb243d9cb8afa60fe34a4c3daa0731a21914bc52266d05d6b80bfc30b2a255d7acdf0d18eb5

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\JUN2010_d3dcsx_43_x64.inf

MD5 e1f150f570b3fc5208f3020c815474c8
SHA1 7c75fc0cf3e3c4fd5045a94b624171d4e0d3b25c
SHA256 5289b5ad22146d7cc0c35cdb2c9662742693550de8f013d1ec40e944288d155a
SHA512 a53618ed6ebcd50ef074b320eb3ebd38af4770a82caa808e47cba6a81982ced46cf954a1c5a383f171006e727d8211b4fce54c9faf27b4c14a770a45a09037b8

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\JUN2010_d3dcsx_43_x86.inf

MD5 cf70b3dd13a8c636db00bd4332996d1a
SHA1 48dd8fc6fa3dae23cb6ca8113bc7ad837b4570d7
SHA256 d5200b332caf4fff25eb3d224527a3944878c5c3849512779a2afcfeae4c3ca1
SHA512 ae31a9e20743a2052deec5d696a555460a03d400720679ed103759241b25d55e2fbc247170da3c0c0891f32b131ab6a6845de56c2d3387ad233aa11db970b313

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\JUN2010_D3DCompiler_43_x86.inf

MD5 1a86443fc4e07e0945904da7efe2149d
SHA1 37a6627dbf3b43aca104eb55f9f37e14947838ce
SHA256 5dd568919e1b3cbcb23ab21d0f2d6c1a065070848aba5d2a896da39e55c6cbbf
SHA512 c9faa6bb9485b1a0f8356df42c1efe1711a77efa566eee3eb0c8031ece10ffa045d35adb63e5e8b2f79f26bf3596c54c0bd23fea1642faae11baf2e97b73cf5e

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\JUN2010_D3DCompiler_43_x64.inf

MD5 6494a3b568760c8248b42d2b6e4df657
SHA1 700f27ee4c74e9b9914f80b067079e09ec7c6a7f
SHA256 3e779533a273e3395109c7efac13ba1c804c01b3ddb16938406fbdf90d851216
SHA512 2bf68b123d7823ad7182e132d9e55f8de7580229e8e1b3b40030da50bb9bdeaf67bb9727ce2171fa83b7f804c24d9728ffabb44cb5017b16b771bb19e62b1b42

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\JUN2010_XACT_x86.inf

MD5 dbef26a0b937dc1859e9582aa88bf928
SHA1 25f85650c6f62e59c11f7234be22d34e890793b3
SHA256 ca604ce9d2ee43a09b39b23a6a2a048b1a79d85c7d78679cc73aacc75cf7a62e
SHA512 4259193cd51168020b3b02ffaae89d7b4a972273b227cc3116c8cac3874b7c329e66c989ad200f93b05d1e4f90657b5391f37d6d128108db66ad7d6a758aa34c

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\JUN2010_XACT_x64.inf

MD5 dc506eaa8bdc02b0918e8ce956b505ce
SHA1 9bfa75f2b2d7ba26a778623c8505e10428a1f6cc
SHA256 f3c288d84db29f7bc4d2c771341f765b5e1940a4827fcb55a65b48eec83c71d3
SHA512 9938b821370919a25e801cc19841e951ef4523fa62eeccade6825e74c43319e9bad2f76e5971ce5d26ec2fe55258f7c9390626bc3b934c84b70f7a2870976b89

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\JUN2010_XAudio_x64.inf

MD5 dd987135dcbe7f21c973077787b1f4f8
SHA1 ed8c2426c46c4516e37b5f9aac30549916360f7e
SHA256 1a0f1b929724f8b71d5ce922f19b9d539d2d804c89af947d5927b049ef0fd3d8
SHA512 f0469c94219b4df99d7b9b693161a736fa8eec88a3f6c7f2cf92fab2ade048dfe61fcde3a4cf4f7a2aaf841d079a46b17259dea22cfb02831983f55bd7f61899

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\JUN2010_XAudio_x86.inf

MD5 31d8732ac2f0a5c053b279adc025619f
SHA1 c8d6d2e88b13581b6638002e6f7f0c3a165fff3c
SHA256 d786d06a709d5dc26067132b9735fc317763fcf8064442d6f77f65012ba179da
SHA512 abc37922307f081a1ffdc956ce59598c19ad1939ecfb6ea3280aa6aa7a99c3eba5462731586ca262f7d7257d7d2a74ff57a45abf6b93521eb6f1c9f22f8eb244

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 503e42ae2d8afa6a65c1e81cecdaa9ba
SHA1 5fe2cf762c5ebdfa82f4f8a83123ab1f6f8bced5
SHA256 ac3ce25eee4399d7e6803cab8df3c8dcfbfb2f7ae82b3c974861874df2107e61
SHA512 6949c96f2e622fb77e9aa7756ead1b6a24473335ce51f55fad372d5637f83e3c51c2a2e612fdba5dc3c5db6a11e4f3a151e3bac06b861811fe75c07bc30daa9f

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 a73e7421449cca62b0561bad4c8ef23d
SHA1 cf51ca7d28fcdc79c215450fb759ffe9101b6cfe
SHA256 7986e3fbe05418fe5d8425f2f1b76b7a7b09952f3ec560b286dd744bf7178059
SHA512 63d24647ac5d0beb8f1284973927263cb6e05b4c399cda3912178114b42d541dd516c6d67a453ea997d9d0cd9126a1802678062f0951c2547e1b445ba50dfbe4

C:\Users\Admin\AppData\Local\Temp\DX8C28.tmp\microsoft.directx.direct3dx.xml

MD5 d2ecbcc04f7e087d738df9329d47c30f
SHA1 0f2d7c485020928227b668a148b0a60d99bd6695
SHA256 7b38e6dd8c567d17d94f595c33fb234284abe884a1148025f59c8e426ec30c03
SHA512 5662bbb30d7a601efac49f0e090cf05112565ac40dd998787e40d4ee6988f985ad8513b0d5f80e17f8ec9e7784af1c50a70137c0ec22b0c72107b601503bcbeb

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 a6cc31ed7e3ed812ddb4606ae7603fd2
SHA1 6273c25051508968faedb4dc32c52620cacb0f08
SHA256 7502c46b244fb07aef101d90352006b4607954620cc03cc4ae674cb56db498cf
SHA512 5189af751a070b320125c0434f5ee4dd061ca461c7e28d8cd2527eee0d80cc5ce5888fcd73b68ed808bb7563636a4ea35f4f31eb54efe66cdd7fe0c230dd5be2

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 5e2b8b8a5ed016468716b9ff82a1806f
SHA1 f1772121149d87745738cd471d0e504301a9ad0d
SHA256 5b70f0ac40a38c903062a12ff7cd71d907e75238a044ded9b34fb51e9a9a2799
SHA512 4620c9bafb7dfaa8d4351d0d99ae3442ceb2220201f16bd9bab4fbeb1f411fd63d4f0e79abf6e762f4d0e62d42608fbeebd13943ce338eca59ad1080ea6c2728

C:\Windows\Logs\DXError.log

MD5 a0f4f5093c8d3ce0e5219a9a51998072
SHA1 24262cc11d74d8bd6efaa5987e5e544022015712
SHA256 a81a01844025b6a66ab580cc26fce29a4d8c5bf71a78708b66897d468d53bd71
SHA512 2aec37a319740f7fb32664a9525d127f9b8f84f9b3dec21b1eb6473e69c241e65c24b81175308cccba8b6594a2822f18ac3ad91d07651616c2b4355a6009c63e

C:\Users\Admin\AppData\Local\Temp\nsk5F3C.tmp\ioSpecial.ini

MD5 0ba5a28dddb599f1a110f76dd7177d02
SHA1 e89040185f6330441e829162a973169182c32d60
SHA256 8857e86ab2f73ed504cf3141cebff09433997541de96b3f009462103bad95331
SHA512 505ba1a6ff98422f2f634c0c5108441e0af7e0e9e9124039d26ab299c002cc3ba9694760d3e5e1b410f9a5885a6fb8dc5bd2115d7204cf0941cc6ebcea51c3ac

C:\Users\Admin\AppData\Local\Temp\nsk5F3C.tmp\ioSpecial.ini

MD5 da3d201379c1b1e95e08c8f67771b311
SHA1 d9b38639c2f0882ff7413731d63dee2c44237b98
SHA256 ad5ae138c1ab624588dc458a80f8e54f2cd8bc6317b53fb3141fd0603a636a8d
SHA512 74436cc1d4a9e834dd67d2c0cc783f9f95f9d959080e62d87081a5fc77520bfefd72311233fc45f98b5c1db6da7cfe915b70453e37534ab13c9268b4ca0ed9f4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\datareporting\glean\pending_pings\82b54262-eda2-4315-b976-08c605d91d83

MD5 21b3a93511bf80c36a4ce842b327cabd
SHA1 1def960076b7062ee47f30e551a7c8b5ec6a63ec
SHA256 8599f7372952c1b3b2a3d6ea9acb6880f59dffd78effe8d3e7f1d380a73cc37a
SHA512 55dc7a3f552f9b032011bc44e338abdb21ded1803d790cb8eb8db3ce7cf5935be626fc1403120b73198da5ce0817d7ede296a695bc9e6f4921f6a8aef0329340

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\datareporting\glean\pending_pings\1686a180-1990-498a-8c67-1e37dcc124dc

MD5 e278ac30ef87b5c9ed64d3bde7102740
SHA1 cbfbd71d7077a0510797b52b794d34a90aaa4dee
SHA256 2dd36baaf2fa9a84e638bd7e78a6a69e489516cd349088412ad94ce4d5afdca6
SHA512 25a20a1fcaed02c2b4d0c179d10b9722c4aa86a7ee35f6e89dd598e4d1d2d26a4347708a22e186a8b449a4af7ebd2777978179b35a11028aec95c5d14d46186d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\datareporting\glean\db\data.safe.bin

MD5 7e9000343a18319e7d194a25cd759b69
SHA1 9487dd3ab769fe3b3dc8b52d71023120cb229200
SHA256 4c5256b79f030356e55febb8e2949244eb7b588532be9d5c4ca402b77b31cdcf
SHA512 0d624d9256a7bb87a494076cfc7b20d8575cfe6e38c1757c68624e0b03b79a3556638d577135cc271a8865a6ec0bafbcd64addd713d241c16056162df918b722

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\prefs.js

MD5 3330e346c5dfcd12250dfbb3051f64fa
SHA1 ec002b138a89276638c14d3bc2c831eb58e03baf
SHA256 6eb550c736394087cc0927b570c8ed55fda7ded85fdd4209843b0daac4e100cf
SHA512 7f27779f1226fd33bf746e7616c79beeaf08a61202397eeffb6e22f300d426ca912cef2973cb55e736b6ae2753ef48742aa62676be306adfb3fae2bf3b75032e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 0d0013d9708d9fef539adc917f5b87f6
SHA1 5e071e6b4d8abf007c8bb78ee948caf5bb0439e1
SHA256 f416d29cdbaa66b7d04483831d2a593a735316fafb643414a12df78da0ab054b
SHA512 851e9965a0fed9e0f5195ce655635cf13687d18678e4a9df807ab22cbc53c02cd2006fd65d93cd80b2a06d709e59122ea9933ba5cec551c6d51f5e9b4c175388

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\prefs-1.js

MD5 af832e1239f82bd966674f314b41bbe1
SHA1 c6a80f1e47b38101e45b19381d7bd39910f2c5d9
SHA256 9e6b2d455832293b69cb3be57d9aa416f3a6ef7f44b93d6eeb4def452132410b
SHA512 a721b82a163618b090c83a2b5d946c62af3195754b04d2d1f6142fc00d1ec2ef06d793bcc48f10ea0a7d6ae241f157233562d4ab0ce6d8a1b2d6889cab515fb5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4

MD5 d853a1d27318d94e610f4d8d38a9facd
SHA1 309ff6eaeaf405e372d89551c015d40c2c2d9424
SHA256 212a621048400b7934d291dfb2e89035cc113ecf074e4147a6b874ac50cd9d18
SHA512 2c2a94d3a84b112389a6bf4749e920ce9efb8a8d0abff20f03e994abc7c4de4c740e54d971f1cc3777ac2b9e4463d52d51a575203158aadb4ae5c25797c56065

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\prefs-1.js

MD5 9f77c426aec01f495e3b258c87ebc708
SHA1 b239430ea95a1ea859269825610bd9ad572ba846
SHA256 9d206c019ce27b440e3581d4dc992c3c3326b1d6f9acdb1b326addc727a91689
SHA512 a20302080e51b6d60ab3f0ad905c83c2f3231a050398375a9564e5a4ff2d6cbfe64b7a0c961efc92fe783594121082a1de12de68f03d252a7418bd0227c7034d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4

MD5 e162e81711a807b08c5453dfbdb1f92a
SHA1 1baea45e6b1013cb97ad1d369da8ec9be11c5448
SHA256 64edf6f89229057a7c9755c40d1094814a2496a2bd677cdd32f501c3d928e172
SHA512 f6f76586d1e112bccf172c8792246d1a34d3124be3ebe5fbb7f1557ef6d47129699665d68ec46b43f584c3ef8eccb1eb57ac2870aa226fac52992ccec16571eb

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4

MD5 2c958eaab20469b9345f1b3cc407cf68
SHA1 619e6fecec58750f4ec5e27690acefcc909e97e4
SHA256 41b028c446e40127e0ade4eaab8e546f069de4f9e4ade1d70eb3c04d0af81f7c
SHA512 9e1a0196809d50c91c2d5a933e0fb1ead6e985073223a73982e4f0f19d170888eb6f2df41136ed6618eaab820dcebb482553bb9d0a8e80a83b7ae6c35b272591

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\32018

MD5 27e2cc4fb4bf350fb1511aef451e68f8
SHA1 faaadab3d215d7fed6c508bb08bbc04d105076f4
SHA256 dc68eadab997be2e5a1ba304a47860c4595dc01c67b143b066bd7281d70e5aeb
SHA512 50417b6a4b0a97b8bf5284673838955961047065d02083f08db50886c8730b90cb5dd80fa62b5f62f757da1259a088037898728c409fcdc82902fb577ceff44d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4

MD5 36621353dee47b467536daa283be8be0
SHA1 f477414832ba971c899fa4281258ce06a1244516
SHA256 dc314d2bbec973b97b7a076587980732ccc7289940b69207c8ed48cbb2157f93
SHA512 a320d3389850be0b26b09e9d7b5399971751ae1f748736c68e67a2d103874d19b785635c9826b07edde1ea892945d893d74b7cbb04423c894a27456bdff9d53d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4

MD5 60b6add82c351a56abfc42207712e9f2
SHA1 818d79d3f4459f5415ccea611e32c036e113b03d
SHA256 78fc3113d93e247dd9a63767e87dc727c0e2e486d77fe74cfb5ecabbdc3a8094
SHA512 68b0b3aa9385d5fa5096ed0f46787df3965103689c77ef87ddc8fbece6e3537f0a38bb36edce391eb19bef112915dbb34e1e1fdae188f7553111a36488f3e7dd

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\entries\0263BF171D3D53D9A8E9D71ADB23CE67F3B5C24B

MD5 223311fbd22d29367ec15023e81b1ae0
SHA1 df22acb930f39af9219e44388e786edc6d9e27d5
SHA256 7ee46b816ce0c10b24a4d420e90969d37feb39a523ad8d1ce40ff4874435d784
SHA512 035708e2c3d6cbf0d13498a13f4e6fbcc09e3a731c07a1ea39087300b667817892e605aa2b618658e69a36ef064212be86d1b80363f79925df871ffd3a7feed4

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4

MD5 965b822778f23013d7886a5fb4f7385c
SHA1 bf4246ff9ca739403c0afdf14c5be87356a8fbc7
SHA256 8d4d65c5493a742cb9b2b559dc7b5b3cf4c8acb4596bac8aa75c5bf5e93e85d9
SHA512 87bbf5c2dbdbbfeefb8aba1280f21a76e1ba6f93be3a20ea5a880da9d89dd1abfec384753ed29b641b2285929db05261f4d81c2d296d053e51adb523058de794

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\19396

MD5 cffc363d83a4103c8ff00a05c884bd35
SHA1 1074f34430b9f59f8d488f5b39a995d22498ec59
SHA256 5a0e8d2d75bf37b633b53f0baac5fa5dcf7367372dac878f8f377f78bb12aebc
SHA512 079469b7488443b32c9320f37b7272b5b04db42e8090c0345e4f0e8af79b8d764800e6ec82870d6dd1034e26c3e2681b6fbe448cd619f4c1ab36e15ae5547e85

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\14572

MD5 1e55eb50193122906d2137e716785585
SHA1 bf1012bfb0e993fc8865422948b9420ab6f0a439
SHA256 9ff53acf7a4308ea420099c2d1393e97f6dcd7f5edb2ee363e8eaef743edc1fc
SHA512 3e992a53e7433c7fcad31def11e3a48f289b510d6b27b2fb8f9670647a24443c1790e7386abe1237456faa611e9f3b2f10db9fabba443d2170d3fe20bea917ca

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\cache2\doomed\28631

MD5 3156dd19bad8c77c378c28c27814b22e
SHA1 c7cb915fe6b8a19a26a55f9dc056d7cbff1983e2
SHA256 6c3fa4cf9e45c7151bc38b3fd48d4c76477a3df7bb886bbfcde1810283326847
SHA512 bfda67a6ad2593a9cdb848c7d297a26a82cd6b2336f6528b837632f423cebd456d6e40776213a8b2877a16ce4899a8628631b0bc3a6385251de414f30c24500c

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore-backups\recovery.jsonlz4

MD5 c19a6ddb76258ec0502d748a5781197a
SHA1 4e19f468f118f3df7c69bf7b168522ac3095bab2
SHA256 64060338a08220c4d97995e87d4d597d2ef42a46658ef332f24e21e0f954147f
SHA512 09b48dd8571449f18be0055ff12e5fca4bd391fe881a8b59cafb42458dcd21aea11de54d6ae57856a973b7f8ddb5cd0cea1ab799b4391ca5e526b0aa9076fe03

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wtg1s5j6.default-release\sessionstore.jsonlz4

MD5 aca821fd78ebc3b4c36c0c522572397c
SHA1 921924f3464bc9bad75207d1fed6d9eb182822e9
SHA256 1391670fd60e6aea12e2b7cd3ec6203f1af1942a3ebd998fbed872f314d0be42
SHA512 888d0b96e136f2e1ad2fc9e8a9138b7a683f06ee10cd462859c6049a47b62efd1b0ea22f69dc870a8b9648cf1e470064c4f5f71e65db23fd9470fd1659be9007

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\87ae48c7-2baa-400e-9b75-92d2c7533779.tmp

MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 e3ee8f745b2d0c9e280a939d6b52c412
SHA1 2777093c0f46e50a9b25611996669e415317fc73
SHA256 0366d0977522a9a61a0323b9b33dc52de81886117d4dcfeea662f39eee7d3e56
SHA512 e83e9b73c487a8c0e81f289696eb8eb3aacf32a1b21b8105ea8df330ece36eefd68266409b972454d70388fe6e24be502df1792df35d95de191609088ac336d1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3c7be8a2884b9d93e25a1c161a502b4a
SHA1 442cdbe6e9064b0f3ebd351b7cbdacc4aa5c5260
SHA256 08f94481848e06fcdedb32658e203e643d58f6c37f6ab71f142d19fa34d83ee6
SHA512 f1d2d7527b38455cb293e9acc58098ae731a3e556c29c96e307cd488fc0a4f3a6ecba9941bb3ec21c6fc32e60d68292d9be6f6acba390c166fe32d4785eaebd5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 f07ea11a2784ff150938ed4009d6072b
SHA1 7c85e9015b6e02c297a361b32d927b84737512c7
SHA256 33e14e1905e188fdd54393bdb053a59fdc701e07e47a78a77df87a05c52b0b33
SHA512 25c24e8bbc9c48aa775eb11ce7842b781187d73eb8938cfd8b254db54c8513cf37c800ad9bac0c81415c60702d98c3dbfc50f0e9bc00d79555adc2d28f36b08d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 4b2ca96165f0d1b624bb1351bebb4469
SHA1 49d3d9db74dcaaf351c57fe3c0b807df963dea37
SHA256 5f9cda0100d2a3829dd629b684f013ee2c9b71b1517c762b5b5e4ed2d5d5d0da
SHA512 291f1f87f3ab45ff3e6e09ba9c8a262918516d94ad884cb4955e4cfd3c33e01aa84ba38291171d46990fc970e1ae026dd8656f2e96206618d80caaed3ad71e3d

C:\Users\Admin\Downloads\SteamSetup.exe

MD5 1b54b70beef8eb240db31718e8f7eb5d
SHA1 da5995070737ec655824c92622333c489eb6bce4
SHA256 7d3654531c32d941b8cae81c4137fc542172bfa9635f169cb392f245a0a12bcb
SHA512 fda935694d0652dab3f1017faaf95781a300b420739e0f9d46b53ce07d592a4cfa536524989e2fc9f83602d315259817638a89c4e27da709aada5d1360b717eb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c4118303d452f4ccc105beac11769ac0
SHA1 a60fb1977bb2f9a2a7e66c4282fb60857e93604c
SHA256 6220f375f3479d3e8fb0f3a843846e99718bacea5342366c052bb5c6794d9043
SHA512 9e4e7a8766d19176f82672069bda054a129b1fd238633059b38b568088d21d750c360a237ecb566d3902889c03aa85c1b822c0609a7f105b1466b6640d9d4a9e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b1d80ec3d0e9640199d64ead7488ff24
SHA1 56cf55a89cffbd4ad280f1c6d303a0001612bc35
SHA256 dbf653dec590c861cc6fcc07760877e90fef3257c76cf446c08239e21ca085ca
SHA512 9d862205df2a9096ec527c366c48ffedf4d587a9be67edc18679402d54e28ff2c6a584fc277a768acb6d9f95bea4ed97eefeb5bfbdf3d496d4e20e886d493adf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 861f940402bf1311ab9a6c4960874648
SHA1 4352d6abf9642b59224233bef64190b10e18d6a3
SHA256 9a994a8aa92bcfecb4f0cdc40462c4fc7bc935675653e33241ff36009541028f
SHA512 54483d3bcc5c78dc56c2d4ca0fa112115633bc6f513dce1c3360ee7e88a8b319dcaa4ea0159fa5f39dc3a065c3d739425a397a5c68e79c89e7db15669e11a3fd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 fb218a879d3fbd058651afce16780d84
SHA1 76c2f8b8416176d1cd5cab7df979d2e4001c0520
SHA256 f8731e4d91f6ac127c3f29683021968ba9c7638c0484132ea5db65a8b6a2d2bd
SHA512 5d489791133936253c3c896fbfdb4e4f1ef2c59546663a22a6daf95400dd970876e4aaf70e05a867cc18a5c2b3661eb9cefbea1b5c7fd6d4085cb61a9d5903bb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 21d2e17fbaa6a5f01232c9d6c9eb8747
SHA1 e34ef5d1b8a3bb0d71c871652a621196e1d02d63
SHA256 03caa1a7be2a04fc2efec90783dfb0fd897703502740de552e7f8c81b3574e22
SHA512 32c743decdf126c362702960454b500315e9be950fea4169feb893b3e52ac98284238a2223db981b297bdd3bf229b1c7768dcf24a053258dc6a09c371ebb5bf3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 dbbc8b88298f805ccb9100e7aee7e2a0
SHA1 e90058b99c50c9058aff5e3ae1feaca496042c03
SHA256 ed408659c5aeab96df89d338200da755ec1942b16899e1cb6fe7bab4bc5d86ed
SHA512 23d2963feac11e45b9bd34b4197665cf674915a871d8bf62abb8f6f01f9afe9806df4794274b14b24e893def07ff8e37c5462dc7ed9b745802286ecee356687c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 aaca57ac54595889118419994cee9cca
SHA1 334e17770387a888893e1a295825f3197e1878e8
SHA256 ef9602e5f97bf9797452fc7027aae32687eea64ac852f8de2de28ac6c6ec7683
SHA512 30f52f4c0ab1b88e8220fc87520a7687e36923d1a7a49cb9e0b0cfea4a12160704d1e0622668560fc1bae1841a2bf8d368971682ae8afef11dbfea9726111bf5

C:\Users\Admin\AppData\Local\Temp\nsb7C37.tmp\nsProcess.dll

MD5 08072dc900ca0626e8c079b2c5bcfcf3
SHA1 35f2bfa0b1b2a65b9475fb91af31f7b02aee4e37
SHA256 bb6ce83ddaad4f530a66a1048fac868dfc3b86f5e7b8e240d84d1633e385aee8
SHA512 8981da7f225eb78c414e9fb3c63af0c4daae4a78b4f3033df11cce43c3a22fdbf3853425fe3024f68c73d57ffb128cba4d0db63eda1402212d1c7e0ac022353c

C:\Program Files (x86)\Steam\Steam.exe

MD5 33bcb1c8975a4063a134a72803e0ca16
SHA1 ed7a4e6e66511bb8b3e32cbfb5557ebcb4082b65
SHA256 12222b0908eb69581985f7e04aa6240e928fb08aa5a3ec36acae3440633c9eb1
SHA512 13f3a7d6215bb4837ea0a1a9c5ba06a985e0c80979c25cfb526a390d71a15d1737c0290a899f4705c2749982c9f6c9007c1751fef1a97b12db529b2f33c97b49

C:\Users\Admin\AppData\Local\Temp\nsb7C37.tmp\modern-wizard.bmp

MD5 3614a4be6b610f1daf6c801574f161fe
SHA1 6edee98c0084a94caa1fe0124b4c19f42b4e7de6
SHA256 16e0edc9f47e6e95a9bcad15adbdc46be774fbcd045dd526fc16fc38fdc8d49b
SHA512 06e0eff28dfd9a428b31147b242f989ce3e92474a3f391ba62ac8d0d05f1a48f4cf82fd27171658acbd667eaffb94cb4e1baf17040dc3b6e8b27f39b843ca281

C:\Users\Admin\AppData\Local\Temp\nsb7C37.tmp\nsExec.dll

MD5 2095af18c696968208315d4328a2b7fe
SHA1 b1b0e70c03724b2941e92c5098cc1fc0f2b51568
SHA256 3e2399ae5ce16dd69f7e2c71d928cf54a1024afced8155f1fd663a3e123d9226
SHA512 60105dfb1cd60b4048bd7b367969f36ed6bd29f92488ba8cfa862e31942fd529cbc58e8b0c738d91d8bef07c5902ce334e36c66eae1bfe104b44a159b5615ae5

C:\Users\Admin\AppData\Local\Temp\nsb7C37.tmp\nsDialogs.dll

MD5 4e5bc4458afa770636f2806ee0a1e999
SHA1 76dcc64af867526f776ab9225e7f4fe076487765
SHA256 91a484dc79be64dd11bf5acb62c893e57505fcd8809483aa92b04f10d81f9de0
SHA512 b6f529073a943bddbcb30a57d62216c78fcc9a09424b51ac0824ebfb9cac6cae4211bda26522d6923bd228f244ed8c41656c38284c71867f65d425727dd70162

C:\Program Files (x86)\Steam\package\tmp\graphics\[email protected]_

MD5 577b7286c7b05cecde9bea0a0d39740e
SHA1 144d97afe83738177a2dbe43994f14ec11e44b53
SHA256 983aa3928f15f5154266be7063a75e1fce87238bbe81a910219dea01d5376824
SHA512 8cd55264a6e973bb6683c6f376672b74a263b48b087240df8296735fd7ae6274ee688fdb16d7febad14288a866ea47e78b114c357a9b03471b1e72df053ebcb0

C:\Program Files (x86)\Steam\package\tmp\graphics\icon_button_news_mousedown.tga_

MD5 00bf35778a90f9dfa68ce0d1a032d9b5
SHA1 de6a3d102de9a186e1585be14b49390dcb9605d6
SHA256 cab3a68b64d8bf22c44080f12d7eab5b281102a8761f804224074ab1f6130fe2
SHA512 342c9732ef4185dee691c9c8657a56f577f9c90fc43a4330bdc173536750cee1c40af4adac4f47ac5aca6b80ab347ebe2d31d38ea540245b38ab72ee8718a041

C:\Program Files (x86)\Steam\package\tmp\resource\filter_clean_bulgarian.txt.gz_

MD5 836dd6b25a8902af48cd52738b675e4b
SHA1 449347c06a872bedf311046bca8d316bfba3830b
SHA256 6feb83ca306745d634903cf09274b7baf0ac38e43c6b3fab1a608be344c3ef64
SHA512 6ab1e4a7fa9da6d33cee104344ba2ccb3e85cd2d013ba3e4c6790fd7fd482c85f5f76e9ae38c5190cdbbe246a48dae775501f7414bec4f6682a05685994e6b80

memory/2428-35537-0x0000000000C90000-0x0000000001142000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

memory/6788-35558-0x00007FFB78AE0000-0x00007FFB78AE1000-memory.dmp

memory/6788-35557-0x00007FFB77FF0000-0x00007FFB77FF1000-memory.dmp

memory/4336-35614-0x000000006EDE0000-0x00000000700F0000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000013

MD5 1fc15b901524b92722f9ff863f892a2b
SHA1 cfd0a92d2c92614684524739630a35750c0103ec
SHA256 da9a1e371b04099955c3a322baee3aeee1962c8b8dabe559703a7c2699968ef4
SHA512 5cdc691e1be0d28c30819c0245b292d914f0a5beaed3f4fc42ac67ba22834808d66a0bfc663d625274631957c9b7760ada4088309b5941786c794edad1329c75

memory/4336-35698-0x000000006EDE0000-0x00000000700F0000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity~RFe671966.TMP

MD5 889d301e5cc7efec1291d8c1d966962d
SHA1 e47485419fd72fa39e57c12fdd08a66660677c9c
SHA256 4d26c7ffb6df9450370da69b6d20fe45f2ec8dcc4e948582d55b1092b036670c
SHA512 21f36e0ba8cb6070d26330143dae1efe27a77675a67daf74f8afa3a3a81834208c2104b3fd3f9c7968ac496dd02c072cafd6823e390eaca0c146aa6ab0b9841e

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 c291628b57aed3f4f2f533e34333788e
SHA1 6160d4d69b81d5dc584e8de42d409587636b23a8
SHA256 e2ef665e0a783fa08c0c3f5175509977a279b3c0b163189eb61582258d533497
SHA512 f63e3f014f3fc45d4440863588caca0a78be6b38263f6a86594a79aff05f1662bd4e8752abf5d1b13b4c3ca8bc609bc706ea4d25ff68d987662f8a2222e3fab3

memory/4336-35708-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-35714-0x000000006EDE0000-0x00000000700F0000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 3791380d61cc3cb9b350c328f479ecd0
SHA1 de92fc5e781eda0337bd90cd79b8728a872e1406
SHA256 29fc364b58e7344f0a485b333c6dd540b15ae66bfb2a8607e0d3afed2d30a5f1
SHA512 18105bb829f0f7abce19490661da66af00aaef042be9fa1a90f546b41f1f078a148de8bfce8d340d7d14b60748adcc157982c3ebdbfc88311de7207ac6c1f2df

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 c55641c13994017c027cb3db10c7c487
SHA1 7ebb29063e9a3cce59da5beafcf2afb89e5f966a
SHA256 b842aa982a0e9315abeaf6360448070b097dade6a72695748804d1470fbd5ad1
SHA512 cd560e9a0f70fb4caa23303b8ba58ce20076f3475b1d38b335f36ca5d4e88624078818e8b1ce3e28184a0c5f1db0dce50f051b6b88828594c9f79a55316919c9

memory/4336-35724-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-35725-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-35727-0x000000006EDE0000-0x00000000700F0000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\LocalPrefs.json

MD5 dd290d1ff7377cefc0c173a884d221a5
SHA1 7b843662eb57617ec044928b848e2bcea9485306
SHA256 95ce6385ec81e5478350d2361b45927494c73a3ccfd48f498133381d033869ce
SHA512 cfe7be88f5ea4467ab3f2c579ee99b90d44c6a9d0277bd6fe99e890f0ceb69d8c5b9464ed3f1f4e4398d3b1f16b5d293d344e93f4dffa959856fd4ad12495260

C:\Users\Admin\AppData\Local\Steam\htmlcache\LocalPrefs.json~RFe67c5d3.TMP

MD5 63771cc5ec03eb45b950299b35a3cd85
SHA1 145b554d92a8a4909483a9c6034fa1912ae08528
SHA256 609ee90795f35c457d8d41bb7a679075503ef5dc96dc42b0101026bbdd7edc2a
SHA512 e896d67b8ffa0a6f02705dbff3871fa7fd3b617c668b443c62d18e4905510a7c0fe390656783762406d15ff350fb3d6d318dc84a2fc2a51e61595089534bc671

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 18563f5e7d1d39370821e534ef79f2ad
SHA1 b2d192692a2fd066f33aac140ea0542615c5bee3
SHA256 ca0c94df8082958c8585c6ba86eb825da33fdc245f2e8378eadd6834dafe8f7b
SHA512 6741e9f8ea9f335008c1e58b0e9649da0e566239f4be6daffcd4079e15622843e3434b9e5697e9a0dac83fc74ece1fa92c13ab69ee8648889564208fdd16c9a6

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State~RFe67d92c.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

memory/4336-35748-0x000000006EDE0000-0x00000000700F0000-memory.dmp

C:\Program Files\chrome_ComponentUnpacker_BeginUnzipping2368_1694006469\manifest.json

MD5 2648d437c53db54b3ebd00e64852687e
SHA1 66cfe157f4c8e17bfda15325abfef40ec6d49608
SHA256 68a3d7cb10f3001f40bc583b7fff0183895a61d3bd1b7a1c34e602df6f0f8806
SHA512 86d5c3129bec156b17b8ebd5dec5a6258e10cb426b84dd3e4af85c9c2cd7ebf4faea01fd10dd906a18ea1042394c3f41a835eae2d83dc8146dfe4b6d71147828

C:\Program Files\chrome_ComponentUnpacker_BeginUnzipping2368_1694006469\LICENSE

MD5 f6719687bed7403612eaed0b191eb4a9
SHA1 dd03919750e45507743bd089a659e8efcefa7af1
SHA256 afb514e4269594234b32c873ba2cd3cc8892e836861137b531a40a1232820c59
SHA512 dd14a7eae05d90f35a055a5098d09cd2233d784f6ac228b5927925241689bff828e573b7a90a5196bfdd7aaeecf00f5c94486ad9e3910cfb07475fcfbb7f0d56

memory/4336-35792-0x000000006EDE0000-0x00000000700F0000-memory.dmp

C:\Program Files (x86)\Steam\config\config.vdf

MD5 571bfe73ed88e6857d0242c544c1e3d4
SHA1 d1ee315b6103e9253b574f63de735c9e0d87d9c0
SHA256 1808eb2713d9da082f40ee7fc5ac38d0850f7bc3b928e8d1485eafeabccd7335
SHA512 8995e124ddb9a91a21d946624859e44b78b7cc3c9d686fe692fc685f8cfde57f63c70db0901c93b12fea4d3347f46b66159e2c7ebcd25a207c96ca8643ba4ec2

C:\Program Files (x86)\Steam\userdata\1552799436\7\remote\sharedconfig.vdf

MD5 3bd47d68d2bc3add38340869c912e1af
SHA1 9add3ed8b8461b52364326a259218cdcfdedd88e
SHA256 6fa20c55a7d1214f84a4e46e23208fecaae5923df75e44e65b60b99974e98f0b
SHA512 a1e133ff4fc44b78f2e250bda6de052d02684d92cb95817726fd3bb560f36a260c8590f6002a89daf155a97ee16cb1a9877fa71522732b0d16036c59ee880141

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 a59a7eda4a505d1811d5d9988082b7d6
SHA1 2ec0bdfbd34e801ba78023425674adf22e946d56
SHA256 c7be93b8debe2ce5310777a4cb25b493deb150e26b7a65920f8a35d2e9c130f7
SHA512 522271db8d8ae04b91f8ebe0b7ec8590907a1312608e4d83251cd65853a1bd22f90dab3fc4754fcbe3483b26cc9591b39ba160317358df3690c9db4ea4be5857

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 ad42943e53a1e2bd4af4c5852ce9d797
SHA1 4efa1dc92ca5672a5d5e44d2664cf6ec13000380
SHA256 4dce1c5190f2ecdb975fc471860d4ec0d13970c392ee45ac6f5e6e2625f64051
SHA512 aa309b4c70d0fd8072fbc4b9d170e9dccd4c074e01a32cbe6f862d09341cea0d31dac472cb168f8acdb4fc678c118ead3056bd5e2bbf41a28c6cec02de0dfdbe

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 0e6996209bce53fad7bb616087dc1e0c
SHA1 943b986a3b53c0c80aa6096161c11e5275f42bf3
SHA256 5a1232b105bba1a0f7070249fd7d8ad5d2cad39448f002993e3224ac15ee9919
SHA512 a14d4da779af37824ee297532862d4226966461aacb9ac2ff02ff086b095a79190da5e3cba9919449e8387f1774fd2935a02f5b989637b53b7e2d0527a225f71

C:\Program Files (x86)\Steam\appcache\localization.vdf

MD5 982df98958332aa2bcee43d7e93aa0c7
SHA1 6dc1630259466f6e782308aface31e089aa4dd82
SHA256 53ab3f319ccd5f645013463078f7d22291ca3e5b84110fff8c32c3f31a52e954
SHA512 cd924ef8bf6a0a70b9d48d55d12231e742409fd4dc8735522aa56478ffcd1cacaef8c31752f01d13213760ca6cdfc09594e21232e730c36d26ea6978e7484d3e

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 bc0fec89f0cd1d5f60bc407b8c6574fb
SHA1 cb192ab82749074702a9dc7e4d7ddd0b878ca586
SHA256 d161249ece57554014b1f41078494fbb72a0aef960323bbb05301eb731ab7c5a
SHA512 b5e7b15c887a9578200cb2d70daf8a4cd6cd7204f2c78345af225e6459c8f9bfc1f49c9cfe5ea30d2bf11dbdc6943fff75cd67af1a56279ec79e37e3567953aa

C:\Program Files (x86)\Steam\appcache\librarycache\1887720_icon.jpg

MD5 7ecdaf8a54ec52b20640a88527512903
SHA1 3133a4d748ad3be61fe9db759339cd5de73339b5
SHA256 7bd8b75aec0a4d4a377f3ca3a023fd8b7c5fc7dc6a2a66d17f8cdfe5b731ab0c
SHA512 60ae2031eed0c38264f0d8db22a9b6efeb3f80c791e916e15a1730853162d56e0da014dbd93a5479bae4f3bdd5705ca89be70c90574a524abd1c276ed5c55a2d

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000002

MD5 56b913703255a5987243bf1b083b3c39
SHA1 e25f12d9db1649ce7cfc55eed5aa8b7cb2a5539a
SHA256 3d71468bce1f70a7b97618b2d56204dde76749656661408247ba261598ff67e1
SHA512 e5ffea041e8a67eac45c887593efe185a5047558400079bf0ea440089e41b367b579b1623dded7fb3c36b423f74ebd12e4d256750addc64b161b95edf44a3a80

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000004

MD5 9b186321d426896edb72efbbf1eb45d4
SHA1 7f235c1e5779a031897619847a66c71762c5ef04
SHA256 6548706140714ae9458b6f13879c0538c6d4ccc7e438300e054eedc1d5beda79
SHA512 331ea99cc4838945e03428e2d580dc9a797ff9e642b097631509afb62462bed60ed81e0717caf36cf0cd7bff518290bd179271bdf6e85e4e7e07e78635ddff21

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000003

MD5 b582d99cd5004d086b71d864f7fe02e3
SHA1 5f7a6a73e501ccbe10406fbdcbd69aae0f008d7c
SHA256 84390d761c17846b0d6872578efb95f05ea0dfda9ca0b189a27b1cb254b81e36
SHA512 9618099b2d3498a2221864d03c2bb87f341687a08437b1b33940f065850a0aa166e97f895deed6fade10a65b4ac1f8c79b7533babb6f29e777e3714835b71a2d

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000006

MD5 c5e39337f681f1c40f0efa29366109b6
SHA1 3df6cdfb2a6ef5d2e0b0b2832154986629dc3e70
SHA256 70707407660a3f4361c5b197db2be83f96fe74e2f1f95f0753e985ee30b7b84e
SHA512 f73d25aa88d2ff3bdfc4d569d20c327883b16600f76410c883e07eba51715cc65d8983cebfb681f2a0c6f888394749f9975ecbf5c9af428ec5f3e433874d6534

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000005

MD5 e13edde4a25e96e573f37bdd11e020aa
SHA1 84a0c3cc6cd74b149cc27de2b0fe48bc2acb70d2
SHA256 45b526e6aa5356b278aa37e67593a25d09c9653e8a0e71fb8e155111d3b7a515
SHA512 9ba4cce47994f949731e594538f56f423ee46a8e602fe922ab6e1d173b87831ae5a80d967d695fc45a08b25aef5c494518b43cde6b4709db690e904b2cc1c053

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000007

MD5 6f882cfc18469731fd8ebeca69365f7f
SHA1 78ad386807dbc130b1fbe5e1a97389e1e0e2981a
SHA256 b81ddb468e5604f1b5ddce3c1e15e0298432841752cd6be0c497b05fae7cc346
SHA512 75855a2b09abfab3476fc16b18d996e4a705980a1dc2c4f84688c9b8c7b4c1a6ed0a4dd7f6c57eb28838ba1999012a96253a1288f9445056bb2f7386b2315128

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000008

MD5 80957d40038edbf006e7d2f5656009d4
SHA1 d5a187dfe53774c0162a8635fd0f6dcb14b481cc
SHA256 7f888bc3edc1df60155af5c126f56a67f5f19b4a53421b2df762a146249fd289
SHA512 8cd093ab4c70c8f60f0facb19c6a4805f630de8d868b1bd2a6e985e45ddfd335050b6c0ab9765c87937228a69c8547f6b940e9abe43a14d630e41e1dd679318f

C:\Program Files (x86)\Steam\resource\filter_banned_english_cached.txt

MD5 009ca439b8e68dbdb83850d51b07c736
SHA1 b8dd1986d15aef3dcba09c954577c780b549c582
SHA256 4bfbbfd0114ee78d7795835c64aae6dc6b525547748c5dd1150d7d1ff8757c43
SHA512 25e90b8b737b30879ec9073457cc7b30bdc46ed71b8885ce14f9c1946476d65c6bbdd0ddc19bb09c406cd9439837aec5c8ad007dbb5a4378842e1634429b093e

C:\Program Files (x86)\Steam\resource\filter_banned_english_cached_timestamp.txt

MD5 9c9a4e79fa4cb0b1253f2aac744630f9
SHA1 d219d897efeece006997cb73afad6d5c96096147
SHA256 e896589e2d1b52fb1a076932a651ce0aa69beda8424e1dbcba96267794481a8c
SHA512 770c4e2f989a36e9b64d2b40b30a998e4cc93484627502a8e7bb11d31fca845eda500cc491283f908906a7aa393230af7e3a6257b3bc709f102cf8d768b24a56

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00000b

MD5 5b4fedc93103d4fdd2b5a8b8d7f52dc8
SHA1 795d6e53a962db117a602530651b068f36eba14a
SHA256 063e702848315145a83e030c67ca5d0dd981594c39e06fa44abc50d3aee6d500
SHA512 6f7657cffb6e17e1257aac33be894d012b95c2f05af010637d69e00f8fa2adba613100f8fdca7996135857153f8591a1af26849750fff0449a7bea1565d40cf5

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00000c

MD5 da00e9120a21b97b5dd8f79de746c20c
SHA1 47ff3322a7d33660b59970bb5d63938551c84aa1
SHA256 8d810580b30bbf008c95588c8ec9aa3018022fdc0a8a762add17e42e12f8f540
SHA512 849caa0293f868b293e05b1d6eb233937f2d98cb2e3bfc299553548af5e3f72a872dce3981b48ecfe36d23b3ec11f4ed87ef11d7e388bb203f50f3c29382f2eb

C:\Program Files (x86)\Steam\resource\filter_profanity_english_cached.txt

MD5 61d18907a85f6f263431e335d6ef5504
SHA1 24b135bf8a2e8fed724e0738f823051f87769f54
SHA256 a99f8dae7d1acac74fb32d07cfe0915f38f5bb3bae8b6d8161c3a515c6484070
SHA512 76e327b6cc6e70a8bc3b95e9bfb649eac89616592a8e9f473b574a0584853769f2ad99595de5e9fa85a324d03a5c0f00450a32efc84c5eca0fddff1f079b5ef2

C:\Program Files (x86)\Steam\resource\filter_profanity_english_cached_timestamp.txt

MD5 c798c8cce81bb1219a30e23ac67b30e1
SHA1 102d5fe992aa090187f5371da0a7edefaf66c559
SHA256 b693ba5ade48f675653a1cc6bc85411119c53a1f7410bd6421b26f13e165354f
SHA512 000a5ef38148438b56adc286ad421ae16618060db96bb9b8feecd9702603ea5cac0b412824c93eeda715697d3c087fdffdbf7fadef78a69e31562ef9a3c1d270

C:\Program Files (x86)\Steam\userdata\1552799436\config\localconfig.vdf.async4336.tmp

MD5 8b02194ac896b4f772e656925d5404d7
SHA1 b9d3e195191db25dcf2cd5c78b09bc00905cd495
SHA256 4dbf86cadad7d6f09a69f1d3e22012f4e02ae56dfe3fbb1733073e3d98af111c
SHA512 99a3c9a75409f4c52b3c18ad97e5a6038d19d50349eef5ae023b5c04130d2fdfdea87346542b6d38f305307e48f71b8171111723becb8d4f51ba54da2d7b35f9

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000012

MD5 64278a903ff04d2e4ae7b7f36dbaa54e
SHA1 c1cba04e7e769f9d8bb34de57d3d363652385cd0
SHA256 64b2cc1ce8325a40ddbd2347471d3adc1a358e0cbd7d6cecaef0c375f4eb8e7f
SHA512 a42d8b937f944f85ef1611d62c1a0ef87846f83dcfae6fba3e324bd9e3d056a85d008ea7444228ff0b3484fcfebc43f638967b78a28072c10ac68c8945e19519

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000010

MD5 e6e15f63a20a10ba6a821621af2e5da4
SHA1 24c54049f5e069516a99cf59accedd0852bc4731
SHA256 c0258f150582f1e7fef221f62a58053ab3dd01d8b9bc76f2e0a7480fc9155cbc
SHA512 5c28cb5e9119663f5375ddd2c5f6550bc4abeec36d85c0c6c8abceca57eabe4fe0674cef18791bdc23eee26d3ca857dfc93f1ae237c4cec634f9d98e3771ada5

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000011

MD5 b7f4239b69d60053612374bf3e4d9b98
SHA1 077b6286b5e86a25d172c286a6def398e2a0dc33
SHA256 87f62b966cd8316a4467efb5c1873abf038e8a930090667e1d2dab18afe41c23
SHA512 5cfcc48d52d790e589a13bdaf1dff6b5aa6d3c33450d7d8a06ab3d028e047c934e8238e82246bc1b5067477235c763608fe3b84acb3837d23ab533cad99982da

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00000e

MD5 57613e143ff3dae10f282e84a066de28
SHA1 88756cc8c6db645b5f20aa17b14feefb4411c25f
SHA256 19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14
SHA512 94f045e71b9276944609ca69fc4b8704e4447f9b0fc2b80789cc012235895c50ef9ecb781a3ed901a0c989bed26caa37d4d4a9baffcce2cb19606dbb16a17176

memory/4336-36105-0x000000006EDE0000-0x00000000700F0000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00000d

MD5 ce6bda6643b662a41b9fb570bdf72f83
SHA1 87bcf1d2820b476aaeaea91dc7f6dbedd73c1cb8
SHA256 0adf4d5edbc82d28879fdfaaf7274ba05162ff8cbbda816d69ed52f1dae547f6
SHA512 8023da9f9619d34d4e5f7c819a96356485f73fddcb8adb452f3ceefa8c969c16ca78a8c8d02d8e7a213eb9c5bbe5c50745ba7602e0ee2fe36d2742fb3e979c86

memory/10840-36267-0x00007FFB792A0000-0x00007FFB792A1000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 dd437844374f1eb65dd37915a7b58710
SHA1 33c0324fcfbdd58f8faa849275dfa34bdcb07afa
SHA256 e4baa4638241e588c2508ab3abc6615a00a3c8115aca4642f5aefe2739340f47
SHA512 d91f572cd1968ea730f75295f307e1a25b11de23b7ff62480b8cf65df30dbd6f913eb37f0f895798d1a20d2b2223a1723c5718e5c90acd8f59a3ef23ede5b06b

memory/4336-36353-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-36382-0x000000006EDE0000-0x00000000700F0000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\temp-index

MD5 b0d76b3c45cd77d6e92c3403ea0a026a
SHA1 445d013b08f34b2ee0bde711f654d490e69083e0
SHA256 5b2a560ce9eb14173301f563f7699d946bb04fc239817607094e5aac27f8f1fa
SHA512 beb94909224a099cff54ab67290cded542b386b2f01c6598cc2d910eb98a82b7d02902b5b6a87a135c1e3e9b73940b33cb9d3e7ec0ecce328fac61f6041d99d8

C:\Users\Admin\AppData\Local\Steam\htmlcache\GPUCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Local\Steam\htmlcache\GPUCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Local\Steam\htmlcache\GPUCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 999465e177931dfb41ee3481995a166d
SHA1 1de7e1a1236a095d2427b6d2c02dc594aaeb792c
SHA256 e539117494a478409f6eaece759fc9ff77cae16d2461550c4bf38a0ebe1930ee
SHA512 9237a6a38cfab0cd52b8c3dd02324b14c0e8c5ca01e9b8926aa00d752786a1e0dacb7bf1e55a1737c89407d078b40cd0d8c380c9cd7f30913348f08be08db1f7

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 10d79c0fc92ade762bd5c1aa23a2ab0f
SHA1 487dd71b65e94fbc961bbc922d2a4f56d254b7ea
SHA256 413b90295b4e28ee0ac37fbe64aad99bb372c36170a5cee4560f0b307de2a756
SHA512 2fcbebbc7c9281f54528a34e9a483ffd5f2d003a17ac7e41d15558b1b061a67a6d07171ee22b9b1c1776f6d5299f17c3f424d23e8e3be52641527e0a5b6dc189

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00001d

MD5 6168553bef8c73ba623d6fe16b25e3e9
SHA1 4a31273b6f37f1f39b855edd0b764ec1b7b051e0
SHA256 d5692b785e18340807d75f1a969595bc8b1c408fb6fd63947775705e6d6baa66
SHA512 0246cee85a88068ca348694d38e63d46c753b03afadf8be76eca18d21e3de77b495215ed2384d62658a391104f9e00df8605edb77339366df332c75691928efb

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000023

MD5 2d64caa5ecbf5e42cbb766ca4d85e90e
SHA1 147420abceb4a7fd7e486dddcfe68cda7ebb3a18
SHA256 045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f
SHA512 c96556ec57dac504919e806c7df536c4f86892b8525739289b2f2dbbf475de883a4824069dbdd4bb1770dd484f321563a00892e6c79d48818a4b95406bf1af96

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000021

MD5 d45f521dba72b19a4096691a165b1990
SHA1 2a08728fbb9229acccbf907efdf4091f9b9a232f
SHA256 6b7a3177485c193a2e80be6269b6b12880e695a8b4349f49fccf87f9205badcc
SHA512 9262847972a50f0cf8fc4225c6e9a72dbf2c55ccbcc2a098b7f1a5bd9ea87502f3c495a0431373a3c20961439d2dae4af1b1da5b9fade670d7fcaed486831d8c

memory/4336-36730-0x000000006EDE0000-0x00000000700F0000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 ee6465d0eb3826037358b7f6ef0156da
SHA1 95f35d34b4b65ca56035f1b8a24e4bc99b076ac3
SHA256 f0e6333050caf22aa1ebd346dc289614b1e737c896068bc8aa03da3ce147880a
SHA512 20fb0624b6b33722e993c3f583e35d93f17f2ced82b5100d5b56d180807bf437d1f664a5f21c35a68beab88b30e0849c07a3412c936c2985ca812027cb540a2e

memory/4336-36776-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-36808-0x000000006EDE0000-0x00000000700F0000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 3f3434a6829eab0f8b11336e07556479
SHA1 728c5d39a34df5236df0b1916a9aac4078714943
SHA256 273dba4c1290d68beb0163b15b07386eed7a11ca3671440f2c2acea599ca2e93
SHA512 b2381ec593957f05bb43e690e206644ae6f1fb441fb3f8b1572bfb1de07414c2861b1119c85dbc9dbf7369a15672708f4a099b12192e373caffffe52c021d8cc

memory/4336-36828-0x000000006EDE0000-0x00000000700F0000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 6afa4b2f7c32379371ee6d7ac45290d0
SHA1 9dbd4e964198daca37e35d10da3b90bcf999dd0c
SHA256 c1ef9cf42c505db578fca41c888adbcc425f700031c4cc48c9d82973e186b54b
SHA512 dd72735f16b9eb207e1b973438c38fda454fcad4faa73feae842c843a0f2d97e3580220e425c4cf28ce0159b0ab510b18b2be50715dcc84f5de8e0f1ee441ba6

memory/4336-36858-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-36879-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-36888-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-36889-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-36890-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-36893-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-36894-0x000000006EDE0000-0x00000000700F0000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 a682c01f6257c4bd16b3081eb4968a13
SHA1 c28254cffe96af693b69c063ffa49159b4befd9c
SHA256 a9e01413488383934a27928854e5eb1dbec8ebcbfb6d5436c2d02993920c556a
SHA512 628110966205ddd8b0c301177b44505f082792b0d56e8d173b3a0a9b2bf099ad7dec987a23a342db95f6990e4c4033b06d9f69fdea808a7341faac0c0529d35d

memory/4336-36904-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-36905-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-36906-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-36907-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-36908-0x000000006EDE0000-0x00000000700F0000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 406745e5661e74e0ec6d9b8a08b68d23
SHA1 17e953866614cdf062107725d27cb7ca64608518
SHA256 bff0985302f21064727538af9d9ade0b7a920023ad63a250c2f9e21ab0fa8123
SHA512 6410d9031b42b322e7213a03414c6e88b2f7d88d092e3d80b69d4756e216e466ab69ff53e3b40afadef2f3df032f82f73320545a7de31631521394e52a623f12

memory/4336-36943-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-36952-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-36953-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-36954-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-36989-0x000000006EDE0000-0x00000000700F0000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 e579998dfd26e7d423cb0209a6fd59ce
SHA1 26133db928fa7110f7f4af19b1a34bea220033d7
SHA256 9ccc53bc1aee5211f9ff68823612aa9d6febdbd936ee3173aef6672adbddf608
SHA512 6518d0d457b1e0dae614d451976de2d45c4a426299fdd94b64b685af2d1339dfe685d3fdb34a335c2748240abfb9c76777f52b1e91ea9a7e6fbc8a5af19ac120

memory/4336-37003-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-37005-0x000000006EDE0000-0x00000000700F0000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 d506263237824e621f2d60602e8f3a06
SHA1 68159010f3dab6d69cafbdcf72854c19d21dfde1
SHA256 fa18f4f3f5f76cd2c0e0fcd55051e2fe8debf2598328969d578c2bc9aefdd18e
SHA512 6b81913cb140fde82e2294a3e6af340f8b3cde5798957d3244a936522378ec3a55257d8f99adab74b6a17b5835f4236b2f6a72318099881f2a173be2547de24f

memory/4336-37015-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-37016-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-37017-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-37018-0x000000006EDE0000-0x00000000700F0000-memory.dmp

memory/4336-37019-0x000000006EDE0000-0x00000000700F0000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 db41cea5a9fc0c8bb701f356d464f769
SHA1 02ff7fea949798d30453d94bcfebc1872b89ec4c
SHA256 37a21d590b0b844a7265a2c207ac6ba9e267009d70d16e960f83f22b7e374696
SHA512 0f48578194939eca0396efd205ceb7907271180ac519ce007273053471c0e55a77c7b53989b453d28852a6e87df83ff4d0c2ecf4c1b9d5d6f94027d06d491eee

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 d3085ab0865beba1fba7b83f3c669307
SHA1 9e132a91bb4524d557dc70b83d89c6ff76655dcc
SHA256 4611be39dc891d61ecfef4d91da35abccc55240dd41aef13bdcdc5d171f430ba
SHA512 d64c9df03bed94d717fc8769c0307db6d75e3271264e46ce0142f48a5bf5771275add43edec0197ae1048a1c95b7ded89c49bc4e172b6d43e5e7e1a5ef703254

C:\Program Files (x86)\Steam\appcache\appinfo.vdf.async4336.tmp

MD5 09a90a09d79d9342a7287964002eb604
SHA1 2469dbd17b6247ba2b6e73bad59b2b815bd8a53a
SHA256 5310b1fd2fa1f779efcc63c742bbcc9364f77d9329c6635a1834d0409b032004
SHA512 3d0cd95acc150907c9c57b4857b4cc26e2fb9686411a5e3f0008ec3cefa073294810091a51c277c68741865029202d1f258061325580d979fa52fccd902440cf

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 25553ed2d939d63246e3395fd7c64ced
SHA1 683db93837ac38d0a8dd13b7e6c6df827827e486
SHA256 33fff2bfb1d1b3da27f05fac7a03bb5844ecf1559a76e1f86a67737fe8cfe5cd
SHA512 c35e3941fcfa854f044c6f75a1c70c399e012deaec76405b8f87e39c503978574e03134aae0544ff8dab769a16820c9e8258212e6ee410f625ba55a38e723d9b

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 70fec56f130edd89541399b389e0d56f
SHA1 f8ff4c87a9cfc871b03c8b2965187638214b7692
SHA256 4620b8b5bd9bb800c69ae9bda7f95758637a48236209c40235d026dba4f954da
SHA512 fdeb85c3adfb037dddb3009058d57c69bd440036796804b9822175a320a2bb23a0f7ff7c508a2cd9aea0ff8b08c0858b46519b26fb5110ab1b198a3a21544a8d

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 2426b6277b348321ffdf66847972e2e6
SHA1 b95ec9cd1c25ff86c4546050dc995acc6a3234ac
SHA256 3595bc9dd48f43fab7f1c6bc4283a57a3ec778f63e8276a3080718d0f786b6d3
SHA512 7dc4d1f0cf2e0f0b75a46bc01e9f94a16f6f7341ad488a4f0b96d96c60f5283338f9a3bb04862a01114a149868bdfc2da00df8ae7e1cab7a74e0395abc744c11