Malware Analysis Report

2025-08-10 14:16

Sample ID 241016-a6z6ksydmk
Target half_life.exe
SHA256 1f9c874e4a29b220c5f79ff9bf2f75f8b247336d617eae4ffe7c41695a9981ce
Tags
bootkit discovery evasion persistence trojan
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

SHA256

1f9c874e4a29b220c5f79ff9bf2f75f8b247336d617eae4ffe7c41695a9981ce

Threat Level: Shows suspicious behavior

The file half_life.exe was found to be: Shows suspicious behavior.

Malicious Activity Summary

bootkit discovery evasion persistence trojan

Executes dropped EXE

Loads dropped DLL

Checks whether UAC is enabled

Enumerates connected drives

Writes to the Master Boot Record (MBR)

Checks installed software on the system

Enumerates physical storage devices

System Location Discovery: System Language Discovery

Unsigned PE

Suspicious use of AdjustPrivilegeToken

Script User-Agent

Suspicious use of SetWindowsHookEx

Suspicious use of FindShellTrayWindow

Suspicious behavior: GetForegroundWindowSpam

Suspicious behavior: EnumeratesProcesses

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-10-16 00:50

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-10-16 00:50

Reported

2024-10-16 00:54

Platform

win7-20240903-en

Max time kernel

125s

Max time network

132s

Command Line

"C:\Users\Admin\AppData\Local\Temp\half_life.exe"

Signatures

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\half_life.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A

Checks installed software on the system

discovery

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Games\Half-Life\hl.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\D: C:\Games\Half-Life\hl.exe N/A

Writes to the Master Boot Record (MBR)

bootkit persistence
Description Indicator Process Target
File opened for modification \??\PhysicalDrive0 C:\Games\Half-Life\hl.exe N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Games\Half-Life\hl.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\half_life.exe N/A

Script User-Agent

Description Indicator Process Target
HTTP User-Agent header Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) N/A N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2268 wrote to memory of 2416 N/A C:\Users\Admin\AppData\Local\Temp\half_life.exe C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp
PID 2268 wrote to memory of 2416 N/A C:\Users\Admin\AppData\Local\Temp\half_life.exe C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp
PID 2268 wrote to memory of 2416 N/A C:\Users\Admin\AppData\Local\Temp\half_life.exe C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp
PID 2268 wrote to memory of 2416 N/A C:\Users\Admin\AppData\Local\Temp\half_life.exe C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp
PID 2268 wrote to memory of 2416 N/A C:\Users\Admin\AppData\Local\Temp\half_life.exe C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp
PID 2268 wrote to memory of 2416 N/A C:\Users\Admin\AppData\Local\Temp\half_life.exe C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp
PID 2268 wrote to memory of 2416 N/A C:\Users\Admin\AppData\Local\Temp\half_life.exe C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp
PID 2416 wrote to memory of 2712 N/A C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp C:\Games\Half-Life\hl.exe
PID 2416 wrote to memory of 2712 N/A C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp C:\Games\Half-Life\hl.exe
PID 2416 wrote to memory of 2712 N/A C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp C:\Games\Half-Life\hl.exe
PID 2416 wrote to memory of 2712 N/A C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp C:\Games\Half-Life\hl.exe

Processes

C:\Users\Admin\AppData\Local\Temp\half_life.exe

"C:\Users\Admin\AppData\Local\Temp\half_life.exe"

C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp

"C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp" /SL5="$400F8,220853976,908800,C:\Users\Admin\AppData\Local\Temp\half_life.exe"

C:\Games\Half-Life\hl.exe

"C:\Games\Half-Life\hl.exe" -game valve

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x4fc

Network

Country Destination Domain Proto
US 8.8.8.8:53 count.ms-csnv.ru udp
DE 141.95.54.113:80 count.ms-csnv.ru tcp
US 8.8.8.8:53 ms7.ms-csnv.ru udp
GB 51.38.65.66:27010 ms7.ms-csnv.ru udp
TR 213.238.173.152:27015 udp
TR 95.173.174.175:27015 udp
US 149.28.108.197:1337 udp
TR 95.173.174.186:27015 udp
AR 45.235.98.8:27015 udp
PE 87.121.99.6:27015 udp
DE 45.83.244.193:27015 udp
LT 5.20.156.199:27016 udp
LT 5.20.156.199:27015 udp
RU 62.140.250.10:27015 udp
AR 45.235.98.48:27031 udp
TR 95.173.174.185:27015 udp
TR 95.173.174.193:27015 udp
DE 95.179.240.172:27015 udp
AR 45.235.98.21:27022 udp
TR 95.173.174.192:27015 udp
SG 172.105.121.118:27115 udp
RU 84.22.153.100:27015 udp
US 45.77.74.75:27015 udp
AR 45.235.98.235:27045 udp
US 45.77.74.75:27018 udp
DE 51.68.190.91:27015 udp
US 5.161.189.195:27015 udp
PE 87.121.99.31:27015 udp
US 45.32.166.104:1337 udp
AR 45.235.98.8:27017 udp
DE 143.42.58.77:27012 udp
AR 45.235.98.236:27030 udp
SK 195.62.16.163:27016 udp
DE 195.20.246.242:27018 udp
RU 84.22.153.100:27016 udp
US 207.148.12.159:27015 udp
DE 78.46.33.4:27017 udp
PE 161.132.38.79:27020 udp
GB 51.75.164.15:27015 udp
FR 94.23.156.99:27030 udp
GB 78.141.193.110:27015 udp
TR 95.173.174.176:27015 udp
TR 213.238.173.253:27015 udp
BY 86.57.176.80:27016 udp
TR 95.173.174.177:27015 udp
BY 86.57.176.80:27015 udp
SK 212.37.87.232:27015 udp
DE 161.97.107.198:27016 udp
DE 88.198.47.43:27018 udp
CN 106.52.153.13:27015 udp
FR 145.239.108.67:27025 udp
FR 188.165.220.114:27016 udp
DE 148.251.68.215:27015 udp
RU 31.131.249.69:27018 udp
US 192.169.88.50:29035 udp
US 192.223.30.68:27015 udp
GB 54.36.231.143:27015 udp
SG 51.79.138.159:27015 udp
TR 95.173.174.179:27015 udp
DE 45.83.245.191:27015 udp
US 74.91.119.180:27015 udp
RU 37.230.162.74:27015 udp
NO 81.167.247.172:27016 udp
RO 5.83.43.175:27015 udp
DE 2.203.117.102:27015 udp
AR 45.235.99.104:27336 udp
RO 93.115.32.4:27015 udp
US 74.208.216.232:27030 udp
AR 45.235.98.8:27016 udp
RU 89.223.37.142:27012 udp
BY 86.57.176.80:27018 udp
RU 31.131.249.69:27070 udp
FR 185.144.44.144:27015 udp
US 107.150.56.58:27015 udp
LT 194.135.95.189:27015 udp
AR 45.235.98.235:27050 udp
UA 195.234.5.14:27015 udp
AR 45.235.98.235:27065 udp
US 74.91.113.16:27015 udp
US 107.150.56.58:27016 udp
NO 81.167.247.172:27017 udp
RU 89.223.37.142:27010 udp
AR 181.31.40.245:27016 udp
PE 87.121.99.6:27017 udp
RU 46.174.52.201:27016 udp
AR 45.235.98.61:27024 udp
AR 45.235.98.235:27040 udp
RU 46.174.48.48:27221 udp
DE 88.198.47.43:27015 udp
DE 161.97.107.198:27017 udp
US 76.139.152.207:27015 udp
AR 45.235.98.48:27037 udp
GB 54.37.241.101:27015 udp
RU 89.179.240.119:27014 udp
AR 45.235.98.8:27022 udp
DE 207.180.228.239:27016 udp
FR 188.165.244.220:27045 udp
DE 88.198.47.43:27022 udp
DE 167.235.180.253:27015 udp
DE 167.235.180.253:27016 udp
US 63.251.20.62:27015 udp
US 207.148.12.159:27016 udp
RU 5.53.16.212:27017 udp
UA 91.211.118.48:27021 udp
US 64.5.76.253:17015 udp
DE 87.106.63.111:27016 udp
US 193.29.63.214:27015 udp
US 74.91.116.227:27015 udp
SG 172.105.121.118:27215 udp
CZ 88.86.115.150:27075 udp
US 162.248.88.37:27015 udp
BR 191.96.70.108:1337 udp
RU 5.53.16.212:27077 udp
DE 176.9.61.5:27026 udp
DE 164.68.106.25:27016 udp
US 45.77.74.75:27016 udp
US 192.223.24.140:27015 udp
US 74.91.121.12:27015 udp
UA 91.211.118.48:27022 udp
AR 45.235.98.235:27055 udp
AR 45.235.98.8:27021 udp
TR 194.87.188.47:27015 udp
DE 88.198.47.43:27019 udp
CN 124.222.8.195:27016 udp
AR 45.235.98.235:27060 udp
FR 37.187.102.223:27016 udp
DE 212.87.213.185:27015 udp
UA 176.36.254.82:27017 udp
FR 188.165.244.220:27040 udp
BR 54.94.44.59:27015 udp
DE 178.63.16.211:27102 udp
AR 45.235.98.236:27035 udp
UA 91.211.118.37:27028 udp
US 104.131.24.108:27015 udp
AR 45.235.98.236:27025 udp
US 162.248.92.2:27015 udp
TR 194.87.188.46:27015 udp
RU 195.93.181.253:27019 udp
RU 94.102.19.30:27001 udp
FR 188.165.244.220:27115 udp
UA 134.249.113.137:27015 udp
RU 95.163.78.25:27019 udp
TR 213.142.150.185:27015 udp
RU 195.93.181.253:27017 udp
US 165.227.178.65:27015 udp
US 208.167.251.20:27015 udp
DE 94.177.230.156:27015 udp
CH 95.183.51.2:27017 udp
CH 95.183.51.2:27015 udp
US 73.164.228.80:27015 udp
FR 188.165.244.220:27075 udp
FR 188.165.244.220:27110 udp
FR 188.165.244.220:27095 udp
US 72.76.178.107:27015 udp
DE 88.198.68.172:27030 udp
AR 45.235.99.18:27024 udp
SK 195.62.16.163:27020 udp
RU 89.223.37.142:27017 udp
PE 87.121.99.31:27017 udp
AR 181.192.79.104:27019 udp
DE 176.9.61.5:27027 udp
RU 85.174.227.170:27016 udp
US 137.184.49.86:27015 udp
AR 45.235.98.26:27018 udp
US 103.195.101.84:27030 udp
RU 94.102.19.30:27015 udp
LT 62.80.247.69:27019 udp
TR 194.87.188.47:27016 udp
RU 62.140.250.10:27015 udp

Files

memory/2268-2-0x0000000000401000-0x00000000004B7000-memory.dmp

memory/2268-0-0x0000000000400000-0x00000000004EB000-memory.dmp

\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp

MD5 33cc6db73b7274bd553c3e95e2435a14
SHA1 83def29412f76edd611dca4e66e0eaa0a39b180e
SHA256 5542c67c3224578df33c5e4cec79150489455742f4b66deb170eda9c6f66fc7b
SHA512 62d84f8376378314fbe88fc298e7a866e3ab0da60162a6eb1eac3d55d41fdb79ea1c77dcb7b841ab18f338a27e59eb5cb6268319bc63cab58594318f766a350a

memory/2416-8-0x0000000000400000-0x0000000000726000-memory.dmp

\Users\Admin\AppData\Local\Temp\is-CQ4PP.tmp\idp.dll

MD5 55c310c0319260d798757557ab3bf636
SHA1 0892eb7ed31d8bb20a56c6835990749011a2d8de
SHA256 54e7e0ad32a22b775131a6288f083ed3286a9a436941377fc20f85dd9ad983ed
SHA512 e0082109737097658677d7963cbf28d412dca3fa8f5812c2567e53849336ce45ebae2c0430df74bfe16c0f3eebb46961bc1a10f32ca7947692a900162128ae57

memory/2268-14-0x0000000000400000-0x00000000004EB000-memory.dmp

memory/2416-16-0x0000000000400000-0x0000000000726000-memory.dmp

memory/2416-129-0x0000000000400000-0x0000000000726000-memory.dmp

C:\Games\Half-Life\platform\Friends\is-I8RR3.tmp

MD5 08091f474e938ea73aac90c9773a6013
SHA1 c4ff881bf1c3f0f0db3bd58f47d666df6a0ff885
SHA256 50443605d94d7bedbb03c2200d7cb7e98b0eaa91e3489cd7d77f69a407b73e0a
SHA512 7f569511d12a36fdcf6193aa52a2845b53f6d2a2e075426708f542f0012360a48cdc520ec6b26b0d1dd9f86c0ba41c8205483d340963aa0acfbaaca03a7ee0f5

C:\Games\Half-Life\platform\Steam\cached\is-R1FMU.tmp

MD5 18581b2844d1b35bd0dc170f8557bc42
SHA1 05e8657b8f73f2608aeb07edd8f469f3639d29b7
SHA256 7f00fc14809350a11d04cb655e996beb4d829ae7c2d7ca320968661961e18fd2
SHA512 cb2be96b5ae7cc5c593f954092ec663b8ff41e06f2597b24bbec8883a025baa75bbc6c15cb24fa29389e05b7bdb0d017bb47ef747a524eea53b77fb4a479087a

C:\Games\Half-Life\platform\Steam\drivercheck\260\is-0GD85.tmp

MD5 f4eb527c235bb256418442880e445f39
SHA1 ead5903daaf37141965be8a41a535a82e7bb791c
SHA256 9b93979bfb94347d3157cdca038d1a6addc8564a954bcc564adef6a1c86ebc22
SHA512 59a32b9a93afc69137ff4ce1ce0569eb46c0e7512afc2435cf94e94b2fbbfae320059779901c703374b018da7297caf44bf6b5a42fe16154c01270bfdbc24a9f

C:\Games\Half-Life\platform\Steam\drivercheck\260\is-9064D.tmp

MD5 158ac9a69c9a06d9bc2fb432d5b63f38
SHA1 c55441b50d6e5bbf1b619ce7c84789439c545110
SHA256 ddbef05c1fa1eb6c13538306f2d28bffb61dc57e7a9e3d9e25b98dec576ca8a6
SHA512 c3e6fbcd0338c1d04fada0c66123f1c21663f25c9f66161f18817bb6c10f9a79034ab3b0e458e1dda61bc915e3f76eb88e1238b04468a277ab16bd0f0911a1e5

C:\Games\Half-Life\platform\Steam\games\is-5ORVL.tmp

MD5 200380f4259d09ec3f433e421cd5a55f
SHA1 9afc9cf71fd5949198b77bf7ec396a89058d6dee
SHA256 e136089e82c2d98a7283b55dcd93c5332a332149e7119d015bb7c353435ea9c6
SHA512 c77a433055077420eae1fcae302fc0738f592b8081ba2bdcae2015a3296672f1df2518934821d424e3a8c9535bf1891cbe7394c16ac68520099a3d7dfb4c50cf

C:\Games\Half-Life\valve\is-6EJ4Q.tmp

MD5 f02c1d45a1a86f5d60ce9e310e24d144
SHA1 d991f95d96e1c76d2acb944bb09447628cd96caa
SHA256 01491c012c29f4706f0cc8f1117eb0f882b54f720bfbf320a3271ffac6c929dc
SHA512 88dafe4039264818c4193f563376db890ecea2f8f67df7902dd76aacd08be4cb47197257d02217eeec1a81295615b30b89e91d097837193a8fb64e72d03d7334

C:\Games\Half-Life\valve\events\is-C6TND.tmp

MD5 8cfcc0a84d0b6b51995ce17bc9f194f2
SHA1 f86d5edad7e5a3e2d994517da5ebd7d748a8c666
SHA256 2c7d43b8dc6ea01a32acddb7798b9dabf0ec44c7a6dcf75160539a7fe53e029d
SHA512 5f75243ff3e13b557859d89593432f5e29f014f2bc527bee363be3369e884feccb15ee593094c7eb0f8e4786b6a352cdf9fc6039636782cd23712cadc114ee1b

C:\Games\Half-Life\valve\gfx\env\is-I4G96.tmp

MD5 bf92d45fcfe71458fe5b3d7258d1ee03
SHA1 e701671f4ef94b77a008f36287a51709a00daeb8
SHA256 6e84f9cb10fac95f23b6a49fd0e6282fcb523cfe1256c200b25c088b4a4bb726
SHA512 2b9f1a4b9da320ed2366c16d91038748b1d9a2ab48deb1c939da639e9acc2b252592e9cd6a65d60ff967b2546af6f79e18ce92b842df132192d9377f6f9b896d

C:\Games\Half-Life\valve\gfx\vgui\is-F3V1B.tmp

MD5 6deae390d10e5faef07cb793138a4ea2
SHA1 0e1b89e5e5e61f5e8959d3d6e17fc874f3d14a8e
SHA256 1efacc8931f4e6558fc9f854527e25e004d8c3fd90f1f5209273236924a9241b
SHA512 70c1ab592e46440f759ffdaa2ba1bbb9206212670762fbdbeb04f85da2304120e0a052ea4164fc0e0326e82c013924d0db0ea27fc21041489fc6d6d69b69d93a

C:\Games\Half-Life\valve\gfx\vgui\is-2H1V5.tmp

MD5 1926ecbcf1b403f0c4a30426ea74276c
SHA1 24d8e0d5f3477f85e76985a0fc579e392482c402
SHA256 99986396ea8ebd9ab4eb1221b52db2a8a024e67c748e0b8080d8dad24e4e9cd2
SHA512 8e944a0304620fb7428acbe883049167c0bc1596d8f294b1ebcb383899e6881c5e54221ea5a60fa7c14210e5cfd91831a8481020608c22747f43c2f9d7e45060

C:\Games\Half-Life\valve\gfx\vgui\fonts\is-J5660.tmp

MD5 bca82506d597eed9b5507ff7ba16567b
SHA1 55ad94cc92b95ce8e2adf62df94a6a8244980e8f
SHA256 4eb392f4136f1a4b255ab26772947e62b80615ca8b1ccea93563c3f33539a8bd
SHA512 e817036968d39d3f86c2f6f241c6f80756bf139a700adf018feb870542331b230cad6369652eb2a26b26e94b14c3e27dc0112d3ccd1c512f73e8b056ddeb12fc

C:\Games\Half-Life\valve\gfx\vgui\fonts\is-DM9Q6.tmp

MD5 46f3cc3d5ca0f0e80d30ec38a3ed9702
SHA1 2b7902e73522c60bb4e5a6d7905f91967ec54b46
SHA256 824ad8824e4d05319556d9c08dd0d4c90fecd6150a0dbcae8c946740cb4e2c56
SHA512 9f85b11a9479af47963155fc823a9390794b3db05fb50011efaa87e1adcf772d18fdc1bd57f3ca556ded84d5fc5671236ee0705043771c83663612cd2b0f16d3

C:\Games\Half-Life\valve\gfx\vgui\fonts\is-BNKBD.tmp

MD5 910e7f920f59348e20f787d9240fe2a7
SHA1 9f85998b0a73efbf34b2e732942a0caada57925d
SHA256 93eba9e5ba94654d73d76944cb9860e4fe8db92a6c734fcbc57864cb766caf1d
SHA512 a19fad5b08875df9f16993d48562cc2cb4bf5d918b5f102b0439c6d6d6fdb862783762d586393b0e0b6c324de3c38c27fbf09d4b48c55affd44aad2c1ee9726d

C:\Games\Half-Life\valve\gfx\vgui\fonts\is-4VV7Q.tmp

MD5 d3d6c70dd23590745a0f691c28f88848
SHA1 b46b4a8427c59e590f8adace2ab659da2f4f4e9d
SHA256 f472485bdddb0f7acdce7ba6dfb1520dfdab6b2e870b37f77f61714533c5fe79
SHA512 06a400b5462c9a307bb281cf725358a8bc64a27e34b5f6b95748d3006703e66c4a756ad86fc5e2de9c2a2eba534921234fc2ec422b6107ef7264f7344a258a92

C:\Games\Half-Life\valve\gfx\vgui\fonts\is-0HRDR.tmp

MD5 07306c3fa68e4b5bb4fd4da515adfdc1
SHA1 ae0203c50a3ef107992d61f4b135efd6fdc809ba
SHA256 fad8e72511e03ea0b215e491da1ada731d7474a03d43c26a2f858c8fcee9beac
SHA512 d6d1b8f13d9263932f8757fed790dcbcdca681ca51a7581ca552631409b8c65de212436f8e161c60463edf8589067118d15537789e8aead85eeb156af5c29a7a

C:\Games\Half-Life\valve\gfx\vgui\fonts\is-T3OA3.tmp

MD5 ebc1b6a271bf99cdadc78dae5e9a29c4
SHA1 afddb10163d0cacf30f7a2e9f9e4f534c8425586
SHA256 3988ddbea3e6fd927933a698d28d66572d51e59938ea16624f644afe2021818d
SHA512 ccbc9f59f59c46187954d5e8a70513542471a40e8653f59c8d58279777c9c378f2e1891c4949d8d5b104117410e991f756d768932fd5353dfcbdca3c37d6ac1a

C:\Games\Half-Life\valve\gfx\vgui\fonts\is-5E2I2.tmp

MD5 8148e0f0a6679ced3ca04fd6c258d478
SHA1 9afc1daad5e004bb9481147ec5fac15693897f2c
SHA256 60946960e36a56fe17b02ab7c618e3ca0d61b7412acbb9967271ff309a76b5e0
SHA512 918c03891b46c645ff9b1a497a77bfee752befdbc2e82b882ca3d665dea21d3de1b112848ebb9b996b201c14bc14a70231838eece3df04a431becd0852417bed

C:\Games\Half-Life\valve\gfx\vgui\fonts\is-9LCA4.tmp

MD5 ec8766ea06b999dab276c2ed85397067
SHA1 d043859519210810ab69bc4172406511b0391728
SHA256 dff807e488eee92c3f841de1f330bac00b42c36e34320e6335ed6e5d926243a8
SHA512 5b69d36450816306ba280d2690c65f7478b84a4b1d8eba37b8a4baf8631d767859599e1b20bcabb930dbb7ebbfd07d89bb3336c9999809c50e20fc0661cfb77c

memory/2416-2915-0x0000000000400000-0x0000000000726000-memory.dmp

C:\Games\Half-Life\valve\models\is-M8FPT.tmp

MD5 5f394d005ec12f63949d0c6a62c1b7b3
SHA1 957d1d0598c7bd0079db345db2006d8e4b755096
SHA256 47b5e88f5cc25627e8dc76b85eb6ad64d8613b00838d0cca6a85f118af81c7b0
SHA512 c51142a1e7902d720154378a7b8e01808fb4683e5a12c77516fa474b4eb05c0d2cc37aaf1b3b0a33757aecdc9ff8008333df66ed0e254b01cb5640b8646e6fb7

C:\Games\Half-Life\valve\models\is-GRJQO.tmp

MD5 ab9f1bf1f7d14ca0032df954e1dd5212
SHA1 d51ab73cb33e1737b86ea0bf6db28aa895bb86ab
SHA256 748e6fb4465843238519d56774643c2d4fb3f77131ba49ee9ca2d700c42acb70
SHA512 c5dcb61363551755beaa4732a21ec870c9b077a44eb0e810029f056a7c89b7be4d6e2d4e48b860a4eedc707d057ba55b2b45c238cf4a99ec167a1c07686710bb

C:\Games\Half-Life\valve\sound\fvox\is-H4J82.tmp

MD5 299c3e28a49757ecab2e84ca9b220e62
SHA1 850cbc182e7000b6caa8b6af9986161a2554dbce
SHA256 0ffbcdb3466691fbc1043c69abe50434df646f997c52856a509de43cae501eee
SHA512 2caa0f84686df85905b355107ce2d50c1b8b6debadc50d49327330855e3ed2cea05768c1394cec746ddf90f7087a08ff98eda51272f89d7450923a5e41a13bf8

C:\Games\Half-Life\valve\sound\plats\is-A305F.tmp

MD5 811989e09124f54cb27fe6154b0f1018
SHA1 90c22fc3b248588e2d9759e6ef395303a86b7b60
SHA256 5271b9aa2961809f47fadecb693be2eebde2dbed62fbc4f5f4889fcd8c4a65f8
SHA512 560d26fdbec34ab687e40b8be6144b0f586449bd3a0eaf286ab972ad60b1eb1fe002649daacad36039a298ad24aae96e3531404ac2d0d7b0b47e194b8169e18b

C:\Games\Half-Life\valve\sprites\is-K7JJP.tmp

MD5 30c0c19f5c5226225ac3959dfe1f1428
SHA1 5c7be5173586da26dd730a790a151b8a16611106
SHA256 5603d52c5f089950f372e2b00845738746abebaa2796b0b3e2f6d8d2f4111760
SHA512 c71799d84798c2e2a82dbde7ffa5a2c8698eaac615e77d337de7dafc9239c4b59bc2794b2ccd5740d3e19957549257bcd468660d0696f09fdca37485150c233b

\Games\Half-Life\hl.exe

MD5 2098ccf443433129b556c2849fe99e26
SHA1 074ddbaff48c88b3b5c8f881c35d2be2bb19a249
SHA256 4a899986a879ffd4b7e2d819c49b47cb362d849e86917da1f1931ef476b414af
SHA512 fb4dcfd5371c89af775367d9f2ba72bfd42f8b483ba31b0e839b66f065e5e7a1ec34bf4504aaad17e38502be6917f0b3e415add81dc84fc6942996c0a8f95a10

\Games\Half-Life\unins000.exe

MD5 a7d90b98c748513ad99d3a61a1bf6a3f
SHA1 34f703bc9d9fe88bcacc5f344bd348bf863154ac
SHA256 c1be85916dd0b958ea20bd057f372628ad2a1256dbb5ff778418def62c7cb5b5
SHA512 ecf45d6e8d878bf51215745d5a1fd4ec1cebd8a4ab7e49679d7675e28328cc25756df9c9c7995aa84dc655a1c06f73cae31236a7fd5c2ea9138136f865506651

memory/2416-9332-0x0000000000400000-0x0000000000726000-memory.dmp

C:\Games\Half-Life\filesystem_stdio.dll

MD5 d9c4a776f838733c64331db0c87af459
SHA1 480aedeccdf5845de06c7bf39f59783a8fe92b1a
SHA256 4f7dca9537cdf20b65da599ffc33ea69e8a132239cfb6a3d0b1b623359dcda85
SHA512 5996c9a5cc5bc459b4dcdd7961690cbefdb741dd19338bfb4d1a864ce265e623f4e204dc6f1d4b0b84e66d0ae2f56b4f9bdb3cd7355f8a450703d0a2614d8d82

\Games\Half-Life\hw.dll

MD5 9a3899df65315b494b562e44a23658d4
SHA1 43082f5c19ec4467630221d05b7bbe0739557480
SHA256 94f6f16538f6d49d5aae7c56fa903186259ad14808080844c8bdfe9178ca6e4e
SHA512 e83f51b11c29767b57f8773de1b8a016f737c4c526aa2aac877cfabba10abd4615ef0c1a1272a9227f4d4ed42a2fd9e739be8dc4f6ad4e59424c181d4a30bc18

C:\Games\Half-Life\vgui.dll

MD5 d44ee82601ae62ede3e224269a0bbf53
SHA1 2d00b1d5e052584c6c86ec08795d56d2181a91ee
SHA256 0d4472d21443de839080860a300cca6b9436508f329d33d712e5c9bc07d4d998
SHA512 00dba1a1d88bbc8f77f86ac45068d3f071805a13bf30c7f5c3f3168d3b799e773a1a3a7decab7931a9104bfe91dc8d60cc54b9e82a12e01b29dfe13c4fd1d398

memory/2712-9362-0x00000000003E0000-0x00000000003F5000-memory.dmp

\Games\Half-Life\steam_api_c.dll

MD5 24e0f2298014291decb033e2813a2c8a
SHA1 8b206a6e16b56f2a3ccdca2241cc3d4ec79c8011
SHA256 7143e265f1371e3f2ac9ad2f041640a9e1574d91c1fc3914e6b28685f8c3606a
SHA512 c84905a445e11855e50096afb849cc4d7bc2edaff110d5dcb6c4b18c9e8a45584d47f30b3fad906bfa9056cab8aa63ac21e585f1ce8127ee36cad6e7ea0c09d7

\??\c:\games\half-life\rev.ini

MD5 f74da92a5e22b9c567fea58198172e32
SHA1 df8ba8c9ff8ff33d5bea83f4205073e77c98dea3
SHA256 851b48727735c2d08fe683482c69d835f7364b7eb0e2f3494dae552e08ca942f
SHA512 45c003531f2e5a01eedb2de0881bf2d0a3a831f64bad5d7239a02efcb26fc3ad5307ebabe4cabebd3cfb07109ce9e7d2d03b83db00166fc40a0ccb874e33e106

memory/2712-9350-0x0000000004920000-0x0000000005B4A000-memory.dmp

C:\Games\Half-Life\steam_appid.txt

MD5 d3d9446802a44259755d38e6d163e820
SHA1 b1d5781111d84f7b3fe45a0852e59758cd7a87e5
SHA256 4a44dc15364204a80fe80e9039455cc1608281820fe2b24f1e5233ade6af1dd5
SHA512 3c11e4f316c956a27655902dc1a19b925b8887d59eff791eea63edc8a05454ec594d5eb0f40ae151df87acd6e101761ecc5bb0d3b829bf3a85f5432493b22f37

memory/2712-9373-0x0000000000850000-0x000000000085F000-memory.dmp

\Games\Half-Life\01.dll

MD5 e1cd35bbc28f73b7481e8835ee0f0b13
SHA1 ef40d489c61b178b54f8116548662ee876e0133f
SHA256 6ecef9ef0f62491d595b2f32c69b53c53a1b3a8a7c9dea39d56c6861f5b93bdf
SHA512 baf6f9063f95e6d699088ec4c0611825e030382ff913084feb7f913cc8f011d079b6c7143359391d8e30a5e26ac5a5358882b20e3ac31c5afdbe8867ff6f62a3

\Games\Half-Life\revSrvBrowser.dll

MD5 d3b8c3f08212fcb672819e8f2566e953
SHA1 e7ff79825a3be513f4f0299a4d26b0f15f1e543e
SHA256 2dd8d5d757230b6da93af852a97ff639881402e49b2a0d418d917c9348a74bed
SHA512 f7d0c65420703aa84e22f7232246d0f116b6e8a550da575a1e8f68bf424bea025db9729f3d009aad687e23389e9831167814c418f713a963e3b5cc88d02ad8d3

\Games\Half-Life\steamclient.dll

MD5 ab3d3c7bc52a08ca365792d385d33577
SHA1 3ff1182fa8d4275a79d0dc189582ae4eac4b17bc
SHA256 56058c77c14a25e31c79eb68aef1bc3d8ad95d461b659b161d667fe8f2f96f37
SHA512 c88871146467e8eec6d4acf84d332e8dd7ef1faaad0584a89929a242fea78e81db767f4eb420e2cf8f7c79ac901834217bb26f74fbf1b23bb137c13352df3602

\Games\Half-Life\Mss32.dll

MD5 f520185e02e8a5d85860669176bc4adc
SHA1 cea8e9ff14994c89ad86cf891c89fea42a39250a
SHA256 fe62f1eb6ba407df77619d16927abbefad3c726014f6bd1f8c37a7c3d6b781cc
SHA512 b434e77a17cdac0109b698d0fccdd25dcdb15090a9fd0427504cc7f616673fa6c7307f07fb22cc2fc1e915887c0f9dc025aa8d38f51503f91df6a9ccee5ebe58

\Games\Half-Life\steam.dll

MD5 2fc02d8b4137bff3430fc1555ee6d72c
SHA1 6029fbc64efb7a27d7439bb7bf885fd0cb66af10
SHA256 5d4f80190a41cd98242bc8f4cb4eafa7a477b150206462e4b695078bf18f2b7e
SHA512 a056779f6f15e076f44ee8d24c7baae42b403549cfac86247389dde3936b7671666a6daa08af1a26161c0e4866cf26e9e6de22f0504e5924f7948ecf30ed337c

memory/2712-9354-0x00000000007A0000-0x00000000007F8000-memory.dmp

\??\c:\games\half-life\valve\resource\background\1920_1080_0_2.tga

MD5 4b86ef35f640e94b4d6632f786473c0d
SHA1 3b705c969716f0d88cabd347732014f82102d8e7
SHA256 8639363a5fa8e7ebe8beac3468447f9c563dd49ad5fd5a17eea36dcb894c12ba
SHA512 8981dd04a27ca65a9a61ebc2bf3374a92929d3e80d3dbac653fd81688e9351877146d29dd836d1652fe43b3754a1b474bfbb653f826803f97cf49412106d3217

\??\c:\games\half-life\valve\resource\background\1920_1080_0_1.tga

MD5 b21494be88836c0ed63ca2731f1abb83
SHA1 b12f38cc4bb5d9e6b90e3cdaecbcfeb86b6d9459
SHA256 e2bb756291a566e7d468c7034753d21513750ebd7c7b3f241c22f357ae7eb7c0
SHA512 9510d6864bf28ae5e1912349958527634ec66139aefc07dd8691b82b4214d6baa0b3ca3bbb0e1ced52ea37f5addb8c8aded4ac5c1ebd77912499bc2758d71471

\??\c:\games\half-life\valve\resource\background\1920_1080_0_0.tga

MD5 8acc843b635988c4877746cace359fe8
SHA1 e14e63ea19a811bb4b397c036013e1dfa680f24f
SHA256 d8d6b0f48d6231c489ec54ae79232807b3a62d4dcebbe7cad8ef296c3b642f29
SHA512 88bc060f251079a67268995b7f7a8450bf805cd7a7fc1af75984213a65a4710ccff7b2d97dcb544e57d03ece884673c72dbd49299185aa022e2a6b0440e92c5d

\??\c:\games\half-life\valve\resource\BackgroundLoadingLayout.txt

MD5 640c0f28dfabf13f6700adb0d718b849
SHA1 c66f5bf461b39c305199cf4885fe2edb0efdfe93
SHA256 aca1be03d2900538cdf6c21f5d7ffede73ad77f5065a9921b197317c21a62d50
SHA512 3327780c6187800622dcfd389b71008089cd42ba594e3dbb747427699fc6a6f1d8c3ceb15db0438fc9d3392d67e06d11e6c0b55f3acb5a86646e687bd9966a33

\??\c:\games\half-life\valve\resource\background\1920_1080_3_0.tga

MD5 703d595f57fc9a12445671655996927d
SHA1 25fe983687acb58cd5660ae24bf7071ff0e01d35
SHA256 8877e81f13907a876d9fe206305e6f9cceaa3533da70b795a551b0871fa48e7c
SHA512 d9b2b398468281b7ad081b26d13b9ab85a799c6e46f6be485c7fa89bce02147e4f0829f052c9cfa26326e2e1ca6f502c33a5baa766bcd41f3355275917704ec7

\??\c:\games\half-life\valve\resource\background\1920_1080_2_7.tga

MD5 75f56e1a376c497ae064fd1090bfbe37
SHA1 fdb27f9b2c1be6c604224d6f2bd8b85415cd3107
SHA256 386003029a32c9a73e2cf9f5b411957486c62d8563742b7e8b0fb44d1a57d43b
SHA512 4069cc211ce68c32184c5ff55c64aab17bf048cadda8fc600a3a75e83646ead5b22ccfffa490f49f617fd9da9c53e8e0985943ed9a06cada42f4cf01710b4291

\??\c:\games\half-life\valve\resource\background\1920_1080_2_6.tga

MD5 ab353d05cbc045f1fc56dd9c758dedad
SHA1 2f4ec284c74ca99012f3b205aa14f73abc471bd1
SHA256 3ef38e42f7cc0a0d598baa7bc8b0a3c20058a71da6adc398bbc58aa017e5be2e
SHA512 e6d4dce5fd96ca4ffadba4c59a468f7f2682ed9423dd0aa44cad6a0341dbcba5966b9848896ceb2634f52527fab9dfca57d020ce9bc86e796582a319fa54eede

\??\c:\games\half-life\valve\resource\background\1920_1080_2_5.tga

MD5 252fd18d41099e69c7aacc9c12382fec
SHA1 a3a0b3e9505248cc9da2fc3f6ee1bddc15c96198
SHA256 90724e72c52ac9daae5be2fb66dd84db4bdecaae1fd19d9eb9103b5d61c50ed9
SHA512 3fe1c15fa23690cdd4556095e3d9091f8b1716638f9f03b63a525b16e796ee99fbfa59a4597cbe19001f855967564c5cd48ef95608ffd459453b9b793a947f7d

\??\c:\games\half-life\valve\resource\background\1920_1080_2_4.tga

MD5 fa5ac73fd5c5f2abe5b78817275085bf
SHA1 dfac56acf0995fbb21540bc167728472022c56e7
SHA256 9c47ca1eb2125170e6bf80973c2ed29e39554cbf880a89d735bb541999c1472c
SHA512 a39951315efe305ca1f4750861124f5ff969e173a5c2c5412308eea27532c16cf6cf6fd572e293061f23971eb8bb704fb5087becf1e56dbea512ca114ca95ee6

\??\c:\games\half-life\valve\resource\background\1920_1080_2_3.tga

MD5 76b8cce2bf3945d45476ff73f0624f55
SHA1 e109b51fe052595d3658ec4a1651f37d4be9368c
SHA256 b1a9b7a6ac1cb3d5e37da0f9612eadc4639f7f81043287a34be2ef125f294e5b
SHA512 815507831e27e7759116b8bfd601e36c10ab11c90856e1f31c225d29fed830c17b479530b085d8d9268ce16c706731444f240f7c0800b8e041bf93341157c7ad

\??\c:\games\half-life\valve\resource\background\1920_1080_2_2.tga

MD5 0b94a0443481ebc6f1e2f294ad3484d1
SHA1 6cf7fc1a951c1f477d5fdd60b6ad96fb78aff568
SHA256 7c4079e620432ad9b144609eeeb42b0874a3108a7d526e06318284cc4896bc89
SHA512 b453cc6c7363070bfd04af66b287df6e4ec9600b2db74465f484c4d4846fa9a3af31df6640571ebc28db85bdd377f1c7e10c49abc46cd9ada8d8ce69d3313f1d

\??\c:\games\half-life\valve\resource\background\1920_1080_2_1.tga

MD5 6c415e279b2f2fd41a76a8ec64f92caa
SHA1 c26d646349b988803cb4f4422e81cd778578375e
SHA256 289c40a62c61f4564a64d4875f3579483a7e2d4d29f4389d53200831a00c7b81
SHA512 53ef9fc01ba20adc51ba573478a1ce319ab675cda2e01f0abf33483b755276823270947966db7372f0fb352e099dab789b7a8600ea1237cc028b68ff5e979497

\??\c:\games\half-life\valve\resource\background\1920_1080_2_0.tga

MD5 9aad306c013353e27a0b88b91f590062
SHA1 0affb970c1563619a60f0b0910715cf605c78d80
SHA256 ffadfdfb90f5404a29387cdc3e88815eb7df6ab6f4aae6aac5ee98d7c76370c6
SHA512 d27cc2ef02027bf8c4da4772851acdc9f367b6c9ba304776eb44f93d37738c526c5e49d19a46d7e3a7651752e3bf9719500055f545925e70b055591626ffcbd9

\??\c:\games\half-life\valve\resource\background\1920_1080_1_7.tga

MD5 795dedaed0a8846e9812688a9689bc4c
SHA1 c20d7ec4bdfa1326bb7c966ac2413930e01ed9dd
SHA256 e7de633c7c791fb6b4ce3ea7d667a7f93b2eb731c4f5ea66c3dc0fa817821552
SHA512 2130ca86fbf747933e4887b05c04937663273842965398650657be1c771ceb446810e471590656b6818f3ffdd6a6fd751f9de763a7b83900b2ac21a600177a73

\??\c:\games\half-life\valve\resource\background\1920_1080_1_6.tga

MD5 e0a35087d7e67950457c4a64b954bb5b
SHA1 70ab41cbf702b7eea7ee952e66a1ceeac06da842
SHA256 7f93a1d142167134bf631d8097441bd4f27fe937752ce84c502fe850d5befe7f
SHA512 e9f044381d9e4e87d32a02aca7108adee4db7085856445bec92d0ccf23f3ad2b221901929158d11e139314e969c125825e1853577f0c66c0d185203d4244fc68

\??\c:\games\half-life\valve\resource\background\1920_1080_1_5.tga

MD5 4003d9cd861d23cacb26203d79a8c29c
SHA1 5ab1ab0152a486b5fd78ab2f8704656872c94151
SHA256 cfdaf3ee6fd12a96872b86e24cee023242dac4a40068e4d67ce22026a31000af
SHA512 295effe07160f511a6b2bd43595c1c69dda475ea6ca659c5c98d514353cf5beb853b5795ede22d3c225a125dbdfca1e25abf0d8f34cdaf3e62bc9b2c9338a5bb

\??\c:\games\half-life\valve\resource\background\1920_1080_1_4.tga

MD5 d4084ad6aeecf15fe16cd47858ffb62a
SHA1 984e9b11edf1007ecdf0307dd2e9e64a55fe2a7f
SHA256 5d83acd500d3cf0b490dd5a923c82289d0e537f272339e926139c49747f45370
SHA512 c9fcf1251a4e53c5afb9d76f3bca77367c943bdbca8662679a1ceaee43a93b8f699175e2068e756088b4219c07fa9300aa3be683dafe37929b4493c0dfc1fbba

\??\c:\games\half-life\valve\resource\background\1920_1080_1_3.tga

MD5 89a9b0714bf43ae1fd94d745036769d9
SHA1 a36120e85403c38273857021d0ffb6c19f2f3aa5
SHA256 b2bb7ea4da7abcbf9a15d8b852af5a64451838b1717f7e00d0a153102672c51f
SHA512 e5018eebc1dfec160625142cc930980c794da523c1860ebb54260108aadbe9ccd36fcc805bdf12035a5fc63144643967827819b91d2a2303bddda48b4b6e4654

\??\c:\games\half-life\valve\resource\background\1920_1080_1_2.tga

MD5 f7f238f16ceada4863cd10017d4e6bd1
SHA1 07f14ed12d9f955800584b1b951c8f90b23b3c0e
SHA256 1781990a9ad149de82231e23e8e0ed302908dba77f98c8d8ff28ba04f9303ace
SHA512 f0fab7d42e7cbd0f2a32241a503ebe3923a4dae475e3435ab7985b1258452342c31c7938775d7513e1fb43384ca5f68bbaa4b19f0b6d84f0a6987021e7bfb8e1

\??\c:\games\half-life\valve\resource\background\1920_1080_1_1.tga

MD5 cdaa1764669a98fd28742d4eb2fe1472
SHA1 fb080e45b71975562986497a25eb974ac6e2a4ce
SHA256 fa73241df91eddc2a97efe369a185a7d689f09fd7694b0f5ca9a07e66ee4e572
SHA512 1428066ee34d02bcdfa90086222f14822813460fcd494b69c20e7afd6b38a3f113b471d2cce38d32ed48e20bfa65eb229226fbf3f7009bca24ff451539e93e14

\??\c:\games\half-life\valve\resource\background\1920_1080_1_0.tga

MD5 0700d4cb8623d32f954ea33c6a813913
SHA1 8923f77e159730e0bead5ffba2a2017d07526bfa
SHA256 ea14de878057181e7a27641063de786d4dc7de1ccc87682f99edf5bd22a0c2a3
SHA512 0ad5097e0ecbb84b3811eee1d139eac32b39ca6f245e0e9cf317c521848390f275d184a236e280f289c57365daeac36c5dca47948bc74c03b1bf39c230c75bdb

\??\c:\games\half-life\valve\resource\background\1920_1080_0_7.tga

MD5 2483539b49b6e2ce54894abb9b75b8f9
SHA1 5b7e6ab1c024b2f9886f66d600374f6cecc6684b
SHA256 610e571337825a6ed71de8162ebf42d781752bb50f1f17f58949d735698e6c3e
SHA512 6401635132954fafbe7c0541ff739d7e89359b88709a5a588d805f8ee3fa19c03a11eb264817d28d6a18ddcc923bcb6d9aa90a910007cca940f7a2dab68e73f8

\??\c:\games\half-life\valve\resource\background\1920_1080_0_6.tga

MD5 ffc17eafbea041830111c481f82735f9
SHA1 bf915108ece098c02b6a192b3a7867a8d28111a4
SHA256 42347cbe1f0736139637ac1117cda71bec03c49e8662fbcc75f52fcdca167fa3
SHA512 9dd7e54dcd7b21fc9ca8c8f1b89ab6021ed9a427bcede4a42f61576bebabfe3599086bc2bf262526f14d848faa3be62e5b5260d835cc0da249f6e03505e1506a

\??\c:\games\half-life\valve\resource\background\1920_1080_0_5.tga

MD5 ae7d93521dd1adef4d34e7be53fe9d8c
SHA1 b56a0728dd5b4c2783b18281e4b246bd1929bc75
SHA256 b83de35bee92a355c553d3166672638395000e9c9b41194410765f751cb24fac
SHA512 03ba049d36979f419260ba4776a28e1ae48c5f429eaabe52be849e4e5bd7ea6ef178130bbe690d68e3300d92c88f9d275f762369e3c9c52dfa27964b3884629f

\??\c:\games\half-life\valve\resource\background\1920_1080_0_4.tga

MD5 183449ea5e6cbcfc27533016d0e9f646
SHA1 35d67e706520f06b1bc1e6f1ce90d2f57a1bfa27
SHA256 9970701f096da3e91401d40563ab8083461aa6884dbea5e09bbb90598f64bdc9
SHA512 e9d6a2500eff05a3bbcad2e30fcf2fbdfd0c6fa17d355056107af7a9da14e3458898eb5421d3824cae03e151d8e108158d0c1f0c1dedfdb60cddb7bc48dc11a6

\??\c:\games\half-life\valve\resource\background\1920_1080_0_3.tga

MD5 9c0398e86a21f132ae8e8e5caebcddf9
SHA1 6e254b972506b5c192e3f8fe5e8511cd2d5b5022
SHA256 ad3c948e481216f8e70c5f685b7a4b320e0156e23cdf337c77997debcf55d7ab
SHA512 9b966138ee0a5e3ae4df52fae861fba33c0424d26116d3801fc490105afd094c18a9958756474dc847d2233459636fb47f91d9144ccddc7da00350fd8ef9ee75

\??\c:\games\half-life\valve\resource\background\1920_1080_3_7.tga

MD5 3e9cb374a4158b549f3c21fe7f6fbc9c
SHA1 b19dfa563af539cf1ff54a0a744cb8972f3c9b4d
SHA256 a25b62d51bd0ad12f43071401255be52625b1abf0f4d8e900ae7bf61031653b4
SHA512 0551a9b438a763b8d509f8c957acc4373e8109b471c91a5dff2c5cd0e26d28c4cd631abe507d4847d3ee5e8175346f9283a32d373ca2e9979b168ecb289b8d1a

\??\c:\games\half-life\valve\resource\background\1920_1080_3_6.tga

MD5 89836d5fa424c3a39bca3e181c47785d
SHA1 e7f6d8d9fb217cfcd68f9104d9cb15e14f10c520
SHA256 1013a579928384dbf605e1b589518461e43a45cd05b5a284692e5a64b6d948ae
SHA512 4a8475ad65b7d9169eff526b71570da905577c83df29495a7336cad435823000db250811614c0498285c194759fdb7498040679d4da3fbf8890d90bc35e3cb1e

\??\c:\games\half-life\valve\resource\background\1920_1080_3_5.tga

MD5 e189e20af8275369ec761126f54f4e8a
SHA1 e5d35d6859a530c7cf28ce548e1a7abe408daa58
SHA256 8e490b666bade11fe62a27e901294be57f27d57494f91264f7173415fe3b204d
SHA512 9c69448f87eafd36c0707e6c7bee9bdb061645c3549628da4057a61851f8a4ad52c5edd4864d46f47ddd629a8bf3b15ac5f137d432dc86323d6f676a46e260f0

\??\c:\games\half-life\valve\resource\background\1920_1080_3_4.tga

MD5 b5f2badcec6d3fba16151e595a835dc4
SHA1 a00168ee532c069b23c9e015b21cc36aa10a7352
SHA256 ca18bf02f96634d77839bddb2c3f7b501688404dfafce59dc7542a721fb2ed40
SHA512 fe675e73aac15128862ecfc0bcbe962c4bee8bbb6cf24a2f5458821299fc14957f05f6985a6eeb581bf0f4ffae91481736081fe590a7163d6f08f2d3af223cef

\??\c:\games\half-life\valve\resource\background\1920_1080_3_3.tga

MD5 18150bdcb6803d5860310249ab914230
SHA1 427dea7ad64e753c7490112a1728b584bd055524
SHA256 6c8e50a469f2858d70486ae5017097f3ebde8c30f069f33ea052dd29762dc650
SHA512 e7186c74a799eb306295b803ef3cbee58f26fb4f9ce5ac7d0b140077f4e7577841d68d2db2d4dfb0e23936d5b5e3d01cf4187f7af5d6b59e648f720c1125586f

\??\c:\games\half-life\valve\resource\background\1920_1080_3_2.tga

MD5 2c5439ebcd1f1e1bf3754ab0a84417c8
SHA1 3b8711767b709f9caf6efdd430eb420731e35d1b
SHA256 13ce4a712d1dfc0ae9f0b127db25c56201a84a405660d792cd0d6e93935130e5
SHA512 954289fec58b5a490031a3a228528aab87172732b7adf20006df54494c24ea2394fee8ca829198655b36cebc9f8176c5677e4a069e853b6bbc30550a6e351931

\??\c:\games\half-life\valve\resource\background\1920_1080_3_1.tga

MD5 8ba6cce48f7f05b77329363be3384fd6
SHA1 e702e8a1b5adca9023eee0ce05a650dfc5e96cf0
SHA256 d8ccd9c8bd99cc6258f09ae6791b0ba840628e6b49194da0710a4494d231fabd
SHA512 845c0830eaf4b1854a657e85023baa07044f5650eae30e9ced35e0f41a475ccddee6aea177d4c8406d0a8ce20480c4e223293314f576b6339c325b6b3993c37c

memory/2416-9413-0x0000000000400000-0x0000000000726000-memory.dmp

memory/2268-9414-0x0000000000400000-0x00000000004EB000-memory.dmp

memory/2712-9415-0x0000000006120000-0x0000000006C73000-memory.dmp

memory/2712-9417-0x0000000001320000-0x0000000001378000-memory.dmp

memory/2712-9421-0x0000000000410000-0x000000000041F000-memory.dmp

memory/2712-9424-0x00000000012B0000-0x00000000012C5000-memory.dmp

memory/2712-9427-0x000000000CC40000-0x000000000CD24000-memory.dmp

memory/2712-9426-0x00000000013A0000-0x00000000013E0000-memory.dmp

memory/2712-9430-0x0000000005B20000-0x0000000005B3C000-memory.dmp

memory/2712-9429-0x0000000005750000-0x000000000576F000-memory.dmp

memory/2712-9435-0x0000000005BD0000-0x0000000005BDF000-memory.dmp

memory/2712-9437-0x000000000E030000-0x000000000E078000-memory.dmp

memory/2712-9436-0x0000000006D80000-0x0000000006D9E000-memory.dmp

C:\Games\Half-Life\platform\config\ServerBrowser.vdf

MD5 261891b787b00c5df970e27a5f1ffcd6
SHA1 ed8d552ad56cb6b1411ddcf436f0c9acf66b823c
SHA256 5e75d554b0ee1464d23d0e145afe7151e97cfeb398d89829ea91e9f5503bc605
SHA512 bba969355ae2d7a0dcde5032701a6bdc25aa37c212097e1845217b8586101ac59b9497addeb4a6e166afc703ffea24c2e58aac1103e788d02c3b4febec2af053

memory/2712-9447-0x000000000CD40000-0x000000000CD55000-memory.dmp

memory/2712-9445-0x000000000EA80000-0x000000000EAD9000-memory.dmp

memory/2712-9443-0x000000000E910000-0x000000000E96A000-memory.dmp

memory/2712-9441-0x000000000E880000-0x000000000E90D000-memory.dmp

C:\Games\Half-Life\config\rev_MasterServers.vdf

MD5 225ff78db04fa5bb0c3fa44bab0227e7
SHA1 27860b17bbe34771ec755048bf2a97fdb0f88a02
SHA256 9e37daff71ee33d3c0cbedbcec790340a0961df65ef18cb70fe75e39f18ba9f5
SHA512 4049d85134e8fa87e602ff4da38157ee4135d60904647969efa0e9c405bde4f1ca308323a9618c7a80d82fec080a1182edabf2b8269e184527722e5f2b491e9a

memory/2712-9452-0x0000000005B20000-0x0000000005B3C000-memory.dmp

memory/2712-9451-0x0000000005750000-0x000000000576F000-memory.dmp

memory/2712-9460-0x000000000DF30000-0x000000000DF53000-memory.dmp

memory/2712-9462-0x0000000005B20000-0x0000000005B3C000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2024-10-16 00:50

Reported

2024-10-16 00:54

Platform

win10v2004-20241007-en

Max time kernel

128s

Max time network

130s

Command Line

"C:\Users\Admin\AppData\Local\Temp\half_life.exe"

Signatures

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-VOCCM.tmp\half_life.tmp N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-VOCCM.tmp\half_life.tmp N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A
N/A N/A C:\Games\Half-Life\hl.exe N/A

Checks installed software on the system

discovery

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\D: C:\Games\Half-Life\hl.exe N/A

Writes to the Master Boot Record (MBR)

bootkit persistence
Description Indicator Process Target
File opened for modification \??\PhysicalDrive0 C:\Games\Half-Life\hl.exe N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Games\Half-Life\hl.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\half_life.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\is-VOCCM.tmp\half_life.tmp N/A

Script User-Agent

Description Indicator Process Target
HTTP User-Agent header Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) N/A N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Games\Half-Life\hl.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-VOCCM.tmp\half_life.tmp N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Games\Half-Life\hl.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\half_life.exe

"C:\Users\Admin\AppData\Local\Temp\half_life.exe"

C:\Users\Admin\AppData\Local\Temp\is-VOCCM.tmp\half_life.tmp

"C:\Users\Admin\AppData\Local\Temp\is-VOCCM.tmp\half_life.tmp" /SL5="$E004E,220853976,908800,C:\Users\Admin\AppData\Local\Temp\half_life.exe"

C:\Games\Half-Life\hl.exe

"C:\Games\Half-Life\hl.exe" -game valve

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x424 0x514

Network

Country Destination Domain Proto
US 8.8.8.8:53 13.86.106.20.in-addr.arpa udp
US 8.8.8.8:53 76.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 197.87.175.4.in-addr.arpa udp
US 8.8.8.8:53 241.42.69.40.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 count.ms-csnv.ru udp
DE 141.95.54.113:80 count.ms-csnv.ru tcp
US 8.8.8.8:53 113.54.95.141.in-addr.arpa udp
US 8.8.8.8:53 29.243.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 43.58.199.20.in-addr.arpa udp

Files

memory/3336-0-0x0000000000400000-0x00000000004EB000-memory.dmp

memory/3336-2-0x0000000000401000-0x00000000004B7000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-VOCCM.tmp\half_life.tmp

MD5 33cc6db73b7274bd553c3e95e2435a14
SHA1 83def29412f76edd611dca4e66e0eaa0a39b180e
SHA256 5542c67c3224578df33c5e4cec79150489455742f4b66deb170eda9c6f66fc7b
SHA512 62d84f8376378314fbe88fc298e7a866e3ab0da60162a6eb1eac3d55d41fdb79ea1c77dcb7b841ab18f338a27e59eb5cb6268319bc63cab58594318f766a350a

memory/5040-6-0x0000000000400000-0x0000000000726000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-DOH6M.tmp\idp.dll

MD5 55c310c0319260d798757557ab3bf636
SHA1 0892eb7ed31d8bb20a56c6835990749011a2d8de
SHA256 54e7e0ad32a22b775131a6288f083ed3286a9a436941377fc20f85dd9ad983ed
SHA512 e0082109737097658677d7963cbf28d412dca3fa8f5812c2567e53849336ce45ebae2c0430df74bfe16c0f3eebb46961bc1a10f32ca7947692a900162128ae57

memory/3336-12-0x0000000000400000-0x00000000004EB000-memory.dmp

memory/5040-13-0x0000000000400000-0x0000000000726000-memory.dmp

memory/5040-15-0x0000000000400000-0x0000000000726000-memory.dmp

memory/5040-17-0x0000000000400000-0x0000000000726000-memory.dmp

C:\Games\Half-Life\platform\Friends\is-F18AR.tmp

MD5 08091f474e938ea73aac90c9773a6013
SHA1 c4ff881bf1c3f0f0db3bd58f47d666df6a0ff885
SHA256 50443605d94d7bedbb03c2200d7cb7e98b0eaa91e3489cd7d77f69a407b73e0a
SHA512 7f569511d12a36fdcf6193aa52a2845b53f6d2a2e075426708f542f0012360a48cdc520ec6b26b0d1dd9f86c0ba41c8205483d340963aa0acfbaaca03a7ee0f5

C:\Games\Half-Life\platform\Steam\cached\is-21PKK.tmp

MD5 18581b2844d1b35bd0dc170f8557bc42
SHA1 05e8657b8f73f2608aeb07edd8f469f3639d29b7
SHA256 7f00fc14809350a11d04cb655e996beb4d829ae7c2d7ca320968661961e18fd2
SHA512 cb2be96b5ae7cc5c593f954092ec663b8ff41e06f2597b24bbec8883a025baa75bbc6c15cb24fa29389e05b7bdb0d017bb47ef747a524eea53b77fb4a479087a

C:\Games\Half-Life\platform\Steam\drivercheck\260\is-GOL2L.tmp

MD5 f4eb527c235bb256418442880e445f39
SHA1 ead5903daaf37141965be8a41a535a82e7bb791c
SHA256 9b93979bfb94347d3157cdca038d1a6addc8564a954bcc564adef6a1c86ebc22
SHA512 59a32b9a93afc69137ff4ce1ce0569eb46c0e7512afc2435cf94e94b2fbbfae320059779901c703374b018da7297caf44bf6b5a42fe16154c01270bfdbc24a9f

C:\Games\Half-Life\platform\Steam\drivercheck\260\is-2JKOD.tmp

MD5 158ac9a69c9a06d9bc2fb432d5b63f38
SHA1 c55441b50d6e5bbf1b619ce7c84789439c545110
SHA256 ddbef05c1fa1eb6c13538306f2d28bffb61dc57e7a9e3d9e25b98dec576ca8a6
SHA512 c3e6fbcd0338c1d04fada0c66123f1c21663f25c9f66161f18817bb6c10f9a79034ab3b0e458e1dda61bc915e3f76eb88e1238b04468a277ab16bd0f0911a1e5

C:\Games\Half-Life\platform\Steam\games\is-0TDSG.tmp

MD5 200380f4259d09ec3f433e421cd5a55f
SHA1 9afc9cf71fd5949198b77bf7ec396a89058d6dee
SHA256 e136089e82c2d98a7283b55dcd93c5332a332149e7119d015bb7c353435ea9c6
SHA512 c77a433055077420eae1fcae302fc0738f592b8081ba2bdcae2015a3296672f1df2518934821d424e3a8c9535bf1891cbe7394c16ac68520099a3d7dfb4c50cf

C:\Games\Half-Life\valve\is-USD6U.tmp

MD5 f02c1d45a1a86f5d60ce9e310e24d144
SHA1 d991f95d96e1c76d2acb944bb09447628cd96caa
SHA256 01491c012c29f4706f0cc8f1117eb0f882b54f720bfbf320a3271ffac6c929dc
SHA512 88dafe4039264818c4193f563376db890ecea2f8f67df7902dd76aacd08be4cb47197257d02217eeec1a81295615b30b89e91d097837193a8fb64e72d03d7334

C:\Games\Half-Life\valve\events\is-B2BO5.tmp

MD5 8cfcc0a84d0b6b51995ce17bc9f194f2
SHA1 f86d5edad7e5a3e2d994517da5ebd7d748a8c666
SHA256 2c7d43b8dc6ea01a32acddb7798b9dabf0ec44c7a6dcf75160539a7fe53e029d
SHA512 5f75243ff3e13b557859d89593432f5e29f014f2bc527bee363be3369e884feccb15ee593094c7eb0f8e4786b6a352cdf9fc6039636782cd23712cadc114ee1b

memory/5040-1668-0x0000000000400000-0x0000000000726000-memory.dmp

C:\Games\Half-Life\valve\gfx\env\is-L4H2L.tmp

MD5 bf92d45fcfe71458fe5b3d7258d1ee03
SHA1 e701671f4ef94b77a008f36287a51709a00daeb8
SHA256 6e84f9cb10fac95f23b6a49fd0e6282fcb523cfe1256c200b25c088b4a4bb726
SHA512 2b9f1a4b9da320ed2366c16d91038748b1d9a2ab48deb1c939da639e9acc2b252592e9cd6a65d60ff967b2546af6f79e18ce92b842df132192d9377f6f9b896d

C:\Games\Half-Life\valve\gfx\vgui\is-PGF22.tmp

MD5 6deae390d10e5faef07cb793138a4ea2
SHA1 0e1b89e5e5e61f5e8959d3d6e17fc874f3d14a8e
SHA256 1efacc8931f4e6558fc9f854527e25e004d8c3fd90f1f5209273236924a9241b
SHA512 70c1ab592e46440f759ffdaa2ba1bbb9206212670762fbdbeb04f85da2304120e0a052ea4164fc0e0326e82c013924d0db0ea27fc21041489fc6d6d69b69d93a

C:\Games\Half-Life\valve\gfx\vgui\is-E0P4D.tmp

MD5 1926ecbcf1b403f0c4a30426ea74276c
SHA1 24d8e0d5f3477f85e76985a0fc579e392482c402
SHA256 99986396ea8ebd9ab4eb1221b52db2a8a024e67c748e0b8080d8dad24e4e9cd2
SHA512 8e944a0304620fb7428acbe883049167c0bc1596d8f294b1ebcb383899e6881c5e54221ea5a60fa7c14210e5cfd91831a8481020608c22747f43c2f9d7e45060

C:\Games\Half-Life\valve\gfx\vgui\fonts\is-EGCNQ.tmp

MD5 bca82506d597eed9b5507ff7ba16567b
SHA1 55ad94cc92b95ce8e2adf62df94a6a8244980e8f
SHA256 4eb392f4136f1a4b255ab26772947e62b80615ca8b1ccea93563c3f33539a8bd
SHA512 e817036968d39d3f86c2f6f241c6f80756bf139a700adf018feb870542331b230cad6369652eb2a26b26e94b14c3e27dc0112d3ccd1c512f73e8b056ddeb12fc

C:\Games\Half-Life\valve\gfx\vgui\fonts\is-FBLTC.tmp

MD5 46f3cc3d5ca0f0e80d30ec38a3ed9702
SHA1 2b7902e73522c60bb4e5a6d7905f91967ec54b46
SHA256 824ad8824e4d05319556d9c08dd0d4c90fecd6150a0dbcae8c946740cb4e2c56
SHA512 9f85b11a9479af47963155fc823a9390794b3db05fb50011efaa87e1adcf772d18fdc1bd57f3ca556ded84d5fc5671236ee0705043771c83663612cd2b0f16d3

C:\Games\Half-Life\valve\gfx\vgui\fonts\is-ODRK7.tmp

MD5 910e7f920f59348e20f787d9240fe2a7
SHA1 9f85998b0a73efbf34b2e732942a0caada57925d
SHA256 93eba9e5ba94654d73d76944cb9860e4fe8db92a6c734fcbc57864cb766caf1d
SHA512 a19fad5b08875df9f16993d48562cc2cb4bf5d918b5f102b0439c6d6d6fdb862783762d586393b0e0b6c324de3c38c27fbf09d4b48c55affd44aad2c1ee9726d

C:\Games\Half-Life\valve\gfx\vgui\fonts\is-85VRD.tmp

MD5 d3d6c70dd23590745a0f691c28f88848
SHA1 b46b4a8427c59e590f8adace2ab659da2f4f4e9d
SHA256 f472485bdddb0f7acdce7ba6dfb1520dfdab6b2e870b37f77f61714533c5fe79
SHA512 06a400b5462c9a307bb281cf725358a8bc64a27e34b5f6b95748d3006703e66c4a756ad86fc5e2de9c2a2eba534921234fc2ec422b6107ef7264f7344a258a92

C:\Games\Half-Life\valve\gfx\vgui\fonts\is-VES2K.tmp

MD5 07306c3fa68e4b5bb4fd4da515adfdc1
SHA1 ae0203c50a3ef107992d61f4b135efd6fdc809ba
SHA256 fad8e72511e03ea0b215e491da1ada731d7474a03d43c26a2f858c8fcee9beac
SHA512 d6d1b8f13d9263932f8757fed790dcbcdca681ca51a7581ca552631409b8c65de212436f8e161c60463edf8589067118d15537789e8aead85eeb156af5c29a7a

C:\Games\Half-Life\valve\gfx\vgui\fonts\is-FPQFI.tmp

MD5 ebc1b6a271bf99cdadc78dae5e9a29c4
SHA1 afddb10163d0cacf30f7a2e9f9e4f534c8425586
SHA256 3988ddbea3e6fd927933a698d28d66572d51e59938ea16624f644afe2021818d
SHA512 ccbc9f59f59c46187954d5e8a70513542471a40e8653f59c8d58279777c9c378f2e1891c4949d8d5b104117410e991f756d768932fd5353dfcbdca3c37d6ac1a

C:\Games\Half-Life\valve\gfx\vgui\fonts\is-E129M.tmp

MD5 8148e0f0a6679ced3ca04fd6c258d478
SHA1 9afc1daad5e004bb9481147ec5fac15693897f2c
SHA256 60946960e36a56fe17b02ab7c618e3ca0d61b7412acbb9967271ff309a76b5e0
SHA512 918c03891b46c645ff9b1a497a77bfee752befdbc2e82b882ca3d665dea21d3de1b112848ebb9b996b201c14bc14a70231838eece3df04a431becd0852417bed

C:\Games\Half-Life\valve\gfx\vgui\fonts\is-1NMTF.tmp

MD5 ec8766ea06b999dab276c2ed85397067
SHA1 d043859519210810ab69bc4172406511b0391728
SHA256 dff807e488eee92c3f841de1f330bac00b42c36e34320e6335ed6e5d926243a8
SHA512 5b69d36450816306ba280d2690c65f7478b84a4b1d8eba37b8a4baf8631d767859599e1b20bcabb930dbb7ebbfd07d89bb3336c9999809c50e20fc0661cfb77c

memory/5040-2946-0x0000000000400000-0x0000000000726000-memory.dmp

C:\Games\Half-Life\valve\models\is-1C3HQ.tmp

MD5 5f394d005ec12f63949d0c6a62c1b7b3
SHA1 957d1d0598c7bd0079db345db2006d8e4b755096
SHA256 47b5e88f5cc25627e8dc76b85eb6ad64d8613b00838d0cca6a85f118af81c7b0
SHA512 c51142a1e7902d720154378a7b8e01808fb4683e5a12c77516fa474b4eb05c0d2cc37aaf1b3b0a33757aecdc9ff8008333df66ed0e254b01cb5640b8646e6fb7

C:\Games\Half-Life\valve\models\is-JGJK1.tmp

MD5 ab9f1bf1f7d14ca0032df954e1dd5212
SHA1 d51ab73cb33e1737b86ea0bf6db28aa895bb86ab
SHA256 748e6fb4465843238519d56774643c2d4fb3f77131ba49ee9ca2d700c42acb70
SHA512 c5dcb61363551755beaa4732a21ec870c9b077a44eb0e810029f056a7c89b7be4d6e2d4e48b860a4eedc707d057ba55b2b45c238cf4a99ec167a1c07686710bb

C:\Games\Half-Life\valve\sound\fvox\is-3IQ6S.tmp

MD5 299c3e28a49757ecab2e84ca9b220e62
SHA1 850cbc182e7000b6caa8b6af9986161a2554dbce
SHA256 0ffbcdb3466691fbc1043c69abe50434df646f997c52856a509de43cae501eee
SHA512 2caa0f84686df85905b355107ce2d50c1b8b6debadc50d49327330855e3ed2cea05768c1394cec746ddf90f7087a08ff98eda51272f89d7450923a5e41a13bf8

C:\Games\Half-Life\valve\sound\plats\is-ELKIF.tmp

MD5 811989e09124f54cb27fe6154b0f1018
SHA1 90c22fc3b248588e2d9759e6ef395303a86b7b60
SHA256 5271b9aa2961809f47fadecb693be2eebde2dbed62fbc4f5f4889fcd8c4a65f8
SHA512 560d26fdbec34ab687e40b8be6144b0f586449bd3a0eaf286ab972ad60b1eb1fe002649daacad36039a298ad24aae96e3531404ac2d0d7b0b47e194b8169e18b

memory/5040-8815-0x0000000000400000-0x0000000000726000-memory.dmp

C:\Games\Half-Life\valve\sprites\is-KJF5U.tmp

MD5 30c0c19f5c5226225ac3959dfe1f1428
SHA1 5c7be5173586da26dd730a790a151b8a16611106
SHA256 5603d52c5f089950f372e2b00845738746abebaa2796b0b3e2f6d8d2f4111760
SHA512 c71799d84798c2e2a82dbde7ffa5a2c8698eaac615e77d337de7dafc9239c4b59bc2794b2ccd5740d3e19957549257bcd468660d0696f09fdca37485150c233b

C:\Games\Half-Life\hl.exe

MD5 2098ccf443433129b556c2849fe99e26
SHA1 074ddbaff48c88b3b5c8f881c35d2be2bb19a249
SHA256 4a899986a879ffd4b7e2d819c49b47cb362d849e86917da1f1931ef476b414af
SHA512 fb4dcfd5371c89af775367d9f2ba72bfd42f8b483ba31b0e839b66f065e5e7a1ec34bf4504aaad17e38502be6917f0b3e415add81dc84fc6942996c0a8f95a10

C:\Games\Half-Life\filesystem_stdio.dll

MD5 d9c4a776f838733c64331db0c87af459
SHA1 480aedeccdf5845de06c7bf39f59783a8fe92b1a
SHA256 4f7dca9537cdf20b65da599ffc33ea69e8a132239cfb6a3d0b1b623359dcda85
SHA512 5996c9a5cc5bc459b4dcdd7961690cbefdb741dd19338bfb4d1a864ce265e623f4e204dc6f1d4b0b84e66d0ae2f56b4f9bdb3cd7355f8a450703d0a2614d8d82

C:\Games\Half-Life\hw.dll

MD5 9a3899df65315b494b562e44a23658d4
SHA1 43082f5c19ec4467630221d05b7bbe0739557480
SHA256 94f6f16538f6d49d5aae7c56fa903186259ad14808080844c8bdfe9178ca6e4e
SHA512 e83f51b11c29767b57f8773de1b8a016f737c4c526aa2aac877cfabba10abd4615ef0c1a1272a9227f4d4ed42a2fd9e739be8dc4f6ad4e59424c181d4a30bc18

memory/1976-9332-0x0000000004930000-0x0000000005B5A000-memory.dmp

memory/1976-9341-0x0000000001100000-0x0000000001158000-memory.dmp

C:\Games\Half-Life\steam.dll

MD5 2fc02d8b4137bff3430fc1555ee6d72c
SHA1 6029fbc64efb7a27d7439bb7bf885fd0cb66af10
SHA256 5d4f80190a41cd98242bc8f4cb4eafa7a477b150206462e4b695078bf18f2b7e
SHA512 a056779f6f15e076f44ee8d24c7baae42b403549cfac86247389dde3936b7671666a6daa08af1a26161c0e4866cf26e9e6de22f0504e5924f7948ecf30ed337c

memory/1976-9346-0x00000000004B0000-0x00000000004C5000-memory.dmp

memory/1976-9352-0x0000000000540000-0x000000000054F000-memory.dmp

C:\Games\Half-Life\steam_appid.txt

MD5 d3d9446802a44259755d38e6d163e820
SHA1 b1d5781111d84f7b3fe45a0852e59758cd7a87e5
SHA256 4a44dc15364204a80fe80e9039455cc1608281820fe2b24f1e5233ade6af1dd5
SHA512 3c11e4f316c956a27655902dc1a19b925b8887d59eff791eea63edc8a05454ec594d5eb0f40ae151df87acd6e101761ecc5bb0d3b829bf3a85f5432493b22f37

memory/1976-9364-0x0000000005BE0000-0x0000000005BEF000-memory.dmp

C:\Games\Half-Life\01.dll

MD5 e1cd35bbc28f73b7481e8835ee0f0b13
SHA1 ef40d489c61b178b54f8116548662ee876e0133f
SHA256 6ecef9ef0f62491d595b2f32c69b53c53a1b3a8a7c9dea39d56c6861f5b93bdf
SHA512 baf6f9063f95e6d699088ec4c0611825e030382ff913084feb7f913cc8f011d079b6c7143359391d8e30a5e26ac5a5358882b20e3ac31c5afdbe8867ff6f62a3

C:\Games\Half-Life\revSrvBrowser.dll

MD5 d3b8c3f08212fcb672819e8f2566e953
SHA1 e7ff79825a3be513f4f0299a4d26b0f15f1e543e
SHA256 2dd8d5d757230b6da93af852a97ff639881402e49b2a0d418d917c9348a74bed
SHA512 f7d0c65420703aa84e22f7232246d0f116b6e8a550da575a1e8f68bf424bea025db9729f3d009aad687e23389e9831167814c418f713a963e3b5cc88d02ad8d3

C:\Games\Half-Life\steamclient.dll

MD5 ab3d3c7bc52a08ca365792d385d33577
SHA1 3ff1182fa8d4275a79d0dc189582ae4eac4b17bc
SHA256 56058c77c14a25e31c79eb68aef1bc3d8ad95d461b659b161d667fe8f2f96f37
SHA512 c88871146467e8eec6d4acf84d332e8dd7ef1faaad0584a89929a242fea78e81db767f4eb420e2cf8f7c79ac901834217bb26f74fbf1b23bb137c13352df3602

\??\c:\games\half-life\rev.ini

MD5 f74da92a5e22b9c567fea58198172e32
SHA1 df8ba8c9ff8ff33d5bea83f4205073e77c98dea3
SHA256 851b48727735c2d08fe683482c69d835f7364b7eb0e2f3494dae552e08ca942f
SHA512 45c003531f2e5a01eedb2de0881bf2d0a3a831f64bad5d7239a02efcb26fc3ad5307ebabe4cabebd3cfb07109ce9e7d2d03b83db00166fc40a0ccb874e33e106

C:\Games\Half-Life\steam_api_c.dll

MD5 24e0f2298014291decb033e2813a2c8a
SHA1 8b206a6e16b56f2a3ccdca2241cc3d4ec79c8011
SHA256 7143e265f1371e3f2ac9ad2f041640a9e1574d91c1fc3914e6b28685f8c3606a
SHA512 c84905a445e11855e50096afb849cc4d7bc2edaff110d5dcb6c4b18c9e8a45584d47f30b3fad906bfa9056cab8aa63ac21e585f1ce8127ee36cad6e7ea0c09d7

C:\Games\Half-Life\vgui.dll

MD5 d44ee82601ae62ede3e224269a0bbf53
SHA1 2d00b1d5e052584c6c86ec08795d56d2181a91ee
SHA256 0d4472d21443de839080860a300cca6b9436508f329d33d712e5c9bc07d4d998
SHA512 00dba1a1d88bbc8f77f86ac45068d3f071805a13bf30c7f5c3f3168d3b799e773a1a3a7decab7931a9104bfe91dc8d60cc54b9e82a12e01b29dfe13c4fd1d398

C:\Games\Half-Life\Mss32.dll

MD5 f520185e02e8a5d85860669176bc4adc
SHA1 cea8e9ff14994c89ad86cf891c89fea42a39250a
SHA256 fe62f1eb6ba407df77619d16927abbefad3c726014f6bd1f8c37a7c3d6b781cc
SHA512 b434e77a17cdac0109b698d0fccdd25dcdb15090a9fd0427504cc7f616673fa6c7307f07fb22cc2fc1e915887c0f9dc025aa8d38f51503f91df6a9ccee5ebe58

\??\c:\games\half-life\valve\resource\background\1920_1080_0_5.tga

MD5 ae7d93521dd1adef4d34e7be53fe9d8c
SHA1 b56a0728dd5b4c2783b18281e4b246bd1929bc75
SHA256 b83de35bee92a355c553d3166672638395000e9c9b41194410765f751cb24fac
SHA512 03ba049d36979f419260ba4776a28e1ae48c5f429eaabe52be849e4e5bd7ea6ef178130bbe690d68e3300d92c88f9d275f762369e3c9c52dfa27964b3884629f

\??\c:\games\half-life\valve\resource\background\1920_1080_1_4.tga

MD5 d4084ad6aeecf15fe16cd47858ffb62a
SHA1 984e9b11edf1007ecdf0307dd2e9e64a55fe2a7f
SHA256 5d83acd500d3cf0b490dd5a923c82289d0e537f272339e926139c49747f45370
SHA512 c9fcf1251a4e53c5afb9d76f3bca77367c943bdbca8662679a1ceaee43a93b8f699175e2068e756088b4219c07fa9300aa3be683dafe37929b4493c0dfc1fbba

\??\c:\games\half-life\valve\resource\background\1920_1080_0_1.tga

MD5 b21494be88836c0ed63ca2731f1abb83
SHA1 b12f38cc4bb5d9e6b90e3cdaecbcfeb86b6d9459
SHA256 e2bb756291a566e7d468c7034753d21513750ebd7c7b3f241c22f357ae7eb7c0
SHA512 9510d6864bf28ae5e1912349958527634ec66139aefc07dd8691b82b4214d6baa0b3ca3bbb0e1ced52ea37f5addb8c8aded4ac5c1ebd77912499bc2758d71471

\??\c:\games\half-life\valve\resource\background\1920_1080_4_0.tga

MD5 4646e447f685c8a6bb643fb3922a602d
SHA1 784279713b9b5817ec1c17c2ca437fb06be8ba17
SHA256 8d6820399ddb950acc38b3bd735c4f768c59b506eea1e0ecc78cc8232b430dcf
SHA512 63235e4f1c19526d593d1053b37bbca4e64fb87854e5c3a12d4498020a4b785042b77e6c1f1e8bd66301c45ac9f2f3608d5ad2bbdd3884c26ea387f5bdeb4ec9

memory/5040-9406-0x0000000000400000-0x0000000000726000-memory.dmp

memory/3336-9407-0x0000000000400000-0x00000000004EB000-memory.dmp

\??\c:\games\half-life\valve\resource\background\1920_1080_3_7.tga

MD5 3e9cb374a4158b549f3c21fe7f6fbc9c
SHA1 b19dfa563af539cf1ff54a0a744cb8972f3c9b4d
SHA256 a25b62d51bd0ad12f43071401255be52625b1abf0f4d8e900ae7bf61031653b4
SHA512 0551a9b438a763b8d509f8c957acc4373e8109b471c91a5dff2c5cd0e26d28c4cd631abe507d4847d3ee5e8175346f9283a32d373ca2e9979b168ecb289b8d1a

\??\c:\games\half-life\valve\resource\background\1920_1080_3_6.tga

MD5 89836d5fa424c3a39bca3e181c47785d
SHA1 e7f6d8d9fb217cfcd68f9104d9cb15e14f10c520
SHA256 1013a579928384dbf605e1b589518461e43a45cd05b5a284692e5a64b6d948ae
SHA512 4a8475ad65b7d9169eff526b71570da905577c83df29495a7336cad435823000db250811614c0498285c194759fdb7498040679d4da3fbf8890d90bc35e3cb1e

\??\c:\games\half-life\valve\resource\background\1920_1080_3_5.tga

MD5 e189e20af8275369ec761126f54f4e8a
SHA1 e5d35d6859a530c7cf28ce548e1a7abe408daa58
SHA256 8e490b666bade11fe62a27e901294be57f27d57494f91264f7173415fe3b204d
SHA512 9c69448f87eafd36c0707e6c7bee9bdb061645c3549628da4057a61851f8a4ad52c5edd4864d46f47ddd629a8bf3b15ac5f137d432dc86323d6f676a46e260f0

\??\c:\games\half-life\valve\resource\background\1920_1080_3_4.tga

MD5 b5f2badcec6d3fba16151e595a835dc4
SHA1 a00168ee532c069b23c9e015b21cc36aa10a7352
SHA256 ca18bf02f96634d77839bddb2c3f7b501688404dfafce59dc7542a721fb2ed40
SHA512 fe675e73aac15128862ecfc0bcbe962c4bee8bbb6cf24a2f5458821299fc14957f05f6985a6eeb581bf0f4ffae91481736081fe590a7163d6f08f2d3af223cef

\??\c:\games\half-life\valve\resource\background\1920_1080_3_3.tga

MD5 18150bdcb6803d5860310249ab914230
SHA1 427dea7ad64e753c7490112a1728b584bd055524
SHA256 6c8e50a469f2858d70486ae5017097f3ebde8c30f069f33ea052dd29762dc650
SHA512 e7186c74a799eb306295b803ef3cbee58f26fb4f9ce5ac7d0b140077f4e7577841d68d2db2d4dfb0e23936d5b5e3d01cf4187f7af5d6b59e648f720c1125586f

\??\c:\games\half-life\valve\resource\background\1920_1080_3_2.tga

MD5 2c5439ebcd1f1e1bf3754ab0a84417c8
SHA1 3b8711767b709f9caf6efdd430eb420731e35d1b
SHA256 13ce4a712d1dfc0ae9f0b127db25c56201a84a405660d792cd0d6e93935130e5
SHA512 954289fec58b5a490031a3a228528aab87172732b7adf20006df54494c24ea2394fee8ca829198655b36cebc9f8176c5677e4a069e853b6bbc30550a6e351931

\??\c:\games\half-life\valve\resource\background\1920_1080_3_1.tga

MD5 8ba6cce48f7f05b77329363be3384fd6
SHA1 e702e8a1b5adca9023eee0ce05a650dfc5e96cf0
SHA256 d8ccd9c8bd99cc6258f09ae6791b0ba840628e6b49194da0710a4494d231fabd
SHA512 845c0830eaf4b1854a657e85023baa07044f5650eae30e9ced35e0f41a475ccddee6aea177d4c8406d0a8ce20480c4e223293314f576b6339c325b6b3993c37c

\??\c:\games\half-life\valve\resource\background\1920_1080_3_0.tga

MD5 703d595f57fc9a12445671655996927d
SHA1 25fe983687acb58cd5660ae24bf7071ff0e01d35
SHA256 8877e81f13907a876d9fe206305e6f9cceaa3533da70b795a551b0871fa48e7c
SHA512 d9b2b398468281b7ad081b26d13b9ab85a799c6e46f6be485c7fa89bce02147e4f0829f052c9cfa26326e2e1ca6f502c33a5baa766bcd41f3355275917704ec7

\??\c:\games\half-life\valve\resource\background\1920_1080_2_7.tga

MD5 75f56e1a376c497ae064fd1090bfbe37
SHA1 fdb27f9b2c1be6c604224d6f2bd8b85415cd3107
SHA256 386003029a32c9a73e2cf9f5b411957486c62d8563742b7e8b0fb44d1a57d43b
SHA512 4069cc211ce68c32184c5ff55c64aab17bf048cadda8fc600a3a75e83646ead5b22ccfffa490f49f617fd9da9c53e8e0985943ed9a06cada42f4cf01710b4291

\??\c:\games\half-life\valve\resource\background\1920_1080_2_6.tga

MD5 ab353d05cbc045f1fc56dd9c758dedad
SHA1 2f4ec284c74ca99012f3b205aa14f73abc471bd1
SHA256 3ef38e42f7cc0a0d598baa7bc8b0a3c20058a71da6adc398bbc58aa017e5be2e
SHA512 e6d4dce5fd96ca4ffadba4c59a468f7f2682ed9423dd0aa44cad6a0341dbcba5966b9848896ceb2634f52527fab9dfca57d020ce9bc86e796582a319fa54eede

\??\c:\games\half-life\valve\resource\background\1920_1080_2_5.tga

MD5 252fd18d41099e69c7aacc9c12382fec
SHA1 a3a0b3e9505248cc9da2fc3f6ee1bddc15c96198
SHA256 90724e72c52ac9daae5be2fb66dd84db4bdecaae1fd19d9eb9103b5d61c50ed9
SHA512 3fe1c15fa23690cdd4556095e3d9091f8b1716638f9f03b63a525b16e796ee99fbfa59a4597cbe19001f855967564c5cd48ef95608ffd459453b9b793a947f7d

\??\c:\games\half-life\valve\resource\background\1920_1080_2_4.tga

MD5 fa5ac73fd5c5f2abe5b78817275085bf
SHA1 dfac56acf0995fbb21540bc167728472022c56e7
SHA256 9c47ca1eb2125170e6bf80973c2ed29e39554cbf880a89d735bb541999c1472c
SHA512 a39951315efe305ca1f4750861124f5ff969e173a5c2c5412308eea27532c16cf6cf6fd572e293061f23971eb8bb704fb5087becf1e56dbea512ca114ca95ee6

\??\c:\games\half-life\valve\resource\background\1920_1080_2_3.tga

MD5 76b8cce2bf3945d45476ff73f0624f55
SHA1 e109b51fe052595d3658ec4a1651f37d4be9368c
SHA256 b1a9b7a6ac1cb3d5e37da0f9612eadc4639f7f81043287a34be2ef125f294e5b
SHA512 815507831e27e7759116b8bfd601e36c10ab11c90856e1f31c225d29fed830c17b479530b085d8d9268ce16c706731444f240f7c0800b8e041bf93341157c7ad

\??\c:\games\half-life\valve\resource\background\1920_1080_2_2.tga

MD5 0b94a0443481ebc6f1e2f294ad3484d1
SHA1 6cf7fc1a951c1f477d5fdd60b6ad96fb78aff568
SHA256 7c4079e620432ad9b144609eeeb42b0874a3108a7d526e06318284cc4896bc89
SHA512 b453cc6c7363070bfd04af66b287df6e4ec9600b2db74465f484c4d4846fa9a3af31df6640571ebc28db85bdd377f1c7e10c49abc46cd9ada8d8ce69d3313f1d

\??\c:\games\half-life\valve\resource\background\1920_1080_2_1.tga

MD5 6c415e279b2f2fd41a76a8ec64f92caa
SHA1 c26d646349b988803cb4f4422e81cd778578375e
SHA256 289c40a62c61f4564a64d4875f3579483a7e2d4d29f4389d53200831a00c7b81
SHA512 53ef9fc01ba20adc51ba573478a1ce319ab675cda2e01f0abf33483b755276823270947966db7372f0fb352e099dab789b7a8600ea1237cc028b68ff5e979497

\??\c:\games\half-life\valve\resource\background\1920_1080_2_0.tga

MD5 9aad306c013353e27a0b88b91f590062
SHA1 0affb970c1563619a60f0b0910715cf605c78d80
SHA256 ffadfdfb90f5404a29387cdc3e88815eb7df6ab6f4aae6aac5ee98d7c76370c6
SHA512 d27cc2ef02027bf8c4da4772851acdc9f367b6c9ba304776eb44f93d37738c526c5e49d19a46d7e3a7651752e3bf9719500055f545925e70b055591626ffcbd9

\??\c:\games\half-life\valve\resource\background\1920_1080_1_7.tga

MD5 795dedaed0a8846e9812688a9689bc4c
SHA1 c20d7ec4bdfa1326bb7c966ac2413930e01ed9dd
SHA256 e7de633c7c791fb6b4ce3ea7d667a7f93b2eb731c4f5ea66c3dc0fa817821552
SHA512 2130ca86fbf747933e4887b05c04937663273842965398650657be1c771ceb446810e471590656b6818f3ffdd6a6fd751f9de763a7b83900b2ac21a600177a73

\??\c:\games\half-life\valve\resource\background\1920_1080_1_6.tga

MD5 e0a35087d7e67950457c4a64b954bb5b
SHA1 70ab41cbf702b7eea7ee952e66a1ceeac06da842
SHA256 7f93a1d142167134bf631d8097441bd4f27fe937752ce84c502fe850d5befe7f
SHA512 e9f044381d9e4e87d32a02aca7108adee4db7085856445bec92d0ccf23f3ad2b221901929158d11e139314e969c125825e1853577f0c66c0d185203d4244fc68

\??\c:\games\half-life\valve\resource\background\1920_1080_1_5.tga

MD5 4003d9cd861d23cacb26203d79a8c29c
SHA1 5ab1ab0152a486b5fd78ab2f8704656872c94151
SHA256 cfdaf3ee6fd12a96872b86e24cee023242dac4a40068e4d67ce22026a31000af
SHA512 295effe07160f511a6b2bd43595c1c69dda475ea6ca659c5c98d514353cf5beb853b5795ede22d3c225a125dbdfca1e25abf0d8f34cdaf3e62bc9b2c9338a5bb

\??\c:\games\half-life\valve\resource\background\1920_1080_1_3.tga

MD5 89a9b0714bf43ae1fd94d745036769d9
SHA1 a36120e85403c38273857021d0ffb6c19f2f3aa5
SHA256 b2bb7ea4da7abcbf9a15d8b852af5a64451838b1717f7e00d0a153102672c51f
SHA512 e5018eebc1dfec160625142cc930980c794da523c1860ebb54260108aadbe9ccd36fcc805bdf12035a5fc63144643967827819b91d2a2303bddda48b4b6e4654

\??\c:\games\half-life\valve\resource\background\1920_1080_1_2.tga

MD5 f7f238f16ceada4863cd10017d4e6bd1
SHA1 07f14ed12d9f955800584b1b951c8f90b23b3c0e
SHA256 1781990a9ad149de82231e23e8e0ed302908dba77f98c8d8ff28ba04f9303ace
SHA512 f0fab7d42e7cbd0f2a32241a503ebe3923a4dae475e3435ab7985b1258452342c31c7938775d7513e1fb43384ca5f68bbaa4b19f0b6d84f0a6987021e7bfb8e1

\??\c:\games\half-life\valve\resource\background\1920_1080_1_1.tga

MD5 cdaa1764669a98fd28742d4eb2fe1472
SHA1 fb080e45b71975562986497a25eb974ac6e2a4ce
SHA256 fa73241df91eddc2a97efe369a185a7d689f09fd7694b0f5ca9a07e66ee4e572
SHA512 1428066ee34d02bcdfa90086222f14822813460fcd494b69c20e7afd6b38a3f113b471d2cce38d32ed48e20bfa65eb229226fbf3f7009bca24ff451539e93e14

\??\c:\games\half-life\valve\resource\background\1920_1080_1_0.tga

MD5 0700d4cb8623d32f954ea33c6a813913
SHA1 8923f77e159730e0bead5ffba2a2017d07526bfa
SHA256 ea14de878057181e7a27641063de786d4dc7de1ccc87682f99edf5bd22a0c2a3
SHA512 0ad5097e0ecbb84b3811eee1d139eac32b39ca6f245e0e9cf317c521848390f275d184a236e280f289c57365daeac36c5dca47948bc74c03b1bf39c230c75bdb

\??\c:\games\half-life\valve\resource\background\1920_1080_0_7.tga

MD5 2483539b49b6e2ce54894abb9b75b8f9
SHA1 5b7e6ab1c024b2f9886f66d600374f6cecc6684b
SHA256 610e571337825a6ed71de8162ebf42d781752bb50f1f17f58949d735698e6c3e
SHA512 6401635132954fafbe7c0541ff739d7e89359b88709a5a588d805f8ee3fa19c03a11eb264817d28d6a18ddcc923bcb6d9aa90a910007cca940f7a2dab68e73f8

\??\c:\games\half-life\valve\resource\background\1920_1080_0_6.tga

MD5 ffc17eafbea041830111c481f82735f9
SHA1 bf915108ece098c02b6a192b3a7867a8d28111a4
SHA256 42347cbe1f0736139637ac1117cda71bec03c49e8662fbcc75f52fcdca167fa3
SHA512 9dd7e54dcd7b21fc9ca8c8f1b89ab6021ed9a427bcede4a42f61576bebabfe3599086bc2bf262526f14d848faa3be62e5b5260d835cc0da249f6e03505e1506a

\??\c:\games\half-life\valve\resource\background\1920_1080_0_4.tga

MD5 183449ea5e6cbcfc27533016d0e9f646
SHA1 35d67e706520f06b1bc1e6f1ce90d2f57a1bfa27
SHA256 9970701f096da3e91401d40563ab8083461aa6884dbea5e09bbb90598f64bdc9
SHA512 e9d6a2500eff05a3bbcad2e30fcf2fbdfd0c6fa17d355056107af7a9da14e3458898eb5421d3824cae03e151d8e108158d0c1f0c1dedfdb60cddb7bc48dc11a6

\??\c:\games\half-life\valve\resource\background\1920_1080_0_3.tga

MD5 9c0398e86a21f132ae8e8e5caebcddf9
SHA1 6e254b972506b5c192e3f8fe5e8511cd2d5b5022
SHA256 ad3c948e481216f8e70c5f685b7a4b320e0156e23cdf337c77997debcf55d7ab
SHA512 9b966138ee0a5e3ae4df52fae861fba33c0424d26116d3801fc490105afd094c18a9958756474dc847d2233459636fb47f91d9144ccddc7da00350fd8ef9ee75

\??\c:\games\half-life\valve\resource\background\1920_1080_0_2.tga

MD5 4b86ef35f640e94b4d6632f786473c0d
SHA1 3b705c969716f0d88cabd347732014f82102d8e7
SHA256 8639363a5fa8e7ebe8beac3468447f9c563dd49ad5fd5a17eea36dcb894c12ba
SHA512 8981dd04a27ca65a9a61ebc2bf3374a92929d3e80d3dbac653fd81688e9351877146d29dd836d1652fe43b3754a1b474bfbb653f826803f97cf49412106d3217

\??\c:\games\half-life\valve\resource\background\1920_1080_0_0.tga

MD5 8acc843b635988c4877746cace359fe8
SHA1 e14e63ea19a811bb4b397c036013e1dfa680f24f
SHA256 d8d6b0f48d6231c489ec54ae79232807b3a62d4dcebbe7cad8ef296c3b642f29
SHA512 88bc060f251079a67268995b7f7a8450bf805cd7a7fc1af75984213a65a4710ccff7b2d97dcb544e57d03ece884673c72dbd49299185aa022e2a6b0440e92c5d

\??\c:\games\half-life\valve\resource\BackgroundLoadingLayout.txt

MD5 640c0f28dfabf13f6700adb0d718b849
SHA1 c66f5bf461b39c305199cf4885fe2edb0efdfe93
SHA256 aca1be03d2900538cdf6c21f5d7ffede73ad77f5065a9921b197317c21a62d50
SHA512 3327780c6187800622dcfd389b71008089cd42ba594e3dbb747427699fc6a6f1d8c3ceb15db0438fc9d3392d67e06d11e6c0b55f3acb5a86646e687bd9966a33

memory/1976-9408-0x0000000004F20000-0x0000000005A73000-memory.dmp

memory/1976-9415-0x0000000001150000-0x000000000115F000-memory.dmp

memory/1976-9412-0x0000000001120000-0x0000000001135000-memory.dmp

memory/1976-9410-0x0000000004DB0000-0x0000000004E08000-memory.dmp

memory/1976-9420-0x0000000004AF0000-0x0000000004B30000-memory.dmp

memory/1976-9419-0x0000000004950000-0x0000000004965000-memory.dmp

memory/1976-9422-0x0000000009AB0000-0x0000000009B94000-memory.dmp

memory/1976-9424-0x000000000DE50000-0x000000000DE6F000-memory.dmp

memory/1976-9425-0x000000000DEB0000-0x000000000DECC000-memory.dmp

memory/1976-9430-0x000000000E4E0000-0x000000000E4EF000-memory.dmp

memory/1976-9432-0x000000000ED90000-0x000000000EDD8000-memory.dmp

memory/1976-9431-0x000000000EC10000-0x000000000EC2E000-memory.dmp

memory/1976-9436-0x000000000F790000-0x000000000F81D000-memory.dmp

memory/1976-9441-0x000000000F820000-0x000000000F879000-memory.dmp

memory/1976-9440-0x000000000EFB0000-0x000000000EFC5000-memory.dmp

memory/1976-9438-0x000000000EF50000-0x000000000EFAA000-memory.dmp

C:\Games\Half-Life\platform\config\ServerBrowser.vdf

MD5 261891b787b00c5df970e27a5f1ffcd6
SHA1 ed8d552ad56cb6b1411ddcf436f0c9acf66b823c
SHA256 5e75d554b0ee1464d23d0e145afe7151e97cfeb398d89829ea91e9f5503bc605
SHA512 bba969355ae2d7a0dcde5032701a6bdc25aa37c212097e1845217b8586101ac59b9497addeb4a6e166afc703ffea24c2e58aac1103e788d02c3b4febec2af053

memory/1976-9445-0x000000000DEB0000-0x000000000DECC000-memory.dmp

memory/1976-9444-0x000000000DE50000-0x000000000DE6F000-memory.dmp