Analysis Overview
SHA256
1f9c874e4a29b220c5f79ff9bf2f75f8b247336d617eae4ffe7c41695a9981ce
Threat Level: Shows suspicious behavior
The file half_life.exe was found to be: Shows suspicious behavior.
Malicious Activity Summary
Executes dropped EXE
Loads dropped DLL
Checks whether UAC is enabled
Enumerates connected drives
Writes to the Master Boot Record (MBR)
Checks installed software on the system
Enumerates physical storage devices
System Location Discovery: System Language Discovery
Unsigned PE
Suspicious use of AdjustPrivilegeToken
Script User-Agent
Suspicious use of SetWindowsHookEx
Suspicious use of FindShellTrayWindow
Suspicious behavior: GetForegroundWindowSpam
Suspicious behavior: EnumeratesProcesses
Suspicious use of WriteProcessMemory
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-10-16 00:50
Signatures
Unsigned PE
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2024-10-16 00:50
Reported
2024-10-16 00:54
Platform
win7-20240903-en
Max time kernel
125s
Max time network
132s
Command Line
Signatures
Executes dropped EXE
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp | N/A |
| N/A | N/A | C:\Games\Half-Life\hl.exe | N/A |
Loads dropped DLL
Checks installed software on the system
Checks whether UAC is enabled
| Description | Indicator | Process | Target |
| Key value queried | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA | C:\Games\Half-Life\hl.exe | N/A |
Enumerates connected drives
| Description | Indicator | Process | Target |
| File opened (read-only) | \??\D: | C:\Games\Half-Life\hl.exe | N/A |
Writes to the Master Boot Record (MBR)
| Description | Indicator | Process | Target |
| File opened for modification | \??\PhysicalDrive0 | C:\Games\Half-Life\hl.exe | N/A |
Enumerates physical storage devices
System Location Discovery: System Language Discovery
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | C:\Games\Half-Life\hl.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | C:\Users\Admin\AppData\Local\Temp\half_life.exe | N/A |
Script User-Agent
| Description | Indicator | Process | Target |
| HTTP User-Agent header | Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) | N/A | N/A |
Suspicious behavior: EnumeratesProcesses
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp | N/A |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp | N/A |
Suspicious use of AdjustPrivilegeToken
| Description | Indicator | Process | Target |
| Token: 33 | N/A | C:\Windows\system32\AUDIODG.EXE | N/A |
| Token: SeIncBasePriorityPrivilege | N/A | C:\Windows\system32\AUDIODG.EXE | N/A |
| Token: 33 | N/A | C:\Windows\system32\AUDIODG.EXE | N/A |
| Token: SeIncBasePriorityPrivilege | N/A | C:\Windows\system32\AUDIODG.EXE | N/A |
Suspicious use of FindShellTrayWindow
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp | N/A |
Suspicious use of SetWindowsHookEx
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Games\Half-Life\hl.exe | N/A |
| N/A | N/A | C:\Games\Half-Life\hl.exe | N/A |
| N/A | N/A | C:\Games\Half-Life\hl.exe | N/A |
| N/A | N/A | C:\Games\Half-Life\hl.exe | N/A |
Suspicious use of WriteProcessMemory
Processes
C:\Users\Admin\AppData\Local\Temp\half_life.exe
"C:\Users\Admin\AppData\Local\Temp\half_life.exe"
C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp
"C:\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp" /SL5="$400F8,220853976,908800,C:\Users\Admin\AppData\Local\Temp\half_life.exe"
C:\Games\Half-Life\hl.exe
"C:\Games\Half-Life\hl.exe" -game valve
C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4fc
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | count.ms-csnv.ru | udp |
| DE | 141.95.54.113:80 | count.ms-csnv.ru | tcp |
| US | 8.8.8.8:53 | ms7.ms-csnv.ru | udp |
| GB | 51.38.65.66:27010 | ms7.ms-csnv.ru | udp |
| TR | 213.238.173.152:27015 | udp | |
| TR | 95.173.174.175:27015 | udp | |
| US | 149.28.108.197:1337 | udp | |
| TR | 95.173.174.186:27015 | udp | |
| AR | 45.235.98.8:27015 | udp | |
| PE | 87.121.99.6:27015 | udp | |
| DE | 45.83.244.193:27015 | udp | |
| LT | 5.20.156.199:27016 | udp | |
| LT | 5.20.156.199:27015 | udp | |
| RU | 62.140.250.10:27015 | udp | |
| AR | 45.235.98.48:27031 | udp | |
| TR | 95.173.174.185:27015 | udp | |
| TR | 95.173.174.193:27015 | udp | |
| DE | 95.179.240.172:27015 | udp | |
| AR | 45.235.98.21:27022 | udp | |
| TR | 95.173.174.192:27015 | udp | |
| SG | 172.105.121.118:27115 | udp | |
| RU | 84.22.153.100:27015 | udp | |
| US | 45.77.74.75:27015 | udp | |
| AR | 45.235.98.235:27045 | udp | |
| US | 45.77.74.75:27018 | udp | |
| DE | 51.68.190.91:27015 | udp | |
| US | 5.161.189.195:27015 | udp | |
| PE | 87.121.99.31:27015 | udp | |
| US | 45.32.166.104:1337 | udp | |
| AR | 45.235.98.8:27017 | udp | |
| DE | 143.42.58.77:27012 | udp | |
| AR | 45.235.98.236:27030 | udp | |
| SK | 195.62.16.163:27016 | udp | |
| DE | 195.20.246.242:27018 | udp | |
| RU | 84.22.153.100:27016 | udp | |
| US | 207.148.12.159:27015 | udp | |
| DE | 78.46.33.4:27017 | udp | |
| PE | 161.132.38.79:27020 | udp | |
| GB | 51.75.164.15:27015 | udp | |
| FR | 94.23.156.99:27030 | udp | |
| GB | 78.141.193.110:27015 | udp | |
| TR | 95.173.174.176:27015 | udp | |
| TR | 213.238.173.253:27015 | udp | |
| BY | 86.57.176.80:27016 | udp | |
| TR | 95.173.174.177:27015 | udp | |
| BY | 86.57.176.80:27015 | udp | |
| SK | 212.37.87.232:27015 | udp | |
| DE | 161.97.107.198:27016 | udp | |
| DE | 88.198.47.43:27018 | udp | |
| CN | 106.52.153.13:27015 | udp | |
| FR | 145.239.108.67:27025 | udp | |
| FR | 188.165.220.114:27016 | udp | |
| DE | 148.251.68.215:27015 | udp | |
| RU | 31.131.249.69:27018 | udp | |
| US | 192.169.88.50:29035 | udp | |
| US | 192.223.30.68:27015 | udp | |
| GB | 54.36.231.143:27015 | udp | |
| SG | 51.79.138.159:27015 | udp | |
| TR | 95.173.174.179:27015 | udp | |
| DE | 45.83.245.191:27015 | udp | |
| US | 74.91.119.180:27015 | udp | |
| RU | 37.230.162.74:27015 | udp | |
| NO | 81.167.247.172:27016 | udp | |
| RO | 5.83.43.175:27015 | udp | |
| DE | 2.203.117.102:27015 | udp | |
| AR | 45.235.99.104:27336 | udp | |
| RO | 93.115.32.4:27015 | udp | |
| US | 74.208.216.232:27030 | udp | |
| AR | 45.235.98.8:27016 | udp | |
| RU | 89.223.37.142:27012 | udp | |
| BY | 86.57.176.80:27018 | udp | |
| RU | 31.131.249.69:27070 | udp | |
| FR | 185.144.44.144:27015 | udp | |
| US | 107.150.56.58:27015 | udp | |
| LT | 194.135.95.189:27015 | udp | |
| AR | 45.235.98.235:27050 | udp | |
| UA | 195.234.5.14:27015 | udp | |
| AR | 45.235.98.235:27065 | udp | |
| US | 74.91.113.16:27015 | udp | |
| US | 107.150.56.58:27016 | udp | |
| NO | 81.167.247.172:27017 | udp | |
| RU | 89.223.37.142:27010 | udp | |
| AR | 181.31.40.245:27016 | udp | |
| PE | 87.121.99.6:27017 | udp | |
| RU | 46.174.52.201:27016 | udp | |
| AR | 45.235.98.61:27024 | udp | |
| AR | 45.235.98.235:27040 | udp | |
| RU | 46.174.48.48:27221 | udp | |
| DE | 88.198.47.43:27015 | udp | |
| DE | 161.97.107.198:27017 | udp | |
| US | 76.139.152.207:27015 | udp | |
| AR | 45.235.98.48:27037 | udp | |
| GB | 54.37.241.101:27015 | udp | |
| RU | 89.179.240.119:27014 | udp | |
| AR | 45.235.98.8:27022 | udp | |
| DE | 207.180.228.239:27016 | udp | |
| FR | 188.165.244.220:27045 | udp | |
| DE | 88.198.47.43:27022 | udp | |
| DE | 167.235.180.253:27015 | udp | |
| DE | 167.235.180.253:27016 | udp | |
| US | 63.251.20.62:27015 | udp | |
| US | 207.148.12.159:27016 | udp | |
| RU | 5.53.16.212:27017 | udp | |
| UA | 91.211.118.48:27021 | udp | |
| US | 64.5.76.253:17015 | udp | |
| DE | 87.106.63.111:27016 | udp | |
| US | 193.29.63.214:27015 | udp | |
| US | 74.91.116.227:27015 | udp | |
| SG | 172.105.121.118:27215 | udp | |
| CZ | 88.86.115.150:27075 | udp | |
| US | 162.248.88.37:27015 | udp | |
| BR | 191.96.70.108:1337 | udp | |
| RU | 5.53.16.212:27077 | udp | |
| DE | 176.9.61.5:27026 | udp | |
| DE | 164.68.106.25:27016 | udp | |
| US | 45.77.74.75:27016 | udp | |
| US | 192.223.24.140:27015 | udp | |
| US | 74.91.121.12:27015 | udp | |
| UA | 91.211.118.48:27022 | udp | |
| AR | 45.235.98.235:27055 | udp | |
| AR | 45.235.98.8:27021 | udp | |
| TR | 194.87.188.47:27015 | udp | |
| DE | 88.198.47.43:27019 | udp | |
| CN | 124.222.8.195:27016 | udp | |
| AR | 45.235.98.235:27060 | udp | |
| FR | 37.187.102.223:27016 | udp | |
| DE | 212.87.213.185:27015 | udp | |
| UA | 176.36.254.82:27017 | udp | |
| FR | 188.165.244.220:27040 | udp | |
| BR | 54.94.44.59:27015 | udp | |
| DE | 178.63.16.211:27102 | udp | |
| AR | 45.235.98.236:27035 | udp | |
| UA | 91.211.118.37:27028 | udp | |
| US | 104.131.24.108:27015 | udp | |
| AR | 45.235.98.236:27025 | udp | |
| US | 162.248.92.2:27015 | udp | |
| TR | 194.87.188.46:27015 | udp | |
| RU | 195.93.181.253:27019 | udp | |
| RU | 94.102.19.30:27001 | udp | |
| FR | 188.165.244.220:27115 | udp | |
| UA | 134.249.113.137:27015 | udp | |
| RU | 95.163.78.25:27019 | udp | |
| TR | 213.142.150.185:27015 | udp | |
| RU | 195.93.181.253:27017 | udp | |
| US | 165.227.178.65:27015 | udp | |
| US | 208.167.251.20:27015 | udp | |
| DE | 94.177.230.156:27015 | udp | |
| CH | 95.183.51.2:27017 | udp | |
| CH | 95.183.51.2:27015 | udp | |
| US | 73.164.228.80:27015 | udp | |
| FR | 188.165.244.220:27075 | udp | |
| FR | 188.165.244.220:27110 | udp | |
| FR | 188.165.244.220:27095 | udp | |
| US | 72.76.178.107:27015 | udp | |
| DE | 88.198.68.172:27030 | udp | |
| AR | 45.235.99.18:27024 | udp | |
| SK | 195.62.16.163:27020 | udp | |
| RU | 89.223.37.142:27017 | udp | |
| PE | 87.121.99.31:27017 | udp | |
| AR | 181.192.79.104:27019 | udp | |
| DE | 176.9.61.5:27027 | udp | |
| RU | 85.174.227.170:27016 | udp | |
| US | 137.184.49.86:27015 | udp | |
| AR | 45.235.98.26:27018 | udp | |
| US | 103.195.101.84:27030 | udp | |
| RU | 94.102.19.30:27015 | udp | |
| LT | 62.80.247.69:27019 | udp | |
| TR | 194.87.188.47:27016 | udp | |
| RU | 62.140.250.10:27015 | udp |
Files
memory/2268-2-0x0000000000401000-0x00000000004B7000-memory.dmp
memory/2268-0-0x0000000000400000-0x00000000004EB000-memory.dmp
\Users\Admin\AppData\Local\Temp\is-T00RB.tmp\half_life.tmp
| MD5 | 33cc6db73b7274bd553c3e95e2435a14 |
| SHA1 | 83def29412f76edd611dca4e66e0eaa0a39b180e |
| SHA256 | 5542c67c3224578df33c5e4cec79150489455742f4b66deb170eda9c6f66fc7b |
| SHA512 | 62d84f8376378314fbe88fc298e7a866e3ab0da60162a6eb1eac3d55d41fdb79ea1c77dcb7b841ab18f338a27e59eb5cb6268319bc63cab58594318f766a350a |
memory/2416-8-0x0000000000400000-0x0000000000726000-memory.dmp
\Users\Admin\AppData\Local\Temp\is-CQ4PP.tmp\idp.dll
| MD5 | 55c310c0319260d798757557ab3bf636 |
| SHA1 | 0892eb7ed31d8bb20a56c6835990749011a2d8de |
| SHA256 | 54e7e0ad32a22b775131a6288f083ed3286a9a436941377fc20f85dd9ad983ed |
| SHA512 | e0082109737097658677d7963cbf28d412dca3fa8f5812c2567e53849336ce45ebae2c0430df74bfe16c0f3eebb46961bc1a10f32ca7947692a900162128ae57 |
memory/2268-14-0x0000000000400000-0x00000000004EB000-memory.dmp
memory/2416-16-0x0000000000400000-0x0000000000726000-memory.dmp
memory/2416-129-0x0000000000400000-0x0000000000726000-memory.dmp
C:\Games\Half-Life\platform\Friends\is-I8RR3.tmp
| MD5 | 08091f474e938ea73aac90c9773a6013 |
| SHA1 | c4ff881bf1c3f0f0db3bd58f47d666df6a0ff885 |
| SHA256 | 50443605d94d7bedbb03c2200d7cb7e98b0eaa91e3489cd7d77f69a407b73e0a |
| SHA512 | 7f569511d12a36fdcf6193aa52a2845b53f6d2a2e075426708f542f0012360a48cdc520ec6b26b0d1dd9f86c0ba41c8205483d340963aa0acfbaaca03a7ee0f5 |
C:\Games\Half-Life\platform\Steam\cached\is-R1FMU.tmp
| MD5 | 18581b2844d1b35bd0dc170f8557bc42 |
| SHA1 | 05e8657b8f73f2608aeb07edd8f469f3639d29b7 |
| SHA256 | 7f00fc14809350a11d04cb655e996beb4d829ae7c2d7ca320968661961e18fd2 |
| SHA512 | cb2be96b5ae7cc5c593f954092ec663b8ff41e06f2597b24bbec8883a025baa75bbc6c15cb24fa29389e05b7bdb0d017bb47ef747a524eea53b77fb4a479087a |
C:\Games\Half-Life\platform\Steam\drivercheck\260\is-0GD85.tmp
| MD5 | f4eb527c235bb256418442880e445f39 |
| SHA1 | ead5903daaf37141965be8a41a535a82e7bb791c |
| SHA256 | 9b93979bfb94347d3157cdca038d1a6addc8564a954bcc564adef6a1c86ebc22 |
| SHA512 | 59a32b9a93afc69137ff4ce1ce0569eb46c0e7512afc2435cf94e94b2fbbfae320059779901c703374b018da7297caf44bf6b5a42fe16154c01270bfdbc24a9f |
C:\Games\Half-Life\platform\Steam\drivercheck\260\is-9064D.tmp
| MD5 | 158ac9a69c9a06d9bc2fb432d5b63f38 |
| SHA1 | c55441b50d6e5bbf1b619ce7c84789439c545110 |
| SHA256 | ddbef05c1fa1eb6c13538306f2d28bffb61dc57e7a9e3d9e25b98dec576ca8a6 |
| SHA512 | c3e6fbcd0338c1d04fada0c66123f1c21663f25c9f66161f18817bb6c10f9a79034ab3b0e458e1dda61bc915e3f76eb88e1238b04468a277ab16bd0f0911a1e5 |
C:\Games\Half-Life\platform\Steam\games\is-5ORVL.tmp
| MD5 | 200380f4259d09ec3f433e421cd5a55f |
| SHA1 | 9afc9cf71fd5949198b77bf7ec396a89058d6dee |
| SHA256 | e136089e82c2d98a7283b55dcd93c5332a332149e7119d015bb7c353435ea9c6 |
| SHA512 | c77a433055077420eae1fcae302fc0738f592b8081ba2bdcae2015a3296672f1df2518934821d424e3a8c9535bf1891cbe7394c16ac68520099a3d7dfb4c50cf |
C:\Games\Half-Life\valve\is-6EJ4Q.tmp
| MD5 | f02c1d45a1a86f5d60ce9e310e24d144 |
| SHA1 | d991f95d96e1c76d2acb944bb09447628cd96caa |
| SHA256 | 01491c012c29f4706f0cc8f1117eb0f882b54f720bfbf320a3271ffac6c929dc |
| SHA512 | 88dafe4039264818c4193f563376db890ecea2f8f67df7902dd76aacd08be4cb47197257d02217eeec1a81295615b30b89e91d097837193a8fb64e72d03d7334 |
C:\Games\Half-Life\valve\events\is-C6TND.tmp
| MD5 | 8cfcc0a84d0b6b51995ce17bc9f194f2 |
| SHA1 | f86d5edad7e5a3e2d994517da5ebd7d748a8c666 |
| SHA256 | 2c7d43b8dc6ea01a32acddb7798b9dabf0ec44c7a6dcf75160539a7fe53e029d |
| SHA512 | 5f75243ff3e13b557859d89593432f5e29f014f2bc527bee363be3369e884feccb15ee593094c7eb0f8e4786b6a352cdf9fc6039636782cd23712cadc114ee1b |
C:\Games\Half-Life\valve\gfx\env\is-I4G96.tmp
| MD5 | bf92d45fcfe71458fe5b3d7258d1ee03 |
| SHA1 | e701671f4ef94b77a008f36287a51709a00daeb8 |
| SHA256 | 6e84f9cb10fac95f23b6a49fd0e6282fcb523cfe1256c200b25c088b4a4bb726 |
| SHA512 | 2b9f1a4b9da320ed2366c16d91038748b1d9a2ab48deb1c939da639e9acc2b252592e9cd6a65d60ff967b2546af6f79e18ce92b842df132192d9377f6f9b896d |
C:\Games\Half-Life\valve\gfx\vgui\is-F3V1B.tmp
| MD5 | 6deae390d10e5faef07cb793138a4ea2 |
| SHA1 | 0e1b89e5e5e61f5e8959d3d6e17fc874f3d14a8e |
| SHA256 | 1efacc8931f4e6558fc9f854527e25e004d8c3fd90f1f5209273236924a9241b |
| SHA512 | 70c1ab592e46440f759ffdaa2ba1bbb9206212670762fbdbeb04f85da2304120e0a052ea4164fc0e0326e82c013924d0db0ea27fc21041489fc6d6d69b69d93a |
C:\Games\Half-Life\valve\gfx\vgui\is-2H1V5.tmp
| MD5 | 1926ecbcf1b403f0c4a30426ea74276c |
| SHA1 | 24d8e0d5f3477f85e76985a0fc579e392482c402 |
| SHA256 | 99986396ea8ebd9ab4eb1221b52db2a8a024e67c748e0b8080d8dad24e4e9cd2 |
| SHA512 | 8e944a0304620fb7428acbe883049167c0bc1596d8f294b1ebcb383899e6881c5e54221ea5a60fa7c14210e5cfd91831a8481020608c22747f43c2f9d7e45060 |
C:\Games\Half-Life\valve\gfx\vgui\fonts\is-J5660.tmp
| MD5 | bca82506d597eed9b5507ff7ba16567b |
| SHA1 | 55ad94cc92b95ce8e2adf62df94a6a8244980e8f |
| SHA256 | 4eb392f4136f1a4b255ab26772947e62b80615ca8b1ccea93563c3f33539a8bd |
| SHA512 | e817036968d39d3f86c2f6f241c6f80756bf139a700adf018feb870542331b230cad6369652eb2a26b26e94b14c3e27dc0112d3ccd1c512f73e8b056ddeb12fc |
C:\Games\Half-Life\valve\gfx\vgui\fonts\is-DM9Q6.tmp
| MD5 | 46f3cc3d5ca0f0e80d30ec38a3ed9702 |
| SHA1 | 2b7902e73522c60bb4e5a6d7905f91967ec54b46 |
| SHA256 | 824ad8824e4d05319556d9c08dd0d4c90fecd6150a0dbcae8c946740cb4e2c56 |
| SHA512 | 9f85b11a9479af47963155fc823a9390794b3db05fb50011efaa87e1adcf772d18fdc1bd57f3ca556ded84d5fc5671236ee0705043771c83663612cd2b0f16d3 |
C:\Games\Half-Life\valve\gfx\vgui\fonts\is-BNKBD.tmp
| MD5 | 910e7f920f59348e20f787d9240fe2a7 |
| SHA1 | 9f85998b0a73efbf34b2e732942a0caada57925d |
| SHA256 | 93eba9e5ba94654d73d76944cb9860e4fe8db92a6c734fcbc57864cb766caf1d |
| SHA512 | a19fad5b08875df9f16993d48562cc2cb4bf5d918b5f102b0439c6d6d6fdb862783762d586393b0e0b6c324de3c38c27fbf09d4b48c55affd44aad2c1ee9726d |
C:\Games\Half-Life\valve\gfx\vgui\fonts\is-4VV7Q.tmp
| MD5 | d3d6c70dd23590745a0f691c28f88848 |
| SHA1 | b46b4a8427c59e590f8adace2ab659da2f4f4e9d |
| SHA256 | f472485bdddb0f7acdce7ba6dfb1520dfdab6b2e870b37f77f61714533c5fe79 |
| SHA512 | 06a400b5462c9a307bb281cf725358a8bc64a27e34b5f6b95748d3006703e66c4a756ad86fc5e2de9c2a2eba534921234fc2ec422b6107ef7264f7344a258a92 |
C:\Games\Half-Life\valve\gfx\vgui\fonts\is-0HRDR.tmp
| MD5 | 07306c3fa68e4b5bb4fd4da515adfdc1 |
| SHA1 | ae0203c50a3ef107992d61f4b135efd6fdc809ba |
| SHA256 | fad8e72511e03ea0b215e491da1ada731d7474a03d43c26a2f858c8fcee9beac |
| SHA512 | d6d1b8f13d9263932f8757fed790dcbcdca681ca51a7581ca552631409b8c65de212436f8e161c60463edf8589067118d15537789e8aead85eeb156af5c29a7a |
C:\Games\Half-Life\valve\gfx\vgui\fonts\is-T3OA3.tmp
| MD5 | ebc1b6a271bf99cdadc78dae5e9a29c4 |
| SHA1 | afddb10163d0cacf30f7a2e9f9e4f534c8425586 |
| SHA256 | 3988ddbea3e6fd927933a698d28d66572d51e59938ea16624f644afe2021818d |
| SHA512 | ccbc9f59f59c46187954d5e8a70513542471a40e8653f59c8d58279777c9c378f2e1891c4949d8d5b104117410e991f756d768932fd5353dfcbdca3c37d6ac1a |
C:\Games\Half-Life\valve\gfx\vgui\fonts\is-5E2I2.tmp
| MD5 | 8148e0f0a6679ced3ca04fd6c258d478 |
| SHA1 | 9afc1daad5e004bb9481147ec5fac15693897f2c |
| SHA256 | 60946960e36a56fe17b02ab7c618e3ca0d61b7412acbb9967271ff309a76b5e0 |
| SHA512 | 918c03891b46c645ff9b1a497a77bfee752befdbc2e82b882ca3d665dea21d3de1b112848ebb9b996b201c14bc14a70231838eece3df04a431becd0852417bed |
C:\Games\Half-Life\valve\gfx\vgui\fonts\is-9LCA4.tmp
| MD5 | ec8766ea06b999dab276c2ed85397067 |
| SHA1 | d043859519210810ab69bc4172406511b0391728 |
| SHA256 | dff807e488eee92c3f841de1f330bac00b42c36e34320e6335ed6e5d926243a8 |
| SHA512 | 5b69d36450816306ba280d2690c65f7478b84a4b1d8eba37b8a4baf8631d767859599e1b20bcabb930dbb7ebbfd07d89bb3336c9999809c50e20fc0661cfb77c |
memory/2416-2915-0x0000000000400000-0x0000000000726000-memory.dmp
C:\Games\Half-Life\valve\models\is-M8FPT.tmp
| MD5 | 5f394d005ec12f63949d0c6a62c1b7b3 |
| SHA1 | 957d1d0598c7bd0079db345db2006d8e4b755096 |
| SHA256 | 47b5e88f5cc25627e8dc76b85eb6ad64d8613b00838d0cca6a85f118af81c7b0 |
| SHA512 | c51142a1e7902d720154378a7b8e01808fb4683e5a12c77516fa474b4eb05c0d2cc37aaf1b3b0a33757aecdc9ff8008333df66ed0e254b01cb5640b8646e6fb7 |
C:\Games\Half-Life\valve\models\is-GRJQO.tmp
| MD5 | ab9f1bf1f7d14ca0032df954e1dd5212 |
| SHA1 | d51ab73cb33e1737b86ea0bf6db28aa895bb86ab |
| SHA256 | 748e6fb4465843238519d56774643c2d4fb3f77131ba49ee9ca2d700c42acb70 |
| SHA512 | c5dcb61363551755beaa4732a21ec870c9b077a44eb0e810029f056a7c89b7be4d6e2d4e48b860a4eedc707d057ba55b2b45c238cf4a99ec167a1c07686710bb |
C:\Games\Half-Life\valve\sound\fvox\is-H4J82.tmp
| MD5 | 299c3e28a49757ecab2e84ca9b220e62 |
| SHA1 | 850cbc182e7000b6caa8b6af9986161a2554dbce |
| SHA256 | 0ffbcdb3466691fbc1043c69abe50434df646f997c52856a509de43cae501eee |
| SHA512 | 2caa0f84686df85905b355107ce2d50c1b8b6debadc50d49327330855e3ed2cea05768c1394cec746ddf90f7087a08ff98eda51272f89d7450923a5e41a13bf8 |
C:\Games\Half-Life\valve\sound\plats\is-A305F.tmp
| MD5 | 811989e09124f54cb27fe6154b0f1018 |
| SHA1 | 90c22fc3b248588e2d9759e6ef395303a86b7b60 |
| SHA256 | 5271b9aa2961809f47fadecb693be2eebde2dbed62fbc4f5f4889fcd8c4a65f8 |
| SHA512 | 560d26fdbec34ab687e40b8be6144b0f586449bd3a0eaf286ab972ad60b1eb1fe002649daacad36039a298ad24aae96e3531404ac2d0d7b0b47e194b8169e18b |
C:\Games\Half-Life\valve\sprites\is-K7JJP.tmp
| MD5 | 30c0c19f5c5226225ac3959dfe1f1428 |
| SHA1 | 5c7be5173586da26dd730a790a151b8a16611106 |
| SHA256 | 5603d52c5f089950f372e2b00845738746abebaa2796b0b3e2f6d8d2f4111760 |
| SHA512 | c71799d84798c2e2a82dbde7ffa5a2c8698eaac615e77d337de7dafc9239c4b59bc2794b2ccd5740d3e19957549257bcd468660d0696f09fdca37485150c233b |
\Games\Half-Life\hl.exe
| MD5 | 2098ccf443433129b556c2849fe99e26 |
| SHA1 | 074ddbaff48c88b3b5c8f881c35d2be2bb19a249 |
| SHA256 | 4a899986a879ffd4b7e2d819c49b47cb362d849e86917da1f1931ef476b414af |
| SHA512 | fb4dcfd5371c89af775367d9f2ba72bfd42f8b483ba31b0e839b66f065e5e7a1ec34bf4504aaad17e38502be6917f0b3e415add81dc84fc6942996c0a8f95a10 |
\Games\Half-Life\unins000.exe
| MD5 | a7d90b98c748513ad99d3a61a1bf6a3f |
| SHA1 | 34f703bc9d9fe88bcacc5f344bd348bf863154ac |
| SHA256 | c1be85916dd0b958ea20bd057f372628ad2a1256dbb5ff778418def62c7cb5b5 |
| SHA512 | ecf45d6e8d878bf51215745d5a1fd4ec1cebd8a4ab7e49679d7675e28328cc25756df9c9c7995aa84dc655a1c06f73cae31236a7fd5c2ea9138136f865506651 |
memory/2416-9332-0x0000000000400000-0x0000000000726000-memory.dmp
C:\Games\Half-Life\filesystem_stdio.dll
| MD5 | d9c4a776f838733c64331db0c87af459 |
| SHA1 | 480aedeccdf5845de06c7bf39f59783a8fe92b1a |
| SHA256 | 4f7dca9537cdf20b65da599ffc33ea69e8a132239cfb6a3d0b1b623359dcda85 |
| SHA512 | 5996c9a5cc5bc459b4dcdd7961690cbefdb741dd19338bfb4d1a864ce265e623f4e204dc6f1d4b0b84e66d0ae2f56b4f9bdb3cd7355f8a450703d0a2614d8d82 |
\Games\Half-Life\hw.dll
| MD5 | 9a3899df65315b494b562e44a23658d4 |
| SHA1 | 43082f5c19ec4467630221d05b7bbe0739557480 |
| SHA256 | 94f6f16538f6d49d5aae7c56fa903186259ad14808080844c8bdfe9178ca6e4e |
| SHA512 | e83f51b11c29767b57f8773de1b8a016f737c4c526aa2aac877cfabba10abd4615ef0c1a1272a9227f4d4ed42a2fd9e739be8dc4f6ad4e59424c181d4a30bc18 |
C:\Games\Half-Life\vgui.dll
| MD5 | d44ee82601ae62ede3e224269a0bbf53 |
| SHA1 | 2d00b1d5e052584c6c86ec08795d56d2181a91ee |
| SHA256 | 0d4472d21443de839080860a300cca6b9436508f329d33d712e5c9bc07d4d998 |
| SHA512 | 00dba1a1d88bbc8f77f86ac45068d3f071805a13bf30c7f5c3f3168d3b799e773a1a3a7decab7931a9104bfe91dc8d60cc54b9e82a12e01b29dfe13c4fd1d398 |
memory/2712-9362-0x00000000003E0000-0x00000000003F5000-memory.dmp
\Games\Half-Life\steam_api_c.dll
| MD5 | 24e0f2298014291decb033e2813a2c8a |
| SHA1 | 8b206a6e16b56f2a3ccdca2241cc3d4ec79c8011 |
| SHA256 | 7143e265f1371e3f2ac9ad2f041640a9e1574d91c1fc3914e6b28685f8c3606a |
| SHA512 | c84905a445e11855e50096afb849cc4d7bc2edaff110d5dcb6c4b18c9e8a45584d47f30b3fad906bfa9056cab8aa63ac21e585f1ce8127ee36cad6e7ea0c09d7 |
\??\c:\games\half-life\rev.ini
| MD5 | f74da92a5e22b9c567fea58198172e32 |
| SHA1 | df8ba8c9ff8ff33d5bea83f4205073e77c98dea3 |
| SHA256 | 851b48727735c2d08fe683482c69d835f7364b7eb0e2f3494dae552e08ca942f |
| SHA512 | 45c003531f2e5a01eedb2de0881bf2d0a3a831f64bad5d7239a02efcb26fc3ad5307ebabe4cabebd3cfb07109ce9e7d2d03b83db00166fc40a0ccb874e33e106 |
memory/2712-9350-0x0000000004920000-0x0000000005B4A000-memory.dmp
C:\Games\Half-Life\steam_appid.txt
| MD5 | d3d9446802a44259755d38e6d163e820 |
| SHA1 | b1d5781111d84f7b3fe45a0852e59758cd7a87e5 |
| SHA256 | 4a44dc15364204a80fe80e9039455cc1608281820fe2b24f1e5233ade6af1dd5 |
| SHA512 | 3c11e4f316c956a27655902dc1a19b925b8887d59eff791eea63edc8a05454ec594d5eb0f40ae151df87acd6e101761ecc5bb0d3b829bf3a85f5432493b22f37 |
memory/2712-9373-0x0000000000850000-0x000000000085F000-memory.dmp
\Games\Half-Life\01.dll
| MD5 | e1cd35bbc28f73b7481e8835ee0f0b13 |
| SHA1 | ef40d489c61b178b54f8116548662ee876e0133f |
| SHA256 | 6ecef9ef0f62491d595b2f32c69b53c53a1b3a8a7c9dea39d56c6861f5b93bdf |
| SHA512 | baf6f9063f95e6d699088ec4c0611825e030382ff913084feb7f913cc8f011d079b6c7143359391d8e30a5e26ac5a5358882b20e3ac31c5afdbe8867ff6f62a3 |
\Games\Half-Life\revSrvBrowser.dll
| MD5 | d3b8c3f08212fcb672819e8f2566e953 |
| SHA1 | e7ff79825a3be513f4f0299a4d26b0f15f1e543e |
| SHA256 | 2dd8d5d757230b6da93af852a97ff639881402e49b2a0d418d917c9348a74bed |
| SHA512 | f7d0c65420703aa84e22f7232246d0f116b6e8a550da575a1e8f68bf424bea025db9729f3d009aad687e23389e9831167814c418f713a963e3b5cc88d02ad8d3 |
\Games\Half-Life\steamclient.dll
| MD5 | ab3d3c7bc52a08ca365792d385d33577 |
| SHA1 | 3ff1182fa8d4275a79d0dc189582ae4eac4b17bc |
| SHA256 | 56058c77c14a25e31c79eb68aef1bc3d8ad95d461b659b161d667fe8f2f96f37 |
| SHA512 | c88871146467e8eec6d4acf84d332e8dd7ef1faaad0584a89929a242fea78e81db767f4eb420e2cf8f7c79ac901834217bb26f74fbf1b23bb137c13352df3602 |
\Games\Half-Life\Mss32.dll
| MD5 | f520185e02e8a5d85860669176bc4adc |
| SHA1 | cea8e9ff14994c89ad86cf891c89fea42a39250a |
| SHA256 | fe62f1eb6ba407df77619d16927abbefad3c726014f6bd1f8c37a7c3d6b781cc |
| SHA512 | b434e77a17cdac0109b698d0fccdd25dcdb15090a9fd0427504cc7f616673fa6c7307f07fb22cc2fc1e915887c0f9dc025aa8d38f51503f91df6a9ccee5ebe58 |
\Games\Half-Life\steam.dll
| MD5 | 2fc02d8b4137bff3430fc1555ee6d72c |
| SHA1 | 6029fbc64efb7a27d7439bb7bf885fd0cb66af10 |
| SHA256 | 5d4f80190a41cd98242bc8f4cb4eafa7a477b150206462e4b695078bf18f2b7e |
| SHA512 | a056779f6f15e076f44ee8d24c7baae42b403549cfac86247389dde3936b7671666a6daa08af1a26161c0e4866cf26e9e6de22f0504e5924f7948ecf30ed337c |
memory/2712-9354-0x00000000007A0000-0x00000000007F8000-memory.dmp
\??\c:\games\half-life\valve\resource\background\1920_1080_0_2.tga
| MD5 | 4b86ef35f640e94b4d6632f786473c0d |
| SHA1 | 3b705c969716f0d88cabd347732014f82102d8e7 |
| SHA256 | 8639363a5fa8e7ebe8beac3468447f9c563dd49ad5fd5a17eea36dcb894c12ba |
| SHA512 | 8981dd04a27ca65a9a61ebc2bf3374a92929d3e80d3dbac653fd81688e9351877146d29dd836d1652fe43b3754a1b474bfbb653f826803f97cf49412106d3217 |
\??\c:\games\half-life\valve\resource\background\1920_1080_0_1.tga
| MD5 | b21494be88836c0ed63ca2731f1abb83 |
| SHA1 | b12f38cc4bb5d9e6b90e3cdaecbcfeb86b6d9459 |
| SHA256 | e2bb756291a566e7d468c7034753d21513750ebd7c7b3f241c22f357ae7eb7c0 |
| SHA512 | 9510d6864bf28ae5e1912349958527634ec66139aefc07dd8691b82b4214d6baa0b3ca3bbb0e1ced52ea37f5addb8c8aded4ac5c1ebd77912499bc2758d71471 |
\??\c:\games\half-life\valve\resource\background\1920_1080_0_0.tga
| MD5 | 8acc843b635988c4877746cace359fe8 |
| SHA1 | e14e63ea19a811bb4b397c036013e1dfa680f24f |
| SHA256 | d8d6b0f48d6231c489ec54ae79232807b3a62d4dcebbe7cad8ef296c3b642f29 |
| SHA512 | 88bc060f251079a67268995b7f7a8450bf805cd7a7fc1af75984213a65a4710ccff7b2d97dcb544e57d03ece884673c72dbd49299185aa022e2a6b0440e92c5d |
\??\c:\games\half-life\valve\resource\BackgroundLoadingLayout.txt
| MD5 | 640c0f28dfabf13f6700adb0d718b849 |
| SHA1 | c66f5bf461b39c305199cf4885fe2edb0efdfe93 |
| SHA256 | aca1be03d2900538cdf6c21f5d7ffede73ad77f5065a9921b197317c21a62d50 |
| SHA512 | 3327780c6187800622dcfd389b71008089cd42ba594e3dbb747427699fc6a6f1d8c3ceb15db0438fc9d3392d67e06d11e6c0b55f3acb5a86646e687bd9966a33 |
\??\c:\games\half-life\valve\resource\background\1920_1080_3_0.tga
| MD5 | 703d595f57fc9a12445671655996927d |
| SHA1 | 25fe983687acb58cd5660ae24bf7071ff0e01d35 |
| SHA256 | 8877e81f13907a876d9fe206305e6f9cceaa3533da70b795a551b0871fa48e7c |
| SHA512 | d9b2b398468281b7ad081b26d13b9ab85a799c6e46f6be485c7fa89bce02147e4f0829f052c9cfa26326e2e1ca6f502c33a5baa766bcd41f3355275917704ec7 |
\??\c:\games\half-life\valve\resource\background\1920_1080_2_7.tga
| MD5 | 75f56e1a376c497ae064fd1090bfbe37 |
| SHA1 | fdb27f9b2c1be6c604224d6f2bd8b85415cd3107 |
| SHA256 | 386003029a32c9a73e2cf9f5b411957486c62d8563742b7e8b0fb44d1a57d43b |
| SHA512 | 4069cc211ce68c32184c5ff55c64aab17bf048cadda8fc600a3a75e83646ead5b22ccfffa490f49f617fd9da9c53e8e0985943ed9a06cada42f4cf01710b4291 |
\??\c:\games\half-life\valve\resource\background\1920_1080_2_6.tga
| MD5 | ab353d05cbc045f1fc56dd9c758dedad |
| SHA1 | 2f4ec284c74ca99012f3b205aa14f73abc471bd1 |
| SHA256 | 3ef38e42f7cc0a0d598baa7bc8b0a3c20058a71da6adc398bbc58aa017e5be2e |
| SHA512 | e6d4dce5fd96ca4ffadba4c59a468f7f2682ed9423dd0aa44cad6a0341dbcba5966b9848896ceb2634f52527fab9dfca57d020ce9bc86e796582a319fa54eede |
\??\c:\games\half-life\valve\resource\background\1920_1080_2_5.tga
| MD5 | 252fd18d41099e69c7aacc9c12382fec |
| SHA1 | a3a0b3e9505248cc9da2fc3f6ee1bddc15c96198 |
| SHA256 | 90724e72c52ac9daae5be2fb66dd84db4bdecaae1fd19d9eb9103b5d61c50ed9 |
| SHA512 | 3fe1c15fa23690cdd4556095e3d9091f8b1716638f9f03b63a525b16e796ee99fbfa59a4597cbe19001f855967564c5cd48ef95608ffd459453b9b793a947f7d |
\??\c:\games\half-life\valve\resource\background\1920_1080_2_4.tga
| MD5 | fa5ac73fd5c5f2abe5b78817275085bf |
| SHA1 | dfac56acf0995fbb21540bc167728472022c56e7 |
| SHA256 | 9c47ca1eb2125170e6bf80973c2ed29e39554cbf880a89d735bb541999c1472c |
| SHA512 | a39951315efe305ca1f4750861124f5ff969e173a5c2c5412308eea27532c16cf6cf6fd572e293061f23971eb8bb704fb5087becf1e56dbea512ca114ca95ee6 |
\??\c:\games\half-life\valve\resource\background\1920_1080_2_3.tga
| MD5 | 76b8cce2bf3945d45476ff73f0624f55 |
| SHA1 | e109b51fe052595d3658ec4a1651f37d4be9368c |
| SHA256 | b1a9b7a6ac1cb3d5e37da0f9612eadc4639f7f81043287a34be2ef125f294e5b |
| SHA512 | 815507831e27e7759116b8bfd601e36c10ab11c90856e1f31c225d29fed830c17b479530b085d8d9268ce16c706731444f240f7c0800b8e041bf93341157c7ad |
\??\c:\games\half-life\valve\resource\background\1920_1080_2_2.tga
| MD5 | 0b94a0443481ebc6f1e2f294ad3484d1 |
| SHA1 | 6cf7fc1a951c1f477d5fdd60b6ad96fb78aff568 |
| SHA256 | 7c4079e620432ad9b144609eeeb42b0874a3108a7d526e06318284cc4896bc89 |
| SHA512 | b453cc6c7363070bfd04af66b287df6e4ec9600b2db74465f484c4d4846fa9a3af31df6640571ebc28db85bdd377f1c7e10c49abc46cd9ada8d8ce69d3313f1d |
\??\c:\games\half-life\valve\resource\background\1920_1080_2_1.tga
| MD5 | 6c415e279b2f2fd41a76a8ec64f92caa |
| SHA1 | c26d646349b988803cb4f4422e81cd778578375e |
| SHA256 | 289c40a62c61f4564a64d4875f3579483a7e2d4d29f4389d53200831a00c7b81 |
| SHA512 | 53ef9fc01ba20adc51ba573478a1ce319ab675cda2e01f0abf33483b755276823270947966db7372f0fb352e099dab789b7a8600ea1237cc028b68ff5e979497 |
\??\c:\games\half-life\valve\resource\background\1920_1080_2_0.tga
| MD5 | 9aad306c013353e27a0b88b91f590062 |
| SHA1 | 0affb970c1563619a60f0b0910715cf605c78d80 |
| SHA256 | ffadfdfb90f5404a29387cdc3e88815eb7df6ab6f4aae6aac5ee98d7c76370c6 |
| SHA512 | d27cc2ef02027bf8c4da4772851acdc9f367b6c9ba304776eb44f93d37738c526c5e49d19a46d7e3a7651752e3bf9719500055f545925e70b055591626ffcbd9 |
\??\c:\games\half-life\valve\resource\background\1920_1080_1_7.tga
| MD5 | 795dedaed0a8846e9812688a9689bc4c |
| SHA1 | c20d7ec4bdfa1326bb7c966ac2413930e01ed9dd |
| SHA256 | e7de633c7c791fb6b4ce3ea7d667a7f93b2eb731c4f5ea66c3dc0fa817821552 |
| SHA512 | 2130ca86fbf747933e4887b05c04937663273842965398650657be1c771ceb446810e471590656b6818f3ffdd6a6fd751f9de763a7b83900b2ac21a600177a73 |
\??\c:\games\half-life\valve\resource\background\1920_1080_1_6.tga
| MD5 | e0a35087d7e67950457c4a64b954bb5b |
| SHA1 | 70ab41cbf702b7eea7ee952e66a1ceeac06da842 |
| SHA256 | 7f93a1d142167134bf631d8097441bd4f27fe937752ce84c502fe850d5befe7f |
| SHA512 | e9f044381d9e4e87d32a02aca7108adee4db7085856445bec92d0ccf23f3ad2b221901929158d11e139314e969c125825e1853577f0c66c0d185203d4244fc68 |
\??\c:\games\half-life\valve\resource\background\1920_1080_1_5.tga
| MD5 | 4003d9cd861d23cacb26203d79a8c29c |
| SHA1 | 5ab1ab0152a486b5fd78ab2f8704656872c94151 |
| SHA256 | cfdaf3ee6fd12a96872b86e24cee023242dac4a40068e4d67ce22026a31000af |
| SHA512 | 295effe07160f511a6b2bd43595c1c69dda475ea6ca659c5c98d514353cf5beb853b5795ede22d3c225a125dbdfca1e25abf0d8f34cdaf3e62bc9b2c9338a5bb |
\??\c:\games\half-life\valve\resource\background\1920_1080_1_4.tga
| MD5 | d4084ad6aeecf15fe16cd47858ffb62a |
| SHA1 | 984e9b11edf1007ecdf0307dd2e9e64a55fe2a7f |
| SHA256 | 5d83acd500d3cf0b490dd5a923c82289d0e537f272339e926139c49747f45370 |
| SHA512 | c9fcf1251a4e53c5afb9d76f3bca77367c943bdbca8662679a1ceaee43a93b8f699175e2068e756088b4219c07fa9300aa3be683dafe37929b4493c0dfc1fbba |
\??\c:\games\half-life\valve\resource\background\1920_1080_1_3.tga
| MD5 | 89a9b0714bf43ae1fd94d745036769d9 |
| SHA1 | a36120e85403c38273857021d0ffb6c19f2f3aa5 |
| SHA256 | b2bb7ea4da7abcbf9a15d8b852af5a64451838b1717f7e00d0a153102672c51f |
| SHA512 | e5018eebc1dfec160625142cc930980c794da523c1860ebb54260108aadbe9ccd36fcc805bdf12035a5fc63144643967827819b91d2a2303bddda48b4b6e4654 |
\??\c:\games\half-life\valve\resource\background\1920_1080_1_2.tga
| MD5 | f7f238f16ceada4863cd10017d4e6bd1 |
| SHA1 | 07f14ed12d9f955800584b1b951c8f90b23b3c0e |
| SHA256 | 1781990a9ad149de82231e23e8e0ed302908dba77f98c8d8ff28ba04f9303ace |
| SHA512 | f0fab7d42e7cbd0f2a32241a503ebe3923a4dae475e3435ab7985b1258452342c31c7938775d7513e1fb43384ca5f68bbaa4b19f0b6d84f0a6987021e7bfb8e1 |
\??\c:\games\half-life\valve\resource\background\1920_1080_1_1.tga
| MD5 | cdaa1764669a98fd28742d4eb2fe1472 |
| SHA1 | fb080e45b71975562986497a25eb974ac6e2a4ce |
| SHA256 | fa73241df91eddc2a97efe369a185a7d689f09fd7694b0f5ca9a07e66ee4e572 |
| SHA512 | 1428066ee34d02bcdfa90086222f14822813460fcd494b69c20e7afd6b38a3f113b471d2cce38d32ed48e20bfa65eb229226fbf3f7009bca24ff451539e93e14 |
\??\c:\games\half-life\valve\resource\background\1920_1080_1_0.tga
| MD5 | 0700d4cb8623d32f954ea33c6a813913 |
| SHA1 | 8923f77e159730e0bead5ffba2a2017d07526bfa |
| SHA256 | ea14de878057181e7a27641063de786d4dc7de1ccc87682f99edf5bd22a0c2a3 |
| SHA512 | 0ad5097e0ecbb84b3811eee1d139eac32b39ca6f245e0e9cf317c521848390f275d184a236e280f289c57365daeac36c5dca47948bc74c03b1bf39c230c75bdb |
\??\c:\games\half-life\valve\resource\background\1920_1080_0_7.tga
| MD5 | 2483539b49b6e2ce54894abb9b75b8f9 |
| SHA1 | 5b7e6ab1c024b2f9886f66d600374f6cecc6684b |
| SHA256 | 610e571337825a6ed71de8162ebf42d781752bb50f1f17f58949d735698e6c3e |
| SHA512 | 6401635132954fafbe7c0541ff739d7e89359b88709a5a588d805f8ee3fa19c03a11eb264817d28d6a18ddcc923bcb6d9aa90a910007cca940f7a2dab68e73f8 |
\??\c:\games\half-life\valve\resource\background\1920_1080_0_6.tga
| MD5 | ffc17eafbea041830111c481f82735f9 |
| SHA1 | bf915108ece098c02b6a192b3a7867a8d28111a4 |
| SHA256 | 42347cbe1f0736139637ac1117cda71bec03c49e8662fbcc75f52fcdca167fa3 |
| SHA512 | 9dd7e54dcd7b21fc9ca8c8f1b89ab6021ed9a427bcede4a42f61576bebabfe3599086bc2bf262526f14d848faa3be62e5b5260d835cc0da249f6e03505e1506a |
\??\c:\games\half-life\valve\resource\background\1920_1080_0_5.tga
| MD5 | ae7d93521dd1adef4d34e7be53fe9d8c |
| SHA1 | b56a0728dd5b4c2783b18281e4b246bd1929bc75 |
| SHA256 | b83de35bee92a355c553d3166672638395000e9c9b41194410765f751cb24fac |
| SHA512 | 03ba049d36979f419260ba4776a28e1ae48c5f429eaabe52be849e4e5bd7ea6ef178130bbe690d68e3300d92c88f9d275f762369e3c9c52dfa27964b3884629f |
\??\c:\games\half-life\valve\resource\background\1920_1080_0_4.tga
| MD5 | 183449ea5e6cbcfc27533016d0e9f646 |
| SHA1 | 35d67e706520f06b1bc1e6f1ce90d2f57a1bfa27 |
| SHA256 | 9970701f096da3e91401d40563ab8083461aa6884dbea5e09bbb90598f64bdc9 |
| SHA512 | e9d6a2500eff05a3bbcad2e30fcf2fbdfd0c6fa17d355056107af7a9da14e3458898eb5421d3824cae03e151d8e108158d0c1f0c1dedfdb60cddb7bc48dc11a6 |
\??\c:\games\half-life\valve\resource\background\1920_1080_0_3.tga
| MD5 | 9c0398e86a21f132ae8e8e5caebcddf9 |
| SHA1 | 6e254b972506b5c192e3f8fe5e8511cd2d5b5022 |
| SHA256 | ad3c948e481216f8e70c5f685b7a4b320e0156e23cdf337c77997debcf55d7ab |
| SHA512 | 9b966138ee0a5e3ae4df52fae861fba33c0424d26116d3801fc490105afd094c18a9958756474dc847d2233459636fb47f91d9144ccddc7da00350fd8ef9ee75 |
\??\c:\games\half-life\valve\resource\background\1920_1080_3_7.tga
| MD5 | 3e9cb374a4158b549f3c21fe7f6fbc9c |
| SHA1 | b19dfa563af539cf1ff54a0a744cb8972f3c9b4d |
| SHA256 | a25b62d51bd0ad12f43071401255be52625b1abf0f4d8e900ae7bf61031653b4 |
| SHA512 | 0551a9b438a763b8d509f8c957acc4373e8109b471c91a5dff2c5cd0e26d28c4cd631abe507d4847d3ee5e8175346f9283a32d373ca2e9979b168ecb289b8d1a |
\??\c:\games\half-life\valve\resource\background\1920_1080_3_6.tga
| MD5 | 89836d5fa424c3a39bca3e181c47785d |
| SHA1 | e7f6d8d9fb217cfcd68f9104d9cb15e14f10c520 |
| SHA256 | 1013a579928384dbf605e1b589518461e43a45cd05b5a284692e5a64b6d948ae |
| SHA512 | 4a8475ad65b7d9169eff526b71570da905577c83df29495a7336cad435823000db250811614c0498285c194759fdb7498040679d4da3fbf8890d90bc35e3cb1e |
\??\c:\games\half-life\valve\resource\background\1920_1080_3_5.tga
| MD5 | e189e20af8275369ec761126f54f4e8a |
| SHA1 | e5d35d6859a530c7cf28ce548e1a7abe408daa58 |
| SHA256 | 8e490b666bade11fe62a27e901294be57f27d57494f91264f7173415fe3b204d |
| SHA512 | 9c69448f87eafd36c0707e6c7bee9bdb061645c3549628da4057a61851f8a4ad52c5edd4864d46f47ddd629a8bf3b15ac5f137d432dc86323d6f676a46e260f0 |
\??\c:\games\half-life\valve\resource\background\1920_1080_3_4.tga
| MD5 | b5f2badcec6d3fba16151e595a835dc4 |
| SHA1 | a00168ee532c069b23c9e015b21cc36aa10a7352 |
| SHA256 | ca18bf02f96634d77839bddb2c3f7b501688404dfafce59dc7542a721fb2ed40 |
| SHA512 | fe675e73aac15128862ecfc0bcbe962c4bee8bbb6cf24a2f5458821299fc14957f05f6985a6eeb581bf0f4ffae91481736081fe590a7163d6f08f2d3af223cef |
\??\c:\games\half-life\valve\resource\background\1920_1080_3_3.tga
| MD5 | 18150bdcb6803d5860310249ab914230 |
| SHA1 | 427dea7ad64e753c7490112a1728b584bd055524 |
| SHA256 | 6c8e50a469f2858d70486ae5017097f3ebde8c30f069f33ea052dd29762dc650 |
| SHA512 | e7186c74a799eb306295b803ef3cbee58f26fb4f9ce5ac7d0b140077f4e7577841d68d2db2d4dfb0e23936d5b5e3d01cf4187f7af5d6b59e648f720c1125586f |
\??\c:\games\half-life\valve\resource\background\1920_1080_3_2.tga
| MD5 | 2c5439ebcd1f1e1bf3754ab0a84417c8 |
| SHA1 | 3b8711767b709f9caf6efdd430eb420731e35d1b |
| SHA256 | 13ce4a712d1dfc0ae9f0b127db25c56201a84a405660d792cd0d6e93935130e5 |
| SHA512 | 954289fec58b5a490031a3a228528aab87172732b7adf20006df54494c24ea2394fee8ca829198655b36cebc9f8176c5677e4a069e853b6bbc30550a6e351931 |
\??\c:\games\half-life\valve\resource\background\1920_1080_3_1.tga
| MD5 | 8ba6cce48f7f05b77329363be3384fd6 |
| SHA1 | e702e8a1b5adca9023eee0ce05a650dfc5e96cf0 |
| SHA256 | d8ccd9c8bd99cc6258f09ae6791b0ba840628e6b49194da0710a4494d231fabd |
| SHA512 | 845c0830eaf4b1854a657e85023baa07044f5650eae30e9ced35e0f41a475ccddee6aea177d4c8406d0a8ce20480c4e223293314f576b6339c325b6b3993c37c |
memory/2416-9413-0x0000000000400000-0x0000000000726000-memory.dmp
memory/2268-9414-0x0000000000400000-0x00000000004EB000-memory.dmp
memory/2712-9415-0x0000000006120000-0x0000000006C73000-memory.dmp
memory/2712-9417-0x0000000001320000-0x0000000001378000-memory.dmp
memory/2712-9421-0x0000000000410000-0x000000000041F000-memory.dmp
memory/2712-9424-0x00000000012B0000-0x00000000012C5000-memory.dmp
memory/2712-9427-0x000000000CC40000-0x000000000CD24000-memory.dmp
memory/2712-9426-0x00000000013A0000-0x00000000013E0000-memory.dmp
memory/2712-9430-0x0000000005B20000-0x0000000005B3C000-memory.dmp
memory/2712-9429-0x0000000005750000-0x000000000576F000-memory.dmp
memory/2712-9435-0x0000000005BD0000-0x0000000005BDF000-memory.dmp
memory/2712-9437-0x000000000E030000-0x000000000E078000-memory.dmp
memory/2712-9436-0x0000000006D80000-0x0000000006D9E000-memory.dmp
C:\Games\Half-Life\platform\config\ServerBrowser.vdf
| MD5 | 261891b787b00c5df970e27a5f1ffcd6 |
| SHA1 | ed8d552ad56cb6b1411ddcf436f0c9acf66b823c |
| SHA256 | 5e75d554b0ee1464d23d0e145afe7151e97cfeb398d89829ea91e9f5503bc605 |
| SHA512 | bba969355ae2d7a0dcde5032701a6bdc25aa37c212097e1845217b8586101ac59b9497addeb4a6e166afc703ffea24c2e58aac1103e788d02c3b4febec2af053 |
memory/2712-9447-0x000000000CD40000-0x000000000CD55000-memory.dmp
memory/2712-9445-0x000000000EA80000-0x000000000EAD9000-memory.dmp
memory/2712-9443-0x000000000E910000-0x000000000E96A000-memory.dmp
memory/2712-9441-0x000000000E880000-0x000000000E90D000-memory.dmp
C:\Games\Half-Life\config\rev_MasterServers.vdf
| MD5 | 225ff78db04fa5bb0c3fa44bab0227e7 |
| SHA1 | 27860b17bbe34771ec755048bf2a97fdb0f88a02 |
| SHA256 | 9e37daff71ee33d3c0cbedbcec790340a0961df65ef18cb70fe75e39f18ba9f5 |
| SHA512 | 4049d85134e8fa87e602ff4da38157ee4135d60904647969efa0e9c405bde4f1ca308323a9618c7a80d82fec080a1182edabf2b8269e184527722e5f2b491e9a |
memory/2712-9452-0x0000000005B20000-0x0000000005B3C000-memory.dmp
memory/2712-9451-0x0000000005750000-0x000000000576F000-memory.dmp
memory/2712-9460-0x000000000DF30000-0x000000000DF53000-memory.dmp
memory/2712-9462-0x0000000005B20000-0x0000000005B3C000-memory.dmp
Analysis: behavioral2
Detonation Overview
Submitted
2024-10-16 00:50
Reported
2024-10-16 00:54
Platform
win10v2004-20241007-en
Max time kernel
128s
Max time network
130s
Command Line
Signatures
Executes dropped EXE
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\is-VOCCM.tmp\half_life.tmp | N/A |
| N/A | N/A | C:\Games\Half-Life\hl.exe | N/A |
Loads dropped DLL
Checks installed software on the system
Enumerates connected drives
| Description | Indicator | Process | Target |
| File opened (read-only) | \??\D: | C:\Games\Half-Life\hl.exe | N/A |
Writes to the Master Boot Record (MBR)
| Description | Indicator | Process | Target |
| File opened for modification | \??\PhysicalDrive0 | C:\Games\Half-Life\hl.exe | N/A |
Enumerates physical storage devices
System Location Discovery: System Language Discovery
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | C:\Games\Half-Life\hl.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | C:\Users\Admin\AppData\Local\Temp\half_life.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | C:\Users\Admin\AppData\Local\Temp\is-VOCCM.tmp\half_life.tmp | N/A |
Script User-Agent
| Description | Indicator | Process | Target |
| HTTP User-Agent header | Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) | N/A | N/A |
Suspicious behavior: EnumeratesProcesses
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\is-VOCCM.tmp\half_life.tmp | N/A |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\is-VOCCM.tmp\half_life.tmp | N/A |
| N/A | N/A | C:\Games\Half-Life\hl.exe | N/A |
| N/A | N/A | C:\Games\Half-Life\hl.exe | N/A |
| N/A | N/A | C:\Games\Half-Life\hl.exe | N/A |
| N/A | N/A | C:\Games\Half-Life\hl.exe | N/A |
| N/A | N/A | C:\Games\Half-Life\hl.exe | N/A |
| N/A | N/A | C:\Games\Half-Life\hl.exe | N/A |
Suspicious behavior: GetForegroundWindowSpam
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Games\Half-Life\hl.exe | N/A |
Suspicious use of AdjustPrivilegeToken
| Description | Indicator | Process | Target |
| Token: 33 | N/A | C:\Windows\system32\AUDIODG.EXE | N/A |
| Token: SeIncBasePriorityPrivilege | N/A | C:\Windows\system32\AUDIODG.EXE | N/A |
Suspicious use of FindShellTrayWindow
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\is-VOCCM.tmp\half_life.tmp | N/A |
Suspicious use of SetWindowsHookEx
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Games\Half-Life\hl.exe | N/A |
Suspicious use of WriteProcessMemory
| Description | Indicator | Process | Target |
| PID 3336 wrote to memory of 5040 | N/A | C:\Users\Admin\AppData\Local\Temp\half_life.exe | C:\Users\Admin\AppData\Local\Temp\is-VOCCM.tmp\half_life.tmp |
| PID 3336 wrote to memory of 5040 | N/A | C:\Users\Admin\AppData\Local\Temp\half_life.exe | C:\Users\Admin\AppData\Local\Temp\is-VOCCM.tmp\half_life.tmp |
| PID 3336 wrote to memory of 5040 | N/A | C:\Users\Admin\AppData\Local\Temp\half_life.exe | C:\Users\Admin\AppData\Local\Temp\is-VOCCM.tmp\half_life.tmp |
| PID 5040 wrote to memory of 1976 | N/A | C:\Users\Admin\AppData\Local\Temp\is-VOCCM.tmp\half_life.tmp | C:\Games\Half-Life\hl.exe |
| PID 5040 wrote to memory of 1976 | N/A | C:\Users\Admin\AppData\Local\Temp\is-VOCCM.tmp\half_life.tmp | C:\Games\Half-Life\hl.exe |
| PID 5040 wrote to memory of 1976 | N/A | C:\Users\Admin\AppData\Local\Temp\is-VOCCM.tmp\half_life.tmp | C:\Games\Half-Life\hl.exe |
Processes
C:\Users\Admin\AppData\Local\Temp\half_life.exe
"C:\Users\Admin\AppData\Local\Temp\half_life.exe"
C:\Users\Admin\AppData\Local\Temp\is-VOCCM.tmp\half_life.tmp
"C:\Users\Admin\AppData\Local\Temp\is-VOCCM.tmp\half_life.tmp" /SL5="$E004E,220853976,908800,C:\Users\Admin\AppData\Local\Temp\half_life.exe"
C:\Games\Half-Life\hl.exe
"C:\Games\Half-Life\hl.exe" -game valve
C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x424 0x514
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 13.86.106.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 76.32.126.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 97.17.167.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 197.87.175.4.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 241.42.69.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 172.210.232.199.in-addr.arpa | udp |
| US | 8.8.8.8:53 | count.ms-csnv.ru | udp |
| DE | 141.95.54.113:80 | count.ms-csnv.ru | tcp |
| US | 8.8.8.8:53 | 113.54.95.141.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 29.243.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | tse1.mm.bing.net | udp |
| US | 150.171.27.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.27.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.27.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.27.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.27.10:443 | tse1.mm.bing.net | tcp |
| US | 8.8.8.8:53 | 43.58.199.20.in-addr.arpa | udp |
Files
memory/3336-0-0x0000000000400000-0x00000000004EB000-memory.dmp
memory/3336-2-0x0000000000401000-0x00000000004B7000-memory.dmp
C:\Users\Admin\AppData\Local\Temp\is-VOCCM.tmp\half_life.tmp
| MD5 | 33cc6db73b7274bd553c3e95e2435a14 |
| SHA1 | 83def29412f76edd611dca4e66e0eaa0a39b180e |
| SHA256 | 5542c67c3224578df33c5e4cec79150489455742f4b66deb170eda9c6f66fc7b |
| SHA512 | 62d84f8376378314fbe88fc298e7a866e3ab0da60162a6eb1eac3d55d41fdb79ea1c77dcb7b841ab18f338a27e59eb5cb6268319bc63cab58594318f766a350a |
memory/5040-6-0x0000000000400000-0x0000000000726000-memory.dmp
C:\Users\Admin\AppData\Local\Temp\is-DOH6M.tmp\idp.dll
| MD5 | 55c310c0319260d798757557ab3bf636 |
| SHA1 | 0892eb7ed31d8bb20a56c6835990749011a2d8de |
| SHA256 | 54e7e0ad32a22b775131a6288f083ed3286a9a436941377fc20f85dd9ad983ed |
| SHA512 | e0082109737097658677d7963cbf28d412dca3fa8f5812c2567e53849336ce45ebae2c0430df74bfe16c0f3eebb46961bc1a10f32ca7947692a900162128ae57 |
memory/3336-12-0x0000000000400000-0x00000000004EB000-memory.dmp
memory/5040-13-0x0000000000400000-0x0000000000726000-memory.dmp
memory/5040-15-0x0000000000400000-0x0000000000726000-memory.dmp
memory/5040-17-0x0000000000400000-0x0000000000726000-memory.dmp
C:\Games\Half-Life\platform\Friends\is-F18AR.tmp
| MD5 | 08091f474e938ea73aac90c9773a6013 |
| SHA1 | c4ff881bf1c3f0f0db3bd58f47d666df6a0ff885 |
| SHA256 | 50443605d94d7bedbb03c2200d7cb7e98b0eaa91e3489cd7d77f69a407b73e0a |
| SHA512 | 7f569511d12a36fdcf6193aa52a2845b53f6d2a2e075426708f542f0012360a48cdc520ec6b26b0d1dd9f86c0ba41c8205483d340963aa0acfbaaca03a7ee0f5 |
C:\Games\Half-Life\platform\Steam\cached\is-21PKK.tmp
| MD5 | 18581b2844d1b35bd0dc170f8557bc42 |
| SHA1 | 05e8657b8f73f2608aeb07edd8f469f3639d29b7 |
| SHA256 | 7f00fc14809350a11d04cb655e996beb4d829ae7c2d7ca320968661961e18fd2 |
| SHA512 | cb2be96b5ae7cc5c593f954092ec663b8ff41e06f2597b24bbec8883a025baa75bbc6c15cb24fa29389e05b7bdb0d017bb47ef747a524eea53b77fb4a479087a |
C:\Games\Half-Life\platform\Steam\drivercheck\260\is-GOL2L.tmp
| MD5 | f4eb527c235bb256418442880e445f39 |
| SHA1 | ead5903daaf37141965be8a41a535a82e7bb791c |
| SHA256 | 9b93979bfb94347d3157cdca038d1a6addc8564a954bcc564adef6a1c86ebc22 |
| SHA512 | 59a32b9a93afc69137ff4ce1ce0569eb46c0e7512afc2435cf94e94b2fbbfae320059779901c703374b018da7297caf44bf6b5a42fe16154c01270bfdbc24a9f |
C:\Games\Half-Life\platform\Steam\drivercheck\260\is-2JKOD.tmp
| MD5 | 158ac9a69c9a06d9bc2fb432d5b63f38 |
| SHA1 | c55441b50d6e5bbf1b619ce7c84789439c545110 |
| SHA256 | ddbef05c1fa1eb6c13538306f2d28bffb61dc57e7a9e3d9e25b98dec576ca8a6 |
| SHA512 | c3e6fbcd0338c1d04fada0c66123f1c21663f25c9f66161f18817bb6c10f9a79034ab3b0e458e1dda61bc915e3f76eb88e1238b04468a277ab16bd0f0911a1e5 |
C:\Games\Half-Life\platform\Steam\games\is-0TDSG.tmp
| MD5 | 200380f4259d09ec3f433e421cd5a55f |
| SHA1 | 9afc9cf71fd5949198b77bf7ec396a89058d6dee |
| SHA256 | e136089e82c2d98a7283b55dcd93c5332a332149e7119d015bb7c353435ea9c6 |
| SHA512 | c77a433055077420eae1fcae302fc0738f592b8081ba2bdcae2015a3296672f1df2518934821d424e3a8c9535bf1891cbe7394c16ac68520099a3d7dfb4c50cf |
C:\Games\Half-Life\valve\is-USD6U.tmp
| MD5 | f02c1d45a1a86f5d60ce9e310e24d144 |
| SHA1 | d991f95d96e1c76d2acb944bb09447628cd96caa |
| SHA256 | 01491c012c29f4706f0cc8f1117eb0f882b54f720bfbf320a3271ffac6c929dc |
| SHA512 | 88dafe4039264818c4193f563376db890ecea2f8f67df7902dd76aacd08be4cb47197257d02217eeec1a81295615b30b89e91d097837193a8fb64e72d03d7334 |
C:\Games\Half-Life\valve\events\is-B2BO5.tmp
| MD5 | 8cfcc0a84d0b6b51995ce17bc9f194f2 |
| SHA1 | f86d5edad7e5a3e2d994517da5ebd7d748a8c666 |
| SHA256 | 2c7d43b8dc6ea01a32acddb7798b9dabf0ec44c7a6dcf75160539a7fe53e029d |
| SHA512 | 5f75243ff3e13b557859d89593432f5e29f014f2bc527bee363be3369e884feccb15ee593094c7eb0f8e4786b6a352cdf9fc6039636782cd23712cadc114ee1b |
memory/5040-1668-0x0000000000400000-0x0000000000726000-memory.dmp
C:\Games\Half-Life\valve\gfx\env\is-L4H2L.tmp
| MD5 | bf92d45fcfe71458fe5b3d7258d1ee03 |
| SHA1 | e701671f4ef94b77a008f36287a51709a00daeb8 |
| SHA256 | 6e84f9cb10fac95f23b6a49fd0e6282fcb523cfe1256c200b25c088b4a4bb726 |
| SHA512 | 2b9f1a4b9da320ed2366c16d91038748b1d9a2ab48deb1c939da639e9acc2b252592e9cd6a65d60ff967b2546af6f79e18ce92b842df132192d9377f6f9b896d |
C:\Games\Half-Life\valve\gfx\vgui\is-PGF22.tmp
| MD5 | 6deae390d10e5faef07cb793138a4ea2 |
| SHA1 | 0e1b89e5e5e61f5e8959d3d6e17fc874f3d14a8e |
| SHA256 | 1efacc8931f4e6558fc9f854527e25e004d8c3fd90f1f5209273236924a9241b |
| SHA512 | 70c1ab592e46440f759ffdaa2ba1bbb9206212670762fbdbeb04f85da2304120e0a052ea4164fc0e0326e82c013924d0db0ea27fc21041489fc6d6d69b69d93a |
C:\Games\Half-Life\valve\gfx\vgui\is-E0P4D.tmp
| MD5 | 1926ecbcf1b403f0c4a30426ea74276c |
| SHA1 | 24d8e0d5f3477f85e76985a0fc579e392482c402 |
| SHA256 | 99986396ea8ebd9ab4eb1221b52db2a8a024e67c748e0b8080d8dad24e4e9cd2 |
| SHA512 | 8e944a0304620fb7428acbe883049167c0bc1596d8f294b1ebcb383899e6881c5e54221ea5a60fa7c14210e5cfd91831a8481020608c22747f43c2f9d7e45060 |
C:\Games\Half-Life\valve\gfx\vgui\fonts\is-EGCNQ.tmp
| MD5 | bca82506d597eed9b5507ff7ba16567b |
| SHA1 | 55ad94cc92b95ce8e2adf62df94a6a8244980e8f |
| SHA256 | 4eb392f4136f1a4b255ab26772947e62b80615ca8b1ccea93563c3f33539a8bd |
| SHA512 | e817036968d39d3f86c2f6f241c6f80756bf139a700adf018feb870542331b230cad6369652eb2a26b26e94b14c3e27dc0112d3ccd1c512f73e8b056ddeb12fc |
C:\Games\Half-Life\valve\gfx\vgui\fonts\is-FBLTC.tmp
| MD5 | 46f3cc3d5ca0f0e80d30ec38a3ed9702 |
| SHA1 | 2b7902e73522c60bb4e5a6d7905f91967ec54b46 |
| SHA256 | 824ad8824e4d05319556d9c08dd0d4c90fecd6150a0dbcae8c946740cb4e2c56 |
| SHA512 | 9f85b11a9479af47963155fc823a9390794b3db05fb50011efaa87e1adcf772d18fdc1bd57f3ca556ded84d5fc5671236ee0705043771c83663612cd2b0f16d3 |
C:\Games\Half-Life\valve\gfx\vgui\fonts\is-ODRK7.tmp
| MD5 | 910e7f920f59348e20f787d9240fe2a7 |
| SHA1 | 9f85998b0a73efbf34b2e732942a0caada57925d |
| SHA256 | 93eba9e5ba94654d73d76944cb9860e4fe8db92a6c734fcbc57864cb766caf1d |
| SHA512 | a19fad5b08875df9f16993d48562cc2cb4bf5d918b5f102b0439c6d6d6fdb862783762d586393b0e0b6c324de3c38c27fbf09d4b48c55affd44aad2c1ee9726d |
C:\Games\Half-Life\valve\gfx\vgui\fonts\is-85VRD.tmp
| MD5 | d3d6c70dd23590745a0f691c28f88848 |
| SHA1 | b46b4a8427c59e590f8adace2ab659da2f4f4e9d |
| SHA256 | f472485bdddb0f7acdce7ba6dfb1520dfdab6b2e870b37f77f61714533c5fe79 |
| SHA512 | 06a400b5462c9a307bb281cf725358a8bc64a27e34b5f6b95748d3006703e66c4a756ad86fc5e2de9c2a2eba534921234fc2ec422b6107ef7264f7344a258a92 |
C:\Games\Half-Life\valve\gfx\vgui\fonts\is-VES2K.tmp
| MD5 | 07306c3fa68e4b5bb4fd4da515adfdc1 |
| SHA1 | ae0203c50a3ef107992d61f4b135efd6fdc809ba |
| SHA256 | fad8e72511e03ea0b215e491da1ada731d7474a03d43c26a2f858c8fcee9beac |
| SHA512 | d6d1b8f13d9263932f8757fed790dcbcdca681ca51a7581ca552631409b8c65de212436f8e161c60463edf8589067118d15537789e8aead85eeb156af5c29a7a |
C:\Games\Half-Life\valve\gfx\vgui\fonts\is-FPQFI.tmp
| MD5 | ebc1b6a271bf99cdadc78dae5e9a29c4 |
| SHA1 | afddb10163d0cacf30f7a2e9f9e4f534c8425586 |
| SHA256 | 3988ddbea3e6fd927933a698d28d66572d51e59938ea16624f644afe2021818d |
| SHA512 | ccbc9f59f59c46187954d5e8a70513542471a40e8653f59c8d58279777c9c378f2e1891c4949d8d5b104117410e991f756d768932fd5353dfcbdca3c37d6ac1a |
C:\Games\Half-Life\valve\gfx\vgui\fonts\is-E129M.tmp
| MD5 | 8148e0f0a6679ced3ca04fd6c258d478 |
| SHA1 | 9afc1daad5e004bb9481147ec5fac15693897f2c |
| SHA256 | 60946960e36a56fe17b02ab7c618e3ca0d61b7412acbb9967271ff309a76b5e0 |
| SHA512 | 918c03891b46c645ff9b1a497a77bfee752befdbc2e82b882ca3d665dea21d3de1b112848ebb9b996b201c14bc14a70231838eece3df04a431becd0852417bed |
C:\Games\Half-Life\valve\gfx\vgui\fonts\is-1NMTF.tmp
| MD5 | ec8766ea06b999dab276c2ed85397067 |
| SHA1 | d043859519210810ab69bc4172406511b0391728 |
| SHA256 | dff807e488eee92c3f841de1f330bac00b42c36e34320e6335ed6e5d926243a8 |
| SHA512 | 5b69d36450816306ba280d2690c65f7478b84a4b1d8eba37b8a4baf8631d767859599e1b20bcabb930dbb7ebbfd07d89bb3336c9999809c50e20fc0661cfb77c |
memory/5040-2946-0x0000000000400000-0x0000000000726000-memory.dmp
C:\Games\Half-Life\valve\models\is-1C3HQ.tmp
| MD5 | 5f394d005ec12f63949d0c6a62c1b7b3 |
| SHA1 | 957d1d0598c7bd0079db345db2006d8e4b755096 |
| SHA256 | 47b5e88f5cc25627e8dc76b85eb6ad64d8613b00838d0cca6a85f118af81c7b0 |
| SHA512 | c51142a1e7902d720154378a7b8e01808fb4683e5a12c77516fa474b4eb05c0d2cc37aaf1b3b0a33757aecdc9ff8008333df66ed0e254b01cb5640b8646e6fb7 |
C:\Games\Half-Life\valve\models\is-JGJK1.tmp
| MD5 | ab9f1bf1f7d14ca0032df954e1dd5212 |
| SHA1 | d51ab73cb33e1737b86ea0bf6db28aa895bb86ab |
| SHA256 | 748e6fb4465843238519d56774643c2d4fb3f77131ba49ee9ca2d700c42acb70 |
| SHA512 | c5dcb61363551755beaa4732a21ec870c9b077a44eb0e810029f056a7c89b7be4d6e2d4e48b860a4eedc707d057ba55b2b45c238cf4a99ec167a1c07686710bb |
C:\Games\Half-Life\valve\sound\fvox\is-3IQ6S.tmp
| MD5 | 299c3e28a49757ecab2e84ca9b220e62 |
| SHA1 | 850cbc182e7000b6caa8b6af9986161a2554dbce |
| SHA256 | 0ffbcdb3466691fbc1043c69abe50434df646f997c52856a509de43cae501eee |
| SHA512 | 2caa0f84686df85905b355107ce2d50c1b8b6debadc50d49327330855e3ed2cea05768c1394cec746ddf90f7087a08ff98eda51272f89d7450923a5e41a13bf8 |
C:\Games\Half-Life\valve\sound\plats\is-ELKIF.tmp
| MD5 | 811989e09124f54cb27fe6154b0f1018 |
| SHA1 | 90c22fc3b248588e2d9759e6ef395303a86b7b60 |
| SHA256 | 5271b9aa2961809f47fadecb693be2eebde2dbed62fbc4f5f4889fcd8c4a65f8 |
| SHA512 | 560d26fdbec34ab687e40b8be6144b0f586449bd3a0eaf286ab972ad60b1eb1fe002649daacad36039a298ad24aae96e3531404ac2d0d7b0b47e194b8169e18b |
memory/5040-8815-0x0000000000400000-0x0000000000726000-memory.dmp
C:\Games\Half-Life\valve\sprites\is-KJF5U.tmp
| MD5 | 30c0c19f5c5226225ac3959dfe1f1428 |
| SHA1 | 5c7be5173586da26dd730a790a151b8a16611106 |
| SHA256 | 5603d52c5f089950f372e2b00845738746abebaa2796b0b3e2f6d8d2f4111760 |
| SHA512 | c71799d84798c2e2a82dbde7ffa5a2c8698eaac615e77d337de7dafc9239c4b59bc2794b2ccd5740d3e19957549257bcd468660d0696f09fdca37485150c233b |
C:\Games\Half-Life\hl.exe
| MD5 | 2098ccf443433129b556c2849fe99e26 |
| SHA1 | 074ddbaff48c88b3b5c8f881c35d2be2bb19a249 |
| SHA256 | 4a899986a879ffd4b7e2d819c49b47cb362d849e86917da1f1931ef476b414af |
| SHA512 | fb4dcfd5371c89af775367d9f2ba72bfd42f8b483ba31b0e839b66f065e5e7a1ec34bf4504aaad17e38502be6917f0b3e415add81dc84fc6942996c0a8f95a10 |
C:\Games\Half-Life\filesystem_stdio.dll
| MD5 | d9c4a776f838733c64331db0c87af459 |
| SHA1 | 480aedeccdf5845de06c7bf39f59783a8fe92b1a |
| SHA256 | 4f7dca9537cdf20b65da599ffc33ea69e8a132239cfb6a3d0b1b623359dcda85 |
| SHA512 | 5996c9a5cc5bc459b4dcdd7961690cbefdb741dd19338bfb4d1a864ce265e623f4e204dc6f1d4b0b84e66d0ae2f56b4f9bdb3cd7355f8a450703d0a2614d8d82 |
C:\Games\Half-Life\hw.dll
| MD5 | 9a3899df65315b494b562e44a23658d4 |
| SHA1 | 43082f5c19ec4467630221d05b7bbe0739557480 |
| SHA256 | 94f6f16538f6d49d5aae7c56fa903186259ad14808080844c8bdfe9178ca6e4e |
| SHA512 | e83f51b11c29767b57f8773de1b8a016f737c4c526aa2aac877cfabba10abd4615ef0c1a1272a9227f4d4ed42a2fd9e739be8dc4f6ad4e59424c181d4a30bc18 |
memory/1976-9332-0x0000000004930000-0x0000000005B5A000-memory.dmp
memory/1976-9341-0x0000000001100000-0x0000000001158000-memory.dmp
C:\Games\Half-Life\steam.dll
| MD5 | 2fc02d8b4137bff3430fc1555ee6d72c |
| SHA1 | 6029fbc64efb7a27d7439bb7bf885fd0cb66af10 |
| SHA256 | 5d4f80190a41cd98242bc8f4cb4eafa7a477b150206462e4b695078bf18f2b7e |
| SHA512 | a056779f6f15e076f44ee8d24c7baae42b403549cfac86247389dde3936b7671666a6daa08af1a26161c0e4866cf26e9e6de22f0504e5924f7948ecf30ed337c |
memory/1976-9346-0x00000000004B0000-0x00000000004C5000-memory.dmp
memory/1976-9352-0x0000000000540000-0x000000000054F000-memory.dmp
C:\Games\Half-Life\steam_appid.txt
| MD5 | d3d9446802a44259755d38e6d163e820 |
| SHA1 | b1d5781111d84f7b3fe45a0852e59758cd7a87e5 |
| SHA256 | 4a44dc15364204a80fe80e9039455cc1608281820fe2b24f1e5233ade6af1dd5 |
| SHA512 | 3c11e4f316c956a27655902dc1a19b925b8887d59eff791eea63edc8a05454ec594d5eb0f40ae151df87acd6e101761ecc5bb0d3b829bf3a85f5432493b22f37 |
memory/1976-9364-0x0000000005BE0000-0x0000000005BEF000-memory.dmp
C:\Games\Half-Life\01.dll
| MD5 | e1cd35bbc28f73b7481e8835ee0f0b13 |
| SHA1 | ef40d489c61b178b54f8116548662ee876e0133f |
| SHA256 | 6ecef9ef0f62491d595b2f32c69b53c53a1b3a8a7c9dea39d56c6861f5b93bdf |
| SHA512 | baf6f9063f95e6d699088ec4c0611825e030382ff913084feb7f913cc8f011d079b6c7143359391d8e30a5e26ac5a5358882b20e3ac31c5afdbe8867ff6f62a3 |
C:\Games\Half-Life\revSrvBrowser.dll
| MD5 | d3b8c3f08212fcb672819e8f2566e953 |
| SHA1 | e7ff79825a3be513f4f0299a4d26b0f15f1e543e |
| SHA256 | 2dd8d5d757230b6da93af852a97ff639881402e49b2a0d418d917c9348a74bed |
| SHA512 | f7d0c65420703aa84e22f7232246d0f116b6e8a550da575a1e8f68bf424bea025db9729f3d009aad687e23389e9831167814c418f713a963e3b5cc88d02ad8d3 |
C:\Games\Half-Life\steamclient.dll
| MD5 | ab3d3c7bc52a08ca365792d385d33577 |
| SHA1 | 3ff1182fa8d4275a79d0dc189582ae4eac4b17bc |
| SHA256 | 56058c77c14a25e31c79eb68aef1bc3d8ad95d461b659b161d667fe8f2f96f37 |
| SHA512 | c88871146467e8eec6d4acf84d332e8dd7ef1faaad0584a89929a242fea78e81db767f4eb420e2cf8f7c79ac901834217bb26f74fbf1b23bb137c13352df3602 |
\??\c:\games\half-life\rev.ini
| MD5 | f74da92a5e22b9c567fea58198172e32 |
| SHA1 | df8ba8c9ff8ff33d5bea83f4205073e77c98dea3 |
| SHA256 | 851b48727735c2d08fe683482c69d835f7364b7eb0e2f3494dae552e08ca942f |
| SHA512 | 45c003531f2e5a01eedb2de0881bf2d0a3a831f64bad5d7239a02efcb26fc3ad5307ebabe4cabebd3cfb07109ce9e7d2d03b83db00166fc40a0ccb874e33e106 |
C:\Games\Half-Life\steam_api_c.dll
| MD5 | 24e0f2298014291decb033e2813a2c8a |
| SHA1 | 8b206a6e16b56f2a3ccdca2241cc3d4ec79c8011 |
| SHA256 | 7143e265f1371e3f2ac9ad2f041640a9e1574d91c1fc3914e6b28685f8c3606a |
| SHA512 | c84905a445e11855e50096afb849cc4d7bc2edaff110d5dcb6c4b18c9e8a45584d47f30b3fad906bfa9056cab8aa63ac21e585f1ce8127ee36cad6e7ea0c09d7 |
C:\Games\Half-Life\vgui.dll
| MD5 | d44ee82601ae62ede3e224269a0bbf53 |
| SHA1 | 2d00b1d5e052584c6c86ec08795d56d2181a91ee |
| SHA256 | 0d4472d21443de839080860a300cca6b9436508f329d33d712e5c9bc07d4d998 |
| SHA512 | 00dba1a1d88bbc8f77f86ac45068d3f071805a13bf30c7f5c3f3168d3b799e773a1a3a7decab7931a9104bfe91dc8d60cc54b9e82a12e01b29dfe13c4fd1d398 |
C:\Games\Half-Life\Mss32.dll
| MD5 | f520185e02e8a5d85860669176bc4adc |
| SHA1 | cea8e9ff14994c89ad86cf891c89fea42a39250a |
| SHA256 | fe62f1eb6ba407df77619d16927abbefad3c726014f6bd1f8c37a7c3d6b781cc |
| SHA512 | b434e77a17cdac0109b698d0fccdd25dcdb15090a9fd0427504cc7f616673fa6c7307f07fb22cc2fc1e915887c0f9dc025aa8d38f51503f91df6a9ccee5ebe58 |
\??\c:\games\half-life\valve\resource\background\1920_1080_0_5.tga
| MD5 | ae7d93521dd1adef4d34e7be53fe9d8c |
| SHA1 | b56a0728dd5b4c2783b18281e4b246bd1929bc75 |
| SHA256 | b83de35bee92a355c553d3166672638395000e9c9b41194410765f751cb24fac |
| SHA512 | 03ba049d36979f419260ba4776a28e1ae48c5f429eaabe52be849e4e5bd7ea6ef178130bbe690d68e3300d92c88f9d275f762369e3c9c52dfa27964b3884629f |
\??\c:\games\half-life\valve\resource\background\1920_1080_1_4.tga
| MD5 | d4084ad6aeecf15fe16cd47858ffb62a |
| SHA1 | 984e9b11edf1007ecdf0307dd2e9e64a55fe2a7f |
| SHA256 | 5d83acd500d3cf0b490dd5a923c82289d0e537f272339e926139c49747f45370 |
| SHA512 | c9fcf1251a4e53c5afb9d76f3bca77367c943bdbca8662679a1ceaee43a93b8f699175e2068e756088b4219c07fa9300aa3be683dafe37929b4493c0dfc1fbba |
\??\c:\games\half-life\valve\resource\background\1920_1080_0_1.tga
| MD5 | b21494be88836c0ed63ca2731f1abb83 |
| SHA1 | b12f38cc4bb5d9e6b90e3cdaecbcfeb86b6d9459 |
| SHA256 | e2bb756291a566e7d468c7034753d21513750ebd7c7b3f241c22f357ae7eb7c0 |
| SHA512 | 9510d6864bf28ae5e1912349958527634ec66139aefc07dd8691b82b4214d6baa0b3ca3bbb0e1ced52ea37f5addb8c8aded4ac5c1ebd77912499bc2758d71471 |
\??\c:\games\half-life\valve\resource\background\1920_1080_4_0.tga
| MD5 | 4646e447f685c8a6bb643fb3922a602d |
| SHA1 | 784279713b9b5817ec1c17c2ca437fb06be8ba17 |
| SHA256 | 8d6820399ddb950acc38b3bd735c4f768c59b506eea1e0ecc78cc8232b430dcf |
| SHA512 | 63235e4f1c19526d593d1053b37bbca4e64fb87854e5c3a12d4498020a4b785042b77e6c1f1e8bd66301c45ac9f2f3608d5ad2bbdd3884c26ea387f5bdeb4ec9 |
memory/5040-9406-0x0000000000400000-0x0000000000726000-memory.dmp
memory/3336-9407-0x0000000000400000-0x00000000004EB000-memory.dmp
\??\c:\games\half-life\valve\resource\background\1920_1080_3_7.tga
| MD5 | 3e9cb374a4158b549f3c21fe7f6fbc9c |
| SHA1 | b19dfa563af539cf1ff54a0a744cb8972f3c9b4d |
| SHA256 | a25b62d51bd0ad12f43071401255be52625b1abf0f4d8e900ae7bf61031653b4 |
| SHA512 | 0551a9b438a763b8d509f8c957acc4373e8109b471c91a5dff2c5cd0e26d28c4cd631abe507d4847d3ee5e8175346f9283a32d373ca2e9979b168ecb289b8d1a |
\??\c:\games\half-life\valve\resource\background\1920_1080_3_6.tga
| MD5 | 89836d5fa424c3a39bca3e181c47785d |
| SHA1 | e7f6d8d9fb217cfcd68f9104d9cb15e14f10c520 |
| SHA256 | 1013a579928384dbf605e1b589518461e43a45cd05b5a284692e5a64b6d948ae |
| SHA512 | 4a8475ad65b7d9169eff526b71570da905577c83df29495a7336cad435823000db250811614c0498285c194759fdb7498040679d4da3fbf8890d90bc35e3cb1e |
\??\c:\games\half-life\valve\resource\background\1920_1080_3_5.tga
| MD5 | e189e20af8275369ec761126f54f4e8a |
| SHA1 | e5d35d6859a530c7cf28ce548e1a7abe408daa58 |
| SHA256 | 8e490b666bade11fe62a27e901294be57f27d57494f91264f7173415fe3b204d |
| SHA512 | 9c69448f87eafd36c0707e6c7bee9bdb061645c3549628da4057a61851f8a4ad52c5edd4864d46f47ddd629a8bf3b15ac5f137d432dc86323d6f676a46e260f0 |
\??\c:\games\half-life\valve\resource\background\1920_1080_3_4.tga
| MD5 | b5f2badcec6d3fba16151e595a835dc4 |
| SHA1 | a00168ee532c069b23c9e015b21cc36aa10a7352 |
| SHA256 | ca18bf02f96634d77839bddb2c3f7b501688404dfafce59dc7542a721fb2ed40 |
| SHA512 | fe675e73aac15128862ecfc0bcbe962c4bee8bbb6cf24a2f5458821299fc14957f05f6985a6eeb581bf0f4ffae91481736081fe590a7163d6f08f2d3af223cef |
\??\c:\games\half-life\valve\resource\background\1920_1080_3_3.tga
| MD5 | 18150bdcb6803d5860310249ab914230 |
| SHA1 | 427dea7ad64e753c7490112a1728b584bd055524 |
| SHA256 | 6c8e50a469f2858d70486ae5017097f3ebde8c30f069f33ea052dd29762dc650 |
| SHA512 | e7186c74a799eb306295b803ef3cbee58f26fb4f9ce5ac7d0b140077f4e7577841d68d2db2d4dfb0e23936d5b5e3d01cf4187f7af5d6b59e648f720c1125586f |
\??\c:\games\half-life\valve\resource\background\1920_1080_3_2.tga
| MD5 | 2c5439ebcd1f1e1bf3754ab0a84417c8 |
| SHA1 | 3b8711767b709f9caf6efdd430eb420731e35d1b |
| SHA256 | 13ce4a712d1dfc0ae9f0b127db25c56201a84a405660d792cd0d6e93935130e5 |
| SHA512 | 954289fec58b5a490031a3a228528aab87172732b7adf20006df54494c24ea2394fee8ca829198655b36cebc9f8176c5677e4a069e853b6bbc30550a6e351931 |
\??\c:\games\half-life\valve\resource\background\1920_1080_3_1.tga
| MD5 | 8ba6cce48f7f05b77329363be3384fd6 |
| SHA1 | e702e8a1b5adca9023eee0ce05a650dfc5e96cf0 |
| SHA256 | d8ccd9c8bd99cc6258f09ae6791b0ba840628e6b49194da0710a4494d231fabd |
| SHA512 | 845c0830eaf4b1854a657e85023baa07044f5650eae30e9ced35e0f41a475ccddee6aea177d4c8406d0a8ce20480c4e223293314f576b6339c325b6b3993c37c |
\??\c:\games\half-life\valve\resource\background\1920_1080_3_0.tga
| MD5 | 703d595f57fc9a12445671655996927d |
| SHA1 | 25fe983687acb58cd5660ae24bf7071ff0e01d35 |
| SHA256 | 8877e81f13907a876d9fe206305e6f9cceaa3533da70b795a551b0871fa48e7c |
| SHA512 | d9b2b398468281b7ad081b26d13b9ab85a799c6e46f6be485c7fa89bce02147e4f0829f052c9cfa26326e2e1ca6f502c33a5baa766bcd41f3355275917704ec7 |
\??\c:\games\half-life\valve\resource\background\1920_1080_2_7.tga
| MD5 | 75f56e1a376c497ae064fd1090bfbe37 |
| SHA1 | fdb27f9b2c1be6c604224d6f2bd8b85415cd3107 |
| SHA256 | 386003029a32c9a73e2cf9f5b411957486c62d8563742b7e8b0fb44d1a57d43b |
| SHA512 | 4069cc211ce68c32184c5ff55c64aab17bf048cadda8fc600a3a75e83646ead5b22ccfffa490f49f617fd9da9c53e8e0985943ed9a06cada42f4cf01710b4291 |
\??\c:\games\half-life\valve\resource\background\1920_1080_2_6.tga
| MD5 | ab353d05cbc045f1fc56dd9c758dedad |
| SHA1 | 2f4ec284c74ca99012f3b205aa14f73abc471bd1 |
| SHA256 | 3ef38e42f7cc0a0d598baa7bc8b0a3c20058a71da6adc398bbc58aa017e5be2e |
| SHA512 | e6d4dce5fd96ca4ffadba4c59a468f7f2682ed9423dd0aa44cad6a0341dbcba5966b9848896ceb2634f52527fab9dfca57d020ce9bc86e796582a319fa54eede |
\??\c:\games\half-life\valve\resource\background\1920_1080_2_5.tga
| MD5 | 252fd18d41099e69c7aacc9c12382fec |
| SHA1 | a3a0b3e9505248cc9da2fc3f6ee1bddc15c96198 |
| SHA256 | 90724e72c52ac9daae5be2fb66dd84db4bdecaae1fd19d9eb9103b5d61c50ed9 |
| SHA512 | 3fe1c15fa23690cdd4556095e3d9091f8b1716638f9f03b63a525b16e796ee99fbfa59a4597cbe19001f855967564c5cd48ef95608ffd459453b9b793a947f7d |
\??\c:\games\half-life\valve\resource\background\1920_1080_2_4.tga
| MD5 | fa5ac73fd5c5f2abe5b78817275085bf |
| SHA1 | dfac56acf0995fbb21540bc167728472022c56e7 |
| SHA256 | 9c47ca1eb2125170e6bf80973c2ed29e39554cbf880a89d735bb541999c1472c |
| SHA512 | a39951315efe305ca1f4750861124f5ff969e173a5c2c5412308eea27532c16cf6cf6fd572e293061f23971eb8bb704fb5087becf1e56dbea512ca114ca95ee6 |
\??\c:\games\half-life\valve\resource\background\1920_1080_2_3.tga
| MD5 | 76b8cce2bf3945d45476ff73f0624f55 |
| SHA1 | e109b51fe052595d3658ec4a1651f37d4be9368c |
| SHA256 | b1a9b7a6ac1cb3d5e37da0f9612eadc4639f7f81043287a34be2ef125f294e5b |
| SHA512 | 815507831e27e7759116b8bfd601e36c10ab11c90856e1f31c225d29fed830c17b479530b085d8d9268ce16c706731444f240f7c0800b8e041bf93341157c7ad |
\??\c:\games\half-life\valve\resource\background\1920_1080_2_2.tga
| MD5 | 0b94a0443481ebc6f1e2f294ad3484d1 |
| SHA1 | 6cf7fc1a951c1f477d5fdd60b6ad96fb78aff568 |
| SHA256 | 7c4079e620432ad9b144609eeeb42b0874a3108a7d526e06318284cc4896bc89 |
| SHA512 | b453cc6c7363070bfd04af66b287df6e4ec9600b2db74465f484c4d4846fa9a3af31df6640571ebc28db85bdd377f1c7e10c49abc46cd9ada8d8ce69d3313f1d |
\??\c:\games\half-life\valve\resource\background\1920_1080_2_1.tga
| MD5 | 6c415e279b2f2fd41a76a8ec64f92caa |
| SHA1 | c26d646349b988803cb4f4422e81cd778578375e |
| SHA256 | 289c40a62c61f4564a64d4875f3579483a7e2d4d29f4389d53200831a00c7b81 |
| SHA512 | 53ef9fc01ba20adc51ba573478a1ce319ab675cda2e01f0abf33483b755276823270947966db7372f0fb352e099dab789b7a8600ea1237cc028b68ff5e979497 |
\??\c:\games\half-life\valve\resource\background\1920_1080_2_0.tga
| MD5 | 9aad306c013353e27a0b88b91f590062 |
| SHA1 | 0affb970c1563619a60f0b0910715cf605c78d80 |
| SHA256 | ffadfdfb90f5404a29387cdc3e88815eb7df6ab6f4aae6aac5ee98d7c76370c6 |
| SHA512 | d27cc2ef02027bf8c4da4772851acdc9f367b6c9ba304776eb44f93d37738c526c5e49d19a46d7e3a7651752e3bf9719500055f545925e70b055591626ffcbd9 |
\??\c:\games\half-life\valve\resource\background\1920_1080_1_7.tga
| MD5 | 795dedaed0a8846e9812688a9689bc4c |
| SHA1 | c20d7ec4bdfa1326bb7c966ac2413930e01ed9dd |
| SHA256 | e7de633c7c791fb6b4ce3ea7d667a7f93b2eb731c4f5ea66c3dc0fa817821552 |
| SHA512 | 2130ca86fbf747933e4887b05c04937663273842965398650657be1c771ceb446810e471590656b6818f3ffdd6a6fd751f9de763a7b83900b2ac21a600177a73 |
\??\c:\games\half-life\valve\resource\background\1920_1080_1_6.tga
| MD5 | e0a35087d7e67950457c4a64b954bb5b |
| SHA1 | 70ab41cbf702b7eea7ee952e66a1ceeac06da842 |
| SHA256 | 7f93a1d142167134bf631d8097441bd4f27fe937752ce84c502fe850d5befe7f |
| SHA512 | e9f044381d9e4e87d32a02aca7108adee4db7085856445bec92d0ccf23f3ad2b221901929158d11e139314e969c125825e1853577f0c66c0d185203d4244fc68 |
\??\c:\games\half-life\valve\resource\background\1920_1080_1_5.tga
| MD5 | 4003d9cd861d23cacb26203d79a8c29c |
| SHA1 | 5ab1ab0152a486b5fd78ab2f8704656872c94151 |
| SHA256 | cfdaf3ee6fd12a96872b86e24cee023242dac4a40068e4d67ce22026a31000af |
| SHA512 | 295effe07160f511a6b2bd43595c1c69dda475ea6ca659c5c98d514353cf5beb853b5795ede22d3c225a125dbdfca1e25abf0d8f34cdaf3e62bc9b2c9338a5bb |
\??\c:\games\half-life\valve\resource\background\1920_1080_1_3.tga
| MD5 | 89a9b0714bf43ae1fd94d745036769d9 |
| SHA1 | a36120e85403c38273857021d0ffb6c19f2f3aa5 |
| SHA256 | b2bb7ea4da7abcbf9a15d8b852af5a64451838b1717f7e00d0a153102672c51f |
| SHA512 | e5018eebc1dfec160625142cc930980c794da523c1860ebb54260108aadbe9ccd36fcc805bdf12035a5fc63144643967827819b91d2a2303bddda48b4b6e4654 |
\??\c:\games\half-life\valve\resource\background\1920_1080_1_2.tga
| MD5 | f7f238f16ceada4863cd10017d4e6bd1 |
| SHA1 | 07f14ed12d9f955800584b1b951c8f90b23b3c0e |
| SHA256 | 1781990a9ad149de82231e23e8e0ed302908dba77f98c8d8ff28ba04f9303ace |
| SHA512 | f0fab7d42e7cbd0f2a32241a503ebe3923a4dae475e3435ab7985b1258452342c31c7938775d7513e1fb43384ca5f68bbaa4b19f0b6d84f0a6987021e7bfb8e1 |
\??\c:\games\half-life\valve\resource\background\1920_1080_1_1.tga
| MD5 | cdaa1764669a98fd28742d4eb2fe1472 |
| SHA1 | fb080e45b71975562986497a25eb974ac6e2a4ce |
| SHA256 | fa73241df91eddc2a97efe369a185a7d689f09fd7694b0f5ca9a07e66ee4e572 |
| SHA512 | 1428066ee34d02bcdfa90086222f14822813460fcd494b69c20e7afd6b38a3f113b471d2cce38d32ed48e20bfa65eb229226fbf3f7009bca24ff451539e93e14 |
\??\c:\games\half-life\valve\resource\background\1920_1080_1_0.tga
| MD5 | 0700d4cb8623d32f954ea33c6a813913 |
| SHA1 | 8923f77e159730e0bead5ffba2a2017d07526bfa |
| SHA256 | ea14de878057181e7a27641063de786d4dc7de1ccc87682f99edf5bd22a0c2a3 |
| SHA512 | 0ad5097e0ecbb84b3811eee1d139eac32b39ca6f245e0e9cf317c521848390f275d184a236e280f289c57365daeac36c5dca47948bc74c03b1bf39c230c75bdb |
\??\c:\games\half-life\valve\resource\background\1920_1080_0_7.tga
| MD5 | 2483539b49b6e2ce54894abb9b75b8f9 |
| SHA1 | 5b7e6ab1c024b2f9886f66d600374f6cecc6684b |
| SHA256 | 610e571337825a6ed71de8162ebf42d781752bb50f1f17f58949d735698e6c3e |
| SHA512 | 6401635132954fafbe7c0541ff739d7e89359b88709a5a588d805f8ee3fa19c03a11eb264817d28d6a18ddcc923bcb6d9aa90a910007cca940f7a2dab68e73f8 |
\??\c:\games\half-life\valve\resource\background\1920_1080_0_6.tga
| MD5 | ffc17eafbea041830111c481f82735f9 |
| SHA1 | bf915108ece098c02b6a192b3a7867a8d28111a4 |
| SHA256 | 42347cbe1f0736139637ac1117cda71bec03c49e8662fbcc75f52fcdca167fa3 |
| SHA512 | 9dd7e54dcd7b21fc9ca8c8f1b89ab6021ed9a427bcede4a42f61576bebabfe3599086bc2bf262526f14d848faa3be62e5b5260d835cc0da249f6e03505e1506a |
\??\c:\games\half-life\valve\resource\background\1920_1080_0_4.tga
| MD5 | 183449ea5e6cbcfc27533016d0e9f646 |
| SHA1 | 35d67e706520f06b1bc1e6f1ce90d2f57a1bfa27 |
| SHA256 | 9970701f096da3e91401d40563ab8083461aa6884dbea5e09bbb90598f64bdc9 |
| SHA512 | e9d6a2500eff05a3bbcad2e30fcf2fbdfd0c6fa17d355056107af7a9da14e3458898eb5421d3824cae03e151d8e108158d0c1f0c1dedfdb60cddb7bc48dc11a6 |
\??\c:\games\half-life\valve\resource\background\1920_1080_0_3.tga
| MD5 | 9c0398e86a21f132ae8e8e5caebcddf9 |
| SHA1 | 6e254b972506b5c192e3f8fe5e8511cd2d5b5022 |
| SHA256 | ad3c948e481216f8e70c5f685b7a4b320e0156e23cdf337c77997debcf55d7ab |
| SHA512 | 9b966138ee0a5e3ae4df52fae861fba33c0424d26116d3801fc490105afd094c18a9958756474dc847d2233459636fb47f91d9144ccddc7da00350fd8ef9ee75 |
\??\c:\games\half-life\valve\resource\background\1920_1080_0_2.tga
| MD5 | 4b86ef35f640e94b4d6632f786473c0d |
| SHA1 | 3b705c969716f0d88cabd347732014f82102d8e7 |
| SHA256 | 8639363a5fa8e7ebe8beac3468447f9c563dd49ad5fd5a17eea36dcb894c12ba |
| SHA512 | 8981dd04a27ca65a9a61ebc2bf3374a92929d3e80d3dbac653fd81688e9351877146d29dd836d1652fe43b3754a1b474bfbb653f826803f97cf49412106d3217 |
\??\c:\games\half-life\valve\resource\background\1920_1080_0_0.tga
| MD5 | 8acc843b635988c4877746cace359fe8 |
| SHA1 | e14e63ea19a811bb4b397c036013e1dfa680f24f |
| SHA256 | d8d6b0f48d6231c489ec54ae79232807b3a62d4dcebbe7cad8ef296c3b642f29 |
| SHA512 | 88bc060f251079a67268995b7f7a8450bf805cd7a7fc1af75984213a65a4710ccff7b2d97dcb544e57d03ece884673c72dbd49299185aa022e2a6b0440e92c5d |
\??\c:\games\half-life\valve\resource\BackgroundLoadingLayout.txt
| MD5 | 640c0f28dfabf13f6700adb0d718b849 |
| SHA1 | c66f5bf461b39c305199cf4885fe2edb0efdfe93 |
| SHA256 | aca1be03d2900538cdf6c21f5d7ffede73ad77f5065a9921b197317c21a62d50 |
| SHA512 | 3327780c6187800622dcfd389b71008089cd42ba594e3dbb747427699fc6a6f1d8c3ceb15db0438fc9d3392d67e06d11e6c0b55f3acb5a86646e687bd9966a33 |
memory/1976-9408-0x0000000004F20000-0x0000000005A73000-memory.dmp
memory/1976-9415-0x0000000001150000-0x000000000115F000-memory.dmp
memory/1976-9412-0x0000000001120000-0x0000000001135000-memory.dmp
memory/1976-9410-0x0000000004DB0000-0x0000000004E08000-memory.dmp
memory/1976-9420-0x0000000004AF0000-0x0000000004B30000-memory.dmp
memory/1976-9419-0x0000000004950000-0x0000000004965000-memory.dmp
memory/1976-9422-0x0000000009AB0000-0x0000000009B94000-memory.dmp
memory/1976-9424-0x000000000DE50000-0x000000000DE6F000-memory.dmp
memory/1976-9425-0x000000000DEB0000-0x000000000DECC000-memory.dmp
memory/1976-9430-0x000000000E4E0000-0x000000000E4EF000-memory.dmp
memory/1976-9432-0x000000000ED90000-0x000000000EDD8000-memory.dmp
memory/1976-9431-0x000000000EC10000-0x000000000EC2E000-memory.dmp
memory/1976-9436-0x000000000F790000-0x000000000F81D000-memory.dmp
memory/1976-9441-0x000000000F820000-0x000000000F879000-memory.dmp
memory/1976-9440-0x000000000EFB0000-0x000000000EFC5000-memory.dmp
memory/1976-9438-0x000000000EF50000-0x000000000EFAA000-memory.dmp
C:\Games\Half-Life\platform\config\ServerBrowser.vdf
| MD5 | 261891b787b00c5df970e27a5f1ffcd6 |
| SHA1 | ed8d552ad56cb6b1411ddcf436f0c9acf66b823c |
| SHA256 | 5e75d554b0ee1464d23d0e145afe7151e97cfeb398d89829ea91e9f5503bc605 |
| SHA512 | bba969355ae2d7a0dcde5032701a6bdc25aa37c212097e1845217b8586101ac59b9497addeb4a6e166afc703ffea24c2e58aac1103e788d02c3b4febec2af053 |
memory/1976-9445-0x000000000DEB0000-0x000000000DECC000-memory.dmp
memory/1976-9444-0x000000000DE50000-0x000000000DE6F000-memory.dmp