Malware Analysis Report

2025-01-18 23:45

Sample ID 241104-s7qyeasgpp
Target https://vrchub.site/
Tags
steam defense_evasion discovery execution persistence phishing privilege_escalation upx
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file https://vrchub.site/ was found to be: Likely malicious.

Malicious Activity Summary

steam defense_evasion discovery execution persistence phishing privilege_escalation upx

Downloads MZ/PE file

Loads dropped DLL

Executes dropped EXE

Network Service Discovery

Network Share Discovery

Adds Run key to start application

Checks installed software on the system

Enumerates connected drives

Drops desktop.ini file(s)

Legitimate hosting services abused for malware hosting/C2

Suspicious use of SetThreadContext

UPX packed file

Detected potential entity reuse from brand STEAM.

Drops file in System32 directory

Drops file in Windows directory

Subvert Trust Controls: Mark-of-the-Web Bypass

Drops file in Program Files directory

Enumerates physical storage devices

System Network Configuration Discovery: Internet Connection Discovery

Command and Scripting Interpreter: PowerShell

Access Token Manipulation: Create Process with Token

Browser Information Discovery

System Location Discovery: System Language Discovery

Suspicious behavior: EnumeratesProcesses

Modifies data under HKEY_USERS

Modifies system certificate store

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of FindShellTrayWindow

Enumerates system info in registry

Suspicious use of SetWindowsHookEx

NTFS ADS

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

Checks processor information in registry

Modifies registry class

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of SendNotifyMessage

Checks SCSI registry key(s)

Suspicious behavior: LoadsDriver

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-04 15:46

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-04 15:46

Reported

2024-11-04 16:32

Platform

win11-20241007-en

Max time kernel

2699s

Max time network

2703s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://vrchub.site/

Signatures

Downloads MZ/PE file

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-LCALS.tmp\VRCHub Setup.tmp N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ZER0.Certificates.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\gldriverquery64.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\gldriverquery.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\vulkandriverquery64.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\vulkandriverquery.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\Steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ZER0.Certificates.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\VRC Quick Launcher.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ZER0.Certificates.exe N/A
N/A N/A C:\Program Files (x86)\Common Files\Steam\steamservice.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2010\vcredist_x86.exe N/A
N/A N/A \??\f:\c04d5530b170edd4f1\Setup.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Windows\System32\rundll32.exe N/A
N/A N/A C:\Windows\System32\rundll32.exe N/A
N/A N/A C:\Windows\System32\rundll32.exe N/A
N/A N/A C:\Windows\System32\rundll32.exe N/A
N/A N/A C:\Windows\System32\rundll32.exe N/A
N/A N/A C:\Windows\System32\rundll32.exe N/A
N/A N/A C:\Windows\System32\rundll32.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A
N/A N/A C:\Program Files\VRCHub\VRCHub.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\Microsoft\Windows\CurrentVersion\Run\Steam = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -silent" C:\Users\Admin\Downloads\SteamSetup.exe N/A

Checks installed software on the system

discovery

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Admin\Videos\Captures\desktop.ini C:\Windows\system32\svchost.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\O: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\P: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\N: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\msiexec.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A camo.githubusercontent.com N/A N/A
N/A camo.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A camo.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A camo.githubusercontent.com N/A N/A
N/A camo.githubusercontent.com N/A N/A

Network Service Discovery

discovery
Description Indicator Process Target
N/A N/A C:\Windows\System32\GameBarPresenceWriter.exe N/A

Network Share Discovery

discovery

Detected potential entity reuse from brand STEAM.

phishing steam

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\SysWOW64\mfcm100.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\system32\mfc100chs.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\system32\mfc100fra.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\system32\mfc100ita.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SysWOW64\msvcr100.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SysWOW64\mfc100enu.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SysWOW64\mfc100esn.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SysWOW64\mfc100rus.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\system32\mfc100.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SysWOW64\msvcp100.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SysWOW64\mfc100kor.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\system32\msvcr100.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\system32\mfc100esn.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\EasyAntiCheat\service.log C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\EasyAntiCheat\service.log C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
File opened for modification C:\Windows\SysWOW64\atl100.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SysWOW64\mfc100deu.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\system32\mfc100u.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\system32\mfc100enu.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\system32\vcomp100.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\system32\atl100.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\EasyAntiCheat\service.log C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
File opened for modification C:\Windows\SysWOW64\mfc100.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SysWOW64\mfcm100u.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SysWOW64\mfc100ita.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\EasyAntiCheat\service.log C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
File opened for modification C:\Windows\SysWOW64\mfc100u.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SysWOW64\mfc100cht.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SysWOW64\mfc100jpn.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\system32\msvcp100.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\system32\mfc100cht.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\system32\mfc100jpn.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\system32\mfc100kor.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\system32\mfc100rus.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SysWOW64\mfc100chs.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SysWOW64\mfc100fra.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SysWOW64\vcomp100.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\system32\mfcm100.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\system32\mfcm100u.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\system32\mfc100deu.dll C:\Windows\system32\msiexec.exe N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Steam\package\tmp\graphics\html_lock.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps5_l2_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\friends\trackerui_czech.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files\VRCHub\pt-BR\System.Windows.Forms.Design.resources.dll C:\Users\Admin\AppData\Local\Temp\is-LCALS.tmp\VRCHub Setup.tmp N/A
File created C:\Program Files\VRCHub\is-B7U69.tmp C:\Users\Admin\AppData\Local\Temp\is-LCALS.tmp\VRCHub Setup.tmp N/A
File opened for modification C:\Program Files\VRCHub\System.Net.Sockets.dll C:\Users\Admin\AppData\Local\Temp\is-LCALS.tmp\VRCHub Setup.tmp N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_080_input_0010.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files\VRCHub\System.Security.Cryptography.X509Certificates.dll C:\Users\Admin\AppData\Local\Temp\is-LCALS.tmp\VRCHub Setup.tmp N/A
File opened for modification C:\Program Files\VRCHub\System.Net.NetworkInformation.dll C:\Users\Admin\AppData\Local\Temp\is-LCALS.tmp\VRCHub Setup.tmp N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps4_button_logo_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\sd_ltrackpad_right_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps_button_mute_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\bin\cef\cef.win7x64\api-ms-win-crt-string-l1-1-0.dll_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps5_r1_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\shared_color_outlined_button_b_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files\VRCHub\de\is-SQ3JN.tmp C:\Users\Admin\AppData\Local\Temp\is-LCALS.tmp\VRCHub Setup.tmp N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_010_wpn_0406.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\friends\message.wav_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps4_r1_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps_dpad_down.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\shared_touch_doubletap.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files\VRCHub\is-IP3AV.tmp C:\Users\Admin\AppData\Local\Temp\is-LCALS.tmp\VRCHub Setup.tmp N/A
File created C:\Program Files\VRCHub\is-TAPL5.tmp C:\Users\Admin\AppData\Local\Temp\is-LCALS.tmp\VRCHub Setup.tmp N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps5_l2_soft_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sc_button_l_arrow.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\resource\layout\subpaneloptionsshadercache.layout_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\updatenone_notification.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\public\c4.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_060_vehicle_0080.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sc_rt_soft_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\localization\xbox_360_latam.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\resource\platform_brazilian.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\switchpro_rstick_right_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\downloading\228980\_CommonRedist\vcredist\2019\VC_redist.x86.exe C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\downloading\438100\VRChat_Data\il2cpp_data\Resources\Sentry.System.Memory.dll-resources.dat C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files\VRCHub\ko\is-P2HIC.tmp C:\Users\Admin\AppData\Local\Temp\is-LCALS.tmp\VRCHub Setup.tmp N/A
File created C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_045_move_0060.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files\VRCHub\ko\is-06LLK.tmp C:\Users\Admin\AppData\Local\Temp\is-LCALS.tmp\VRCHub Setup.tmp N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\icon_meterOff.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\shared_color_button_a_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\debug.log C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\icon_button_detail.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\resource\icon_hlicon1.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps4_r1_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps4_r1_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sc_rt_md-1.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\joyconpair_left_sl.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps5_trackpad_click.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sd_button_steam_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\movies\deck_startup.webm_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\logs\steamui_html.txt C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files\VRCHub\PresentationFramework.Classic.dll C:\Users\Admin\AppData\Local\Temp\is-LCALS.tmp\VRCHub Setup.tmp N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_020_ammo_0053.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\sd_l2_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\switchpro_l2_soft_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\appcache\librarycache\228980_library_hero.jpg C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files\VRCHub\cs\is-BJGK0.tmp C:\Users\Admin\AppData\Local\Temp\is-LCALS.tmp\VRCHub Setup.tmp N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_045_move_0180.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\downloading\438100\VRChat_Data\Plugins\x86_64\vrc_fast_crypto.dll C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\gridview_mask.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\switchpro_button_home.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\shared_color_button_a.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steam\cached\Receipt_Server_Timeout_BFS.res_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\sd_r2_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\SystemTemp C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Windows\SystemTemp\~DFF4E65EE02924F98E.TMP C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI62C5.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe N/A
File opened for modification C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\inprogressinstallinfo.ipi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI4EBE.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SystemTemp\~DF694FE164589563F9.TMP C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SystemTemp\Crashpad\metadata C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe N/A
File created C:\Windows\SystemTemp\~DF33C56E152F04724C.TMP C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\e714dc7.msp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SystemTemp\~DF9A556F5CE08FB8EE.TMP C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SystemTemp\~DFB9852E8AC0E4A811.TMP C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SystemTemp\~DF75988A7F76A69943.TMP C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e714dc7.msp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI52D5.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SystemTemp\~DF6127C38093599951.TMP C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\e714dce.msp C:\Windows\system32\msiexec.exe N/A
File opened for modification \??\c:\Windows\Installer\ C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e714dce.msp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI6602.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Windows\SystemTemp\~DF44BD690E43D7984C.TMP C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SystemTemp\~DF300DA944E0B017F7.TMP C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SystemTemp\~DFDD483D702DE4E5C1.TMP C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Windows\Installer\ C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SystemTemp\~DF4265E59D50ADA2DE.TMP C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SystemTemp\~DF3AC3AB515DD33ACD.TMP C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SystemTemp\Crashpad\settings.dat C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe N/A

Subvert Trust Controls: Mark-of-the-Web Bypass

defense_evasion
Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\SteamSetup.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Users\Admin\Downloads\VRCHub Setup.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Access Token Manipulation: Create Process with Token

defense_evasion privilege_escalation
Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Common Files\Steam\steamservice.exe N/A

Browser Information Discovery

discovery

Command and Scripting Interpreter: PowerShell

execution
Description Indicator Process Target
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\SteamSetup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language \??\f:\c04d5530b170edd4f1\Setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\ZER0.Certificates.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\bin\vulkandriverquery.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2019\VC_redist.x86.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\Temp\{66836891-5273-4FE5-9D34-6500F9395E4A}\.cr\VC_redist.x86.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\VRCHub Setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\ZER0.Certificates.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\bin\gldriverquery.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\Steam.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2010\vcredist_x64.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\ZER0.Certificates.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2019\VC_redist.x64.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\is-LCALS.tmp\VRCHub Setup.tmp N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language \??\f:\f03170ef961820700a\Setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\Temp\{964C3880-001A-4D57-B248-48563808236C}\.cr\VC_redist.x64.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Common Files\Steam\steamservice.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2010\vcredist_x86.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\bin\x86launcher.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steamapps\common\VRChat\EasyAntiCheat\EasyAntiCheat_EOS_Setup.exe N/A

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 \??\f:\f03170ef961820700a\Setup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files (x86)\Steam\steamapps\common\VRChat\launch.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steamapps\common\VRChat\launch.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 \??\f:\c04d5530b170edd4f1\Setup.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steamapps\common\VRChat\launch.exe N/A
Key opened \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files (x86)\Steam\steamapps\common\VRChat\launch.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steamapps\common\VRChat\launch.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steam.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz \??\f:\c04d5530b170edd4f1\Setup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files (x86)\Steam\steamapps\common\VRChat\launch.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steam.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files (x86)\Steam\steamapps\common\VRChat\launch.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steamapps\common\VRChat\launch.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steam.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz \??\f:\f03170ef961820700a\Setup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\CTLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPublisher\Certificates C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPublisher\CRLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPublisher C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\28 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\Certificates C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPublisher C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPublisher\CRLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133752090283195160" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPublisher\Certificates C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\CTLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\steamlink\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\"" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\1926E8D15D0BCE53481466615F760A7F\KB2524860 = "Servicing_Key" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3587106988-279496464-3440778474-1000\{54C9569B-421F-4A89-8069-0A69367A82B2} C:\Windows\system32\svchost.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\VRCHub.dp\Shell\Open\Command\ = "\"C:\\Program Files\\VRCHub\\VRCDataMod.exe\" \"%1\"" C:\Users\Admin\AppData\Local\Temp\is-LCALS.tmp\VRCHub Setup.tmp N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\steam\URL Protocol C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\steam\DefaultIcon\ = "steam.exe" C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\1926E8D15D0BCE53481466615F760A7F\VCRedist_amd64_enu C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Patches\4D54076CED4F5BA32BBD3E5FAD1CD4C9\SourceList\LastUsedSource = "n;2;f:\\f03170ef961820700a\\" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\1D5E3C0FEDA1E123187686FED06E995A\KB2524860 = "Servicing_Key" C:\Windows\system32\msiexec.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 020000000000000001000000ffffffff C:\Program Files\VRCHub\VRCHub.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3587106988-279496464-3440778474-1000\{E7A57B68-F63E-4CCD-9D1C-0623CE34C43A} C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steamlink C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\steam\DefaultIcon C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\steam\URL Protocol C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1D5E3C0FEDA1E123187686FED06E995A\Patches C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steam C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\URL Protocol C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\1926E8D15D0BCE53481466615F760A7F\FT_VCRedist_x64_KB2565063_Detection C:\Windows\system32\msiexec.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2 = 14002e80922b16d365937a46956b92703aca08af0000 C:\Program Files\VRCHub\VRCHub.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags C:\Program Files\VRCHub\VRCHub.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ C:\Program Files\VRCHub\VRCHub.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\steamlink\Shell\Open\Command C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\steam\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\"" C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1926E8D15D0BCE53481466615F760A7F\Patches\Patches = 3400440035003400300037003600430045004400340046003500420041003300320042004200440033004500350046004100440031004300440034004300390000000000 C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1926E8D15D0BCE53481466615F760A7F\SourceList\Net\2 = "f:\\f03170ef961820700a\\" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\"" C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\1D5E3C0FEDA1E123187686FED06E995A\Servicing_Key C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1926E8D15D0BCE53481466615F760A7F C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steam C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell\Open\Command C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\steam\DefaultIcon\ = "steam.exe" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\steamlink\URL Protocol C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steamlink\DefaultIcon C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0000000001000000ffffffff C:\Program Files\VRCHub\VRCHub.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\Shell C:\Program Files\VRCHub\VRCHub.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7 C:\Program Files\VRCHub\VRCHub.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steamlink\DefaultIcon C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\steamlink\Shell\Open C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steam\DefaultIcon C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Patches\4D54076CED4F5BA32BBD3E5FAD1CD4C9\SourceList C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 C:\Program Files\VRCHub\VRCHub.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\FFlags = "1" C:\Program Files\VRCHub\VRCHub.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.dp C:\Users\Admin\AppData\Local\Temp\is-LCALS.tmp\VRCHub Setup.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Patches\2D0058F6F08A743309184BE1178C95B2\SourceList\LastUsedSource = "n;2;f:\\c04d5530b170edd4f1\\" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Patches\4D54076CED4F5BA32BBD3E5FAD1CD4C9\SourceList\Net C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3587106988-279496464-3440778474-1000\{89C7B90C-31B1-4B36-BC23-9E2A6EDAE383} C:\Windows\system32\svchost.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656} C:\Program Files\VRCHub\VRCHub.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steam\DefaultIcon C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steam\Shell\Open\Command C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\steamlink\Shell C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\steamlink\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\"" C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1D5E3C0FEDA1E123187686FED06E995A\SourceList\LastUsedSource = "n;2;f:\\c04d5530b170edd4f1\\" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\Local Settings C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\steam\ = "URL:steam protocol" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\1D5E3C0FEDA1E123187686FED06E995A\KB2565063 = "Servicing_Key" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1926E8D15D0BCE53481466615F760A7F\SourceList C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell\Open C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\steam\Shell C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\VRCHub.dp\DefaultIcon\ = "\"C:\\Program Files\\VRCHub\\Package.ico\"" C:\Users\Admin\AppData\Local\Temp\is-LCALS.tmp\VRCHub Setup.tmp N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\steamlink\ = "URL:steamlink protocol" C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\1D5E3C0FEDA1E123187686FED06E995A\KB2549743 = "Servicing_Key" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU C:\Program Files\VRCHub\VRCHub.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202020202 C:\Program Files\VRCHub\VRCHub.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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 C:\Program Files (x86)\Steam\steamapps\common\VRChat\start_protected_game.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 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 C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25 C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD C:\Program Files (x86)\Steam\steamapps\common\VRChat\start_protected_game.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 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 C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 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 C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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 C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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 C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7B9D7E1F96BA7FF50AC0D201383FD1F07412E59E C:\Users\Admin\AppData\Local\Temp\ZER0.Certificates.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7B9D7E1F96BA7FF50AC0D201383FD1F07412E59E\Blob = 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 C:\Users\Admin\AppData\Local\Temp\ZER0.Certificates.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349 C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\388678CFB6A9627CB62083131A1D88B2E2306381 C:\Users\Admin\AppData\Local\Temp\ZER0.Certificates.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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 C:\Program Files (x86)\Steam\steamapps\common\VRChat\start_protected_game.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\388678CFB6A9627CB62083131A1D88B2E2306381\Blob = 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 C:\Users\Admin\AppData\Local\Temp\ZER0.Certificates.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 040000000100000010000000497904b0eb8719ac47b0bc11519b74d00f00000001000000140000003e8e6487f8fd27d322a269a71edaac5d57811286090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b0601050507030853000000010000004300000030413022060c2b06010401b231010201050130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0620000000100000020000000d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef40b000000010000001c0000005300650063007400690067006f002000280041004100410029000000140000000100000014000000a0110a233e96f107ece2af29ef82a57fd030a4b41d00000001000000100000002e0d6875874a44c820912e85e964cfdb030000000100000014000000d1eb23a46d17d68fd92564c2f1f1601764d8e3491900000001000000100000002aa1c05e2ae606f198c2c5e937c97aa2200000000100000036040000308204323082031aa003020102020101300d06092a864886f70d0101050500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3034303130313030303030305a170d3238313233313233353935395a307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c1841414120436572746966696361746520536572766963657330820122300d06092a864886f70d01010105000382010f003082010a0282010100be409df46ee1ea76871c4d45448ebe46c883069dc12afe181f8ee402faf3ab5d508a16310b9a06d0c57022cd492d5463ccb66e68460b53eacb4c24c0bc724eeaf115aef4549a120ac37ab23360e2da8955f32258f3dedccfef8386a28c944f9f68f29890468427c776bfe3cc352c8b5e07646582c048b0a891f9619f762050a891c766b5eb78620356f08a1a13ea31a31ea099fd38f6f62732586f07f56bb8fb142bafb7aaccd6635f738cda0599a838a8cb17783651ace99ef4783a8dcf0fd942e2980cab2f9f0e01deef9f9949f12ddfac744d1b98b547c5e529d1f99018c7629cbe83c7267b3e8a25c7c0dd9de6356810209d8fd8ded2c3849c0d5ee82fc90203010001a381c03081bd301d0603551d0e04160414a0110a233e96f107ece2af29ef82a57fd030a4b4300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff307b0603551d1f047430723038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c3036a034a0328630687474703a2f2f63726c2e636f6d6f646f2e6e65742f414141436572746966696361746553657276696365732e63726c300d06092a864886f70d010105050003820101000856fc02f09be8ffa4fad67bc64480ce4fc4c5f60058cca6b6bc1449680476e8e6ee5dec020f60d68d50184f264e01e3e6b0a5eebfbc745441bffdfc12b8c74f5af48960057f60b7054af3f6f1c2bfc4b97486b62d7d6bccd2f346dd2fc6e06ac3c334032c7d96dd5ac20ea70a99c1058bab0c2ff35c3acf6c37550987de53406c58effcb6ab656e04f61bdc3ce05a15c69ed9f15948302165036cece92173ec9b03a1e037ada015188ffaba02cea72ca910132cd4e50826ab229760f8905e74d4a29a53bdf2a968e0a26ec2d76cb1a30f9ebfeb68e756f2aef2e32b383a0981b56b85d7be2ded3f1ab7b263e2f5622c82d46a004150f139839f95e93696986e C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\C9B4CA6DE60F5398B21CDA1841CFD9081D3960F7 C:\Users\Admin\AppData\Local\Temp\ZER0.Certificates.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\C9B4CA6DE60F5398B21CDA1841CFD9081D3960F7\Blob = 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 C:\Users\Admin\AppData\Local\Temp\ZER0.Certificates.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 150682.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\VRCHub Setup.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\SyxReBootstrap.zip:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Users\Admin\Downloads\SteamSetup.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-LCALS.tmp\VRCHub Setup.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-LCALS.tmp\VRCHub Setup.tmp N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A

Suspicious behavior: LoadsDriver

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4896 wrote to memory of 3448 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 3448 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2200 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 2936 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 1380 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 1380 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 1380 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 1380 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 1380 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 1380 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 1380 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 1380 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 1380 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 1380 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 1380 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 1380 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 1380 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 1380 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 1380 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 1380 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 1380 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 1380 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 1380 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4896 wrote to memory of 1380 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://vrchub.site/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa08613cb8,0x7ffa08613cc8,0x7ffa08613cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1920,12780925748901637537,12706644447421355633,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1916 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1920,12780925748901637537,12706644447421355633,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1920,12780925748901637537,12706644447421355633,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2720 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,12780925748901637537,12706644447421355633,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,12780925748901637537,12706644447421355633,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1920,12780925748901637537,12706644447421355633,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4912 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,12780925748901637537,12706644447421355633,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5180 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,12780925748901637537,12706644447421355633,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3596 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1920,12780925748901637537,12706644447421355633,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4684 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1920,12780925748901637537,12706644447421355633,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5924 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,12780925748901637537,12706644447421355633,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5908 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1920,12780925748901637537,12706644447421355633,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5052 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,12780925748901637537,12706644447421355633,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4948 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,12780925748901637537,12706644447421355633,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,12780925748901637537,12706644447421355633,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6016 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,12780925748901637537,12706644447421355633,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6080 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,12780925748901637537,12706644447421355633,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5216 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,12780925748901637537,12706644447421355633,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4984 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,12780925748901637537,12706644447421355633,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4808 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1920,12780925748901637537,12706644447421355633,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4984 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004E4 0x00000000000004EC

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1920,12780925748901637537,12706644447421355633,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=216 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,12780925748901637537,12706644447421355633,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4588 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,12780925748901637537,12706644447421355633,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5856 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9f5cacc40,0x7ff9f5cacc4c,0x7ff9f5cacc58

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1628,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1624 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2032,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2088 /prefetch:3

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2216,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1656 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3080,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3248 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3144,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3296 /prefetch:1

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3564,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3544 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4776,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4792 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4752,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4824 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4804,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4748 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4924,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4400 /prefetch:8

C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe" --reenable-autoupdates --system-level

C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x248,0x24c,0x250,0x244,0x254,0x7ff643154698,0x7ff6431546a4,0x7ff6431546b0

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=5204,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4880 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=3436,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4980 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=4364,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=212 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=3788,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3332 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3360,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3464 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=3412,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5356 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=3504,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5536 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=3280,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5672 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=5772,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4376 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=5644,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5840 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=3472,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5756 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=5656,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6140 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=5872,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=872 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=4952,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5848 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5424,i,11855164907988794982,4191022607569479112,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5440 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Desktop\VRCHub Setup.exe

"C:\Users\Admin\Desktop\VRCHub Setup.exe"

C:\Users\Admin\AppData\Local\Temp\is-LCALS.tmp\VRCHub Setup.tmp

"C:\Users\Admin\AppData\Local\Temp\is-LCALS.tmp\VRCHub Setup.tmp" /SL5="$902EA,71276599,905216,C:\Users\Admin\Desktop\VRCHub Setup.exe"

C:\Users\Admin\Desktop\SyxReBootstrap\SynapseBootstrapper.exe

"C:\Users\Admin\Desktop\SyxReBootstrap\SynapseBootstrapper.exe"

C:\Program Files\VRCHub\VRCHub.exe

"C:\Program Files\VRCHub\VRCHub.exe"

C:\Windows\System32\rundll32.exe

"C:\Windows\System32\rundll32.exe" EasyAnalytics.dll,OpenAnalyticsPort

C:\Users\Admin\AppData\Local\Temp\ZER0.Certificates.exe

"C:\Users\Admin\AppData\Local\Temp\ZER0.Certificates.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c powershell -command "Expand-Archive -Path 'C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake.zip' -DestinationPath 'C:\Users\Admin\Desktop\SyxReBootstrap'"

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

powershell -command "Expand-Archive -Path 'C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake.zip' -DestinationPath 'C:\Users\Admin\Desktop\SyxReBootstrap'"

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k UnistackSvcGroup

C:\Windows\System32\SystemSettingsBroker.exe

C:\Windows\System32\SystemSettingsBroker.exe -Embedding

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c start C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe

C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe

C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=SynapseXRemake.exe --webview-exe-version=1.0.0.0 --user-data-dir="C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe.WebView2\EBWebView" --no-default-browser-check --disable-component-extensions-with-background-pages --no-first-run --disable-default-apps --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --disable-popup-blocking --internet-explorer-integration=none --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc" --mojo-named-platform-channel-pipe=1980.2300.2669899352362253703

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe.WebView2\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe.WebView2\EBWebView\Crashpad --metrics-dir=C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe.WebView2\EBWebView --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=90.0.818.66 --initial-client-data=0x120,0x124,0x128,0xfc,0x1c4,0x7ffa08613cb8,0x7ffa08613cc8,0x7ffa08613cd8

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe" --type=gpu-process --field-trial-handle=1912,16654004259746294405,972773828092118600,131072 --enable-features=ForwardMemoryPressureEventsToGpuProcess,UseSwapChainsInSoftware --disable-features=FilterAdsOnAbusiveSites,SpareRendererForSitePerProcess,WebPayments,msApplicationGuard,msAutomaticTabFreeze,msBrowserSettingsSupported,msEdgeFaviconService,msEdgeLinkDoctor,msEdgeMGPFrev1,msEdgeOnRampFRE,msEdgeOnRampImport,msEdgeReadingView,msEdgeSettingsImport,msEdgeSettingsImportV2,msEdgeShoppingUI,msEdgeTranslate,msEdgeUseCaptivePortalService,msImplicitSignin,msPasswordBreachDetection,msReadAloud,msRevokeExtensions,msSendClientDataHeader,msSendClientDataHeaderToEdgeServices,msSyncEdgeCollections,msUseLabelingService,msWebAssistHistorySearch --noerrdialogs --user-data-dir="C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe.WebView2\EBWebView" --webview-exe-name=SynapseXRemake.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1988 /prefetch:2

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1912,16654004259746294405,972773828092118600,131072 --enable-features=ForwardMemoryPressureEventsToGpuProcess,UseSwapChainsInSoftware --disable-features=FilterAdsOnAbusiveSites,SpareRendererForSitePerProcess,WebPayments,msApplicationGuard,msAutomaticTabFreeze,msBrowserSettingsSupported,msEdgeFaviconService,msEdgeLinkDoctor,msEdgeMGPFrev1,msEdgeOnRampFRE,msEdgeOnRampImport,msEdgeReadingView,msEdgeSettingsImport,msEdgeSettingsImportV2,msEdgeShoppingUI,msEdgeTranslate,msEdgeUseCaptivePortalService,msImplicitSignin,msPasswordBreachDetection,msReadAloud,msRevokeExtensions,msSendClientDataHeader,msSendClientDataHeaderToEdgeServices,msSyncEdgeCollections,msUseLabelingService,msWebAssistHistorySearch --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe.WebView2\EBWebView" --webview-exe-name=SynapseXRemake.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --mojo-platform-channel-handle=2052 /prefetch:3

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1912,16654004259746294405,972773828092118600,131072 --enable-features=ForwardMemoryPressureEventsToGpuProcess,UseSwapChainsInSoftware --disable-features=FilterAdsOnAbusiveSites,SpareRendererForSitePerProcess,WebPayments,msApplicationGuard,msAutomaticTabFreeze,msBrowserSettingsSupported,msEdgeFaviconService,msEdgeLinkDoctor,msEdgeMGPFrev1,msEdgeOnRampFRE,msEdgeOnRampImport,msEdgeReadingView,msEdgeSettingsImport,msEdgeSettingsImportV2,msEdgeShoppingUI,msEdgeTranslate,msEdgeUseCaptivePortalService,msImplicitSignin,msPasswordBreachDetection,msReadAloud,msRevokeExtensions,msSendClientDataHeader,msSendClientDataHeaderToEdgeServices,msSyncEdgeCollections,msUseLabelingService,msWebAssistHistorySearch --lang=en-US --service-sandbox-type=utility --noerrdialogs --user-data-dir="C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe.WebView2\EBWebView" --webview-exe-name=SynapseXRemake.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --mojo-platform-channel-handle=2716 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe" --type=renderer --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc" --field-trial-handle=1912,16654004259746294405,972773828092118600,131072 --enable-features=ForwardMemoryPressureEventsToGpuProcess,UseSwapChainsInSoftware --disable-features=FilterAdsOnAbusiveSites,SpareRendererForSitePerProcess,WebPayments,msApplicationGuard,msAutomaticTabFreeze,msBrowserSettingsSupported,msEdgeFaviconService,msEdgeLinkDoctor,msEdgeMGPFrev1,msEdgeOnRampFRE,msEdgeOnRampImport,msEdgeReadingView,msEdgeSettingsImport,msEdgeSettingsImportV2,msEdgeShoppingUI,msEdgeTranslate,msEdgeUseCaptivePortalService,msImplicitSignin,msPasswordBreachDetection,msReadAloud,msRevokeExtensions,msSendClientDataHeader,msSendClientDataHeaderToEdgeServices,msSyncEdgeCollections,msUseLabelingService,msWebAssistHistorySearch --lang=en-US --noerrdialogs --user-data-dir="C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe.WebView2\EBWebView" --webview-exe-name=SynapseXRemake.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9f5cacc40,0x7ff9f5cacc4c,0x7ff9f5cacc58

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1764,i,9567072210831329733,12224321836388605727,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=1772 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1900,i,9567072210831329733,12224321836388605727,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=1928 /prefetch:3

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2192,i,9567072210831329733,12224321836388605727,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=2052 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3096,i,9567072210831329733,12224321836388605727,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=3224 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3136,i,9567072210831329733,12224321836388605727,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=3264 /prefetch:1

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4464,i,9567072210831329733,12224321836388605727,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4500 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4468,i,9567072210831329733,12224321836388605727,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=3784 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4748,i,9567072210831329733,12224321836388605727,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4760 /prefetch:8

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1912,16654004259746294405,972773828092118600,131072 --enable-features=ForwardMemoryPressureEventsToGpuProcess,UseSwapChainsInSoftware --disable-features=FilterAdsOnAbusiveSites,SpareRendererForSitePerProcess,WebPayments,msApplicationGuard,msAutomaticTabFreeze,msBrowserSettingsSupported,msEdgeFaviconService,msEdgeLinkDoctor,msEdgeMGPFrev1,msEdgeOnRampFRE,msEdgeOnRampImport,msEdgeReadingView,msEdgeSettingsImport,msEdgeSettingsImportV2,msEdgeShoppingUI,msEdgeTranslate,msEdgeUseCaptivePortalService,msImplicitSignin,msPasswordBreachDetection,msReadAloud,msRevokeExtensions,msSendClientDataHeader,msSendClientDataHeaderToEdgeServices,msSyncEdgeCollections,msUseLabelingService,msWebAssistHistorySearch --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe.WebView2\EBWebView" --webview-exe-name=SynapseXRemake.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --mojo-platform-channel-handle=4760 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4864,i,9567072210831329733,12224321836388605727,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4924 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4956,i,9567072210831329733,12224321836388605727,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4952 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4848,i,9567072210831329733,12224321836388605727,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4244 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4668,i,9567072210831329733,12224321836388605727,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4928 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5136,i,9567072210831329733,12224321836388605727,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4784 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5160,i,9567072210831329733,12224321836388605727,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4872 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=5196,i,9567072210831329733,12224321836388605727,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=5232 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=4924,i,9567072210831329733,12224321836388605727,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=5112 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=3276,i,9567072210831329733,12224321836388605727,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=3404 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=5520,i,9567072210831329733,12224321836388605727,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=5404 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=4900,i,9567072210831329733,12224321836388605727,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=5704 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=4844,i,9567072210831329733,12224321836388605727,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4508 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5948,i,9567072210831329733,12224321836388605727,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=5976 /prefetch:8

C:\Users\Admin\Downloads\SteamSetup.exe

"C:\Users\Admin\Downloads\SteamSetup.exe"

C:\Program Files (x86)\Steam\bin\steamservice.exe

"C:\Program Files (x86)\Steam\bin\steamservice.exe" /Install

C:\Program Files (x86)\Steam\steam.exe

"C:\Program Files (x86)\Steam\steam.exe"

C:\Program Files (x86)\Steam\steam.exe

"C:\Program Files (x86)\Steam\steam.exe"

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" "-lang=en_US" "-cachedir=C:\Users\Admin\AppData\Local\Steam\htmlcache" "-steampid=9896" "-buildid=1726604483" "-steamid=0" "-logdir=C:\Program Files (x86)\Steam\logs" "-uimode=7" "-startcount=0" "-userdatadir=C:\Users\Admin\AppData\Local\Steam\cefdata" "-steamuniverse=Public" "-realm=Global" "-clientui=C:\Program Files (x86)\Steam\clientui" "-steampath=C:\Program Files (x86)\Steam\steam.exe" "-launcher=0" --valve-enable-site-isolation --enable-smooth-scrolling --enable-direct-write "--log-file=C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-quick-menu "--enable-features=PlatformHEVCDecoderSupport" "--disable-features=SpareRendererForSitePerProcess,DcheckIsFatal"

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=crashpad-handler /prefetch:7 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files (x86)\Steam\dumps" "--metrics-dir=C:\Users\Admin\AppData\Local\CEF\User Data" --url=https://crash.steampowered.com/submit --annotation=platform=win64 --annotation=product=cefwebhelper --annotation=version=1726604483 --initial-client-data=0x350,0x354,0x358,0x32c,0x35c,0x7ff9f52cee38,0x7ff9f52cee48,0x7ff9f52cee58

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=0 --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=1592 --field-trial-handle=1708,i,853191174801958871,6085664169957038748,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=2176 --field-trial-handle=1708,i,853191174801958871,6085664169957038748,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004E4 0x00000000000004EC

C:\Program Files (x86)\Steam\bin\gldriverquery64.exe

.\bin\gldriverquery64.exe

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=2472 --field-trial-handle=1708,i,853191174801958871,6085664169957038748,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:8

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=0 --first-renderer-process --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2900 --field-trial-handle=1708,i,853191174801958871,6085664169957038748,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\gldriverquery.exe

.\bin\gldriverquery.exe

C:\Program Files (x86)\Steam\bin\vulkandriverquery64.exe

.\bin\vulkandriverquery64.exe

C:\Program Files (x86)\Steam\bin\vulkandriverquery.exe

.\bin\vulkandriverquery.exe

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=3420 --field-trial-handle=1708,i,853191174801958871,6085664169957038748,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:8

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=2224 --field-trial-handle=1708,i,853191174801958871,6085664169957038748,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3496 --field-trial-handle=1708,i,853191174801958871,6085664169957038748,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=3980 --field-trial-handle=1708,i,853191174801958871,6085664169957038748,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9f5cacc40,0x7ff9f5cacc4c,0x7ff9f5cacc58

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1936,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=1932 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1792,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=1964 /prefetch:3

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2196,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=2392 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3068,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=3228 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3156,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=3364 /prefetch:1

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3552,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=3568 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4576,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=3064 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4564,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4712 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4800,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4724 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4884,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4984 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=4816,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4232 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=5168,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4632 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=3464,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=3288 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=3484,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=3408 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=5232,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=5196 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=5360,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=5392 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=5368,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=5516 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=3268,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4324 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=3308,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=3244 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=3272,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=5412 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=3344,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=3212 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=5272,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=5236 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=5808,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4708 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=3732,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4632 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=3660 --field-trial-handle=1708,i,853191174801958871,6085664169957038748,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=3536 --field-trial-handle=1708,i,853191174801958871,6085664169957038748,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=5696,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=5792 /prefetch:8

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=4040 --field-trial-handle=1708,i,853191174801958871,6085664169957038748,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=2224 --field-trial-handle=1708,i,853191174801958871,6085664169957038748,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=4960,i,15475904061038201270,17423740075277623871,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=2956 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=4044 --field-trial-handle=1708,i,853191174801958871,6085664169957038748,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=3492 --field-trial-handle=1708,i,853191174801958871,6085664169957038748,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=3324 --field-trial-handle=1708,i,853191174801958871,6085664169957038748,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=0 --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=3468 --field-trial-handle=1708,i,853191174801958871,6085664169957038748,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=0 --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=4140 --field-trial-handle=1708,i,853191174801958871,6085664169957038748,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=0 --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=4108 --field-trial-handle=1708,i,853191174801958871,6085664169957038748,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=0 --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=disabled --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=3588 --field-trial-handle=1708,i,853191174801958871,6085664169957038748,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" "-lang=en_US" "-cachedir=C:\Users\Admin\AppData\Local\Steam\htmlcache" "-steampid=9896" "-buildid=1726604483" "-steamid=76561199799732454" "-logdir=C:\Program Files (x86)\Steam\logs" "-uimode=7" "-startcount=1" "-userdatadir=C:\Users\Admin\AppData\Local\Steam\cefdata" "-steamuniverse=Public" "-realm=Global" "-clientui=C:\Program Files (x86)\Steam\clientui" "-steampath=C:\Program Files (x86)\Steam\steam.exe" "-launcher=0" --valve-enable-site-isolation --enable-smooth-scrolling --enable-direct-write "--log-file=C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-quick-menu "--enable-features=PlatformHEVCDecoderSupport" "--disable-features=SpareRendererForSitePerProcess,DcheckIsFatal"

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=crashpad-handler /prefetch:7 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files (x86)\Steam\dumps" "--metrics-dir=C:\Users\Admin\AppData\Local\CEF\User Data" --url=https://crash.steampowered.com/submit --annotation=platform=win64 --annotation=product=cefwebhelper --annotation=version=1726604483 --initial-client-data=0x34c,0x350,0x354,0x328,0x358,0x7ff9f52cee38,0x7ff9f52cee48,0x7ff9f52cee58

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=76561199799732454 --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=1580 --field-trial-handle=1720,i,8624800891433644047,15018043307766943883,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=76561199799732454 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=2152 --field-trial-handle=1720,i,8624800891433644047,15018043307766943883,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:8

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=76561199799732454 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=2520 --field-trial-handle=1720,i,8624800891433644047,15018043307766943883,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:8

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=76561199799732454 --first-renderer-process --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2920 --field-trial-handle=1720,i,8624800891433644047,15018043307766943883,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=76561199799732454 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3556 --field-trial-handle=1720,i,8624800891433644047,15018043307766943883,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=76561199799732454 --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=3656 --field-trial-handle=1720,i,8624800891433644047,15018043307766943883,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=76561199799732454 --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=3656 --field-trial-handle=1720,i,8624800891433644047,15018043307766943883,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=76561199799732454 --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=2156 --field-trial-handle=1720,i,8624800891433644047,15018043307766943883,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=76561199799732454 --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=disabled --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=3080 --field-trial-handle=1720,i,8624800891433644047,15018043307766943883,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=76561199799732454 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=1792 --field-trial-handle=1720,i,8624800891433644047,15018043307766943883,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=76561199799732454 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=3016 --field-trial-handle=1720,i,8624800891433644047,15018043307766943883,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=76561199799732454 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4336 --field-trial-handle=1720,i,8624800891433644047,15018043307766943883,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=76561199799732454 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=4292 --field-trial-handle=1720,i,8624800891433644047,15018043307766943883,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004E4 0x00000000000004EC

C:\Program Files (x86)\Steam\Steam.exe

"C:\Program Files (x86)\Steam\Steam.exe"

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=76561199799732454 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=3564 --field-trial-handle=1720,i,8624800891433644047,15018043307766943883,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=76561199799732454 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=1692 --field-trial-handle=1720,i,8624800891433644047,15018043307766943883,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=76561199799732454 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=4356 --field-trial-handle=1720,i,8624800891433644047,15018043307766943883,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=76561199799732454 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=4012 --field-trial-handle=1720,i,8624800891433644047,15018043307766943883,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=76561199799732454 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=1740 --field-trial-handle=1720,i,8624800891433644047,15018043307766943883,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9f5cacc40,0x7ff9f5cacc4c,0x7ff9f5cacc58

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1960,i,15119137091419866542,5033175235589580951,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=1940 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1720,i,15119137091419866542,5033175235589580951,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=2064 /prefetch:3

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2192,i,15119137091419866542,5033175235589580951,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=2208 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3080,i,15119137091419866542,5033175235589580951,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=3236 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3208,i,15119137091419866542,5033175235589580951,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=3268 /prefetch:1

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4392,i,15119137091419866542,5033175235589580951,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4416 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4388,i,15119137091419866542,5033175235589580951,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4536 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4664,i,15119137091419866542,5033175235589580951,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4672 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4896,i,15119137091419866542,5033175235589580951,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4572 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4912,i,15119137091419866542,5033175235589580951,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4592 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=4984,i,15119137091419866542,5033175235589580951,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4300 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=3468,i,15119137091419866542,5033175235589580951,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4652 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=3256,i,15119137091419866542,5033175235589580951,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=5124 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=5220,i,15119137091419866542,5033175235589580951,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=5212 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=5172,i,15119137091419866542,5033175235589580951,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=5316 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=4376,i,15119137091419866542,5033175235589580951,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=4484 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=4432,i,15119137091419866542,5033175235589580951,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=3340 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=5552,i,15119137091419866542,5033175235589580951,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=3352 /prefetch:1

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5688,i,15119137091419866542,5033175235589580951,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=5664 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=4496,i,15119137091419866542,5033175235589580951,262144 --variations-seed-version=20241103-180210.308000 --mojo-platform-channel-handle=3484 /prefetch:1

C:\Program Files\VRCHub\VRCHub.exe

"C:\Program Files\VRCHub\VRCHub.exe"

C:\Windows\System32\rundll32.exe

"C:\Windows\System32\rundll32.exe" EasyAnalytics.dll,OpenAnalyticsPort

C:\Users\Admin\AppData\Local\Temp\ZER0.Certificates.exe

"C:\Users\Admin\AppData\Local\Temp\ZER0.Certificates.exe"

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=76561199799732454 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=3776 --field-trial-handle=1720,i,8624800891433644047,15018043307766943883,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726604483 --steamid=76561199799732454 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=1668 --field-trial-handle=1720,i,8624800891433644047,15018043307766943883,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1

C:\Users\Admin\AppData\Local\Temp\VRC Quick Launcher.exe

"C:\Users\Admin\AppData\Local\Temp\VRC Quick Launcher.exe"

C:\Program Files\VRCHub\VRCHub.exe

"C:\Program Files\VRCHub\VRCHub.exe"

C:\Windows\System32\rundll32.exe

"C:\Windows\System32\rundll32.exe" EasyAnalytics.dll,OpenAnalyticsPort

C:\Users\Admin\AppData\Local\Temp\ZER0.Certificates.exe

"C:\Users\Admin\AppData\Local\Temp\ZER0.Certificates.exe"

C:\Program Files (x86)\Common Files\Steam\steamservice.exe

"C:\Program Files (x86)\Common Files\Steam\steamservice.exe" /installscript "C:\Program Files (x86)\Steam\steamapps\common\VRChat\runasadmin.vdf" 438100

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2010\vcredist_x86.exe

"C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2010\vcredist_x86.exe" /quiet /norestart

\??\f:\c04d5530b170edd4f1\Setup.exe

f:\c04d5530b170edd4f1\Setup.exe /quiet /norestart

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2010\vcredist_x64.exe

"C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2010\vcredist_x64.exe" /quiet /norestart

\??\f:\f03170ef961820700a\Setup.exe

f:\f03170ef961820700a\Setup.exe /quiet /norestart

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2019\Microsoft Visual C++ 2019 x86.cmd" "

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2019\VC_redist.x86.exe

"C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2019\\VC_redist.x86.exe" /q /norestart

C:\Windows\Temp\{66836891-5273-4FE5-9D34-6500F9395E4A}\.cr\VC_redist.x86.exe

"C:\Windows\Temp\{66836891-5273-4FE5-9D34-6500F9395E4A}\.cr\VC_redist.x86.exe" -burn.clean.room="C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2019\VC_redist.x86.exe" -burn.filehandle.attached=604 -burn.filehandle.self=612 /q /norestart

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2019\Microsoft Visual C++ 2019 x64.cmd" "

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2019\VC_redist.x64.exe

"C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2019\\VC_redist.x64.exe" /q /norestart

C:\Windows\Temp\{964C3880-001A-4D57-B248-48563808236C}\.cr\VC_redist.x64.exe

"C:\Windows\Temp\{964C3880-001A-4D57-B248-48563808236C}\.cr\VC_redist.x64.exe" -burn.clean.room="C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2019\VC_redist.x64.exe" -burn.filehandle.attached=764 -burn.filehandle.self=604 /q /norestart

C:\Program Files (x86)\Steam\steamapps\common\VRChat\launch.exe

"C:\Program Files (x86)\Steam\steamapps\common\VRChat\launch.exe"

C:\Program Files (x86)\Steam\bin\x64launcher.exe

"C:\Program Files (x86)\Steam\bin\x64launcher.exe" -hproc 1248 -hthread 11f0 -baseoverlayname C:\Program Files (x86)\Steam\gameoverlayrenderer64.dll

C:\Program Files (x86)\Steam\steamapps\common\VRChat\EasyAntiCheat\EasyAntiCheat_EOS_Setup.exe

"C:\Program Files (x86)\Steam\steamapps\common\VRChat\\EasyAntiCheat\EasyAntiCheat_EOS_Setup.exe" install a4a57ff548934dbeba0cc7c62cdf9f34

C:\Program Files (x86)\Steam\bin\x86launcher.exe

"C:\Program Files (x86)\Steam\bin\x86launcher.exe" -hproc 3b4 -hthread 3b0 -baseoverlayname C:\Program Files (x86)\Steam\gameoverlayrenderer.dll

C:\Program Files (x86)\Steam\steamapps\common\VRChat\start_protected_game.exe

start_protected_game.exe --startup-begin-ts=216345524457

C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe

"C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe"

C:\Program Files (x86)\Steam\steam.exe

"C:\Program Files (x86)\Steam\steam.exe" -- "steam://rungameid/438100"

C:\Program Files (x86)\Steam\steamapps\common\VRChat\launch.exe

"C:\Program Files (x86)\Steam\steamapps\common\VRChat\launch.exe"

C:\Program Files (x86)\Steam\bin\x64launcher.exe

"C:\Program Files (x86)\Steam\bin\x64launcher.exe" -hproc 1230 -hthread 11c8 -baseoverlayname C:\Program Files (x86)\Steam\gameoverlayrenderer64.dll

C:\Program Files (x86)\Steam\steamapps\common\VRChat\start_protected_game.exe

start_protected_game.exe --startup-begin-ts=218612857163

C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe

"C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe"

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command " $wshell = New-Object -ComObject WScript.Shell; $shortcut = $wshell.CreateShortcut('C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VRCHub\VRCSpoofer.lnk'); $shortcut.TargetPath = 'C:\Users\Admin\AppData\Local\VRCHub\VRCSpoofer\ZER0.VRCSpoofer.exe'; $shortcut.Description = ''; $shortcut.Arguments = ''; if ('' -ne '') { $shortcut.IconLocation = ''; } if ('C:\Users\Admin\AppData\Local\VRCHub\VRCSpoofer' -ne '') { $shortcut.WorkingDirectory = 'C:\Users\Admin\AppData\Local\VRCHub\VRCSpoofer'; } $shortcut.Save(); "

C:\Users\Admin\AppData\Local\VRCHub\VRCSpoofer\ZER0.VRCSpoofer.exe

"C:\Users\Admin\AppData\Local\VRCHub\VRCSpoofer\ZER0.VRCSpoofer.exe"

C:\Program Files (x86)\Steam\steam.exe

"C:\Program Files (x86)\Steam\steam.exe" -- "steam://rungameid/438100"

C:\Program Files (x86)\Steam\steamapps\common\VRChat\launch.exe

"C:\Program Files (x86)\Steam\steamapps\common\VRChat\launch.exe"

C:\Program Files (x86)\Steam\bin\x64launcher.exe

"C:\Program Files (x86)\Steam\bin\x64launcher.exe" -hproc 1194 -hthread e6c -baseoverlayname C:\Program Files (x86)\Steam\gameoverlayrenderer64.dll

C:\Program Files (x86)\Steam\steamapps\common\VRChat\start_protected_game.exe

start_protected_game.exe --startup-begin-ts=224820095913

C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe

"C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe"

C:\Program Files (x86)\Steam\steamapps\common\VRChat\launch.exe

"C:\Program Files (x86)\Steam\steamapps\common\VRChat\launch.exe"

C:\Program Files (x86)\Steam\steamapps\common\VRChat\start_protected_game.exe

"C:\Program Files (x86)\Steam\steamapps\common\VRChat\start_protected_game.exe" --startup-begin-ts=228649118364

C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe

"C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe"

C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat.exe

"C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat.exe"

C:\Program Files (x86)\Steam\steamapps\common\VRChat\UnityCrashHandler64.exe

"C:\Program Files (x86)\Steam\steamapps\common\VRChat\UnityCrashHandler64.exe" --attach 23928 2409348337664

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

Network

Country Destination Domain Proto
US 172.67.204.5:443 vrchub.site tcp
US 172.67.204.5:443 vrchub.site tcp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
US 8.8.8.8:53 5.204.67.172.in-addr.arpa udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
N/A 224.0.0.251:5353 udp
GB 92.123.128.182:443 www.bing.com tcp
GB 92.123.128.144:443 r.bing.com tcp
GB 92.123.128.144:443 r.bing.com tcp
GB 92.123.128.194:443 th.bing.com tcp
GB 92.123.128.194:443 th.bing.com tcp
NL 40.126.32.76:443 login.microsoftonline.com tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
GB 2.19.252.146:443 aefd.nelreports.net tcp
US 8.8.8.8:53 146.252.19.2.in-addr.arpa udp
US 8.8.8.8:53 136.71.105.51.in-addr.arpa udp
US 52.167.30.171:443 fpt2.microsoft.com tcp
US 52.167.30.171:443 fpt2.microsoft.com tcp
GB 2.19.252.146:443 aefd.nelreports.net udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.179.228:443 www.google.com udp
GB 142.250.179.228:443 www.google.com tcp
GB 216.58.201.110:443 apis.google.com udp
GB 216.58.213.10:443 ogads-pa.googleapis.com udp
GB 216.58.213.10:443 ogads-pa.googleapis.com tcp
GB 172.217.16.238:443 consent.google.com udp
GB 172.217.16.238:443 consent.google.com tcp
GB 142.250.178.14:443 clients2.google.com udp
GB 142.250.178.14:443 clients2.google.com tcp
US 8.8.8.8:53 35.200.250.142.in-addr.arpa udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 216.58.213.10:443 ogads-pa.googleapis.com tcp
GB 216.58.213.10:443 ogads-pa.googleapis.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 172.217.16.238:443 consent.google.com tcp
GB 172.217.16.238:443 consent.google.com udp
US 34.149.87.45:443 www.kingexploits.com tcp
US 34.149.87.45:443 www.kingexploits.com tcp
US 34.149.87.45:443 www.kingexploits.com udp
US 8.8.8.8:53 static.wixstatic.com udp
US 34.49.229.81:443 siteassets.parastorage.com tcp
US 34.49.229.81:443 siteassets.parastorage.com tcp
US 8.8.8.8:53 dt3y1f1i1disy.cloudfront.net udp
IE 18.66.171.84:443 static.wixstatic.com tcp
IE 18.66.171.84:443 static.wixstatic.com tcp
IE 18.66.168.30:443 dt3y1f1i1disy.cloudfront.net tcp
US 34.49.229.81:443 siteassets.parastorage.com tcp
US 34.49.229.81:443 siteassets.parastorage.com udp
US 8.8.8.8:53 omefukmendation.com udp
US 8.8.8.8:53 ghabovethec.info udp
US 34.49.229.81:443 siteassets.parastorage.com udp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 frog.wix.com udp
US 8.8.8.8:53 panorama.wixapps.net udp
US 172.67.192.190:443 ukankingwithea.com tcp
US 172.67.192.190:443 ukankingwithea.com tcp
US 172.67.145.235:443 omefukmendation.com tcp
US 172.67.145.235:443 omefukmendation.com tcp
GB 54.192.137.68:443 loaksandtheir.info tcp
GB 18.244.140.100:443 ghabovethec.info tcp
BE 108.177.15.84:443 accounts.google.com tcp
BE 108.177.15.84:443 accounts.google.com tcp
US 34.234.206.86:443 frog.wix.com tcp
US 34.149.206.255:443 panorama.wixapps.net tcp
BE 108.177.15.84:443 accounts.google.com tcp
GB 157.240.214.35:443 www.facebook.com tcp
GB 157.240.214.35:443 www.facebook.com tcp
IE 18.66.171.84:443 static.wixstatic.com udp
US 8.8.8.8:53 235.145.67.172.in-addr.arpa udp
US 8.8.8.8:53 68.137.192.54.in-addr.arpa udp
US 8.8.8.8:53 100.140.244.18.in-addr.arpa udp
US 8.8.8.8:53 255.206.149.34.in-addr.arpa udp
US 8.8.8.8:53 86.206.234.34.in-addr.arpa udp
US 8.8.8.8:53 84.15.177.108.in-addr.arpa udp
US 8.8.8.8:53 35.214.240.157.in-addr.arpa udp
BE 108.177.15.84:443 accounts.google.com udp
US 172.67.145.235:443 omefukmendation.com udp
US 34.149.206.255:443 panorama.wixapps.net udp
US 47.88.111.42:443 wix.salesdish.com tcp
US 47.89.217.158:443 gateway.salesdish.com tcp
US 34.149.206.255:443 panorama.wixapps.net udp
GB 216.58.204.78:443 www.youtube.com tcp
US 151.101.66.217:443 browser.sentry-cdn.com tcp
US 52.24.140.146:443 duplexer.wix.com tcp
GB 216.58.204.78:443 www.youtube.com udp
GB 216.58.204.78:443 www.youtube.com tcp
GB 216.58.204.78:443 www.youtube.com udp
GB 216.58.204.86:443 i.ytimg.com tcp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
GB 142.250.179.230:443 static.doubleclick.net tcp
GB 216.58.212.202:443 jnn-pa.googleapis.com tcp
GB 142.250.180.4:443 www.google.com tcp
GB 216.58.201.98:443 googleads.g.doubleclick.net udp
GB 216.58.212.202:443 jnn-pa.googleapis.com udp
GB 142.250.187.225:443 yt3.ggpht.com tcp
GB 172.217.16.238:443 www.youtube.com tcp
US 8.8.8.8:53 202.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 4.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 225.187.250.142.in-addr.arpa udp
GB 172.217.16.238:443 www.youtube.com udp
GB 54.192.137.68:443 loaksandtheir.info tcp
GB 54.192.137.68:443 loaksandtheir.info tcp
US 104.21.67.56:443 mboost.me tcp
US 18.214.201.130:443 sentry-next.wixpress.com tcp
GB 54.192.137.68:443 loaksandtheir.info tcp
US 34.195.224.242:443 khneh.columnstoodth.com tcp
US 8.8.8.8:53 56.67.21.104.in-addr.arpa udp
US 8.8.8.8:53 130.201.214.18.in-addr.arpa udp
GB 157.240.214.35:443 www.facebook.com tcp
BE 108.177.15.84:443 accounts.google.com tcp
BE 108.177.15.84:443 accounts.google.com tcp
BE 108.177.15.84:443 accounts.google.com udp
US 104.21.67.56:443 mboost.me tcp
US 104.21.67.56:443 mboost.me udp
US 8.8.8.8:53 10.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 cdn.wearedevs.net udp
US 8.8.8.8:53 api.mboost.me udp
US 172.67.71.2:443 cdn.wearedevs.net tcp
US 172.67.71.2:443 cdn.wearedevs.net tcp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.32.36:443 region1.google-analytics.com tcp
GB 216.58.204.78:443 www.youtube.com tcp
US 172.66.42.247:443 resources.infolinks.com tcp
US 216.239.32.36:443 region1.google-analytics.com tcp
GB 216.58.204.78:443 www.youtube.com tcp
US 8.8.8.8:53 200.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 2.71.67.172.in-addr.arpa udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 consent.youtube.com udp
US 8.8.8.8:53 router.infolinks.com udp
US 8.8.8.8:53 247.42.66.172.in-addr.arpa udp
US 172.66.42.247:443 router.infolinks.com tcp
US 8.8.8.8:53 rt3075.infolinks.com udp
US 172.66.41.9:443 rt3075.infolinks.com tcp
US 8.8.8.8:53 238.187.250.142.in-addr.arpa udp
US 172.66.41.9:443 rt3075.infolinks.com tcp
US 8.8.8.8:53 imasdk.googleapis.com udp
GB 142.250.187.202:443 imasdk.googleapis.com tcp
US 8.8.8.8:53 202.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 youtu.be udp
US 216.239.32.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 2.178.250.142.in-addr.arpa udp
GB 172.217.16.238:443 www.youtube.com udp
GB 216.58.204.78:443 www.youtube.com udp
GB 142.250.180.4:443 www.google.com tcp
LU 31.216.145.5:443 mega.nz tcp
LU 31.216.145.5:443 mega.nz tcp
US 8.8.8.8:53 5.145.216.31.in-addr.arpa udp
GB 142.250.179.234:443 content-autofill.googleapis.com tcp
US 8.8.8.8:53 eu.static.mega.co.nz udp
LU 31.216.145.5:443 mega.nz tcp
LU 89.44.169.134:443 eu.static.mega.co.nz tcp
LU 89.44.169.134:443 eu.static.mega.co.nz tcp
LU 66.203.125.15:443 g.api.mega.co.nz tcp
LU 66.203.125.15:443 g.api.mega.co.nz tcp
LU 66.203.125.15:443 g.api.mega.co.nz tcp
US 8.8.8.8:53 134.169.44.89.in-addr.arpa udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
GB 216.58.204.78:443 www.youtube.com udp
US 8.8.8.8:53 beacons5.gvt3.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 15.125.203.66.in-addr.arpa udp
US 8.8.8.8:53 3.213.58.216.in-addr.arpa udp
GB 172.217.169.35:443 beacons5.gvt3.com tcp
GB 172.217.169.35:443 beacons5.gvt3.com tcp
LU 89.44.169.134:443 eu.static.mega.co.nz tcp
N/A 127.0.0.1:6341 tcp
N/A 127.0.0.1:6341 tcp
NL 185.206.24.30:443 gfs204n070.userstorage.mega.co.nz tcp
GB 20.26.156.215:443 github.com tcp
US 185.199.109.133:443 objects.githubusercontent.com tcp
US 172.67.204.5:443 api.vrchub.site tcp
US 172.67.204.5:443 api.vrchub.site tcp
US 8.8.8.8:53 datapacks.vrchub.site udp
US 172.67.204.5:443 datapacks.vrchub.site tcp
US 8.8.8.8:53 software.vrchub.site udp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 44.234.198.184:443 api.segment.io tcp
US 172.67.204.5:443 software.vrchub.site tcp
GB 51.11.108.188:443 nav.smartscreen.microsoft.com tcp
GB 172.165.61.93:443 data-edge.smartscreen.microsoft.com tcp
GB 172.165.61.93:443 data-edge.smartscreen.microsoft.com tcp
GB 172.165.61.93:443 data-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 203.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 93.61.165.172.in-addr.arpa udp
GB 142.250.180.4:443 www.google.com udp
GB 142.250.180.4:443 www.google.com tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
GB 216.58.213.10:443 content-autofill.googleapis.com udp
GB 216.58.213.10:443 content-autofill.googleapis.com tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
GB 142.250.178.14:443 play.google.com udp
GB 142.250.178.14:443 play.google.com tcp
GB 142.250.178.14:443 play.google.com udp
US 8.8.4.4:443 dns.google tcp
GB 142.250.178.14:443 play.google.com tcp
GB 142.250.178.14:443 play.google.com tcp
GB 216.58.213.1:443 clients2.googleusercontent.com udp
US 8.8.8.8:53 1.213.58.216.in-addr.arpa udp
GB 142.250.179.227:443 id.google.com tcp
US 8.8.8.8:53 dns-tunnel-check.googlezip.net udp
GB 216.58.213.10:443 content-autofill.googleapis.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 216.58.213.10:443 content-autofill.googleapis.com tcp
GB 142.250.179.234:443 content-autofill.googleapis.com tcp
GB 216.58.213.10:443 content-autofill.googleapis.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 8.8.8.8:53 store.fastly.steamstatic.com udp
US 151.101.67.52:443 shared.fastly.steamstatic.com tcp
US 151.101.67.52:443 shared.fastly.steamstatic.com tcp
US 151.101.67.52:443 shared.fastly.steamstatic.com tcp
US 151.101.67.52:443 shared.fastly.steamstatic.com tcp
US 151.101.67.52:443 shared.fastly.steamstatic.com tcp
US 151.101.67.52:443 shared.fastly.steamstatic.com tcp
US 151.101.67.52:443 shared.fastly.steamstatic.com tcp
US 151.101.195.52:443 shared.fastly.steamstatic.com tcp
US 151.101.195.52:443 shared.fastly.steamstatic.com tcp
US 151.101.195.52:443 shared.fastly.steamstatic.com tcp
US 151.101.195.52:443 shared.fastly.steamstatic.com tcp
US 151.101.195.52:443 shared.fastly.steamstatic.com tcp
US 151.101.195.52:443 shared.fastly.steamstatic.com tcp
US 151.101.3.52:443 shared.fastly.steamstatic.com tcp
US 151.101.3.52:443 shared.fastly.steamstatic.com tcp
US 151.101.3.52:443 shared.fastly.steamstatic.com tcp
GB 2.17.5.46:443 store.steampowered.com tcp
GB 2.17.5.46:443 store.steampowered.com tcp
GB 2.17.5.46:443 store.steampowered.com tcp
GB 2.17.5.46:443 store.steampowered.com tcp
US 8.8.8.8:53 52.3.101.151.in-addr.arpa udp
US 151.101.3.52:443 shared.fastly.steamstatic.com tcp
US 151.101.3.52:443 shared.fastly.steamstatic.com tcp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 r11.o.lencr.org udp
GB 2.23.210.75:80 r11.o.lencr.org tcp
US 8.8.8.8:53 52.131.101.151.in-addr.arpa udp
US 8.8.8.8:53 32.169.19.2.in-addr.arpa udp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 test.steampowered.com udp
GB 2.19.117.133:80 test.steampowered.com tcp
N/A 127.0.0.1:52756 tcp
N/A 127.0.0.1:52755 tcp
GB 104.82.234.109:443 api.steampowered.com tcp
HK 103.28.54.100:27019 cmp1-hkg1.steamserver.net tcp
HK 103.28.54.101:27018 cmp2-hkg1.steamserver.net tcp
HK 103.28.54.172:443 ext6-hkg1.steamserver.net tcp
DE 155.133.250.4:27024 cmp1-fra1.steamserver.net tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
GB 2.23.210.75:80 e6.o.lencr.org tcp
US 8.8.8.8:53 100.54.28.103.in-addr.arpa udp
US 8.8.8.8:53 101.54.28.103.in-addr.arpa udp
US 8.8.8.8:53 172.54.28.103.in-addr.arpa udp
US 8.8.4.4:443 dns.google udp
GB 216.58.201.99:443 tcp
GB 104.82.234.109:443 api.steampowered.com tcp
ES 155.133.246.36:27018 cmp1-mad1.steamserver.net tcp
ES 155.133.246.52:443 cmp2-mad1.steamserver.net tcp
ES 155.133.246.52:27018 cmp2-mad1.steamserver.net tcp
FR 185.25.182.52:27022 ext2-par1.steamserver.net tcp
GB 2.23.210.82:80 e5.o.lencr.org tcp
GB 2.23.210.75:80 e5.o.lencr.org tcp
FR 185.25.182.20:27023 ext1-par1.steamserver.net tcp
DE 155.133.250.20:27022 cmp2-fra1.steamserver.net tcp
US 8.8.8.8:53 20.250.133.155.in-addr.arpa udp
US 8.8.8.8:53 36.246.133.155.in-addr.arpa udp
GB 216.58.201.99:443 udp
US 8.8.4.4:443 dns.google udp
GB 2.17.5.46:443 store.steampowered.com tcp
US 151.101.195.52:443 client-update.steamstatic.com tcp
US 151.101.195.52:443 client-update.steamstatic.com tcp
US 151.101.195.52:443 client-update.steamstatic.com tcp
US 104.19.229.21:443 tcp
US 151.101.195.52:443 client-update.steamstatic.com tcp
US 104.19.230.21:443 udp
GB 142.250.200.14:443 www.youtube.com tcp
GB 173.194.5.233:443 udp
US 151.101.3.52:443 client-update.steamstatic.com tcp
GB 2.23.210.75:80 r10.o.lencr.org tcp
US 104.19.229.21:443 tcp
US 104.19.229.21:443 udp
GB 104.82.234.109:443 api.steampowered.com tcp
HK 103.28.54.173:27033 ext7-hkg1.steamserver.net tcp
HK 103.28.54.102:27018 cmp3-hkg1.steamserver.net tcp
HK 103.28.54.173:443 ext7-hkg1.steamserver.net tcp
SG 103.10.124.4:27018 cmp1-sgp1.steamserver.net tcp
SG 103.10.124.4:27020 cmp1-sgp1.steamserver.net tcp
GB 2.23.210.75:80 r10.o.lencr.org tcp
SG 103.10.124.4:443 cmp1-sgp1.steamserver.net tcp
JP 45.121.184.20:27030 ext1-tyo3.steamserver.net tcp
JP 45.121.184.22:27037 ext3-tyo3.steamserver.net tcp
JP 45.121.184.22:443 ext3-tyo3.steamserver.net tcp
US 162.254.195.69:27018 cmp1-lax1.steamserver.net tcp
US 162.254.195.69:443 cmp1-lax1.steamserver.net tcp
GB 2.23.210.82:80 r10.o.lencr.org tcp
US 205.196.6.132:443 cmp1-sea1.steamserver.net tcp
GB 104.82.234.109:443 api.steampowered.com tcp
SE 162.254.198.46:27036 ext3-sto1.steamserver.net tcp
SE 162.254.198.46:27019 ext3-sto1.steamserver.net tcp
SE 155.133.252.68:27018 cmp1-sto2.steamserver.net tcp
SE 155.133.252.68:443 cmp1-sto2.steamserver.net tcp
GB 2.23.210.75:80 r10.o.lencr.org tcp
SE 155.133.252.69:27019 cmp2-sto2.steamserver.net tcp
SE 162.254.198.46:443 ext3-sto1.steamserver.net tcp
US 8.8.8.8:53 69.252.133.155.in-addr.arpa udp
GB 104.82.234.109:443 api.steampowered.com tcp
AT 146.66.155.84:443 cmp1-vie1.steamserver.net tcp
AT 146.66.155.85:27018 cmp2-vie1.steamserver.net tcp
AT 146.66.155.84:27018 cmp1-vie1.steamserver.net tcp
US 155.133.229.4:27021 cmp1-fra2.steamserver.net tcp
GB 2.23.210.75:80 r10.o.lencr.org tcp
GB 2.23.210.75:80 r10.o.lencr.org tcp
US 8.8.8.8:53 85.155.66.146.in-addr.arpa udp
GB 104.82.234.109:443 api.steampowered.com tcp
PL 155.133.230.50:27029 p2p-waw1.discovery.steamserver.net tcp
PL 155.133.230.50:27034 p2p-waw1.discovery.steamserver.net tcp
PL 155.133.230.50:443 p2p-waw1.discovery.steamserver.net tcp
US 155.133.229.4:27018 cmp1-fra2.steamserver.net tcp
GB 216.58.201.100:443 www.google.com udp
GB 216.58.201.100:443 www.google.com tcp
GB 172.217.16.234:443 ogads-pa.googleapis.com udp
GB 172.217.16.234:443 ogads-pa.googleapis.com tcp
GB 172.217.16.238:443 play.google.com udp
GB 172.217.16.238:443 play.google.com tcp
GB 142.250.178.14:443 clients2.google.com udp
GB 142.250.178.14:443 clients2.google.com tcp
GB 142.250.200.3:443 id.google.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 172.217.16.234:443 ogads-pa.googleapis.com udp
GB 172.217.16.234:443 ogads-pa.googleapis.com tcp
GB 172.217.16.238:443 play.google.com udp
GB 172.217.16.238:443 play.google.com tcp
US 8.8.8.8:53 unpkg.com udp
US 8.8.8.8:53 static.cloudflareinsights.com udp
US 104.21.94.236:443 smailpro.com tcp
US 104.21.94.236:443 smailpro.com tcp
US 104.21.94.236:443 smailpro.com tcp
US 104.21.94.236:443 smailpro.com tcp
US 104.21.94.236:443 smailpro.com tcp
US 151.101.193.229:443 cdn.jsdelivr.net tcp
US 104.17.249.203:443 unpkg.com tcp
US 104.16.79.73:443 static.cloudflareinsights.com tcp
US 151.101.193.229:443 cdn.jsdelivr.net tcp
US 104.21.94.236:443 smailpro.com udp
US 104.21.94.236:443 smailpro.com udp
US 172.67.211.113:443 app.sonjj.com tcp
US 172.67.211.113:443 app.sonjj.com udp
GB 216.58.201.110:443 fundingchoicesmessages.google.com tcp
GB 104.82.234.109:443 api.steampowered.com tcp
GB 216.58.201.110:443 fundingchoicesmessages.google.com udp
GB 216.58.212.225:443 lh3.googleusercontent.com tcp
GB 216.58.201.110:443 fundingchoicesmessages.google.com udp
AT 146.66.155.84:443 cmp1-vie1.steamserver.net tcp
AT 146.66.155.84:27018 cmp1-vie1.steamserver.net tcp
US 155.133.229.4:27023 cmp1-fra2.steamserver.net tcp
AT 146.66.155.85:27018 cmp2-vie1.steamserver.net tcp
DE 155.133.250.20:27020 cmp2-fra1.steamserver.net tcp
US 155.133.229.20:27022 cmp2-fra2.steamserver.net tcp
GB 2.23.210.75:80 e5.o.lencr.org tcp
GB 142.250.179.225:443 ep2.adtrafficquality.google tcp
GB 142.250.179.225:443 ep2.adtrafficquality.google tcp
GB 216.58.201.100:443 www.google.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
GB 172.217.16.230:443 s0.2mdn.net tcp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
GB 2.23.210.97:443 cdn.doubleverify.com tcp
US 172.64.151.101:443 dsum-sec.casalemedia.com tcp
DE 37.252.171.53:443 ib.adnxs.com tcp
GB 172.217.16.227:443 p4-clobs3uuum5g6-7trqdoo3ylt6lvju-if-v6exp3-v4.metric.gstatic.com tcp
US 8.8.8.8:53 225.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 33.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 230.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 101.151.64.172.in-addr.arpa udp
US 8.8.8.8:53 97.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 38.200.250.142.in-addr.arpa udp
DE 37.252.171.53:443 ib.adnxs.com tcp
US 172.64.151.101:443 dsum-sec.casalemedia.com udp
GB 216.58.201.100:443 www.google.com udp
GB 172.217.169.33:443 tpc.googlesyndication.com udp
GB 172.217.16.230:443 s0.2mdn.net udp
GB 172.217.16.227:443 p4-clobs3uuum5g6-7trqdoo3ylt6lvju-if-v6exp3-v4.metric.gstatic.com udp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
GB 142.250.179.225:443 ep2.adtrafficquality.google udp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
GB 216.58.212.194:443 ade.googlesyndication.com tcp
IE 52.30.62.169:443 fw.adsafeprotected.com tcp
DE 37.252.171.53:443 ib.adnxs.com tcp
US 35.244.159.8:443 us-u.openx.net tcp
US 3.91.121.153:443 dt.adsafeprotected.com tcp
US 3.91.121.153:443 dt.adsafeprotected.com tcp
US 3.91.121.153:443 dt.adsafeprotected.com tcp
US 3.91.121.153:443 dt.adsafeprotected.com tcp
GB 2.17.149.102:443 sync.teads.tv tcp
IE 18.66.171.36:443 static.adsafeprotected.com tcp
US 3.91.121.153:443 dt.adsafeprotected.com tcp
GB 2.17.149.102:443 sync.teads.tv tcp
US 35.244.159.8:443 us-u.openx.net tcp
BE 142.250.110.156:443 bid.g.doubleclick.net tcp
US 35.244.159.8:443 us-u.openx.net udp
GB 2.17.5.25:443 servedby.flashtalking.com tcp
GB 2.17.5.25:443 servedby.flashtalking.com tcp
US 8.8.8.8:53 25.5.17.2.in-addr.arpa udp
US 8.8.8.8:53 36.171.66.18.in-addr.arpa udp
GB 2.22.249.31:443 ajs-assets.ftstatic.com tcp
IE 13.224.68.5:443 agen-assets.ftstatic.com tcp
IE 18.66.171.48:443 cdn.flashtalking.com tcp
IE 18.66.171.48:443 cdn.flashtalking.com tcp
GB 18.169.60.99:443 ad-events.flashtalking.com tcp
GB 18.170.252.3:443 ad-events.flashtalking.com tcp
GB 18.169.60.99:443 ad-events.flashtalking.com tcp
GB 216.58.212.194:443 ade.googlesyndication.com udp
US 151.101.193.229:443 cdn.jsdelivr.net udp
US 104.16.79.73:443 static.cloudflareinsights.com tcp
DE 142.250.186.67:443 csi.gstatic.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
GB 216.58.212.202:443 content-autofill.googleapis.com tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
GB 142.250.200.46:443 encrypted-tbn2.gstatic.com tcp
US 3.165.232.77:443 a.svtrd.com tcp
GB 87.248.114.12:443 ups.analytics.yahoo.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
IE 3.162.140.114:443 t.svtrd.com tcp
US 15.197.193.217:443 match.adsrvr.org tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 js.hcaptcha.com udp
US 8.8.8.8:53 js.hcaptcha.com udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google udp
US 104.19.229.21:443 js.hcaptcha.com udp
GB 104.82.234.109:443 steamcommunity.com tcp
US 155.133.229.4:27023 cmp1-fra2.steamserver.net tcp
DE 155.133.250.20:27024 cmp2-fra1.steamserver.net tcp
US 155.133.229.4:27018 cmp1-fra2.steamserver.net tcp
DE 155.133.250.20:27018 cmp2-fra1.steamserver.net tcp
SE 162.254.198.44:27025 ext1-sto1.steamserver.net tcp
SE 155.133.252.69:27019 cmp2-sto2.steamserver.net tcp
SE 155.133.252.69:27018 cmp2-sto2.steamserver.net tcp
SE 162.254.198.46:27020 ext3-sto1.steamserver.net tcp
US 104.19.230.21:443 js.hcaptcha.com udp
GB 216.58.201.100:443 www.google.com tcp
GB 216.58.201.100:443 www.google.com udp
GB 216.58.212.202:443 content-autofill.googleapis.com udp
GB 216.58.212.194:443 ade.googlesyndication.com udp
US 130.211.44.5:443 tps.doubleverify.com tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 104.19.230.21:443 js.hcaptcha.com udp
US 104.19.230.21:443 js.hcaptcha.com udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google udp
GB 104.82.234.109:443 steamcommunity.com tcp
BR 155.133.227.34:27034 ext1-gru1.steamserver.net tcp
BR 155.133.227.34:27023 ext1-gru1.steamserver.net tcp
AR 155.133.255.164:27028 ext2-eze1.steamserver.net tcp
AR 155.133.255.164:27036 ext2-eze1.steamserver.net tcp
CL 155.133.249.164:27031 ext2-scl1.steamserver.net tcp
CL 155.133.249.164:27035 ext2-scl1.steamserver.net tcp
AR 155.133.255.100:443 ext1-eze1.steamserver.net tcp
CL 155.133.249.180:443 ext1-scl1.steamserver.net tcp
PE 155.133.244.50:27023 ext2-lim1.steamserver.net tcp
PE 155.133.244.34:27021 ext1-lim1.steamserver.net tcp
US 162.254.193.103:443 cmp1-ord1.steamserver.net tcp
US 162.254.193.103:27018 cmp1-ord1.steamserver.net tcp
GB 2.23.210.82:80 e6.o.lencr.org tcp
GB 216.58.201.100:443 www.google.com udp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
GB 216.58.212.194:443 ade.googlesyndication.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
GB 2.17.5.46:443 store.steampowered.com tcp
GB 2.17.5.46:443 store.steampowered.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
US 8.8.4.4:443 dns.google udp
US 151.101.195.52:443 cdn.steamstatic.com tcp
GB 104.82.234.109:443 steamcommunity.com tcp
IN 155.133.224.22:27034 ext1-bom2.steamserver.net tcp
IN 155.133.224.23:27023 ext2-bom2.steamserver.net tcp
IN 155.133.224.22:443 ext1-bom2.steamserver.net tcp
IN 155.133.225.21:27034 ext2-maa2.steamserver.net tcp
IN 155.133.225.21:27028 ext2-maa2.steamserver.net tcp
IN 155.133.225.20:443 ext1-maa2.steamserver.net tcp
AE 185.25.183.36:27021 ext1-dxb1.steamserver.net tcp
AE 185.25.183.52:27038 ext2-dxb1.steamserver.net tcp
SG 103.10.124.5:27018 cmp2-sgp1.steamserver.net tcp
SG 103.10.124.5:27019 cmp2-sgp1.steamserver.net tcp
US 155.133.229.20:27019 cmp2-fra2.steamserver.net tcp
AE 185.25.183.36:27036 ext1-dxb1.steamserver.net tcp
GB 2.23.210.75:80 e6.o.lencr.org tcp
N/A 10.127.255.255:27036 udp
GB 2.19.252.199:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.252.199:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.252.199:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.252.199:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.252.199:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.252.199:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.252.199:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.252.199:80 clientconfig.akamai.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
GB 2.19.117.150:443 steamstore-a.akamaihd.net tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
GB 2.19.117.150:443 steamstore-a.akamaihd.net tcp
GB 2.19.117.150:443 steamstore-a.akamaihd.net tcp
US 151.101.195.52:443 cdn.steamstatic.com tcp
US 151.101.195.52:443 cdn.steamstatic.com tcp
US 151.101.195.52:443 cdn.steamstatic.com tcp
GB 104.82.234.109:443 steamcommunity.com tcp
GB 104.82.234.109:443 steamcommunity.com tcp
GB 2.23.210.82:80 e6.o.lencr.org tcp
US 8.8.4.4:443 dns.google udp
GB 2.19.117.169:443 tcp
GB 2.17.5.46:443 store.steampowered.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 208.64.203.140:443 crash.steampowered.com tcp
US 151.101.195.52:443 cdn.steamstatic.com tcp
US 151.101.195.52:443 cdn.steamstatic.com tcp
US 151.101.195.52:443 cdn.steamstatic.com tcp
N/A 127.0.0.1:27060 tcp
US 130.211.44.5:443 tps.doubleverify.com tcp
N/A 127.0.0.1:52756 tcp
N/A 127.0.0.1:52755 tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 store.steampowered.com udp
US 8.8.8.8:53 store.steampowered.com udp
GB 2.17.5.46:443 store.steampowered.com tcp
US 208.64.203.140:443 crash.steampowered.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google udp
US 8.8.4.4:443 dns.google tcp
N/A 127.0.0.1:52756 tcp
N/A 127.0.0.1:52755 tcp
GB 104.82.234.109:443 steamcommunity.com tcp
US 151.101.3.52:443 cdn.steamstatic.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 151.101.195.52:443 cdn.steamstatic.com tcp
US 151.101.195.52:443 cdn.steamstatic.com tcp
US 151.101.195.52:443 cdn.steamstatic.com tcp
US 151.101.195.52:443 cdn.steamstatic.com tcp
US 151.101.195.52:443 cdn.steamstatic.com tcp
US 151.101.195.52:443 cdn.steamstatic.com tcp
US 151.101.3.52:443 cdn.steamstatic.com tcp
GB 2.17.5.46:443 store.steampowered.com tcp
GB 2.17.5.46:443 store.steampowered.com tcp
GB 2.17.5.46:443 store.steampowered.com tcp
N/A 127.0.0.1:27060 tcp
GB 104.83.1.150:443 tcp
GB 2.19.117.144:443 steamstore-a.akamaihd.net tcp
GB 2.19.117.144:443 steamstore-a.akamaihd.net tcp
GB 2.19.117.144:443 steamstore-a.akamaihd.net tcp
GB 20.209.6.225:443 steamcloudlondon.blob.core.windows.net tcp
US 8.8.8.8:443 dns.google udp
GB 216.58.201.99:443 tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google udp
US 151.101.195.52:443 cdn.steamstatic.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 151.101.3.52:443 cdn.steamstatic.com tcp
US 151.101.3.52:443 cdn.steamstatic.com tcp
US 151.101.3.52:443 cdn.steamstatic.com tcp
US 151.101.3.52:443 cdn.steamstatic.com tcp
GB 104.82.234.109:443 steamcommunity.com tcp
GB 2.19.252.199:80 clientconfig.akamai.steamstatic.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 151.101.3.52:443 cdn.steamstatic.com tcp
GB 2.17.5.46:443 store.steampowered.com tcp
US 151.101.3.52:443 cdn.steamstatic.com tcp
US 151.101.3.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 lancache.steamcontent.com udp
GB 162.254.196.23:443 cache13-lhr1.steamcontent.com tcp
US 8.8.8.8:53 cache16-lhr1.steamcontent.com udp
GB 162.254.196.26:443 cache16-lhr1.steamcontent.com tcp
GB 2.23.210.82:80 e5.o.lencr.org tcp
US 8.8.8.8:53 26.196.254.162.in-addr.arpa udp
GB 2.23.210.82:80 e6.o.lencr.org tcp
GB 162.254.196.8:443 cache1-lhr1.steamcontent.com tcp
GB 162.254.196.23:443 cache13-lhr1.steamcontent.com tcp
GB 162.254.196.26:443 cache16-lhr1.steamcontent.com tcp
GB 162.254.196.18:443 cache11-lhr1.steamcontent.com tcp
GB 162.254.196.6:443 cache7-lhr1.steamcontent.com tcp
US 8.8.8.8:53 6.196.254.162.in-addr.arpa udp
GB 216.58.201.100:443 www.google.com udp
GB 216.58.201.100:443 www.google.com tcp
GB 216.58.213.10:443 ogads-pa.googleapis.com udp
GB 216.58.213.10:443 ogads-pa.googleapis.com tcp
GB 172.217.16.238:443 play.google.com udp
GB 172.217.16.238:443 play.google.com tcp
GB 142.250.178.14:443 clients2.google.com udp
GB 142.250.178.14:443 clients2.google.com tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 216.58.213.10:443 ogads-pa.googleapis.com udp
GB 216.58.213.10:443 ogads-pa.googleapis.com tcp
US 8.8.8.8:53 i.ytimg.com udp
GB 216.58.212.214:443 i.ytimg.com tcp
GB 216.58.212.214:443 i.ytimg.com tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 216.58.204.78:443 encrypted-tbn0.gstatic.com tcp
GB 172.217.16.238:443 www.youtube.com udp
GB 172.217.16.238:443 www.youtube.com tcp
GB 216.58.204.78:443 encrypted-tbn0.gstatic.com tcp
GB 216.58.204.78:443 encrypted-tbn0.gstatic.com udp
GB 216.58.212.214:443 i.ytimg.com tcp
GB 142.250.179.230:443 static.doubleclick.net tcp
GB 142.250.179.234:443 jnn-pa.googleapis.com tcp
GB 142.250.179.234:443 jnn-pa.googleapis.com udp
GB 172.217.16.238:443 www.youtube.com tcp
GB 172.217.16.238:443 www.youtube.com tcp
GB 172.217.16.238:443 www.youtube.com udp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 8.8.8.8:53 camo.githubusercontent.com udp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.108.133:443 camo.githubusercontent.com tcp
US 185.199.108.133:443 camo.githubusercontent.com tcp
US 185.199.108.133:443 camo.githubusercontent.com tcp
US 185.199.108.133:443 camo.githubusercontent.com tcp
US 185.199.111.133:443 camo.githubusercontent.com tcp
US 185.199.111.133:443 camo.githubusercontent.com tcp
US 185.199.109.133:443 camo.githubusercontent.com tcp
US 185.199.109.133:443 camo.githubusercontent.com tcp
US 185.199.109.133:443 camo.githubusercontent.com tcp
US 185.199.109.133:443 camo.githubusercontent.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
GB 216.58.201.106:443 content-autofill.googleapis.com tcp
GB 216.58.201.106:443 content-autofill.googleapis.com udp
US 185.199.109.154:443 github.githubassets.com tcp
US 140.82.114.21:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 216.58.212.214:443 i.ytimg.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 216.58.204.78:443 img.youtube.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 216.58.204.78:443 img.youtube.com udp
GB 216.58.212.214:443 i.ytimg.com tcp
GB 216.58.212.214:443 i.ytimg.com tcp
GB 173.194.5.230:443 rr1---sn-aigzrn7l.googlevideo.com tcp
GB 173.194.5.230:443 rr1---sn-aigzrn7l.googlevideo.com tcp
GB 173.194.139.10:443 rr5---sn-aigzrn7k.googlevideo.com udp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
GB 74.125.168.137:443 rr4---sn-aigl6nze.googlevideo.com udp
BE 108.177.15.84:443 accounts.google.com tcp
BE 108.177.15.84:443 accounts.google.com udp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
GB 216.58.201.100:443 www.google.com udp
GB 142.250.187.225:443 yt3.ggpht.com tcp
GB 216.58.212.214:443 i.ytimg.com udp
GB 216.58.201.106:443 content-autofill.googleapis.com tcp
GB 172.217.16.238:443 img.youtube.com tcp
GB 172.217.16.238:443 img.youtube.com udp
GB 142.250.179.234:443 content-autofill.googleapis.com udp
GB 142.250.187.225:443 yt3.ggpht.com udp
GB 216.58.213.1:443 lh5.googleusercontent.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com udp
GB 142.250.179.238:443 i9.ytimg.com tcp
GB 142.250.179.238:443 i9.ytimg.com tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
US 34.161.115.43:443 e2c65.gcp.gvt2.com tcp
GB 172.217.169.35:443 beacons.gvt2.com tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
GB 142.250.200.14:443 google.com tcp
US 35.212.207.78:443 e2c51.gcp.gvt2.com tcp
GB 74.125.175.134:443 rr1---sn-aigl6nzr.googlevideo.com udp
GB 172.217.169.35:443 beacons.gvt2.com tcp
US 8.8.8.8:53 rr1---sn-aigzrnz7.googlevideo.com udp
GB 74.125.105.135:443 rr2---sn-aigl6nsr.googlevideo.com udp
GB 74.125.175.198:443 rr1---sn-aigzrnz7.googlevideo.com udp
GB 142.250.179.230:443 static.doubleclick.net tcp
GB 216.58.213.1:443 lh5.googleusercontent.com udp
GB 142.250.179.238:443 i9.ytimg.com udp
GB 142.250.179.238:443 i9.ytimg.com udp
GB 74.125.105.40:443 rr3---sn-aigl6nsd.googlevideo.com udp
GB 74.125.105.40:443 rr3---sn-aigl6nsd.googlevideo.com tcp
GB 142.250.187.225:443 yt3.ggpht.com udp
US 172.67.204.5:443 software.vrchub.site tcp
US 104.21.77.37:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 54.69.251.6:443 api.segment.io tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google udp
GB 2.17.5.46:443 store.steampowered.com tcp
GB 104.82.234.109:443 api.steampowered.com tcp
GB 2.17.5.46:443 store.steampowered.com tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 104.21.77.37:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 35.160.35.184:443 api.segment.io tcp
IE 13.224.68.91:443 modules-cdn.eac-prod.on.epicgames.com tcp
N/A 127.0.0.1:61436 tcp
N/A 127.0.0.1:61438 tcp
IE 52.208.91.56:443 gossip.easyanticheat.net tcp
US 34.234.62.50:443 api.epicgames.dev tcp
US 3.232.8.54:443 datarouter.ol.epicgames.com tcp
US 8.8.8.8:53 56.91.208.52.in-addr.arpa udp
US 54.243.180.162:443 api.epicgames.dev tcp
N/A 127.0.0.1:61488 tcp
N/A 127.0.0.1:61490 tcp
IE 13.224.68.44:443 modules-cdn.eac-prod.on.epicgames.com tcp
N/A 127.0.0.1:61567 tcp
N/A 127.0.0.1:61569 tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 104.21.77.37:443 software.vrchub.site tcp
IE 52.208.91.56:443 gossip.easyanticheat.net tcp
US 18.215.3.19:443 api.epicgames.dev tcp
US 18.215.123.8:443 datarouter.ol.epicgames.com tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 172.67.204.5:443 software.vrchub.site tcp
US 18.205.169.113:443 api.epicgames.dev tcp
N/A 127.0.0.1:61680 tcp
N/A 127.0.0.1:61682 tcp
FR 52.222.201.96:443 modules-cdn.eac-prod.on.epicgames.com tcp
N/A 127.0.0.1:61733 tcp
N/A 127.0.0.1:61735 tcp
IE 34.243.183.178:443 gossip.easyanticheat.net tcp
US 54.88.4.221:443 api.epicgames.dev tcp
N/A 127.0.0.1:61813 tcp
N/A 127.0.0.1:61815 tcp
US 52.0.109.240:443 api.epicgames.dev tcp
US 54.88.3.70:443 datarouter.ol.epicgames.com tcp
US 8.8.8.8:53 240.109.0.52.in-addr.arpa udp
FR 52.222.201.85:443 modules-cdn.eac-prod.on.epicgames.com tcp
N/A 127.0.0.1:61875 tcp
N/A 127.0.0.1:61877 tcp
US 8.8.8.8:53 p2p-fra1.discovery.steamserver.net udp
IE 34.243.183.178:443 gossip.easyanticheat.net tcp
US 3.225.45.104:443 api.epicgames.dev tcp
US 34.225.186.159:443 datarouter.ol.epicgames.com tcp
US 18.215.3.19:443 api.epicgames.dev tcp
N/A 127.0.0.1:61917 tcp
N/A 127.0.0.1:61919 tcp
US 34.111.113.40:443 config.uca.cloud.unity3d.com tcp
US 104.18.27.36:443 api.vrchat.cloud tcp
US 34.107.172.168:443 cdp.cloud.unity3d.com tcp
US 3.165.232.115:443 files.vrchat.cloud tcp
N/A 127.0.0.1:61955 tcp
N/A 127.0.0.1:61959 tcp
N/A 127.0.0.1:62002 tcp
N/A 127.0.0.1:62004 tcp
N/A 127.0.0.1:62028 tcp
US 104.18.27.36:443 api.vrchat.cloud tcp
US 18.215.3.19:443 api.epicgames.dev tcp
US 34.213.140.126:443 api2.amplitude.com tcp
N/A 127.0.0.1:62052 tcp
US 104.18.27.36:443 api.vrchat.cloud tcp
US 151.101.130.132:443 api.lab.amplitude.com tcp
US 104.18.27.36:443 api.vrchat.cloud tcp
DE 216.120.180.19:443 ns.photonengine.io tcp
US 104.18.27.36:443 api.vrchat.cloud tcp
US 104.18.27.36:443 api.vrchat.cloud tcp
US 104.18.27.36:443 api.vrchat.cloud tcp
US 8.8.8.8:53 8A1861171D850FE33D4944B1ECE51208.exitgames.com udp
DE 216.120.180.89:5055 8A1861171D850FE33D4944B1ECE51208.exitgames.com udp
DE 216.120.180.28:5055 85153DE5F8D542BCA7825C78F4B72AF7.exitgames.com udp
DE 216.120.180.128:5055 7F9F9FE877148C1A1A3D601BE243D675.exitgames.com udp
DE 216.120.180.119:5055 082139283A01D67135EA742680FFD6D8.exitgames.com udp
US 8.8.8.8:53 119.180.120.216.in-addr.arpa udp
US 35.175.40.87:443 api.epicgames.dev tcp
N/A 127.0.0.1:62169 tcp
US 52.89.0.15:443 api2.amplitude.com tcp
US 8.8.8.8:53 p2p-fra1.discovery.steamserver.net udp
US 104.18.27.36:443 api.vrchat.cloud tcp
US 104.18.27.36:443 api.vrchat.cloud tcp
US 8.8.8.8:53 p2p-fra1.discovery.steamserver.net udp
US 104.18.27.36:443 api.vrchat.cloud tcp
US 18.215.87.180:443 api.epicgames.dev tcp
N/A 127.0.0.1:62232 tcp
US 8.8.8.8:53 p2p-fra1.discovery.steamserver.net udp
US 104.18.27.36:443 api.vrchat.cloud tcp
US 34.107.172.168:443 cdp.cloud.unity3d.com tcp
N/A 127.0.0.1:62279 tcp
US 44.219.118.213:443 api.epicgames.dev tcp
N/A 127.0.0.1:62316 tcp
US 8.8.8.8:53 213.118.219.44.in-addr.arpa udp
US 104.18.26.36:443 api.vrchat.cloud tcp
US 104.18.26.36:443 api.vrchat.cloud tcp
US 104.18.26.36:443 api.vrchat.cloud tcp
US 52.7.127.250:443 api.epicgames.dev tcp
N/A 127.0.0.1:62373 tcp
US 8.8.8.8:53 250.127.7.52.in-addr.arpa udp
US 8.8.8.8:53 p2p-fra1.discovery.steamserver.net udp
US 104.18.26.36:443 api.vrchat.cloud tcp
US 104.18.26.36:443 api.vrchat.cloud tcp
US 104.18.26.36:443 api.vrchat.cloud tcp
US 8.8.8.8:53 api.epicgames.dev udp
US 35.175.98.38:443 api.epicgames.dev tcp
US 35.175.98.38:443 api.epicgames.dev tcp
N/A 127.0.0.1:62431 tcp
N/A 127.0.0.1:62433 tcp
US 8.8.8.8:53 38.98.175.35.in-addr.arpa udp
US 104.18.27.36:443 api.vrchat.cloud tcp
US 54.242.218.224:443 api.epicgames.dev tcp
N/A 127.0.0.1:62487 tcp
US 104.18.27.36:443 api.vrchat.cloud tcp
US 8.8.8.8:53 api.epicgames.dev udp
US 54.147.63.67:443 api.epicgames.dev tcp
N/A 127.0.0.1:62541 tcp
US 8.8.8.8:53 67.63.147.54.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 46e6ad711a84b5dc7b30b75297d64875
SHA1 8ca343bfab1e2c04e67b9b16b8e06ba463b4f485
SHA256 77b51492a40a511e57e7a7ecf76715a2fd46533c0f0d0d5a758f0224e201c77f
SHA512 8472710b638b0aeee4678f41ed2dff72b39b929b2802716c0c9f96db24c63096b94c9969575e4698f16e412f82668b5c9b5cb747e8a2219429dbb476a31d297e

\??\pipe\LOCAL\crashpad_4896_OBUQEACMIHMQKOUL

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 fdee96b970080ef7f5bfa5964075575e
SHA1 2c821998dc2674d291bfa83a4df46814f0c29ab4
SHA256 a241023f360b300e56b2b0e1205b651e1244b222e1f55245ca2d06d3162a62f0
SHA512 20875c3002323f5a9b1b71917d6bd4e4c718c9ca325c90335bd475ddcb25eac94cb3f29795fa6476d6d6e757622b8b0577f008eec2c739c2eec71d2e8b372cff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 492acbf590d2693ca4d1bda5c11ff8e8
SHA1 3d6fcd8745ae6fa17f8eea0ce2c0887d04bf1cd2
SHA256 86fdbc9a39fbb63197c1529f9ca589ff18d8ded75ddf124d2be895823f025ccb
SHA512 c19d611f9da24f27ef6db638b2b7611235f048b3c5b5fd49ee99b7a88b9890de832ba344234a11d58874ebd35b6cbf5cc1a3a6c3a6daeb3f25b8d63fed3996e0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 4cd8e075e66ebf77aedf154a7b2a610a
SHA1 966c845207e537b414c5e2a4ea7d15487970df8d
SHA256 336844946668c43b20532970009df4b00b4891706b95ec81da2290c07fefdf18
SHA512 f857efebe184a3e67e2ff6df13bfc8922956744b3d7b61c910718d4891e0e07191869ef7cd05344a8c8a1dd16bcdd3f959acde707b31a88d2d9df9b6e8d358fe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 7badf4e0e9d7f04ad01950ce4de5c72d
SHA1 d08fc384f1bf3891ff9b52386e2ca4a58c18a66e
SHA256 c17a3543de92d3fb760d1c12ce607dfe5c21c7d6739fa01b14f0558802ccf954
SHA512 3fa454b0c1fa76add02d93fc3de4f61951d930f4be8c6a3627da8f89a22cd707ea14212e01c6bbc7b1bb44cac3bdf8ec88d0152c54f48bb6819a9ebe5c7a7546

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 202f43f11fd091c6a3b0a72d4fb03b9f
SHA1 abf592ee08d7d7899ac9522adb734d9dd2d69f2e
SHA256 a41c494d8bfa169425c3a841a72abefd2b1858af5574c963f411f6451caf5b24
SHA512 de0acdc8d136c7dbf8ee05643bc6e154a0b801c6f3ccc74cebb08b135f896afbabaf76f42dd2e0653ea9fd9fa4b1da8750ec0ed87067670ba59181998b4eaa9d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 712aa15f85015eba7a9d9f6aad0f1a98
SHA1 34b318f6fdca1f2d525ab93da006091577d8e533
SHA256 015bb8652829deb0d275b1fad39d6d0bd681999665ea0dbe2a291873bbd8fb1d
SHA512 d2ea8df33778314b56098c3d912bd5f211ccda6cd80124cd225a9376175e481d9b05dfa4c5e899483d0ae7631f54d70a31ff85ed4f65deb5dcaae2b408445001

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0e7e0bbbb47e71284eae31c3f88e556d
SHA1 f2066d1ad60bc77576ca0fb5da64c222f68ad4d5
SHA256 d1e8e71d604e770eda512e9c1f9447b31da991fe4aad255432f2635a092285e4
SHA512 b1cb056be9f1a699893ea172aa30679d77913b0b54be7169aa9fc031b58966ac8f29755a4b54cbe0be9b5921ce0535c1c2ec01599aed3b09d6d03ff97c6f5aa7

C:\Users\Admin\Downloads\VRCHub Setup.exe:Zone.Identifier

MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512 aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 8cc07ef7b27916b1ee235c04579f21b4
SHA1 ecb3261b29228a921c8e1d3611aa1dd7e92de693
SHA256 6b886acda7f28ea51a43809078108c9a20798b58034ac301fcc63f4c09c3191a
SHA512 0581b93d57b8f02ff7be4c6678a6841a017cafcd22a2dacdd4f664ddbe60fcb9f402e7d4500648aacde045eeb6b9517852ad1573d7b8739b4623e0f5c815c408

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2d578c0a92f8985cf58deff6864fdb0e
SHA1 2de14e4a397ba1fbe8c45f10855467243d31e10a
SHA256 ac797111f718e760ea61c4c68f6ca6346b0f39197bdb0b4a1548b8d0d165d7bc
SHA512 1ac3acdddd777fb9b2dfeb772a26dc24d92b5cb3e306c7eef015269fa3c4e9065f148743eaf0c823df29ff53a20964613c62de53d85012d384e400e218084241

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58604b.TMP

MD5 80a503a511e0b608320f512a2ed312bd
SHA1 ec8b1e45b321741022791ca34a4781a63bfc3db5
SHA256 a7d306215ff8c53ed867cc0ec4ef7b7d69fe76fee0bf18505f7355378ab9e949
SHA512 5c57bdcaa77534b18c0dde735363bd506219b7980a49e7571dfe79e1a034ab4a7253f25e8ad65430536b242cc3e1970373fe1d024b177debef71a12c811f4645

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 cfb03161681741b10db680172974a262
SHA1 cddc61113779fb46132ad84e441e7b2fd1c37cee
SHA256 bc562543d51726b049ce88dea939854fa9aff4d5ab1141c73c06997fe4813ecf
SHA512 13e90259f05c78042d7d2b58e811eff0077f935d1d2f1324bd4fb66adc4fe709400ca9eb31d6835e90f4699c376d91485530cc64c364622c92310f8a99f1822b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 c4eea806991e7c2e05c13f90495dd888
SHA1 afd48e0df360ca62c5e403d8e124274f5364ce43
SHA256 d4c09763d150eeb7b26a12514d4746da1ca51979c98fb962a1da885bea76bfb5
SHA512 1972636a8ba474bfcfe1e48ae6b51d95dd5c4a9c2b76409ff4b0c17fc95daea5b34d9b95092e6d21abdd7d65b71dde5909f2c21788007a353e75c2f74dd58b52

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

MD5 c3c0eb5e044497577bec91b5970f6d30
SHA1 d833f81cf21f68d43ba64a6c28892945adc317a6
SHA256 eb48be34490ec9c4f9402b882166cd82cd317b51b2a49aae75cdf9ee035035eb
SHA512 83d3545a4ed9eed2d25f98c4c9f100ae0ac5e4bc8828dccadee38553b7633bb63222132df8ec09d32eb37d960accb76e7aab5719fc08cc0a4ef07b053f30cf38

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

MD5 fb2f02c107cee2b4f2286d528d23b94e
SHA1 d76d6b684b7cfbe340e61734a7c197cc672b1af3
SHA256 925dd883d5a2eb44cf1f75e8d71346b98f14c4412a0ea0c350672384a0e83e7a
SHA512 be51d371b79f4cc1f860706207d5978d18660bf1dc0ca6706d43ca0375843ec924aa4a8ed44867661a77e3ec85e278c559ab6f6946cba4f43daf3854b838bb82

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 504882ea2311343ac80e227646a5fa51
SHA1 7763a010c47241e740ec82b6b02ba9c006c12604
SHA256 97017de486c24c298a4c0856204879afffe2c8b3a4b08988ea21500985ae9c92
SHA512 7b344df5ef0571b7d997ea2504980bd3aaf461b237724b4dbc093f2a4b1781ed9f2f1a949eeb0ac8eaef0d14de2bdc167a8ec0797d2ed23df29e4c878c5f6d47

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

MD5 710d7637cc7e21b62fd3efe6aba1fd27
SHA1 8645d6b137064c7b38e10c736724e17787db6cf3
SHA256 c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b
SHA512 19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 03b638b56071162182de23b2ed4b5ba3
SHA1 894c9d6a35870e938b1ab638e688f406665d5f86
SHA256 408cd6cdb6de4f7c0871d16843d29a38f085904ec28e26f4c5a9c28fe73409d2
SHA512 4127abff694ec2c3c3b0e3a6a204e32dc79a3abf3cc7b659e83d247781128a6fd9c86e7c0dde5805bd9597bd9e06da32a687754ab7a11aabd0757e5476d108ef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 5ab18bbfe8d5ab21027638115b6b9c64
SHA1 b2507c0d5c431e582c4964db525f071eb012ef02
SHA256 dd41abfc21ffd811cc6e93c5da7c048f838d7123599498691ba550a993cd3505
SHA512 e6f70e87708c1acdc62c009cbca1c38f7ad00f4cb74f60449e83a6a95200ef54f53ba4e50f1eb58f146607069762e7bf4795dda048a4202b710e25e37d578384

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 2ce0af397fcedd06640d638346cd70e7
SHA1 b59541205ce05f20b5982c6ad8357d205de22d44
SHA256 ceced8dd1d28bb5b3e2fd2aec4bc250d21fbb06d85e83b21d61b8b2c1b388bd1
SHA512 1aaa911ac8fb02594ff9900de373c68254aeb89de68fe0f57223e19fcf00e4942d3edadd6ccd228cc8df79160acc94680535e4feff7506899810f99cc9c5983e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

MD5 55a93dd8c17e1019c87980a74c65cb1b
SHA1 4b99f1784b2bb2b2cc0e78b88c5d25858ff01c5d
SHA256 4925dd477b8abf082cb81e636f8d2c76f34d7864947114fc9f1db0e68b5a9009
SHA512 f9ade542c593067dbcd13ed94da1ba17a84782575355396db8fd7c28aa70a3120d0c0a22d3ca3d2f0774c1dcb06b9319e243b36001c618c92e0af25cb9c8e46b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

MD5 407490850a11d4ddbfa8cfc8ca4b4134
SHA1 4a4ef50edd7d20ee11ee064a2ffc4f6ec7929d8e
SHA256 76585e2caa825e3e419d14abf626b43897ebc5ebad8eadebe23fa51bec943555
SHA512 49db102c324cc21339db0e9a0119cfd8281d881fda7a8e7098bf967151eee8b51d5fc4b9ebe4f2aec63c6c0960230d784e9c4cbba51260ca289618cc61e10ef7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 21ca9426bed1121f3683322fcde147b2
SHA1 d0d1362022e4a9880608c570730049bf901d1118
SHA256 95db71f9e02431257de2899a151d90e75483c5ba1fad423d2a71cc81da0ba2cf
SHA512 e883042bc45c85b8d34f1b6342e2f7db4f94117755dca99c9a577c1b8b2e72ba91fdfd60c0a2584c68e2c5cabaf32545566b4813bcb37cb9f17105b2a44ad273

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3223450fffe2b8dc34cd1ea6307ad78a
SHA1 ba47fa32a5d97a0a944d06a3ce75d27617638807
SHA256 a6f1173824e6f0d3e7b62eb9c5570c717011671c481259f443f5285979382565
SHA512 5ae9fc725f8de96721e9105fddb879c963d2663f88be2b6c52e8831762f6c2a36264bc0450ca0edeb644b98d760af9539586ad31de4eeeb9ff41ef3fb4c070e4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 2004c160a52021e665f0387e2072bccf
SHA1 d6d4c00d4a69cb24a2fa1105f606136097eb6b7c
SHA256 93d33523a89b8d4f2212d2da30efd496ca0ba44ff878f943824005746edaa5e7
SHA512 5b05d6ba1abf8409c3b9c51f94dfa3a3c0b4020fc0842955cf1af75ba8a13d62b9993403a9edb88d596da05d6859f623d9b21221d3c66e6ac668fbebd0cf2a35

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8ee73a31bd0cce7d_0

MD5 fad382c4b7bd27500f809cf58711ab5f
SHA1 325bfc70c3c90fe120fdb2ff42465c5efee1758b
SHA256 c3a8d96f378a1f641d7db3cefb5da26125d61d35613a866412cef352990a7dab
SHA512 a29d3598fafb0691cdd0620e48917568a3bccdae3aff15bd13e296ae97ae436becad6fb68f2a22d645d715e64a88921f9a43af968a681339be47235e87a12d8a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5dd1e579c9681f95_0

MD5 1a6322be4d4dd976a3cf74b2aa626ac9
SHA1 cbd1bb256e737a5c3a172683fd375b439da97638
SHA256 0ee3111107ddc0bf834cb613adaf58d151a7f45d3626de63d20d60a1b84b6fb6
SHA512 68b500dbf6b680335c7a354313d197962d60e25fbf7eb60e32729ac82a021d9bf01a95fefc7d3d4a3a7172993ecad7a488d9a9b3fe9b9e247734615300591eb3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\83d6d3a772bbc707_0

MD5 b16b72b3cd4a571647912b78714cd008
SHA1 b32d8d4df88d347f2dbcf31e5b94735c37e33d62
SHA256 8ff52cca3f890cfbed7e4d4bb57b7d4b8d5f6b9f308a3d67c3697011816842b8
SHA512 f61d2ebb5b074b459f808405e691d896297b88de2c9dbfaa0039fdf249e49d8525bfdf5e6cae3a4dcce0d876c39830c19d84d243b01d929121a82a2532c996cd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e55f0a6d1b533c66_0

MD5 3cba7d8e2b12ff2a8fd178e990a9a90b
SHA1 d1941392722a6ec9f3ec84b30af07599e81c825a
SHA256 6b464b12a3f6ae749c963dddb2f12e1cd3757e77661e21959fcc208f1aa0a26e
SHA512 e33b9cdbe921f955045a94630a50bf21ff194ed0cef846ff9289a6d9453f12a0ba4e13bab563e4c7403c36114b6a98c2ccc7edc7af90bfeac8c1ae6320678642

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7cf9843337c39c04_0

MD5 d897f67ae9f7f6aaddf361060b7d1133
SHA1 91c525ec58f418f89d9f34a8bb12767d62615950
SHA256 04ad6babc321c90752bc400bebec7af3d76ab0a0e3e89ea3ea2b4d7300f8e5c7
SHA512 d164fabe9e56e0f8c195afb6101f9d4ffffb504bdd0e43fa5664d93f77bd80b768db4a05335e9559b2a4415e68f89774f5db1a4e12e37e059e84109b8f1ab09c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8908012b8e4a5af1_0

MD5 13155277ec266221e71d24bf0bc00c92
SHA1 a32699b8870b2fd8499f652776c7b3e97380e44f
SHA256 a57ff00ce5ce7049a81717cf382ddf8c9a7cdfcddfdd3a0c49ca85e8c9920fba
SHA512 4d1044d68ecbca4f2b55744bcf14e40befa9a1818126693044c734a7049b6dd555cde55978cf49f48c43e2b26f1f870ec4ac4134d4d251980d0f53566fdd4788

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8e5987d08f7b6e11_0

MD5 914dac51abcbdfc3d5066a3c243b6f80
SHA1 6d1fab843fbd9de744d4963074aeccf4c02159c0
SHA256 cdb5648b176274282c44bb066dcb3eccfe7412ae435cbf7dc95476425a815d7c
SHA512 a0ea1e00517bf9004260155a19a6d1bac6c9f6bbfb89abc731332c98b1a07124b6b7022e61c2705533c2e049c81ceec37ee6f01376528b6694c1195572176e71

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\02735674612cbc52_0

MD5 6e264e2882cf705920dd9e96a390379c
SHA1 d8f4dc5e30defc62fa030f5dc8fc1de3f46b2139
SHA256 fa5f70611c58f4744387c830d0618e29942427aae22b6b0a813218ea244d73d1
SHA512 8cef574eb0e80f5bf05609f305ab49e0d6756eeeaab26bc3da4b02f82a8c3291ad531e10846523393c81d105771524d1e72501fa5bb50db9a47c533d8121fe91

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\81764cdb356c9506_0

MD5 b2a1df7087c9dc94b571c25fa35f591d
SHA1 e48f2e38b2b5f3fbcc505b9592e9731b04ba03db
SHA256 473093c561a01e898021db144d9ca2b4bf60d46afb8d39023b0dbe6ea4962745
SHA512 2ed7ca008fdd0563be1264c9650278297fc15dadd551a46a1d967451782d32981bec22f47f93dbbf70c09cddd2e89380f4d574b648713a1340975c554cd947e9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ad29bc637a84d902d28b8019a827d98e
SHA1 5338f56f95837153ec900090b9313a4a8d4f5d4c
SHA256 a1df333dc4a3a6007b65d391ddddd91b25b4299a3d45c7dd4e3c4d7d2cb9e329
SHA512 eae26bf01ab529f8f5bc5498c561f458e96c69944768feb4a3d1b4f0cb9d72139ee2490e82dafda648dff13a570e2be21ef856be02a377d76aeac71aa777628c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 c95a7f1e322b942d0042efc832273177
SHA1 1419c404ee4b1c982c6d30ebf08f9885211e6618
SHA256 585fd849e77cfbf69b91d4b4ad0dfd2c69ddc8547bb9f36d19f3228cd0f6a97e
SHA512 8e4e52600e6348a30b6ad8749943aa6a5f071189eb3eaf40f171a08408a6887c1d4c50fff00bd04f4bb402fb16a634099a8a228566501ba3631bb025d68c6e2f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

MD5 08d7bf15009a0414c24a3010d0fcdb34
SHA1 95b10ff826ad81ea6175269ea04283ba6e880743
SHA256 23f346670c62b3b7e61ab45c48faf1d19a43cf5b1cd38a812ef364342fae8925
SHA512 6092de9c282efe4a1a417b9e2c7171255973b54f5e1483a38a757ffdf6a71bb91714654bf96434d9914f30edcf36d118fc5eb373fb8bc9f0a803271ebbb073ee

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 cc54413b8ece6de3210b31d1ddfdc630
SHA1 3a7fd512c949192462b1cc6716b59e77e9667463
SHA256 666ba0ec1ccb9be155d8e3890b1c09364afd527691726dd31d9e5d2d9e7516c8
SHA512 7ee2e4c6b3903d5079e9db428e2c25d985e4cae15e54f51b3317e4ba5d2195bda501f67bc2fea2ca9ecb8f75c30f03d17771afb98950ea3448d0893474d1d483

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fb779c994c5a344714690c6a36dd46ba
SHA1 e891205b1c5f56b873bed7c928bbc8266e8f1ded
SHA256 0475b0e4c0120dd79340c9a0c49ca9d9398484b8d208688338154f8ed1100a68
SHA512 1f596323963ff0eebd310e5eef923a13955573110d2cbde63952bebb0868ffb16fe8c6ae53992bf9495cf9b2b2a682c50be8180bca237cf7dcc2f665f39a7c62

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 fd1f1a69eb58f5c141d1d7304c920bfe
SHA1 d10479965f0d9bca981f4c1ee77ddad8956ec464
SHA256 51271104df3e5619f77be7ce1e9c9f74b044464943bd4bd0e8d8bb8d04b0b9b6
SHA512 4e7585d0bcb943b8ab785de287b4e4baafceb35182debbd6a96f38ef156b624c0ec8690d025e97b526639e00301bc1e0dc5c907b81279e6db47ff5ab47a3234e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 4810ac7a817affa6a9fbeb1a3474c0b5
SHA1 9e6f0bbda667b0cde4a3ba9b1387d99fe9aa5dee
SHA256 7a3f7654bc9ae98a574a8a617a37bb4e5057c5afcb2e6c8813fa7299794a3faf
SHA512 c6bb4cf2437b99e3dc3386f64a0ae374ac0a8f5d7eb15fa7feba5b78a8abd263c402213d53819bc0ce1df3066f0e5df0c31d51f9e99912e0ec28dbece78353a3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 023b069d1d26dbe1b0c085709eab152a
SHA1 7dd41061a6df60ff3d39f0b5c5c701ddb27ccc6d
SHA256 e04737ce158b15fe361f04741a100e080661dfa5538b086219b961ed106a2588
SHA512 c0426527e2778e46fc9eb7fe09559f050099feb483b5845bbaf97c5d0506f83b1d5f9b42553b570a7f58635a37099f9df38768494245f852c47582b0abe91c6e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 124c70a7421009884b94a30ff674517e
SHA1 eb6d938e34152b7dd22fa8ffdd927d47ba4790db
SHA256 df7152315b0b0d239a6fa45ad82058570e95bb5f6430f692dab57d58cc15a14e
SHA512 469fa197f4a34744ec8fd6a666df7db84e1d96ea4dbc256afe13155f5d4ccda3c67464090819316973c1ecee8c92b3d5e3b16040c3eedfd0f434d504dd1adb95

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 135adb335a438fec512538202ff7b609
SHA1 d6d432483471b82328743ef53b0ac95c25751339
SHA256 88099957ab360bdf7c5625960867a648a2f21a82b265eaf46132f414f5bb2410
SHA512 bd81f38f49ffcf37285550307b37e9ba559cd22e272c00aacf32665ede3c3a26ce543687322f894ef8f8b3a4612d6fa92c36dd2f26f561e52dc0a23c0f4b0a12

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 35f16602239480521efe0371f246bfca
SHA1 36b02e45e02b6ad90aa255e3a0d873c885d47cf4
SHA256 d93330e6839b14ddd0d92135a684c01cad212ad578b3b00ca404b4d238eeb633
SHA512 7b71af33022b842e99f8b2bfc878dd26c1d7b5fb696bc2f38d3ef128302144fa784d63545fc771d69f244e8cf406bae48b141e1e00a039ea12acb8fd053aac21

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe5ae2d0.TMP

MD5 856d83f73c8e5463928ecb6e63e1ca59
SHA1 56b9b39773089d2c0c62dd4d7385be416b954196
SHA256 8ef12a651bd635aefe6615f45153a35006649859382b4b68641b2daa21d6fb47
SHA512 07f6816bbe0824ef3dcc24f8bae68e464966a3282c52a3af3a1e897e6663fce471f597ba05e434e3e1d0ee83e036d53a14edb6a90ea5b696ad8828df9fe43945

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt

MD5 cabefb96909b412f4b5d68852b48c1e8
SHA1 4046fd3498cf9837b0c4b8d1c4e5c8ffa58cf63e
SHA256 2100df9d34264a0e1b305be6400b51f51b77112bb342923d77a24f58220f82ff
SHA512 d3146872954e2cd972f0ceb409fa9abc7a42ded1da2c9f26a5f629f8cf30cac3268eb4113ac3204eb7bafdea346566d08da781cc2177f587a649a35a58b121f6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ef06deceb7df35078aa788f5c9a58c2c
SHA1 52e5783783f615b310b62a679678e8aa69fd8ec5
SHA256 7a5d90073865b978a58fd300aca5400d939f62b74beabe2c926c5f2f46d2f81a
SHA512 108b4835a81e5987a06ddd9e1c65fa2e83255cb8f2a848acb02b0e6970574a3655095057f905abf5edfae3b090abe80e77478650c3b77159670b22d8cc7a3607

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 25c7a95ffc7232f12e64376b6a01709e
SHA1 8cecfced6cd4b842aad1747cef0d87ed6dcc2d9c
SHA256 f2d4ebf53c5d61dd2a296427968645ff2eea96a341956fe3e2973762a2ef77df
SHA512 55173f4d47de1b84293ba0bd1f5148d19b536c635c62a4b7b213979357a91191ea08222dee7a2b63b367b0896522d6fd974122aa49f670ed53621e4f122e3ae2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 048a6f7a4fd100f09eba40b1ce86dd47
SHA1 0739fbe22907e1557bf357c32db3e826af6b7608
SHA256 f96a135603b00d8dc39b638c3df49d5115063acb21d1316723cb5a01fe9a7158
SHA512 3019c7258825ac1f495bf7dd363ed7cae37408e62db8cd22219ae876c62080b2a17d9d9c0db521d09df62653c0a695f10cecf22301c9b54554c5544fb89b78d0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 887cd4de19f661516e1ff125bad8504a
SHA1 233418b679233d26352e8c091285b08cb2c5766c
SHA256 0503a487d55d2c9c4bcddaf21ea935879c6abdbfbb5fbcb71d7a2e3b9f9c9650
SHA512 0774ee521014cdab51604ae24bdfe4360e5740a771505128317e9c996fe41d378ac0780d9bd0fbadf45579abe77b7df0a1fc7f0389eb8281746b0e88d4c7d7d6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 ca54867d29b2068aa60d765d561e492e
SHA1 237a2e01980a961dc786358a24944a4dd5b793f8
SHA256 ab6bc9261112fb00ebe71fa3ecff4237780eedd42850f2b35314c1ec1b66807d
SHA512 d4c7c7fac2576e2ac31a5f52e78dbe55e9c01a050a2e5e1ea9a35cc32e62e90a151afd6e37699ce50e181d2ac2cb03d4e58eb1a3eaf9293af798d8d518d5cef6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a13eb75ee86ad10058f7c3c9ad37a7a1
SHA1 2a47ab70b284b57a5ec9773a4980adb91384f6d6
SHA256 ab05abe72a90cbe7fa3a5be731fa4d2e12bccbfc42eddfdc7b95836390728b3e
SHA512 0e42412880ef91c14b5f4c04ef449261e03120a9fe745b605f004580bd51248f9c16862085b95b1a639b7cc421c0086bd18be35b1f4139a4a5c4582a5885e98c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0e2c34752d10c7b7c43177d9ddb45be2
SHA1 73a48a4ede2d90177a584959e92471016f9da1e3
SHA256 fc71c06f4eb4408b100ae5f6433b672c3830208182497c0c5796b85436ddf71e
SHA512 a107ce80c6dcfee885251a614a229703699887f4d47ba0bf9b10c56b66ae6cd91070bc0f1dd6a16576e1c06bded5ff5df62dc3fd74afc419da4cfc6bf810a41f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 9ada2d588237b7c148ab1ee17d92075a
SHA1 d1b6fede7fd4d820bdfee8af28245dadf16d809f
SHA256 8e248b1fe7d3cffb6ac3f360809311378c5b901510450fd509f787fa07d6333f
SHA512 4c135982c183d73c2ed1d87d4f6419da96a1c0f65757e3d56ffdce861577c223fee17aac5a2cca96478e261c016a4efd18a876890c097383263704daee20a7fe

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 1f5971fdcafc8e330770403b449e5fc7
SHA1 4020c0542a0d7711cdec887048662476423d35b7
SHA256 e12d23fa81029b6d57ced30047bf8a799fe2c43cf3289346e176b6a2868657ad
SHA512 425f111aeea57029b017daf0b9a76e85fb592ca10d683a392bab0c3a0f317f8fff1eee93c4de5c9991eb837eb53b69780c2987be91620c09a17f612e5cf937ad

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b3d372f5cab3e385a9e491aeeb62f5ee
SHA1 7dd0d5fad6a0c7e232161c169ffdd898b0bccb79
SHA256 f4e0c5f0c0d4782c92ca6c90c14b38df5187f0b32e2390be191e3a6392065ed2
SHA512 ea9b40576c7bfb721f3b57433055e332b731ed6b80db295140d2d6e037fa96313dd49e984a878688bc4e8945a3ddccad558a9a0fee0b2b89e02b5ec400f37604

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 b357fd3a51b2b6d2be2027280ee33e63
SHA1 f64c6b69ab55e3651006e7bd7e5d3525d970226b
SHA256 28a4d1ca284aab59ef73e901f65a0317cb43fab984a62483afa66810212577fb
SHA512 7b5d079ff2b4ac13f1a6850f957f92df789aa9cf3295130bdd9e55b00a19b89a73fbb4f9da0d88955e162396aa0c0263e17ede66139ba365645b94481dc81233

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 8b78c4d7e2f2f365ea6c4d411cba789a
SHA1 772e961f1c580d536f8ff11329a377e5d6e612cc
SHA256 6575045f3669b6424e4479e48fe0a61ec6309c29f376c24ec0e22fd336dcf823
SHA512 d8c5c20b0654d125205b7c3c919570c1c1b52db6d9e3f1770b8cbabb30cefeb289a2f59260b3cf408cbb5f3f549ab5fd0e6095aa7ceae98cc4aa36c68714ca62

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 206a96968f10e2f9966c14e922ee4ad0
SHA1 21a58002b5f287d8f5ce4282082d200a917fdd90
SHA256 b4f64a3700d3f3b5aec48a12ebd5358144fc0c45b0ad7975bcbb3bf40a1c4000
SHA512 4d90077666ffe9eb8fa5dba12c466db6119b67f9746cb06307b2c0841083766d8d1cbffbf8bc599216cd2a13369ba114cedb882f866102db8246f16352070b2b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0518a09ba3aaf1cdd0be35bed092955d
SHA1 a9bda81341f629f3d5388312576e17eff30548a2
SHA256 35238cfeb4a8d68a056e03b7fd235e84e2a4b4786d498a0a1d5fe6a7ea2399b4
SHA512 25be3b24e466e3d7eacf5a44f90fb6ceadaf395d4a6e0dac885b296057eddad916b2f11cdbe907bec369e965524aa52335fe62a860f7017b4bc909e321e0b2ab

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 ab2a2911c82ea770494e340a60035171
SHA1 83eebe3818417cfbb30859bbcd28b3f37b66f62f
SHA256 96122ba13f5d86d1eed9ddb606ac327e1f83ca2a899f052c3b12fd5b237f7d69
SHA512 46ba599bfb60a07cc94b5307606a08a6bd18f02045df4559f58643ac92fdb70436228c221960ae11e81d33d6e1fa3e4ad81e3a3653ba702ab601e77b7a146e93

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\Paths\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 1672d776db25402ed01c5a03ad74bfa9
SHA1 9de93d8c4e67a00197a660cf751d93d6c8180194
SHA256 9328cd069d927de2f1f94412806b6c4ff45cf3942ffcda27bc4aefee79c8cb90
SHA512 ce65f72bf2319166f2cbb1170dfd3bc6a0f51eb82dd5bf14f313c117f96d48c0c8007164d502b078e1238457c1ab7aebdf8e561184928133bd2dbe3b0b2ef85b

C:\Users\Admin\Downloads\SyxReBootstrap.zip:Zone.Identifier

MD5 dfcb8dc1e74a5f6f8845bcdf1e3dee6c
SHA1 ba515dc430c8634db4900a72e99d76135145d154
SHA256 161510bd3ea26ff17303de536054637ef1de87a9bd6966134e85d47fc4448b67
SHA512 c0eff5861c2df0828f1c1526536ec6a5a2e625a60ab75e7051a54e6575460c3af93d1452e75ca9a2110f38a84696c7e0e1e44fb13daa630ffcdda83db08ff78d

C:\Users\Admin\Downloads\SyxReBootstrap.zip

MD5 94818b5dd6fd533052a0a9f68f23b86e
SHA1 ae34ccf4df49553d6fab6eb4d32a0be7854abe97
SHA256 6e4f0f71b55576352534d4595a58e564cde2f4e338541661c1569af8a8fbd463
SHA512 e6d64bc0a535e2a500985022beea1096aea95f2999ac36793e25c88ba6ff1ebe551e7841d26be1db8520715b6bc7caf76dee432376e1099ab06b0cc2023fc19f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 9cb0b97b3e6ae102e8491d28dd5ad56b
SHA1 50fd6efabde70c83eedfe9479b196bcb86a76993
SHA256 a8faa8d3442a9039861c1b1e6028b559321e66ac85f64b2fb4415a5b11a75acd
SHA512 aa85ac24c79f28dbabb1b42bcf23679cd94b9de2a2fb32ccb59594dd41096abef73241da91b447b022358b306cad8e8a9486fc8f38b724dc3ad568dac163e6c8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 82b20e971786a682c6fa6e444c201d0f
SHA1 295f049efc75ddbdeea03aeaa430ef72d903b0b1
SHA256 d8ca837f7a0cfe2eca974388436b3306553ae31b344722de23e803a009833fc5
SHA512 d1ac31976bc3430af20095e379b0ef872372327922afc172c4c11463d51d3c077dbc06f3f5b59474eca667396e9de953faa64a4b3b3c737985e69ba30396b2ae

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 19ff4bcb7ed583036ca0f6286738146b
SHA1 1767f1c604b78f5193520acafe55c59f738abd5d
SHA256 2eefebfc605b988107cd804933b33e422140040de2424aa661eda10f1656d223
SHA512 5d4bf8629949237ca14d2977bddb3f68a1e4b39f3de82178e93b8ae9b44a4603f9003c6a18a31d76a248458a623187f72357c74d86b4fe72066abfb126d760af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 42f99d5c0e34faa4099e023addde1462
SHA1 eabdecae33715315cf7821bf9fc0091018b9ed61
SHA256 dff6f23d4b49ae6b2ee880072390a33c54d8848d17a60f1c07704006ff7e7632
SHA512 6b3a35ab11799cd873f82e41cfd5b8aa3566482204797a20aee4939a6b305ea07e7a0320e7446d98cecd22c14865ca7653ac7925b67b8e25ceca16579864119d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_1

MD5 35ce7594486b36cf6e98c962bc598e3b
SHA1 fa57a1d86479a02546a89a1a1e403ba2ee4a2973
SHA256 e307dc23aa06ac345cb9ec8493842449a8618d14b130e10d4331cccaa2857756
SHA512 0af19e8450314d9ca5d560a53d3e2c2541cbd6dea3b983004f4217b323cc6bfd9780c1a1921d901d11210fdbd58fc414ac41443bf2e39a8f69d4c6d39cd15365

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 dd17bb33d28e48f818dd21eb2b9a682b
SHA1 4bade796226bb406dd5efc9b4f14cdf0a79e1918
SHA256 6ab677003a803f1096c8a65989168819e03d8c0e5c3da0c75f8204ae91173a07
SHA512 b492436d557a83265a53caf0939ca4f8ea2e984d7b30226be68f89c8a9ae0e51aee2efc0e9156854f2a560af6935cf243caf27ec02584fe52992d97f06d0a75a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 7af25b457044bad31b97b8bcd770ef2d
SHA1 25d81c74f8eb648fcd8f9e5fb799a2de2aefc2b1
SHA256 9d07c215dafaf52cc5c0928ca67d943c45ed2a85513425f6c727a77d2dfa42d9
SHA512 6fa1442daeb77343a1913d4e3e0a1a2bb6b16ec2cb2586505dd692b84a90e86dff2982ac8dbefb8855781df1f31ae9c6bc3f8c1b397eefb97f0300e47761101b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0d17385e-ce5d-4b04-997b-847488a5b197.tmp

MD5 a13dd533afae569f27b5b8d118873229
SHA1 809753138fa0bed59bcf3206b6bd04b6dc92d3ea
SHA256 e54778707ed3aad26d77f96e4b1aea004c616e2720be34383828c1f603ba22a0
SHA512 6e0075b98d0ef69b4cdd28bfe3e2518b314bf33c8e5e5e90884519c439a4d070c97c7ef3f9f275e5362ca72904c51bdfca0d85b6c841b8911aa92eb4a608db9a

memory/4612-1813-0x0000000000AD0000-0x0000000000BBB000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\is-LCALS.tmp\VRCHub Setup.tmp

MD5 b4842ddad705e914e4b2a4379a15a674
SHA1 983accf07a05271fa70d4c8879586154965ff3fc
SHA256 b623c2cbf7764dba6ccd205f9ee93f0b2785da59083c73cd777682bf9e539a51
SHA512 aeeb1b9885eb8feaaf85c0471d9d1791c6f35fd00f0944209d65c891246056168629a9fd2fa6aa2176e2c60f6bd2b2b470bccdbc67f142c41eba4c6d5cdfe950

memory/4612-2292-0x0000000000AD0000-0x0000000000BBB000-memory.dmp

C:\Program Files\VRCHub\VRCHub.exe

MD5 c6aa5099b3eadf9a85c96def43d406ab
SHA1 83e525e2f05249be96320ea7aaa8132f52b2d2a2
SHA256 f350d0aa955968f2930ba9de394e00b3e79811a695547e89089a45b6f9f56dab
SHA512 4ead68b1a1d49854a9096ed3f72e90eaabcbba4fa90949fc9103365a6ef636b7fdfcd6deacec65209a594419524df686182940286b733e04a925ead5dab742ec

C:\Program Files\VRCHub\ZER0.Core.xml

MD5 68793b16d62309b2372887946034396a
SHA1 c7def664308c8aa8a3483d62bc3402fdf8dcc969
SHA256 6c451e4a79d132f9ef15ddee1fd01a8f477fff0319816d6a4bcff15f7418c2a3
SHA512 b7c64bdeefdcb90471266b732598aa0915d19a3b9b5bb101bb9e0a658cba8098a05704f2d1d40ab44d558fb30e8e9f6c6eb062b2f7dd7f9a4052509b45f0de5d

memory/4236-2367-0x0000000000420000-0x000000000076A000-memory.dmp

memory/4236-2812-0x0000000000420000-0x000000000076A000-memory.dmp

C:\Program Files\VRCHub\hostfxr.dll

MD5 ab03418b25d67b36cf9642f38f7efd72
SHA1 f28b855abedfbf544cb6e116c5a197fb6e830794
SHA256 176a2bb49adbf459cfbe5f8dd6d2cbf690a336bf230b6eb2463396491a405214
SHA512 baa9f8374e1c00c978b7530e6747beda897be4858b092c9296668957c723cec255b5f7066dec1db811ef69bb4d22e310b7d4550054c0bc3cac287b14a67dcc28

C:\Program Files\VRCHub\hostpolicy.dll

MD5 bcf5c5804c705b0c702f4cf100fae23e
SHA1 dc4f3ac764736c3eec4a2cdb56ff2298801d410c
SHA256 dbad5d81d86abbe75f3ae0b1ef7b83bbf3347f87c6238ff860d647115376ba3a
SHA512 1cf1da5db32558a1529d313c1edeba20be3398a1d5c002058f806edb36d7844fd18b5b59024125577cd724e543dbd978f6f5776db49fc5b8f8cc20c9a0d28597

C:\Program Files\VRCHub\coreclr.dll

MD5 089a75e08284d92b33821c472d12391b
SHA1 198e1c31cc9618e3f57fbe96055cf43a3e6aff2b
SHA256 fb5764205efa1371aa304780dc71dec3d17c59a8caac8f8870bf2951fb86af87
SHA512 31a06d1c1287dd3d01974a72661afa4646d8309849e4b6de70d6f67b36dc5ebba112a202fcddb5f4d39174e5e6d979b24f36d0cec7cbd404a3013e0c8f1fc437

C:\Program Files\VRCHub\VRCHub.deps.json

MD5 fc04bd8d995473240d7090a7bffb41ac
SHA1 54ce2d6802570f7e13850c31c40d917370edd2b4
SHA256 05554a352eb9a4f7b326de20bc6ca24d1dd83400cf5f0488b364d44158631300
SHA512 1503588cfef1c52e8d40093181dbe32f44f9325c142304bc01460b8d80c4d4193ceaff8ee82362dddc8b3b0c7b81d794e81ed431cb7608bec6f84efaeea7462d

C:\Program Files\VRCHub\VRCHub.runtimeconfig.json

MD5 4a42b40810e278c15b5acf2938fd237f
SHA1 9f5d6f8dd32d5b0502e4ef3467858d4edbd42fd2
SHA256 0b5b3c3e06120d3c62c76c0879b62ca4f66d0428c28e09cb6f3984cf5ee4a95b
SHA512 175bbaf254addde1671cb4735fa987f129dedbbabf7c14868569d40b65b73f2e0051690e4f76c1ec5676e53a3813fb1db654a9bed420f79299ab5834e6342288

memory/4236-2825-0x0000000000420000-0x000000000076A000-memory.dmp

memory/4860-2835-0x00007FF9F5720000-0x00007FF9F5760000-memory.dmp

memory/4860-2832-0x00007FF9F5CD0000-0x00007FF9F5CF1000-memory.dmp

memory/4860-2837-0x00007FF9F6880000-0x00007FF9F689D000-memory.dmp

memory/4860-2836-0x000001CCCA340000-0x000001CCCA35D000-memory.dmp

memory/4860-2838-0x00007FF9F0880000-0x00007FF9F0D35000-memory.dmp

memory/4860-2834-0x00007FF9F1F50000-0x00007FF9F1FE7000-memory.dmp

memory/4860-2833-0x00007FF9F5760000-0x00007FF9F57A6000-memory.dmp

memory/4236-2840-0x0000000000420000-0x000000000076A000-memory.dmp

memory/4612-2841-0x0000000000AD0000-0x0000000000BBB000-memory.dmp

memory/4860-2842-0x00007FF9F5CD0000-0x00007FF9F5CF1000-memory.dmp

memory/4860-2843-0x00007FF9F5760000-0x00007FF9F57A6000-memory.dmp

memory/4860-2846-0x00007FF9F6880000-0x00007FF9F689D000-memory.dmp

memory/4860-2845-0x00007FF9F5720000-0x00007FF9F5760000-memory.dmp

memory/4860-2847-0x00007FF9F0880000-0x00007FF9F0D35000-memory.dmp

memory/4860-2844-0x00007FF9F1F50000-0x00007FF9F1FE7000-memory.dmp

memory/3212-2852-0x0000000000540000-0x0000000000620000-memory.dmp

memory/3212-2853-0x00000000050A0000-0x0000000005140000-memory.dmp

memory/3212-2854-0x0000000002AE0000-0x0000000002AEA000-memory.dmp

memory/3212-2855-0x0000000002AF0000-0x0000000002AFA000-memory.dmp

memory/3212-2856-0x0000000005240000-0x00000000052D2000-memory.dmp

memory/3212-2857-0x0000000002B30000-0x0000000002B38000-memory.dmp

memory/3212-2858-0x0000000005140000-0x0000000005166000-memory.dmp

memory/3212-2859-0x0000000005180000-0x0000000005188000-memory.dmp

memory/3212-2860-0x00000000051A0000-0x00000000051BE000-memory.dmp

memory/5016-2863-0x00000204F2170000-0x00000204F2192000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_w2gu14ur.tvs.ps1

MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

memory/5016-2872-0x00000204F2220000-0x00000204F2232000-memory.dmp

memory/5016-2873-0x00000204F2200000-0x00000204F220A000-memory.dmp

C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\Ace\ace\mode-csound_score.js

MD5 67d3027a53dc9dea93e8badadac2c08c
SHA1 e7b8064b0c9aafbcfc27b39ed66f96eeae054e63
SHA256 dfd544612c4b4c146234c397c610062ef0a64d84ca61bb146a3d74017b93bb40
SHA512 091fab4c78f777f27afe3f10c7ff4777babbdcaef75ed99cb12b7dfd831f7ee9837d418f9932eccac3691abd508a8bf64753f1ac7e4bdda85b9792876400c7ea

C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\Ace\ace\mode-django.js

MD5 f35de187177b0165615f713868e14448
SHA1 918a10274d31f09a0fc96b1b5d0dd35d6c0f136a
SHA256 624dcb5438d0d5bf3c630e938da5f0bd2d8bd904fe4316afea82ce8b7f25d56d
SHA512 fec3ec6a120729367801800ed585971ece19c032ff03bad38074d2ff0f4310ea872a48dadd80c9d9be7fcde07fbacf8b67ccc4052dddabcb4f38a1398fbb84a5

C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\Ace\ace\mode-ftl.js

MD5 71451c50ed393d0071d352ddb2e56330
SHA1 cbfc8767bb4baceab37805257997c84f4264bbea
SHA256 2437cbce03f95681d4d31f50d2c5079ed35289bba9f13b1f62da20c73c3f06e2
SHA512 219f6d3deee708706ac4e8fdf4f7161a3cf4b6b719763680783e385d9525c0553fe4bba46157a5610e434c8fb40d88e46e54688705925710c4be782f80986fb4

C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\Ace\ace\mode-glsl.js

MD5 8ca9be0b4f85aa607d8af3c05c15b20d
SHA1 11f4bcb7b70f1a5bc6eda16825a8c40d81f4b616
SHA256 69343926d5bf317dff9a42193db72989f8464518508a83f642f027745b44e217
SHA512 c279c05f3d04ab75275b4fd61999d4d8b005e956b5d0a1447d00030f15b061621c680cf7ec462cda3c0b669e1b957e9edd2aca64debf6258c8e123ed3f0c9712

C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\Ace\ace\mode-sh.js

MD5 37f7cf0e0a639840d67e81e0a3d257dc
SHA1 4e59399b4b5dd9275ba58fc5c7640822af8891c2
SHA256 61f9a37f096997d0f8a4de024358c443943e8eecb2a8d023dba992212e3d1534
SHA512 f4940712bd359338eef2498b5658938a1e3cdbc967e1b17bdd13b6136e6661785abad4537daa2136274b8628cc622035e7447c0fa986f0db77f58f7d1ea56588

C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\Ace\ace\worker-css.js

MD5 efb7f98bfc7e9c92c7a5eacd72ece9e6
SHA1 0b6c2de65deb556163893762146c88e7451a3945
SHA256 53468a5a21fda1bdc6838d73255f0f0b3d7030c745077d09d4cdc41b20796f5a
SHA512 2ca94b561e2d13ea7f91ea3087c2c4a19ae3862b48ebfcd934f9f3c95eae3e49f8d6cdd69d8254a88985e3c57ffc3935581ad615dc8fb473720cc64dce9e50cf

C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe.WebView2\EBWebView\Default\Code Cache\wasm\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe.WebView2\EBWebView\Default\GPUCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe.WebView2\EBWebView\GraphiteDawnCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe.WebView2\EBWebView\GraphiteDawnCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\workspace\.tests\isfile.txt

MD5 260ca9dd8a4577fc00b7bd5810298076
SHA1 53a5687cb26dc41f2ab4033e97e13adefd3740d6
SHA256 aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
SHA512 51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7

memory/1380-4286-0x0000027BDC840000-0x0000027BDC850000-memory.dmp

memory/1380-4303-0x0000027BDC950000-0x0000027BDC960000-memory.dmp

memory/1380-4318-0x0000027BE4F00000-0x0000027BE4F01000-memory.dmp

memory/1380-4319-0x0000027BE4F20000-0x0000027BE4F21000-memory.dmp

memory/1380-4320-0x0000027BE4F20000-0x0000027BE4F21000-memory.dmp

memory/1380-4321-0x0000027BE4F20000-0x0000027BE4F21000-memory.dmp

memory/1380-4322-0x0000027BE4F20000-0x0000027BE4F21000-memory.dmp

memory/1380-4323-0x0000027BE4F20000-0x0000027BE4F21000-memory.dmp

memory/1380-4324-0x0000027BE4F20000-0x0000027BE4F21000-memory.dmp

memory/1380-4325-0x0000027BE4F20000-0x0000027BE4F21000-memory.dmp

memory/1380-4326-0x0000027BE4F20000-0x0000027BE4F21000-memory.dmp

memory/1380-4327-0x0000027BE4F20000-0x0000027BE4F21000-memory.dmp

memory/1380-4328-0x0000027BE4F20000-0x0000027BE4F21000-memory.dmp

memory/1380-4330-0x0000027BE4B40000-0x0000027BE4B41000-memory.dmp

memory/1380-4329-0x0000027BE4B50000-0x0000027BE4B51000-memory.dmp

memory/1380-4332-0x0000027BE4B50000-0x0000027BE4B51000-memory.dmp

memory/1380-4335-0x0000027BE4B40000-0x0000027BE4B41000-memory.dmp

memory/1380-4338-0x0000027BE4A80000-0x0000027BE4A81000-memory.dmp

memory/1980-4352-0x0000022ED97A0000-0x0000022ED9918000-memory.dmp

memory/1980-4353-0x0000022EF3E60000-0x0000022EF3FAE000-memory.dmp

memory/1980-4354-0x0000022EF6640000-0x0000022EF6648000-memory.dmp

memory/1980-4355-0x0000022EF6B20000-0x0000022EF6B58000-memory.dmp

memory/1980-4356-0x0000022EF6AF0000-0x0000022EF6AFE000-memory.dmp

memory/1980-4357-0x0000022EF73B0000-0x0000022EF73C8000-memory.dmp

memory/1980-4358-0x0000022EF7470000-0x0000022EF7504000-memory.dmp

memory/1980-4359-0x0000022EF7120000-0x0000022EF7128000-memory.dmp

C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe.WebView2\EBWebView\Crashpad\settings.dat

MD5 f59b953166b2dc5f6a36add7703a0587
SHA1 da57574dce353ff56d576883936a6eb38709a0ec
SHA256 4779d10d3055e6d46840bd2398e96152092cd439cb5b06d5dda02841e0a26fb0
SHA512 d9139b2b33db8b7d303c635b88441a1b817a55535f880e5759b8875386ef2aa312c017ccd6ede9e5bedd0e07c0a01c5db7d0920b7659291a242f3cbce350f944

C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe.WebView2\EBWebView\Default\54cc6416-2fbe-4018-9c34-231aded98792.tmp

MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe.WebView2\EBWebView\Crashpad\settings.dat

MD5 eff4657a11daeb26b57fb8b63f037e7e
SHA1 642f47c63b7e259beb4d1304d7b7469deb176b04
SHA256 16120cd4e55bff5ea0af117b3c388186f966f0f00801f925b2bdae3a975301a0
SHA512 063dda2afcb7143e7d27a07b64594b320e230457df2218128b775a209fbea10f17e1fa16fff5bac59ed70fbf59efa266d2b909fd40ec0bd13690ad769dd7477b

C:\Users\Admin\AppData\Local\Synapse_UI_WPF\SynapseXRemake.exe_Url_spy5naqi2alw3mfury0qhgyx4zlpibuv\1.0.0.0\user.config

MD5 11c1db716626af997ec7e7f4655ce6e1
SHA1 b92909a2c9cd7893498ff0bbb877b27af8566356
SHA256 f659ae60531ceaff833381dc4820a7e9fdd11272b2cf96b2913dc32be0b5e91d
SHA512 d00a742b14394fc90be09299f76ca122583c6777a1f4f4a0b7f1399b2cdc83a81f8be6ac7116a3a7c7ac368d221ccaecd771170467fdcc317f17a7b1e6653868

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

MD5 11d253b3a6f1f94b363fcb04e607acd2
SHA1 9917081d96e0d89a6c6997cc2d4aad6366ecfcbc
SHA256 20152f2fc1ca7717b9b858435b3658ce0879f28944bf822210e5ac5e148cc7ff
SHA512 101086c8c2805dcb8bb4e2a3c979574fea1cf0268859804c350f05a85945216de51bce90981a11d08c9a7043efee5130ede5c5a376cd86707dcc90c0e4f45334

C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe.WebView2\EBWebView\Subresource Filter\Indexed Rules\28\scoped_dir1640_1541005426\LICENSE

MD5 aad9405766b20014ab3beb08b99536de
SHA1 486a379bdfeecdc99ed3f4617f35ae65babe9d47
SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
SHA512 bd9bf257306fdaff3f1e3e1fccb1f0d6a3181d436035124bd4953679d1af2cd5b4cc053b0e2ef17745ae44ae919cd8fd9663fbc0cd9ed36607e9b2472c206852

C:\Users\Admin\AppData\Local\Temp\scoped_dir1300_628129670\6e7e1e9a-cc2f-45eb-9182-b1e629471641.tmp

MD5 da75bb05d10acc967eecaac040d3d733
SHA1 95c08e067df713af8992db113f7e9aec84f17181
SHA256 33ae9b8f06dc777bb1a65a6ba6c3f2a01b25cd1afc291426b46d1df27ea6e7e2
SHA512 56533de53872f023809a20d1ea8532cdc2260d40b05c5a7012c8e61576ff092f006a197f759c92c6b8c429eeec4bb542073b491ddcfd5b22cd4ecbe1a8a7c6ef

C:\Users\Admin\AppData\Local\Temp\scoped_dir1300_628129670\CRX_INSTALL\_locales\en_CA\messages.json

MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.83.1_0\_locales\en_CA\messages.json

MD5 07ffbe5f24ca348723ff8c6c488abfb8
SHA1 6dc2851e39b2ee38f88cf5c35a90171dbea5b690
SHA256 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
SHA512 7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.83.1_0\dasherSettingSchema.json

MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d

C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe.WebView2\EBWebView\Local State

MD5 1e0cc0e0a0902ab76d38e5fd45711448
SHA1 b5c155fb695f6414c6b31fcb881156661596800e
SHA256 2f7b8711b00e715020c0d09584d9291e81896e041dd17b6ee72e00767cfe14c7
SHA512 6b784760865124a2d5487071a7818aa343aae102f6bc22c74a9a6058eeae7e878a908fbc3881e185069c2efdc822f71495a396f436cdb2fc9d15561828e9e6f9

C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe.WebView2\EBWebView\Default\Secure Preferences

MD5 a4af54fab6e1e0affde1df019afd7663
SHA1 d2d3e018d2ed6c4bfc85218e94ea5eb8db2f8169
SHA256 23fe5266a6edca0a6b36455731e12de4769e73ce0b72af6eff10f6f180b22037
SHA512 55c1a626a276b8f7092c39486b8cafeccbfdd11df4004d91a950c3d585367549b71d6ff44a286bbdc9fa37e1477599b374f9ad4de39bcb4e1ed4b07bbcdd02d6

C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe.WebView2\EBWebView\Default\Preferences

MD5 d5ed48b7d76ac3d7eaa68b705992f300
SHA1 921c8c992f4179186ecef631adaa49cee50572e9
SHA256 2c2223f38b52a4eedd4b776f270967f1d86b8c4f6c7cd0809b7f8edc9d3d30e1
SHA512 f9de4c75cc702ec90c560f1ea1be3b97de0733ec0f7f19262de24799f2e41cdcfbcb62753448c00429dcffb1778f5b4daa1bccaf50ec8cd5c5ac5d96814578a2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 6df54c562ae73df859f0a362b3bba2ad
SHA1 9832802b463f41c5d4eb544a9d983883063133c7
SHA256 9db72d4bbdd6667fc39083790bb148f4d71a76bfd65e442c3164df4008b51705
SHA512 488ccee6008e67e6c7733cd6c836f50e7b8f190d88e745c78174188c405d15323105f7510fb11b943916f7a8b4bf3ae1cf126367108ae6d38de891c3946e474f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e83355942f635fd6551802a82ef5a357
SHA1 a25700af83fad1f83b2caf7d86bb2197a300e2d6
SHA256 913e0b4953cb619008c6c42077f926390871b740c639470f4e34574e005786ca
SHA512 90b335c0046168b3f5871c7c3425ef6d2e2d4002c42ef26b74830353f13e98914c343697ab213a40e04a8ddb5a19a790c19af74f1316a389207d9fcdc1dd38d8

C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe.WebView2\EBWebView\Default\Preferences

MD5 237adeb20426dd67c7890208d26a8ce8
SHA1 96828a4298a80df644711f3a680733ce7753a69b
SHA256 359d74b3e95e351736725f55501f23e0cb17c13939ce4bbf0dde86eeddd229d0
SHA512 71e0367ff1a91e3728f837b57af4c86f14e3ae70a33651004ff50cf82a306920486891d90f9cc801160200fb7128f9fb4f38b3873d2b8c87cf3c97acd6da34ae

C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe.WebView2\EBWebView\Default\Network Persistent State~RFe5d9aac.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Users\Admin\Desktop\SyxReBootstrap\SynXRemake\SynapseXRemake.exe.WebView2\EBWebView\Default\Network Persistent State

MD5 9650bf9f0a22ccab5ef82c5a88b5e30d
SHA1 ee923a4fb58fe16f90b68b6c227ca413fbf1ebf1
SHA256 cc65f9a23bc5539c87a8749eafbfce7550ec67d0daee4bd0541d360b1d4c25be
SHA512 4cb4a2dcfc06a46cc11730612875beb3b71cc029eb50dc755ed18748e6b7bdfc4cc20a44ce7e50818f177a7c52ee8956d685ca2ab0345d67d4ad36f6da10b939

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 97fdd855e533332aee4360ee1e187ba1
SHA1 6b7aa69ca42b234d96ba75668bfe94f5b2dcf21b
SHA256 174b64880fc1478f08b19aa7b353b2800b767602ea0a3eb3119d1ad23708478d
SHA512 960b6a4713cbc1dad8ce32c465eea976d191f8bbcd75f0dfb636766d639d2272a52f8d7d6eecc7278f27cac9459ec46efb754596408740407b131ec66dfef23a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000aa

MD5 1b54b70beef8eb240db31718e8f7eb5d
SHA1 da5995070737ec655824c92622333c489eb6bce4
SHA256 7d3654531c32d941b8cae81c4137fc542172bfa9635f169cb392f245a0a12bcb
SHA512 fda935694d0652dab3f1017faaf95781a300b420739e0f9d46b53ce07d592a4cfa536524989e2fc9f83602d315259817638a89c4e27da709aada5d1360b717eb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 3541a134d4aac836f707c38fc28410e1
SHA1 528d1c8986e13bfe9f7995d25a9c24c2d83a2183
SHA256 6fd67c478cf6aef3784dac9fc2b639a90847f50cc9e4eebfd949ceda66ae4196
SHA512 45fbb1ca2fc6cf6c2e5f6150be25d9f17c487665b574940c5403b07520101bc26085b6e7a744a4d2b84f45c5848a01df1e61b396e708218d02fba2efd8c5151d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9c037e7f1718a0ddf922f9c0c65df30f
SHA1 214be4fcc9ba09c9fe04336dc1446d1ad955abd6
SHA256 08e4a0e3665e67ccbc32f5ce7e8bd81936af24007fe4e2b3a702b7340184286e
SHA512 96dfa33896b7b8124a5491fea077f05bf8861ea1238454a1a21543aa33a406fda417a5e3d4e5637762425468431a4c06c7819bc8504cd585dd7def491c300af4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 2010a6d974e9c525e33cfea218857089
SHA1 7334ae13b23facf5b2d54c7b9b88b522887f0929
SHA256 b9de0a7fa230c99bdd755e0225560ef16dc62f05d084fa0c512a77ba7e690e29
SHA512 0accf1451e39419c756c83c62d37991e6e19eff74b5436e3941f3bdfcd4d1e5f12dacce556c725bd6db0f7094999e6ec75a9d936a78fd3066b63f652472db12e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 0fdd6037839e9e75b6e0bbdafc090cf6
SHA1 9ffea8f0c06f6f7a3c5ed1fb77d60700ee2f363f
SHA256 05cde7f78229f7c591f5038a7cb9485b3248f258c27a3fcefaae1104d1ebc864
SHA512 225dc53d7d489140141df8fcfb08f9c9aace71fc74ee64afddb0c47f68b391d0c2bf42f9ae3c644c2bed23858bbdfc1942b6d54d8d5ad441aafff4725016e180

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 4a7b1addfa3c80a8be462eab409da0e4
SHA1 47f648941909928d902fe5e597fd59cb0a3ac459
SHA256 d48cc04a95ad06283cd2f5c1bd790a17b1ee57d1ccc66f3e5a547a44b86f1278
SHA512 afd236e910e8cae9af01bd7d7691a21dd15ace6e81331db621c4ed95a17d736c42fa94fc6d4ea21c882aa1767148dd5e9ac45c9ca9576cad31dbc38f638f022c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2c52eac91ccc21b5b502c4a823e2eff7
SHA1 d90dcf336f2ede3d639f634f9ff1b7adde56c7ad
SHA256 cb9bb2179f21be15e833e3cf4be6f0227a4e1942b0ce4f4f8c7af1c8116fddba
SHA512 e2366920875b9548d33d4152c504fdcf4ad2cf01b678761d78014d6a93c53cd79c15a63ac597f0f21d17c3acd8d085e7dcc90d5ead337131b51dcea947ac1580

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 bbded965b656341aa5aaa540757f7bb5
SHA1 9a7c3c76a6083d298e0f8e18d120a6404faab758
SHA256 1b76c95b2be5048d606fc82ead55d0ca5b666e65a0e3b135d8a914b2edece7cd
SHA512 f9f3c9da375ab3047024a0a9f1232ad2b063ce41f8e4c66d4e472ee82f2e15faa549fbe3f80573b818d108c825389a1effd24ad94b30108a0a35c849a551a9b6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 cfc3dc4d62243038efaf38f7b0e1d3d2
SHA1 41704fbcbf930b6cef6d16fcdde7f6c8dcd8090c
SHA256 2d90c2bc44d16d1040a0af22d3372fe2158839d3d1c5f1e6bf99a1251a12f75c
SHA512 415383bb87eeba6e2007787636f62a5993a083acb4ef4355fc190d31642cf4120b56834dcb2ee15d0ba000873abd20d3334c941be3d2c19c56049df0921b6c83

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 6e44f01c251770133d1d274199bb89aa
SHA1 d00b8e28aeeff8c83d1f2f64ba2d46ab4c9cb71f
SHA256 fadc42874c85c164ec85b0080c5e531ba7374ca48f3c667e068a65ec9288e259
SHA512 be548227266590b173eeda7fc95874ea6333828a811b36844e64070a2bab3203e53cecd04c517952d333aec21fe140aff872fa83164428ad53173b90bf93906e

C:\Users\Admin\AppData\Local\Temp\nspA9BD.tmp\nsDialogs.dll

MD5 4e5bc4458afa770636f2806ee0a1e999
SHA1 76dcc64af867526f776ab9225e7f4fe076487765
SHA256 91a484dc79be64dd11bf5acb62c893e57505fcd8809483aa92b04f10d81f9de0
SHA512 b6f529073a943bddbcb30a57d62216c78fcc9a09424b51ac0824ebfb9cac6cae4211bda26522d6923bd228f244ed8c41656c38284c71867f65d425727dd70162

C:\Users\Admin\AppData\Local\Temp\nspA9BD.tmp\nsProcess.dll

MD5 08072dc900ca0626e8c079b2c5bcfcf3
SHA1 35f2bfa0b1b2a65b9475fb91af31f7b02aee4e37
SHA256 bb6ce83ddaad4f530a66a1048fac868dfc3b86f5e7b8e240d84d1633e385aee8
SHA512 8981da7f225eb78c414e9fb3c63af0c4daae4a78b4f3033df11cce43c3a22fdbf3853425fe3024f68c73d57ffb128cba4d0db63eda1402212d1c7e0ac022353c

C:\Program Files (x86)\Steam\Steam.exe

MD5 33bcb1c8975a4063a134a72803e0ca16
SHA1 ed7a4e6e66511bb8b3e32cbfb5557ebcb4082b65
SHA256 12222b0908eb69581985f7e04aa6240e928fb08aa5a3ec36acae3440633c9eb1
SHA512 13f3a7d6215bb4837ea0a1a9c5ba06a985e0c80979c25cfb526a390d71a15d1737c0290a899f4705c2749982c9f6c9007c1751fef1a97b12db529b2f33c97b49

C:\Users\Admin\AppData\Local\Temp\nspA9BD.tmp\nsExec.dll

MD5 2095af18c696968208315d4328a2b7fe
SHA1 b1b0e70c03724b2941e92c5098cc1fc0f2b51568
SHA256 3e2399ae5ce16dd69f7e2c71d928cf54a1024afced8155f1fd663a3e123d9226
SHA512 60105dfb1cd60b4048bd7b367969f36ed6bd29f92488ba8cfa862e31942fd529cbc58e8b0c738d91d8bef07c5902ce334e36c66eae1bfe104b44a159b5615ae5

C:\Users\Admin\AppData\Local\Temp\nspA9BD.tmp\modern-wizard.bmp

MD5 3614a4be6b610f1daf6c801574f161fe
SHA1 6edee98c0084a94caa1fe0124b4c19f42b4e7de6
SHA256 16e0edc9f47e6e95a9bcad15adbdc46be774fbcd045dd526fc16fc38fdc8d49b
SHA512 06e0eff28dfd9a428b31147b242f989ce3e92474a3f391ba62ac8d0d05f1a48f4cf82fd27171658acbd667eaffb94cb4e1baf17040dc3b6e8b27f39b843ca281

C:\Users\Admin\AppData\Local\Temp\nspA9BD.tmp\StdUtils.dll

MD5 db11ab4828b429a987e7682e495c1810
SHA1 29c2c2069c4975c90789dc6d3677b4b650196561
SHA256 c602c44a4d4088dbf5a659f36ba1c3a9d81f8367577de0cb940c0b8afee5c376
SHA512 460d1ccfc0d7180eae4e6f1a326d175fec78a7d6014447a9a79b6df501fa05cd4bd90f8f7a85b7b6a4610e2fa7059e30ae6e17bc828d370e5750de9b40b9ae88

C:\Users\Admin\AppData\Local\Temp\nspA9BD.tmp\System.dll

MD5 a36fbe922ffac9cd85a845d7a813f391
SHA1 f656a613a723cc1b449034d73551b4fcdf0dcf1a
SHA256 fa367ae36bfbe7c989c24c7abbb13482fc20bc35e7812dc377aa1c281ee14cc0
SHA512 1d1b95a285536ddc2a89a9b3be4bb5151b1d4c018ea8e521de838498f62e8f29bb7b3b0250df73e327e8e65e2c80b4a2d9a781276bf2a51d10e7099bacb2e50b

C:\Program Files (x86)\Steam\package\tmp\graphics\[email protected]_

MD5 577b7286c7b05cecde9bea0a0d39740e
SHA1 144d97afe83738177a2dbe43994f14ec11e44b53
SHA256 983aa3928f15f5154266be7063a75e1fce87238bbe81a910219dea01d5376824
SHA512 8cd55264a6e973bb6683c6f376672b74a263b48b087240df8296735fd7ae6274ee688fdb16d7febad14288a866ea47e78b114c357a9b03471b1e72df053ebcb0

C:\Program Files (x86)\Steam\package\tmp\graphics\icon_button_news_mousedown.tga_

MD5 00bf35778a90f9dfa68ce0d1a032d9b5
SHA1 de6a3d102de9a186e1585be14b49390dcb9605d6
SHA256 cab3a68b64d8bf22c44080f12d7eab5b281102a8761f804224074ab1f6130fe2
SHA512 342c9732ef4185dee691c9c8657a56f577f9c90fc43a4330bdc173536750cee1c40af4adac4f47ac5aca6b80ab347ebe2d31d38ea540245b38ab72ee8718a041

C:\Program Files (x86)\Steam\package\tmp\resource\filter_clean_bulgarian.txt.gz_

MD5 836dd6b25a8902af48cd52738b675e4b
SHA1 449347c06a872bedf311046bca8d316bfba3830b
SHA256 6feb83ca306745d634903cf09274b7baf0ac38e43c6b3fab1a608be344c3ef64
SHA512 6ab1e4a7fa9da6d33cee104344ba2ccb3e85cd2d013ba3e4c6790fd7fd482c85f5f76e9ae38c5190cdbbe246a48dae775501f7414bec4f6682a05685994e6b80

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index~RFe60fed6.TMP

MD5 7c71fc38ae6be5492395ddcfe1a3a3bf
SHA1 3a869da0e734c9f79155c671713945cd52b73b9d
SHA256 a47d700083c7228c25ee4351dea21e039e483eba47d6456a7df4ea5a5cc1f91b
SHA512 9ab1a9d836a661d940ee3e2ba44ae36485373d0ed74911bea555167e1f3fee5da6e7de2d9d1dc235c9b4ab275a3d60f5c292111f319c8638ced4ac1fb1994106

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 1539e3c72487fda7df2445c197be88bb
SHA1 f69d66bff0e8f84a0601ad661a24e05aa94fc684
SHA256 2df80676e7287a7cf515eb7f3c52bfcf6d03181c735e86fb0f97cbb3770a001f
SHA512 9549f0fbfdd5245f16c7ba0352650c7b0efa06f2ebc478fd9359400278e4f63db636a9123e7d2460bae70eee7c75daf077abca5cea9a7d5483e7d2bc11c2a51d

C:\Users\Admin\AppData\Local\Steam\htmlcache\LocalPrefs.json

MD5 f7a6f7c8900d46639c83717ff428c7ae
SHA1 cee3d9106611b8e3993e39d26e69b8e0364e0a9a
SHA256 88e2ebcea5303fa81163d89d8ac5ddabb4adb2d53a175ca85df56c65705d044c
SHA512 7ce0b7eb2d6f6dd8b47bb4c8336570c439cf997301634b87e1946dbea94f3b7d149f4d0edc0f6509728e9ca2f6b95ec978d70388c52c5e970bdd336dd9c75030

C:\Users\Admin\AppData\Local\Steam\htmlcache\LocalPrefs.json~RFe61b759.TMP

MD5 950a019f52ff679ac451af4f7251ea00
SHA1 e9f69bc66dedb4ce22c505f694aaaf45c577a5ad
SHA256 1842590a59ec96b57940400e4d0e0ed3997796d0f2601216933f6def44bfe347
SHA512 87c7c6be372aae06b89478afd86f48e2488f5b842160297357ccac6982aa92ce53faba9adb785d1a328b67d981ae0c5d8dcaff69eab3ed51988555ad01694dab

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 48e4a99c10cc4d4556562515ac302b61
SHA1 893f17d3fe747dde3741b1504a1cb9350cf253a6
SHA256 4f1c77447439c0247050f00e75ef1561fcf3b192655def7492ed55ec68e81a3d
SHA512 26bad2bea11ce73c31b6b05bc702efd34071941f0ffefb9b898ee55b8284ab3215393f1b0afcee1d32cbef8781752c86aa306f6c2324284213ea91f5932853ef

C:\Program Files\chrome_ComponentUnpacker_BeginUnzipping9948_1952172732\LICENSE

MD5 f6719687bed7403612eaed0b191eb4a9
SHA1 dd03919750e45507743bd089a659e8efcefa7af1
SHA256 afb514e4269594234b32c873ba2cd3cc8892e836861137b531a40a1232820c59
SHA512 dd14a7eae05d90f35a055a5098d09cd2233d784f6ac228b5927925241689bff828e573b7a90a5196bfdd7aaeecf00f5c94486ad9e3910cfb07475fcfbb7f0d56

C:\Program Files\chrome_ComponentUnpacker_BeginUnzipping9948_1952172732\manifest.json

MD5 32ef54fcac37d3d390c05880067559d6
SHA1 ab44258473c7c1a920596ccc33463a765e5fe60f
SHA256 d97f5e50808d1ef75bb241df2dde8f7293b9bfcd498dc525e258c97b39564211
SHA512 3bcdd94edb8b0df2d1684ef865f9711bf544c4c4f6adde927611b648dab2776e398e3b29681369a80e8c7ebfb9cd100ba8469ea69c5034ec023c796d8cbfefa0

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000002

MD5 0de1096411b23f842fc5b77e1a8f583b
SHA1 b925a681867ac101b8441bf6a529d6ac1e3c8acb
SHA256 082e648875ab240bcb7d0120319d7ba61addfa99de84ccfde03d2f81bdda9929
SHA512 282e1fa329824a9383601dc81d5ee4301a4e301e7ab3fb129b106eaaac972a68287d12cf691a967c547a2b5111a372d62794482d8895275ed7a5dc216a852e5c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000003

MD5 9fa060a599b0ee1912f2073ed59df3c8
SHA1 eaaeef616747d09506c6ed1d96901d2c8d1ad4e0
SHA256 7924474a8f327264982347dc932997ed49890ea4114925024ba678fba2d4e90c
SHA512 93837c0d1bf848ff603073bce6ac252f770a35fad094b294609682e11b04b463292c74c8440891e89741f28fa67a888ed6fdc1575fda99a3c2b6065ccc4e7b47

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000004

MD5 4432ba6759218c592d12ea3054b8f9f3
SHA1 67b1acd1aceb6162e88f2dea0c2fa327c7a6e741
SHA256 c9297f0ff7cfe9f8a788d5d283a548dcfac9d7ee0c914882e993dd7732b08a80
SHA512 ecb956ee95847206a9e11db82bed59fedc03ce35e4f75f05539af1c38591fb99a478eedec89ea1364ac3d0a655cf1441de7a6b9c3ad01b86a5d8e7383b811e3d

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00000e

MD5 f222656f7796794674f732c474a033ac
SHA1 cea879731968ace9befe205c55679924f033464e
SHA256 2d9259afe79e20ac65865133ee69f28563201da61bbd8142cd964fd0097170d5
SHA512 9a2b31a325d8030a2aa6b5a932a8c56476a7bf995ac61d419e81477a0c7ecf5e92d5d4884a3d3fd9a67bd33dc619665d5e3bc05c3784c3bc51333abe4332b449

C:\Users\Admin\AppData\Local\Steam\htmlcache\LocalPrefs.json

MD5 44b913e0b71a9a4b5546f871b0f610ae
SHA1 a4bf99961796521b720645d6f6ec8936635254e4
SHA256 3de8376c8dcf34da14379ca9db35e7ef7b44ed69a876ecf3cc520e639122f5ba
SHA512 07166165857e09f027e190be65e8048a9106a485f0e3bd593bb24829f2b8c1bf2c44e17d7c17804e71cf07811366c4819c5c62bde3ab296eceab7661af524dce

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000011

MD5 014b64daafac87d3c272ee90cf4c0c91
SHA1 024faf708d06a7a19160a4c84e2dfb2c24bf31c7
SHA256 dbc476098874ee29be20462f7d264acd043d7b8b0f64ecb803727040d87021f2
SHA512 d4492304f499bfa09acb5704007467f1239e90620ff44d92865d371770ea57b8a9690ffac7ca6325e447ba9598093bd5fe4707130983d3f27283c75b73581728

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 c37abe5ecf1f95a4df4373fd36d3c8ce
SHA1 929b190d2d40c5cb636d2a1abd9648d80063a1a4
SHA256 d91ddf49cf736b51119f68358baefab5ebc5b9479962cfd1cf39669b3b84d096
SHA512 f7a1ba4860c741ad16041720d19f055c60a118f14fed396dd2673d412da66d7366d514ab188f5ebfb05cc18ebf862e057a0e0e96217364032f8e849d8cc7e0b0

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity~RFe6239c7.TMP

MD5 d9a94dbbefdca3db92ae55ee8b2c8e6f
SHA1 ff1ec46505f017490d14a681321cb4bf64be07f0
SHA256 fceac494befd406a49724aaca93369b038039267d09150407bfbd2faa13031a9
SHA512 c77c62b236066827e2a94deb9a33dadd53f72711ab33b2e69a5897b011f9d9bb9fdc37bf8b3b064feae53abcc45aab30376890b6738cb4b3a73b52f9769fc4c6

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 7b1460f4109defdd19be91887b6f60e3
SHA1 f38c606a85e38f52b319534442714383d3506784
SHA256 d2a0bd200f9c26cb2d2c211ff7610e88b496291c450722c1f296f7a6b6f5e597
SHA512 4df66ff407886e45f242d07249690dc5c078c5514cfc46b230c4ba3ac460b336eb5abcadff802ccd015ea2f523a14cfe37d0f75890d74b5f68b258cdbc3b3b5e

C:\Users\Admin\AppData\Local\Steam\htmlcache\UserPrefs.json

MD5 c24a4ef1fd71322e5e5478a5f3ac3e17
SHA1 d27e542030040816570d19ea118dad5c30ef8cf4
SHA256 877dcee51079f0dd066b7b1bf0b1168348ae3e3bd3cf13e4570b698608662461
SHA512 e226806cac9e82d36f2d58e2c054bfc6765a6aa423213dc2ec6ccf14cc47f13218c9a003a51cd6aa7cf74cdbe904f97190ee4003c586cd54668324384020352f

C:\Users\Admin\AppData\Local\Steam\htmlcache\UserPrefs.json~RFe627d0a.TMP

MD5 b42f179693fd6d9f9589d40b612b4474
SHA1 0febb61ebd9654fe0605b472f8734ea2ac70681b
SHA256 1f40316604dfffcdac60d9d24c28230cd3b1595935422d6e2e949eb5da8b4d5b
SHA512 982cfd4cce419f46a64a8c356e19d55f22cd698ef5b2ec1df936ae00a11f9df02ec30ce212ecc30a0726c26522a552b0402001c190d6a71fd0d294ade28b993f

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 0c257c5bb833d22dc0fdc18795b17919
SHA1 b596f313b1fc1b4bc1d9d3bd21bc5d309a6d5913
SHA256 69ae7dc70221ae0a16606bae69d907e6284b9ee3c8ce353b0c4803043d033144
SHA512 9511e0ba355777a4bbfe29bc230ad1ec629aaf4829013f8f51f7b611b9802fd4c2edae9f685e3df774502dce0105db995e88c80a9c2ab1d9a82e8be4561e0f41

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 34636a1c71613ee806d8518727dee9fb
SHA1 907f0d38feb9a6f721718d1b1b2fc49788e4a460
SHA256 6b2efb594d658b81bf727a152e33b5bf9e2e9629e2a66e3ed2e31252c753add9
SHA512 c2affeed42ca44ba50ed0d189409d7bcea779107516fcb565ba4730d7c75e3a54eff0c39d0d23bd26d5bf110f5c1077872a59127328d9ccfe1fe6d73eba886a7

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 29eac3d417c3f5f03d2ff81417f4438e
SHA1 2a36b4d115ed4c8851bd4d70f926d146942212a1
SHA256 8c99a0ca904c59548d6654d348ab130daa883c155063faa43c4360a7799a28a9
SHA512 61f5eafd2399d048e45e5d1d719ba464ece595cee34fd6af778761c593231e4bf52794a62876bd1b028d7ba1426c9de6a6cf9098f1043593969a1ad07ebad317

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 e3ebcecf499750a29f9c76544eaea068
SHA1 e256688bb22bef34a6f6da9afaca69060ee80b59
SHA256 c350ab83d9306ac9a5c288480ff04ab95fead7bf9eb85acea7257491086a3d92
SHA512 89c5002cc757f2c45255d390b5f2b0543edf4f40104e82e15de6a648d23b8ffc6c97ae9eb57e829766f1f1d7eb6371a34c0d94671cd0d87d050e1de75eaa3a80

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 c8c1dc65379665595c6342821299a596
SHA1 50c4ed29a8b97073d8fd5dfd783183dbc6a04389
SHA256 68bd07509cd639997af70954c301089066dcb8c16614bfd6a354fa5d39767e14
SHA512 6db5698e3eb3fe623aeb24b5b76b61574317283667dffe5cbdd265e35125fdf8595b5ff322aef0d25aff57cb490ac5b5af7be0c1d8c20fc9b38c7335600a4065

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 935966b1307adaf0439ed08db5bc40f0
SHA1 10e0e94357d115552292793043c015775f453557
SHA256 89486e0fd3749ebac75058d4d8feb67dbb8d40ab6ec90ba45a925e5a27a9eb22
SHA512 c736c1cb94984bcb1b61d86de3921ddbfdfa0c86a7b6df35cc027b1cb73eb1dcbda67243b0b14ff4efe9c9c6f468b7f60771224cc7bf46facbc99d9ff327a201

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 9b41ce8aa0be16516ad22d17ab1c73e6
SHA1 51198344a736143bda0415d44a591d20a540f9e2
SHA256 357c57256c77f5ff1572ceb2b4782a547bdc9410bc266c8464212d29031cbffa
SHA512 8f28091cf1100fb741e752a7a113cc9331611fd0a1d009d45cea59b88d92da4008f4c4a526ada0f6191a64d2013cf065a7f5935dc06f97852c2ec198f5f37632

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 4e0d3e4c9d570d1ceb16d34a620c1556
SHA1 1e469a10a467109441ad7c34b3b71a065481859b
SHA256 4653afa53dc3dfd7d3ebc93f7f9e3f134c75210dbac9aee17bef6e44add016a9
SHA512 b1ece56cfbe5e4a13427e3667d61b04dd2bd6f76a57521b154d85682bc8f30a44c9c1c5dc067a7bc4328bce73fdb99727633323f1abe5fcb06c6c06f9507c30d

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 fb3c8f88de1580914e32741644c407f4
SHA1 8263eaf178d7f0103f825b5a6353b358780f5b30
SHA256 14d0397c078015efb44ae10d45c39d6087895f9f7939e134f7bc315fd416a3c7
SHA512 f0aeba21f2539da020bc3716afc5ac0ed7292adc1c037993709e96f873fee332de3f6cb7e29cc53e72ee9b3a00dc79b95fa8ac429f0b628b686e4c0c1a3b32cb

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 76ba075b2ffa20591b4e42a2f9b303bc
SHA1 0071bc9f6cb6e0298bf3b42cc43ee26466f05fbf
SHA256 e42a6d07fff698bd8e254d33421bf9e7fd1979efc3caca4c808b22695e04b79c
SHA512 a9d0ba48ed902493d3f410212cd41cae26d9d30016d3a35cc27dbf3edc1468fb583d5e0619a68cc6a742719743deb48b80897d73659fdf784e36a1606af1c931

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 98c7a4bc61252f150c73ecdd1e697508
SHA1 bd275463cfef9e0ab628a6173d3a8b22d7b40c51
SHA256 933f1d557c818a7a6231cfe239c51d05c06a575a4e32135beae9f36e580b098a
SHA512 2603980d5220f078435059c9e1a86711346fcec7332d5171d7a5812ec712c26f0537dfbbb006e949199120efad84c4fc4d30cfda5dedb37a77e90d1273b5ea14

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 2deacd1b5e861eeaa6f1383f7d8cf7f1
SHA1 128beb395fc8f9715c8e583cf3e0e77a10e8fa1e
SHA256 777fbe29005bca2c56b78544fd40487f686d160def477c743702fb7f0abc7e93
SHA512 e874975f093a0275791ad63685c576ee86141c2cee12733f27c86621c2b510053a9afcb86690678fbb83fa989a5decfa8a98cc8533dc44c376abe92f440e8ada

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 73e44cc5e1abadf823e3dae690a82456
SHA1 e665be86aa2c04a5a995a282f5d285c33b9a7048
SHA256 3b897af8d3566e6410df1404dbeffc79ebea2f56f0c384bc1230ad01babeb515
SHA512 a245804ca19ead503421ba9fbc92200bb7497d743640b6ae86609395f8d028b08418f676a15d7109d8c997a12eb73c537c4dc7d9297546e936fd4ccd95626632

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 773c805ede91b8ecaae781ae12cce236
SHA1 96c933df44c6a54ec4a9dd5b21a2663a3830441e
SHA256 93d56f5a503f74e6a09125e81f0e3aad8754009b78f1b90d5dfa673792582542
SHA512 4a027cdd5782d3d3cf2b8adb0d38dde3cdafb6c791631812fd75081df6d5225e80204e0bbd4e8d85c6bc4d16d249f8bdd700be630a45fdfd7a258ec7ab08ce40

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 51cd0a581a4d5c9041c6e065cd83812b
SHA1 1f69a7a3fab612a44261962eae4a30f905d2cc99
SHA256 f92470d7d13e138a76c949b85cfb0da448538c3693171001f460d02229c9bdb7
SHA512 6a6a3552edf2d372713d27af7191eb182f397e19221760ce24028c32a9f0bf60fd986e7d080e54b22098a4a213f1ae39248209bba2be3e10ea05750668be64d4

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 db43557e49804df8351766405ed82e98
SHA1 ecc76f691b8e95ab75866869ce792495dd7f18e6
SHA256 207e3dfb3ffbccea62d3ecb9cc62b0b6fa4946b3b26212121e615684306adbc5
SHA512 a5a078d17fa7183c987a2ef49c4ae6e4208f816bb439a04b5bc11c36fac95139609500c755c8d4a4fe92f6e9d69d998e615f76a9e633dad49badbc8a93c46603

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 4e6bb9ae45fabb65e84fd813ca852e99
SHA1 4d874e2931180346b07cb26f03d69a64ea45f1c9
SHA256 098a65509280b36275a940531b08d0c97d9e44cfcc6e4c31ade2fca34d4b4fb9
SHA512 394b814f73ed88b8e72952b703dbb9d6ecc3e4be21cf6500fc3565dc81da3b896948215b514bec896f69782816a9e3c39b435fb7b60a36f4ddc70d12f7d144c2

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 819a181efc69e0f61298856caffb0d7c
SHA1 628669be4e380106b993547974334d8d1459bc38
SHA256 79452ceed7edd38c7eef02f8c121188f249fa6bd8cce98d76f2b2d2691fe09e3
SHA512 abef408fd0c636cfff0563adf64d2d73e1fa6dbed864b0405227ca3b80578c19d5235fd2265877ad56abe6a61ec7f65c6799ada8d2ce693bc41397f9059e5d46

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 917757a15ee3e3ae57f2a99cb750d9e0
SHA1 6de93508ed8f6fd83b2ab4976dda2e9451401a21
SHA256 329da2bb70b0c325ade00209d7615b8226474d9cc7a62db16f91658fa1065c81
SHA512 2dc953fb91314f359ee31caa0e6b0cce913a6c23099c83d3b16266501bad85c133492443861a725478e4cc6ef73446bc064bafdf6d53a23db204eae23a8e0786

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 b014e761efb6a5d3926193802a90201a
SHA1 81fd5b00d052ea7f222737ebda46e56bedbef28e
SHA256 9099e59a86655acc4b508f18de3ee8b0372949dd0949055da4948f031bff59ac
SHA512 be47c8615cba7c05203ede15e87b9000955630d255d1e690b9d9605d868556503c8a80d24abd57cf65cde7b6139a1678b69f5b534f4ab078a97f53a522be4f49

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 4c62cc788093f75e669ea1c2972fe180
SHA1 609ea41eb7f26192057fa8ebc67cfc3d79d70a5c
SHA256 df514139630150aa3a39a3dbe40304688c7cec3535aa9b7ec916cdbc356ed277
SHA512 35fbff0256b79d12d0a7b1128ea97e4b1b5a202568571eff4ad424f47261cb3e33763b28ef23bdb0e4e1a1ff2667285b35c367dc2ae0ad33cc949fcaf037ba57

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 5e5312e9ce7ac4f7e1455ed6c1db09d2
SHA1 c20afdbf38a647fb2ae9e95da10196729abd37d4
SHA256 2897f0a7e3d5927b045a233991d2c6cf47204703c49ca5557a7b89780e3e33b6
SHA512 9243982573b58d00dc676c7d582262dd935ecd7a67fa0a14be8be0007d98ac1baf6c1c444be7a2b912684a3e30a47e4b5203b2cee464306b2dcdf690c2161529

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 c746a4d0d7576f7e7f8b0d231e560c64
SHA1 e67584bc62eb7863ee1eb2944f4677e4255150fe
SHA256 05665eec5abea5feafef738260a4fbe602fbeb9950f696ba6b29640fdc037b50
SHA512 3278d7087bbacd5687558ae916e1481a38b1e30bb7af164dddc457d2b88011f22cd147643e70e6ed92564761c61618d50c82534ddb98efafaeb6ffc1f9354abe

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 b61179418fd9c168104082a59d466efd
SHA1 9140193e9726a44a9193e1a711f7f375b510985f
SHA256 c83c672c6d565fa8809d774c377168cec1a840a913ec3738b42ebe49ce158938
SHA512 b0b288af4ea0b1868daebe1025cf7a503a74e0780dd5326f13a914e95c03e9ab851334357a3f1280cd237a96b6b86da5c48c86985df74b75a37d7805b05f8e29

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 5b1121689124462e5286548a045b02a6
SHA1 bc91d617516ab654b7a750d38b8a482f7c493234
SHA256 17c4bcfff92accebcb774e8f1296b197f6726804cd54aacece600d97d8a059aa
SHA512 ced01abb895cb894f31c8fe2306cbc7a272615399f06732a38b62356e989db66e74f55ee1409981ec3b48eb882e4e3580b6f05aecdf05377b645847f0d26c22b

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 3e53ce6d7018ce6a4fd49d8677bc6f15
SHA1 77226f2733dc6589c77666f0f72adede85703519
SHA256 58045ac401b540d3fc80c1aaa9214614b95c10ae49faf9f084f827b9d9ef9ff8
SHA512 fc18797e6b7aadf3b2e0d079d52af80054e5db15a529d013e4e51c11d38725d6e202c35d8d6469f0b4642322b6ede2c9094fdf1c61b32c30a0a786c639923876

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 06084f49b6b1d264c959efa4cbf51936
SHA1 13907a0343ce3d904215b2ee4324cff8668d1dcc
SHA256 aae99a2d1241b33b91570d8873aa94b687222a1d50ea6e7bb22a1ea40d2db23e
SHA512 635a5679f98d16645d0c52d175d3cec5529606281371f97e1b80f1aceea7bc40c725525e22a561ce0daac74017b90a27de6f1940e44f0008e253601ae5f188da

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b43dfc619583bd8805cf1a79c3e4c4b7
SHA1 d1ae71d5631431175f78f2ca0d651c9f96ebcf16
SHA256 6d53d65eff568b951101eb59b0c44166a6df24822ca7dc0912df9b3c70df1e02
SHA512 ff0a8599de90fc346858d8075def25e98e18acaf2993a42402b458316e07eeda0663925fb6a6de4f7e96193a5cdbd95cf1b07253090c6cda1a1386d76c676915

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 dc8d8090e63fe7c8db69b2f9b17a3138
SHA1 1a87fd5e11653d1bc5338cd9e8192db7fb1698d3
SHA256 dbb3cd0cff1159fc0d7091d2bd330f5ff97af31f02ad9e1a93c8a7c3cb5d6ea0
SHA512 348da7e1368276fd42d454262dcbf328273dedfabbd472097c359928933a8094e675b59cdbaec64a9af46581383c37d0d284637b39dd096617503c90d7c467f6

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\2fd90814-1c1c-49ad-8c43-081b28e69004.tmp

MD5 4d5a85d190e92acbddf3df1bb20a049d
SHA1 f43eac0366f0be83749764c9a9eef7fb38ed2629
SHA256 06e2c33d5ff719fddf6d448430a58308a7400782aa45b0be753fd906b7f5cd5c
SHA512 dc864079db72101e1fb51e2903039dc9a38b892292b1840291ee87e3177c5209f5d9cb85d51528ec421b30a08d028647c19fb7d71c6c14d3f16775ed40951417

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6d1a045bc2d610d7db91a61616064f36
SHA1 5fb759721ffae4181122138b27da39b4ff70ebd5
SHA256 6f678995b4d8664b0ce76e0c97849ee8b619fa273e4231552db4c58807aaedfe
SHA512 5ecd87a12953f007ca53e67e3a0314ede8597c14f1979ae55b65deb56b1550fdd7249c9112fc39a84621f94a457bc3762afb0c40dfcf7ea986d8e3d04beae62a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 3df45fcd69502ef06b0631045e0b799f
SHA1 b24c0d93e137eeada6d814b436345a848a74260b
SHA256 970b66967308ccc6f4930349d335f0d3951ee63dc9da6f6c3dd1be9da7975f2d
SHA512 5731f4b27e5ef82ec062990bc9340fc25b6b05620cd6998324d525d7f705c6fe594ef8e12a867fa2354ff4dd5c3a34749809141f00b26fe4e2b06b038e7335e3

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 414f64f820d3281deacb081a5a88dd40
SHA1 2d2abbd71af7165b7f5665c32a22a0e1809d0df3
SHA256 32eb57070a6230ae46e141d9bd3f1731adbd8bb82138757e4922ff0710875e9b
SHA512 907b1fb8afc8d8eb12ed6b155655791375c4a345be5945c49dfc2ffa5216ffec8e0105021f29dfd51f0e2d5b08cffc3edf23fefd9d97a5318495ec2729bb656f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 13d7a491861946d0fef98e335a44a18a
SHA1 1c93c20363d69d105caf00839c0dfc00ed17569e
SHA256 4b51b6e9c683682d0d0f59cfec317dd6dbdf5e1e0619f9e0ef30e566debd7b82
SHA512 0d6970ce615a8b867cfd273cd0e044865868363a730dc1d8913418c2cdce5f7f0aff60535949b9a07a95f941b9734310693db86782b5d818858c5641286c537d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0efbe1d884f86edca0a5f60da8a39d68
SHA1 dac215fc25e867d4c326ca62859093177eab5c5d
SHA256 a594f36520573850070cd8332b0230c2c13c41fdce61a1fd9d2be3c044968a6c
SHA512 3b66105d167ed4ffb112952c6ed825142071e6b8016464ae1246b9bc8c4e4ab4eca89e47d015eb237723887598dace108c44d70d9e06f87eeaaed98357800ffb

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 6f1db53804c7c4abc0ff47abe2549b9d
SHA1 1742630e203ac5a733bd167991d64b7f282ca99b
SHA256 9ae0f6dc3117d801383523413ffba66e575ca0bdd9ee7ae6b3c1aeb4216f7096
SHA512 92e2348b338f1149d36196e59820e6499faecd2aef177e40fcc51ad74a933c3bd7f895982ea8486d440c44a4ca6406b483f0254e0c92b2951fda933c987e0a70

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 06ea3d276fddfeedabe279fbd15d4f9b
SHA1 1a5f1d0dca1313a37368bc9ae7d1d087888d94cf
SHA256 451825ffbcf819749917340abb85871a23ca64a66fe02d6b97516c5ebdc9bc21
SHA512 a076925fa509711d2898633bc19a06c43d4453635385fde57b0c6f357149603e8df1174499811fd168e37fcbb8c22318f67913e8dfb6820b764e717b15b24fd1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000b7

MD5 bec2af13143a7771b0b89cec2ab92b27
SHA1 9cd25b2c17a630fd0d6dae4aa80ea510ef4b89b2
SHA256 52aa9c3bdb64b5d1c1fe6dbf456fc50da434916b6c7489f3c64a0ea9253408ab
SHA512 42d00250350982b0d3f26b84f33cc1365c8ab57f830f2f859cf3cdc8ba2879c09249264b1177c4b85de6a2461efe06620668c8d5bb036fde0b0030fa246075b6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000ba

MD5 dee46781c0389eada0ac9faa177539b6
SHA1 d7641e3d25ac7ac66c2ea72ac7df77b242c909d3
SHA256 35f13cf2aef17a352007ab69222724397e0ec093871ff4bd162645f466425642
SHA512 049b3d8dcfb64510745c2d5f9e8046747337b1c19d4b2714835cc200dc4ba61acaa994fec7c3cd122ba99d688be6e08f97eb642745561d75b410a5589c304d7d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000c4

MD5 8eff0b8045fd1959e117f85654ae7770
SHA1 227fee13ceb7c410b5c0bb8000258b6643cb6255
SHA256 89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571
SHA512 2e4fb65caab06f02e341e9ba4fb217d682338881daba3518a0df8df724e0496e1af613db8e2f65b42b9e82703ba58916b5f5abb68c807c78a88577030a6c2058

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6d045e7398758033ed552bb9cbf21278
SHA1 e368b05af87452a20c37d22e61dc965cf6a1696b
SHA256 abcfe6df89dae4736138dad54cc7cfc02ee6649cd0d330850b30b6fdb3824d0f
SHA512 8301e5f1e0d116380d7d26dfade10691dcd11557b31727784ea0bf486c14104207ddd40db33de1cab06d112a5ad083d52e236a2a4c06c9325730ab4d4e765529

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 b9a99eac78167667fefeae594b906c20
SHA1 161cdd3056404a6d90d25e3196a851169d2d126f
SHA256 ad071685bf5d91611caacea37d240223b7d8d7c6f93bf6e5d166ca4030cf5a66
SHA512 ce1f7d48a86ac192af01e74e4db5f0a18f507476188519a214151b97985532be09ca3a4b538bec93cb8ae008d5b297d87e181ecd35eba537cabf22a23cd41aa1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 64360198ab7831dcebf765371abbdf55
SHA1 a85db32a7037d1e02f1b18ab862eba3880385576
SHA256 06c3840447b0c2a400a835b3a80114b27b754ba9e7b42b1c572e7fa24073a8ee
SHA512 baa6c5c16be3144aa351b936077807f0046764bb9aeea4d6bcf62ecbbc958f34c3c7421f2c135bfb2ce767de9f85297a0b114a4f303810d9eea79a7e8ea34846

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000b1

MD5 be0d91e9a8aa3a9908af56efee60ecbd
SHA1 fcb98a91633b13deb79c279ada0b73ccc11f4c3f
SHA256 c1caa4708297a4e945cf465e48d0798389389a1ab580986d5234576e04c8c726
SHA512 a47305be4dd905bacb9d5efe7ca0a2efcb7dda4a561ca9c3f2bf8807bc33591f18873fde7044c8743d38c82c9104adce0fc87bb0204e7e663de55c25ae8c430b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000b3

MD5 c8ae8cd0b37b5255e33168741f8f8296
SHA1 de4312c5ad5fba59472679e3ba721850d8113087
SHA256 2c5fa59e68f6710bc556ece2ae67b7eb178e82315831f4ffbb9c405c3000ef9a
SHA512 32021724c200acf280b184aa381b7467a7985f9e11975eee7e874a1f16b1f9635654605af880f5a3585c48e7e25450075fc7193dea3b2dd772f513842ae2fd77

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000b2

MD5 8e54286710a47a5c0a4ab74f7c5c4040
SHA1 515514fa97298d2aad79c7adfdf24c9b638f57a3
SHA256 282ccc59a64c2b985a7fa18bbb7548b553a7b51a7b073325e77acc41cf34c839
SHA512 c4e8bb1f108b47d93e4305804c30e0b071f4454780d8d16f800d191f209f3605f33d1317c5d8c45dc957b43c2ae4755fbfe95759fac14cf34fd5620210d15403

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 51ebafe0e95740cf0d819e25ded97956
SHA1 42300a21d830379492fc8a8169815253a61da6b7
SHA256 91f16df67b7da3646eb917971f6bd1288385aae5a9708d4b6f209553bb1e3ea0
SHA512 a8a29de035b443c1252a83aa01060d22c13a8e2987dd88707a3fd7a3e363a9e49d6271c07cc0685bf675d670d98f1e5549574685ff12e7989974ba6247d0b417

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000bc

MD5 3a8ad551ebf9122274a160d7a22100ac
SHA1 1bd2fcd6b86c37a717b387186e510de5c8a2ef2c
SHA256 4c1ee3e726da9b0dd3dae0c2ba58824daaf0e132d9ede9721a8c7dc190a4c099
SHA512 7d6f1986a535b21a45399d13024f28298fd74c4e0e08737b47df6050fdee324ebd7f86b912615287a4cf6d71597ac78805b3aed16c1da0f561c724648ed9e98e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000bd

MD5 230ab95d87a717be265134072eb17c25
SHA1 71a3d3dd6f952057ba0c6025d39c9792ff606828
SHA256 3fdfeaa675697f08f1c7c0fd6b77512f4bf9465e670637e8e332e65ebb9db068
SHA512 9b0636421ad14161f211e846521149ab0a7c866e77db309dba79718487835204cee3821c9f4678e48e134614be6a02421c155a34b7c9bc424012137705960b11

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000c2

MD5 13d1c64fda55ceba6c6782cbcd1e8c8a
SHA1 1d2eb23cc68a77560b66066ec21feed909a5129c
SHA256 a09686d51943c5ede204b0e640c8f88c086fa06eb960968bf7bd126e749a2110
SHA512 4f1b50782c8adda744244ccb2233ea097dbc317e74c682e1d67f44aa8667ce984f744d89dea6052ffcbe11d4b679d2964bb1e275684d129439393d10a9d2122f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 57c469623672845e5225d7eb6b6eed84
SHA1 0e4033011480fe46f99772a8c890e3c1fd47538b
SHA256 3474b2681f7b99d6232d123854b308454f9044da281dbe24edc52fee1ea71228
SHA512 d2a6467a692279a227c21900813c01882bd2ad67a2b94c640c10112ba57483d919f74201188e7ff7b8b956b74716ca278a6d16282d3b319daf937061144536e8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 bec7eb13263dc1e85ceb96c37048afa7
SHA1 99fc2da8b8abcfbdb93fe97cecb4076046563b08
SHA256 58d134d7ab9046ff4a489c20434d1d2686cbd8213cf9cfb9bfed0b9cc512763d
SHA512 392b3e9749a6177fb10f2a0e0290f3169b444bba04808ef874696f4b3c01b20eeb737cb34b48b59b7827ff6eef67bb5f1b14968e47d4db2b232555d4492f9b09

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 63a1335cd868901b7c184ac668125963
SHA1 df998bd31560686d040a125d60355d16fe36ac25
SHA256 58dd8cd3a6bd7b3132b6b5dc6418e507286390322bd70811870e34f57aff35d0
SHA512 67d946d62d2ea445aa62f24c239bb71b93e510187c81cb6e4ae810468b6aa14d7218d37e8af2ea44f4a416a349667e61bd0ee1deb1f9320ef94765bcf16e9578

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 22dfec5c6b2625bee4b21f0abf5ea797
SHA1 0c72ec61362ff5e63bc72d609b95dddf8a248871
SHA256 1aaa4fa720d506eb5b2647ef59ac68a5aa8974e2d3ceee0fd699a0aa0cde037f
SHA512 6e1d4b6a1dd67e8409036864c5465abfcf0c6513acf0dc351e32a7dc5a19cda4d880e97195ebb08014abbd2cc109c5bbd3dc260a9351e379a6dc530b1146aaf5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f178b9ea8daffd246ede3e2889a7ba0a
SHA1 587f472a452b53ecce9185b21e8e619eec0fd717
SHA256 a3f5d45c4feee5e34f2045fdac522507439ccf9342ba9ba49050eb8667440d5f
SHA512 6a9fa799413e706b44ba9befaaff672e7f31d6bef6c75eed37d15f70bc57cf52765ba0c82bd6c7ef69c343ab0b4f08a54bbaa0490749f7f3d5e4c012679049d1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 fef1fb79167d3753bfd47c2cb803418c
SHA1 be55698c80ce85e9af0db4dcc8bb0f5f80c4ce02
SHA256 7b91c09c674e7dd3be702acbae0b3274aadcab7ac77b053157b826f8825bb597
SHA512 712ff83e2766536dc3f59994aaddb3fc0a50014c8bdc5246fcf5ad8f05ee7f9de625a48362d527ae32a1f419f6feb65ffe1103bd3a97475d07744a6a8c402a9d

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 b6ac0b80b33349bd07c64ab04f4b0c52
SHA1 f390b6a4bc50d39cf1baadee1cb92373c5672654
SHA256 65b055e73d82929cc05b2777d504f21cf53b06a150e81b26b29fb12d8868a019
SHA512 ea9b78fa80cae187b40ed6fbdacb3c58f72e213ddacfbe78726c49ace4b9a2c0fef042ba8bc394c776f8c3518fcb3a50dcda71fd59a5fb53781116f47ab5299c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000005

MD5 e13edde4a25e96e573f37bdd11e020aa
SHA1 84a0c3cc6cd74b149cc27de2b0fe48bc2acb70d2
SHA256 45b526e6aa5356b278aa37e67593a25d09c9653e8a0e71fb8e155111d3b7a515
SHA512 9ba4cce47994f949731e594538f56f423ee46a8e602fe922ab6e1d173b87831ae5a80d967d695fc45a08b25aef5c494518b43cde6b4709db690e904b2cc1c053

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000006

MD5 585d504676687dbe72abd522e20a8834
SHA1 055c34a5c78bb8d26ffc956df3db2ae716ef6f78
SHA256 fcf9ce4166770f6622b4fb6d065847572d02224afeddae4c1a87ced5731ccd3c
SHA512 713bdc9d79aaa5590db232a1302bbba88a5f24df2e6f3a79b877fd180d3713b20417e97e5480124d7a1caa19708c37d4e615b300adf732f5e365cc75972a2ddb

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000007

MD5 499c1e719c78437eecb886cd5708e159
SHA1 d041f09450f48bf1c56cf9d79dfdbdf6dd04189d
SHA256 735abd11abae46fd2d71f4fdf774b0cd361c6e480d3f3c1c8ccd4c30990c7a71
SHA512 927597ddd60ca95123d8ff285d48af852332c9feb1e1b15b04784e1e6863337895cd7145cf0e8b49fb9b4e6ba7594dae24c4a959df84de62c174bdb9a241df13

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000008

MD5 aa3794adfd20428fe34118f03bc93592
SHA1 591db28eb78acf0ee9fc1855a1bc45d038169855
SHA256 141849b5f1fabee6f3612317c0df48485ead9bd6147c26a04668061fcb643530
SHA512 699c10405d2fa42569ce3058e578c54c6da13e68a68484d4988101a55ecc044ec312f5409a5fdb3b33fe2f9cd9d94c20459c0aa4b05482a9273e2dcf405c115c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000009

MD5 47d88f0e30322831ac51429e321af624
SHA1 0a3a50ae8c9d61a6d96b872f91b4694187be0bcb
SHA256 ff066f3e1ab3028b7bf326825772da1a50d4c9bfe92ec0abcb52f17ed996482c
SHA512 416fa132223c396c6ec4ba581383ff0859ee02a7e73acca4836df0e8154600cc9cfa4249832d0370fc7c45232e0114994e7da36d094cd459a6f3c77be539cece

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00000a

MD5 1cd9f819fae888ce4860b7f6093347f1
SHA1 04f78da120741f1198d595af811b2c42ca9d5406
SHA256 d90bde2cee49d26d93cc149da64ebfe3b57b6f391c1fe84c696a2d5e3f33b3ad
SHA512 2f7e22a0b36ed64c6be176f48f91663bbaca60d7a4ea862a6a81678fadc1d8df31c59a3266d1097654fb52345e0d2e292b8bf48e9497be9c3e3be89cf43bf90b

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00000b

MD5 831a00267f097bf69bc2e1f6c6513a6a
SHA1 41e69c72b7ae95217c2cc29738b6038fd844f4d4
SHA256 5a8a1f270b2f21e7a146d769c430de48d47fb3034e675f1fc3e9d2e507471bd5
SHA512 e9f3c60cd976f764b480e599fe241ea6efca559b75ad227e6c50178430fad18d1d9f504b0286478b3e540e53c1f3fc6e763881c96c202d8a851a83e49c973bb8

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00000c

MD5 f15c033c2b56b69a74df7272cdbf5526
SHA1 72f9c9b787288159845ad9e5abd6820979623590
SHA256 c2d0f9d205e191eb98bd076a36b13e1dd6ba65d73e35b3b7c67b62da6c188e2c
SHA512 c0c91e205228ad98288bf920c11eedf6f5f24c4e345f2adcc50e03aad7d247e15ed16c1999ab2ed1584c5f335f89f08c809f294ef3068a7ad6a962173dc3b993

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00000f

MD5 57613e143ff3dae10f282e84a066de28
SHA1 88756cc8c6db645b5f20aa17b14feefb4411c25f
SHA256 19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14
SHA512 94f045e71b9276944609ca69fc4b8704e4447f9b0fc2b80789cc012235895c50ef9ecb781a3ed901a0c989bed26caa37d4d4a9baffcce2cb19606dbb16a17176

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000010

MD5 ce6bda6643b662a41b9fb570bdf72f83
SHA1 87bcf1d2820b476aaeaea91dc7f6dbedd73c1cb8
SHA256 0adf4d5edbc82d28879fdfaaf7274ba05162ff8cbbda816d69ed52f1dae547f6
SHA512 8023da9f9619d34d4e5f7c819a96356485f73fddcb8adb452f3ceefa8c969c16ca78a8c8d02d8e7a213eb9c5bbe5c50745ba7602e0ee2fe36d2742fb3e979c86

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000012

MD5 4d9ecc70dde56858a3451017cd7fd8d9
SHA1 88189cff695c454384884888ea46d9c11060c811
SHA256 e10acc2425b736f904ca0ec762a77b516ce7cea7391354841199e55750eee287
SHA512 dccdf161353e3fbd904b63f646ebf616e9eb977d23933575a307336aed6bb044902e11dc5990aa217f7b8cc16e190a968fc9077fe74f335c195c72de46c6f60c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000013

MD5 a6eaca3d13b525eec27a4f59c22974b8
SHA1 c909f597a525aa56814bb4ff588aeb0f524e2a31
SHA256 04809f33e8a8a6115c55ac60613373f93cd043a1a18bb708a126f9fd56586430
SHA512 6c75c50044b36ad6334b89178524cd8b153d2bb5514d1312cd315a759b32db3154b5b0f6ac75e688dbf7d384de362efc2e825f512f615fdec3d9d3f2401a47d2

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000014

MD5 757750902210ff3c0d12dee4dc5165c6
SHA1 a3599ca4bd5da9fb9c83e26813ef62327c541566
SHA256 72ff7d67ddc7bd23885cbba07f3889be27b50cb597ba41fd546343416676ba67
SHA512 ef5cb66e561d5f208a872c65b6732bdaa082d421f9815c8a5a439d5e749890e032c2309c1d7ec66d93d1f897941bb5e2c5f860fd9cf8e13adfbf1ab60aeca27b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 f7df982b2898c2618bf8776e26d3a7f0
SHA1 5ab89670dc36892e1b0deb2c52cc7c4ca021fcdd
SHA256 ae42e684f4481c079ecf437559d72c3289ac63aeee34e35f436cd3c80a8aeee0
SHA512 e3b6188e8550cfb45e6348a8ae8d2ae13eba767b1c6165047e5e7a49dced47d2e9ef20be01e4d5062f166c41ee78c0623db657526568d793f369551865adeb15

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d51060fc1f07e5046a1cc485d69c73ae
SHA1 4fb979031b6357e87d5e916c4f3636bdcb644b1f
SHA256 854cb4d01a2b4e23764488004649c714cfaaf5efbe91819aca884191cc61cf18
SHA512 4186c6b312e17fa2db7664d68eb1ab4d0c29fe1c9cee74e6cdcfba79e78d18dbf99c0504cfac5c9ef8e440a25f319f9f842473fc2afb3d83b97868d90419d21e

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 37cfe57b09e5819072b13e8b51db2c9b
SHA1 acd6cbccc762b4a6573086f19ff8d321e4a28a65
SHA256 e0fda866d12dfc5daed1cc051abbd3b7357a2702734fd03693dfd10db27f4983
SHA512 908ea1a90fe7ddfef8b140d93983b978bc22c0e565078741bcc1f3e47fb0fec1f8bbc9795f99e28650601dce676c16f821cd6116e0f9459a920f90afb0153a44

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 55a4ecb1eeb0a711ab376b9419edf5fe
SHA1 fa3a61f4ae6eebba30f8a5881c51909c658c62a8
SHA256 f9af58b1a676dac3f2e70cc85a617c922f03cb73001713822972a203b036b9fe
SHA512 e92584d15154afc492f2cc332d0038855d1f25b68107e3741f1365f449812cd80c03f45eda468968814185859928265478b325051cbfb018567e4bcb2fdac5ab

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00001b

MD5 6168553bef8c73ba623d6fe16b25e3e9
SHA1 4a31273b6f37f1f39b855edd0b764ec1b7b051e0
SHA256 d5692b785e18340807d75f1a969595bc8b1c408fb6fd63947775705e6d6baa66
SHA512 0246cee85a88068ca348694d38e63d46c753b03afadf8be76eca18d21e3de77b495215ed2384d62658a391104f9e00df8605edb77339366df332c75691928efb

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 ac67b7c706168505f51451998cf0dda4
SHA1 53c6d982bb995af15873750555bf8e6320cf99b0
SHA256 17c5af77dc3ed3beee9ce85df29bafade4de1cb8cf9c7b6878e63c3c5cca7646
SHA512 929ad035fe15854c7402f852d752cbdf5d301f23e140ff94ca89a7375c6fd11d2be0c0c6d3eed71159566d2292003ab2b641a74d497ba212573db04e0471f350

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 14d732f1f62677b39e527f15169eedea
SHA1 17dda1304f8e44c026bcbf0a5d0c6461ffdbf25b
SHA256 870c62136866386b4d086235caa127cc35e9568e550438821f824bb53d7ad13f
SHA512 3372e3c324d18c351ab0d4760d0c3d44f25bef6eb2971528fe4c997c7491aae71c853eb9f0df472d6043bd227a8c48b2a34a7345c9c75c0625bf5f4fa5ed218c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8a96cd9656362876d15bf56ee14c4d2c
SHA1 a129cf0c6ed421c6486fb3758bfdc288f2cec0e3
SHA256 9fbb7cd8622fcaf771f8687e1e115dfd9a5125f599fe5084dc6ef38149b21038
SHA512 9a1050d16ef8410ad6183c0c6fb0f5c48b1652d99783aea85dd33ab8399e9115d9024599a2afa0ed9c9012c4c9372b6f11ecd23ea45eee336b69b7df64701b88

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000ef

MD5 e579aca9a74ae76669750d8879e16bf3
SHA1 0b8f462b46ec2b2dbaa728bea79d611411bae752
SHA256 6e51c7866705bf0098febfaf05cf4652f96e69ac806c837bfb1199b6e21e6aaf
SHA512 df22f1dff74631bc14433499d1f61609de71e425410067fd08ec193d100b70d98672228906081c309a06bcba03c097ace885240a3ce71e0da4fdb8a022fc9640

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 8f935ca1e17fc9cab2ba95be54b2f4a0
SHA1 9b2867c8b5e987116e7853c2decc96fcf4a6ccfb
SHA256 1c18dc3691938e74b021570f5e3588af5aa57ee67d15ed51888a92ee7f3e43f9
SHA512 8a8f94ba52bda47210d79c29faca4927bae5428f2ae814d7466c7936b00b82a2f37a9a6df0b39c250d940355ef36f9451f84d36992cc0c519bf3b1352b46fb92

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

MD5 f49655f856acb8884cc0ace29216f511
SHA1 cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
SHA512 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

MD5 b5ad5caaaee00cb8cf445427975ae66c
SHA1 dcde6527290a326e048f9c3a85280d3fa71e1e22
SHA256 b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8
SHA512 92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

MD5 d222b77a61527f2c177b0869e7babc24
SHA1 3f23acb984307a4aeba41ebbb70439c97ad1f268
SHA256 80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747
SHA512 d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 f46cb8c4eb106dac5f506042c91a14d8
SHA1 ce315b032da93833df43261d67d3ba1b91f5cb91
SHA256 277d3f8519a060601358e5992f6651cd5cec8275746cebe0590e56fc0db2dd96
SHA512 efe9406bdf83b8c77071021f31b3bae29567bdbfac3359074f80b2c956242a572195b3039075458c657882119dc580de951e9fa7cfe1d037083fdcfb3c3d4caf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 09c830ddd85b52c21e76a66ac1aa16b6
SHA1 15530957fcf2cd5292112532265f5b8fd6cceef5
SHA256 3e5dae36d24fb4d178399abd637a4b17c9b99310a3888f78f695c61abc5f8b32
SHA512 73fb3206444aafbc3056b3a2e631c4d164805ae1597044b6647486d03db8cd1598a19333061daf7bcff48dd644b4cdd175fabfb03566c7b689287068a6ebd284

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a15b9419276d2c23d2a274c0a4441f30
SHA1 8e3af660d822d64dcc919ca9e46d1651966b1223
SHA256 e869ed0547cc66cd39d705db6cf41b12cfe86146173805da0b38e1c37857ea55
SHA512 9cfde2075b609f674b76477b54c804d6745428ba172102b738c61e88abdcea03856360471c6c5e0b4638536e8846f4955a69430a7275550baddc28e7ab336f7d

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 dfe64c054c4b622fd31db81ee67a1e74
SHA1 4ece9813405e8894da30f7f95a4e14e0e5b47b11
SHA256 20beba033789891366d8ab62ba186d626d1733727b13d9394563cd44b1ca0cf8
SHA512 3b8ee53728d98e0a1e6d301d518445600e84b04eb682062443ed75ca4e8aaaeff6c0a05ff3b3789a34fc1a8993b4fbe202e76dc6cffb10834312ea81928c8f74

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 c3ec03c7fe1dc21098d31dadaf4d29dc
SHA1 f358c2c4af07cbcb3bc9a0cbe5113444e9b4fbfc
SHA256 bd57d0b4d77be6dd43b2ab707399ec01f1ea4ab69a0dd48942034f54deecdbc8
SHA512 42f31703f1f28aeba27f3ddf6ce5768e2245e27ef7e1133bdec49363275b5db642dff4fc3d3bb346b1c8ec5de7ae61cdccab2ec825e386c1ed607f1c4f3e2766

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a52f8e8adc6d1bf8e78846e0d418ec45
SHA1 911d155bcf82dc3cfbb2a991e4c815979f159a8e
SHA256 909a97154f1c0d74b806262ee59f03da9aa65f10cea57660738c5d4b8e6a1135
SHA512 4f6750f8e9871602b47d05f9594bce9e92097663d532413afa9d314a4f45601974075acad6310bfd908f73dce25a793f49ca209a6cddcdd9f55a863650e5e5e2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 58adfccff4453f4c2207c3c5a924aa46
SHA1 d8ad1ea8875e9f3b69d88b6bcabf30938bd63ae8
SHA256 b9c23c4313a4a8655c351ef63b3bdd492f44131287f878c3e584625ef9df4359
SHA512 5b8fdbc4db42cc6738d540641309f5183c8c39fb6033ea96eb581af95aae83b9001f6aa3468d82793089a3453f18f0dae18f4b0f49a4f48f44624251af70e8e1

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 4b370c2ab9bea4abcd5259404f0642fe
SHA1 56568bd34f9919482270452db4467a71646cf9ed
SHA256 12c106db1fdaf783f22ea9c7ae831d5b12a7b5740ade632a4d398db2c7acb897
SHA512 f1ee0388b083eb49218181c2d5fd586696ba480ff9e5a31a2526a8a06b9170959e8b12f4d53886db76cd53d699aaf47a2f2e5d16596b94d6640e8a268dbf4e9f

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00000d

MD5 2b5a35fbd77d40bce698500285e9b2a5
SHA1 d3e59cad582008c83d2850dcc57aa36b5345d16c
SHA256 8fdc4368a527330d4276cd2487da547361ba880790935f2f9602428b7cc3fdb1
SHA512 9972cde48f136140b77690a01a5c112116eb60f8b8f4c46a69529f79aef9af3dc158f9c6d6bfb5a0cb754d9958d1741784e100f29cb3c7cfd336da6829edaa89

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000015

MD5 c93f7b56d43548f56a71b3738e00376b
SHA1 8a80876668c49d438dd91dfc24439cc943c627b5
SHA256 3967d3e49c0b567410a9ead8136cd11894c9b19227c18444617549b06b5da082
SHA512 5221aacd7ec1b75cfab351a8f16963e9bfa7ac964f346db2bc5d7cf11065bac9dc6c342d311153e253de8aa784394a737412270ff2a7f126f91e1df7ae243598

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000016

MD5 27d6cdeac7f0d9456744b89732b76047
SHA1 d725108820b569eea716f4a222edc56b6ab8b4aa
SHA256 68a92aeed7a8aa0387ad23ef71d644092c5fbeb40c5e8ab8866fbe4b9b2ec973
SHA512 9d4a6f06ffe161831364d79325bd26ddb1c55a51bed4e4ad55269bf84e702ab16729275ded90d601e3ad26a568ffa952e5edec5300175b86e5f54f01393aa721

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 5b411448e0b138a3c323f017185998dc
SHA1 1f7570e055e84a4abe2f85e7d79c46921f96ce63
SHA256 7f97216890ca1706d08831f67bea45c23a93bce1136421e771a26ef1e66ee123
SHA512 9bc13e7a0bc47bf06f89b663d53e1cdb363d4d40d190a0cd87a920f83e034bdd04d63702e34619c0307c7c8fde7b8127d30889482dbd466755a38a1d8c441039

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000018

MD5 e7eb40a17f017e7b0651dec263c01ffc
SHA1 26fea5c5c688b2ecf33bb6892c9905159b6d48d9
SHA256 afb8e284cacb33c4d52af3a501a871cf560e4ec94358761743c02f3a21cb1810
SHA512 d7af8ff7adb71dd5ed1620efd913673e108846e02a7775d012825357fa81ab28dde7bce06592256e9f9c2e91ede6a249a7e6bce91a392f6f7ac0b53ac3ca0123

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 7e7acd6f1fcf8d3bc3be9c2babe884e1
SHA1 cb2954e24ddcd1d8f2e812cdff9c91129036e622
SHA256 fd070fa475023515ef640f86c48c320d73f3c289a721d6a4ebe128861b0385e1
SHA512 c21c4b3685c6720ab70b6e80155e58afef49e47114c32a5be2750973173631ac2e554aea9e734474bc0612c51130e5bc14cf54bfdf850e953ed95a34e4b2d85d

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 3fb16c9f44b7ecb8b0008ed0bad7de43
SHA1 740224665795e55e10ccfd3ae2b87996e13ec4b8
SHA256 174ecd1d4fa61038860b68011b555f4331d9371c9500cf19fe42139180bb8ba5
SHA512 a3511c0366fd8323fc9124361dfc67b1f983f9109907bbc9022f96643bf1e7e9ce63da3edbf33573b45173cba1900c26f6846b04f35d55d2152c830b7e26aff2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 1752573fbc171daaa5901dfffd1868c6
SHA1 c7a1db0f1ab1718cbe73cef54e189d4bab78d27e
SHA256 4f4ec8ddae379f68010c5014f6b97f01838bf4896341c145d49c2cfa3e9bcdb2
SHA512 6539f746106b400797bffbc641d35e33c1781081b6df0cb53f66afc3cc807b6d9ceaa2f0d6b9cc54669364c4204556820f2def096044a08d99949102e32338d4

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 a2571967277c9e62f93e7057e14b4848
SHA1 21ba72a71531517d195937e2f65273a3c101c9b5
SHA256 a8f387dfd57dbfab4114085519c6e6380a8ce80db903421dff3e6720a8c5423e
SHA512 c50609261e23d6a79d87f6d8313687ae0fbb4621fad4f3b6e1517636fb865d5a8cb27fbc436ba00d43178c8faf37ae32a44e795bc9bde802176fd5b52dbbba8d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 4a6d3a41b81783844ab4bccc297c5d74
SHA1 cd3c2e93c443ddd7217c4fc65951fe53a2d2f118
SHA256 8f8573376551d7f90c3208b569021ecc61bd952bdc779ee98f432fa2c1d8064a
SHA512 9f7a69a7aab1bee40066351fb12c47e17bd1a9a1cb5059da3b227795a83827ecb21567acf8ba1e1a1ab910e1ccdc5dcf87afb6920ec9a81167c19ef0c37dd4cb

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 79470ae9417dc95c3dc138ac6ee6559f
SHA1 2a5f069a71754aa0316fd5f02e019b0ac60b0576
SHA256 93fe9aedb6266b1f7e3844a78f9d22540f43250e64c8b772b56370aed9b31190
SHA512 b5003b9080a0b3abbab3c31a88e41c717c228e73a010c6ab8e487289fca56ad214bb23be30f0f4eb776cb7f2da934a576bfc47e79dbbcecc458d93319cd0a718

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 46301c103e12260286c760bcfceca110
SHA1 b60492162bb34d5a0d6a0e25ba304b395842ac62
SHA256 d94f0c71bdd83a7852cef4dd724ed257b15b0ceadd0030e13677cf97b27404df
SHA512 7ff6c616db9c256d0923c0babe9e9b1f895ae354a474c474bce52a59bc60ba4f3e773b51ec4693783b01a701b7b9654124f709c16f7c7195b805c640185b9e79

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 7e933e7ea499c3645deeeecc82726458
SHA1 8499b0e25874d968fa886ef5c10de2934518efc4
SHA256 a58654e0b21de1a8a9c2006a914d14f097b453204a79c2ce962201c979935637
SHA512 83c672243778b33d9950f8fcb5a720c57e28dce41a723a1fffd913e9b286a42ef8b44452091bdb98f818e3ccb64c70d66486bcf6de75a408997c12e9f17f3892

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9bf0fa42689d517997033810b9cbd8d6
SHA1 663ef36efbe360037579854e9270b6bcbd9e93ee
SHA256 9c80c95513d82ec1c1f5acff527711694404af3ef5ac54f45749885749701972
SHA512 2fc933782eb7adad2e68ea317ffc734a8c5c8af17da9c45ae9a24e5098fce2e3a7ff61335e308dcb9ee6007d92cfbbac6067c83c6818dbf267645c54f5c1b6c4

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 6a76cc1422f31a67abada5ad6a77a696
SHA1 b42129a7fb2a3b5008d309cbc8aa6619c482ac0a
SHA256 3e91d1ac6863c61cdf3f20268127affbb5f17a5af29557a35e2286a211da9156
SHA512 c8af53d415e96d9967890a7a86fb006f2d59f4e849a6664b9f7c1aad31ec5765f9d055bd845e9c61076a195529a8fc80dac2ab62ab296359edbe7f8572e97ec1

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 be812b7bf56a385ec5fc71d9f8e347b0
SHA1 6afee94bac7aea6e741cbcf15ebd1c261c983a7d
SHA256 354ee6bb961ea1018aaa63797086d32dead59e514f3e84c9f7468df62b185557
SHA512 bfa553d43cdca101dc199cecd326966f72aae68d494082e1243bb39b86b9aa41730f302cf5b1c1802e9155cd063c423d2434a41e31a5d32651f6262b22fd9ea3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 4ae8533924d0cfa676283faca7d99939
SHA1 49a892a9a58e3502c3182010f5e2cf8144e89093
SHA256 d17bd2c9b9363b3abf38dbc5bb66be547920577a8cb0b1dc159c0a91d0ff98cf
SHA512 7032d571ed3fe93207f2d83db1b020e2783070402473d2fa04e871e79fb99cbd52615703f18435b5f5ab784241ba94d625f90a8ff1e262752883b7275d613de6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 87bdc893d4e13408ebc301ac8c58d66c
SHA1 8a742ba194972280146028eaf9a76362b9685886
SHA256 61bb416ecaaa58d1b021edeb4c004c8bd3c97f353828979db13e8ff5094aef48
SHA512 9b20093cbb5bdd1e3a3552d8a962404c44751cc24699dfec96855a0281bd6caf87b6e573dfae226bd379f7158b7d55b43796890795a790e15910e74e39413c4f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 df78a0e3ef0bf3c2af107634ffc2fa5e
SHA1 ad999b5feb8bcbd4a88c255aa6c2459f93de7a01
SHA256 9d2df59640d8722140e1161399288ec3ff8521d5b0d3f473129f800272cac954
SHA512 2a60954049da117827aca3d3c2f77d89383c47f0ddf136139dc61d160c16464a5db9b3f1925c1f4d51742575c99830aac81bb75abbb257174e7f3b4316c0e5ec

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 bc5e12b577b20b3a5a000fbf21f64587
SHA1 22678ffd4c829ca1c424e9a567b0d579b9cad59c
SHA256 55f5e3f75c1aa6dc711dfdea923d0ffe866db7b3af0e96b3318fc3231c588bf1
SHA512 20a2d2606224107439aa7a2c68ebec28a3d7bd8fa73daa549ad60461207dc155f6fdd5adb9f523c71f218111c9162305ca28a00e3c0491a6b769a91a955ee235

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 4eeb277b8954e754d34242de5975d45f
SHA1 dd0ab0e0c7b929baf4de583bc647910918d5c997
SHA256 b3e44e1a217381617901b3f951a6f2af8ea26f40ab9c6b628b0454fd3cd6152e
SHA512 3cebc7dead5d67e8b1b555302fb325b2f399cdc0d06e040be21a04f16f3fb8bf147583f7f4b492045130715e59b0e8f311d372cd9963e5c82cdf1ecd84a50920

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 6e7e9d05039a625165e8d54b1f982198
SHA1 14998d31454f2d508114412027af495132efe90d
SHA256 c0fac0e78add61ade29e0474b93cc6728597a303f5110f46cb5e67a68316fe53
SHA512 3646afa292136c1e8ea078c17438c65c508b7e7aab80bdc530d4f63f3ae3712c32a9fc480b1ec7949c9fefbd981d95efcac89e405cb1f8b2caaf9f11cd70e1f1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 5c3a9b3d63116a85894de1192b92a96c
SHA1 03a171258463810d21d108da88c2049ca4aac24b
SHA256 e6386c31acf5a5e39a01c661966b738f2fee55a332a82c41262e80c94cdb3648
SHA512 66aa276f86a5ba9f89379ed9c42b67bf46ef54b4ddec8a53bf57bb8bb1b3b644f572499212187cdd8ba33020c679154cf9b5a192ab074756b28d455d18bc16a8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 af57345bbbc0e47a2fa6bc85bb1483d7
SHA1 ae0ebf97ebb90daee714c8fcaa96e28a7d3f6bb2
SHA256 0990a1236ba334f240da76a5060bb8a70cd592c57d437a5a46d8f7ce0d9bf296
SHA512 9a0ffad20a15a37819defbe31b46641f2fa28034d24e3fb976f1a95da8dbe16ce110f15e65ad6178b8a6921b3ff32d2c477a870210e1f22513a930cd36e1f29c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 bac8cc8be4d4f213cc36831cc2fdd12b
SHA1 67e0eed312735175ff22ae567731e78f7da86859
SHA256 84f7430e23d15dbfb1ad5b867cd1da007c2f6cb33917691b5d49171fd2a668e3
SHA512 23d9edaf379b032ea7de2c675d25ff36a153b8c094c20257c7f77f6e414625451266a43963af44202c398929f947f3815170f54883e77411bbc9e5139c8fc3c8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b99b567083a9079d7173c2fc7cefe9dd
SHA1 ca16c685186283741726ea3fb0fe1ac3d78cc3ca
SHA256 aeb8f059e12c36f67c13ce999ac961a43df4cbb3e2602a14da53fdf59a4e9bd5
SHA512 d5ae7152aa1745d7506719d1913d9d7b54afea04a1c4c464695ea9913b19e0fc73c335406c45d6cabf03c5100b1f5c35dd48dd63571eccfcb05a2e79bed42c80

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 204a40e665292d61c96268e62e2717f9
SHA1 c87d45317565cc7c26f0bfe4e87e7d6e4646ca62
SHA256 3c0618c07abb68b1ff49fd126fd4d6c1667c079689a71355c4666bd4ffa36acb
SHA512 86dc1763f746b6ac2cd3d10d5ed30ad958dbfba5a50f574f8dcb26873d1e23669e8ddbe709e34a6a89f0425547755f8b5ed4a9166acbb353154181d5434d591b

C:\Program Files (x86)\Steam\config\config.vdf

MD5 0350e231078a6be2b5c281ce9ac6f13c
SHA1 5703169fb24b9755ad21f955441b02a36ef3ec7c
SHA256 3134fd750d8866c1f2a053bab1132390b1bcf2315b11f2072794b0a7c270a8b2
SHA512 7d4c21252c39e4021b5bd9035675ed760c4b23630abc8ff046905cc111aded5b2698889765666c1ae22ef2fb087ed1934f17b2f1bbef0b163a1b32bd2e8704ee

C:\Program Files (x86)\Steam\userdata\1839466726\7\remote\sharedconfig.vdf

MD5 35b7dc27dcb317b8e10441f8c99d089d
SHA1 ff2b59be42aec3dbf00515848ddee20e235ea2fa
SHA256 a3780a29cd7e21728c9d31d751a4ccc4ed39324f5e144bbaef3b41795a0cf401
SHA512 e1a27bae0e21c5a1202b0b69a437c345c762ae49a2321e54257975ada6ab8b8f2f7817a2ce1b1b293d82d0aeeefe0c39415561ecc0225cdbd7b806e921c85aad

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 05aa34afbb658962da36fac2eee6b352
SHA1 c6585cbcab12377cf4c108339445a6fd5d1f0c24
SHA256 74ebdeef592fdae6d21b1d62f37f08314cba653996870cff9e3c42671b81e305
SHA512 d4c42146212cba43fa7588e829ed3384f806e6b827a91de684ff0f60b6c46c6a7ea0e18db75e0ec6e3cd894fec4ad0b8e3812a622ed6d738f78b5b2c4d4313c7

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 31792b89a728e90a8ac9d740413df498
SHA1 f0dbb0a13f00b48a9eb7fd09d75c7e85a749c3da
SHA256 949e72ad431c22286adc325ebf6a26e94e53ff46ce6ca7a115abd2734e713473
SHA512 f28ea6afda795b80bb9cbe20d118eda52dd1ac90590f4f669755c06412f128fab25ab486d2a787ac1e8dbf72361cc64dcf190a96857802a6b36e59f1d2ec5308

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 1a8c8b1db891d360437183100bbadf53
SHA1 57b116dfe8dbe42221a2bf90176913079d2ac9de
SHA256 b68cb41f76e2b29685cf93448144295cc0a36d5cbda85d19132a05a9b58462c5
SHA512 c8d75dd183963e8a90e4adf4a710e08a14ebe0cf71f5e4650da23267679017bd7f4d72fb897ae6a98dc8c968219c07fa823c49c707f12749a433dd90efa1cf3c

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 8858f13aa53470bdfcc27090f3155af0
SHA1 eb7c2714774a6bf245f2a6dbb1599497d87bc7e5
SHA256 d0abc148aa64bc390504aab466899cf7195dc8ccbcd7d24c744c6446a062f747
SHA512 16049bcd687c08fa9f44c562a5f8640a4a03c92316cb9e596168cde04400dbfe6b02e2dc0fc5b4def48be813ea7e505f659f73bcce2036752f1ca42565739a3b

C:\Program Files (x86)\Steam\userdata\1839466726\config\localconfig.vdf.async9896.tmp

MD5 f2b7b00c792044d45c0ba749384d88b4
SHA1 dedf5f1f56ad4dc1375ea385eb02da9bf2843d1a
SHA256 5743d3be9b3443acb4cc445aba2f3fac10a2097956a96204b1d877825cb248fb
SHA512 8004938780b97a7de574d7929988f8d5bc6cd3aa93b5584fd0e7a57b99f396874d6295ae37dfd81c56940149fc0cf2aa0dd9b08c01504163fd4524a8d01dcfd6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7985c92e71afbf2b67d54e8138d3f5fb
SHA1 0a7aa1f2dfff65ef7372a88ce3949a8aae8a7204
SHA256 b419c877ff9966750851337454aa8cf6e792501e61ab7b4d30af6b787222aac8
SHA512 02afcb519e3c296324e231f03df8df56816d3fb31e43776b79b1af10e1cbcee9d552e3c5a1469f4223cc67ed5f4c63d913ae150222adbbfecb473c57da94cb0a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 2acde15cab8084d3aa529244a6fd86ca
SHA1 aff0647ff56ee6f5b21917965da52b1e1664b215
SHA256 93da132ceabacd0073d3cd67a0734217f308048925f8ca9fdc568def2ae71322
SHA512 99c346f61215a7a391c219358ecceb2d1ff56a5e6cb4bcac50804c2c829f78d05ff4231ce798538be7cbbcb44ba52533bdd78a6f29a1f1aeb34ff3ac7e50315f

C:\Program Files (x86)\Steam\dumps\reports\2a24b334-7514-4d84-9ee5-2ea0b5f06ee0.dmp

MD5 223faa60e601751bc063955f8ad54a66
SHA1 22c462b3d4754251f22982de5a6900a9872dcb9d
SHA256 51344f73a90661396188f4beb421d93263b59284a0109113eaa26c6e6caeb60e
SHA512 27f61da34ea9f5cbaf329ebad83d8deb80d10669a9293208becc0e7c6f2b37566190a5cdb029d99bd2d563fd0c871d4fdfd63c9564b2e6fbad0e190f56740874

C:\Program Files (x86)\Steam\dumps\reports\322d1164-a016-400a-8e1b-a34ba08debfb.dmp

MD5 f2ac7393772d74900be2a68288ec7f53
SHA1 eaefc0a3c50f060f6078124f2ee0c3511884115f
SHA256 b4c4b581243fe11f09b884f94977609601076adbfaa179f6cd1c7a1a27252c64
SHA512 404e7091de3d5b09c336271bceeb314e8d876630b56be2089360f4ba97c230c661d0ed1e88f0125734daa292293aa3abd70fde72f5a56c7a6da52bf87bd3a2cb

C:\Program Files (x86)\Steam\dumps\settings.dat

MD5 a01b1aa2ca116869fc6c24a7445503b1
SHA1 42f5dcc6e13eace68f0c9ffca7eae4c909965359
SHA256 e70eb0bcaf11dc3d16df6b5e55e650104c27cc79f386562b108e90a3c248a17a
SHA512 32c08240f9ad754728628eeace3e92ee7ffa1c1d5c2f7d421e8d12cfb1860d7dbbfe93ef0c14823759b6766d5d2bbb241fff4a460351932c5ad494a29b0312fd

C:\Program Files (x86)\Steam\dumps\reports\1e0cc1d8-9f9b-443c-95c4-47227609a331.dmp

MD5 d9171a9da841f1bb8d5df6d546e8aee0
SHA1 48e20c05996cea267e0fbd63cbbe34b605c54a71
SHA256 115536371ae9682ff256e0e6adf2de5cd0c31129e284704da684e1164159062e
SHA512 d5b7c0adbdfd55afb5f7b60721abae25c98b22fa62e0208638d60f7bd112f4fb6983c1ca743310100f3d6ddf12f2810c91f5ea250fe7f87f60a37b321a38e282

C:\Program Files (x86)\Steam\dumps\settings.dat

MD5 450f5097d2f327b1c02e8d673cf84e76
SHA1 0045ea4ffa19afc684d421f82d8abe495dd2ada6
SHA256 1349aaafe008c020ddefcada2eaffb0f66ac72f85f2a65fedff0264c930a02b2
SHA512 8d1fb7fbd540218547c906859b4d1a6a93f1de6c93eeaf9c19f62929547de495fe27917eba7d57d234d29cdb2ed0b50f9055f6b7e28dd77ab7f84df338a5ccaf

C:\Users\Admin\AppData\Local\Steam\cefdata\Dictionaries\en-US-10-1.bdic

MD5 4604e676a0a7d18770853919e24ec465
SHA1 415ef3b2ca0851e00ebaf0d6c9f6213c561ac98f
SHA256 a075b01d9b015c616511a9e87da77da3d9881621db32f584e4606ddabf1c1100
SHA512 3d89c21f20772a8bebdb70b29c42fca2f6bffcda49dff9d5644f3f3910b7c710a5c20154a7af5134c9c7a8624a1251b5e56ced9351d87463f31bed8188eb0774

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 af1cde0ecd34530a42b8175bf55aa733
SHA1 aa69d5474f72da53d820b807c0f83c5a491ebc32
SHA256 fb9aa419c44f48a8566167e7f43df9f0712a26b665e2d5d66b4d5e1950790f7b
SHA512 3eda74bd68c9d6432d8138de5d291ee001fb1e6a114c85a2a7626b8891561879cc056e836c7f8532d6e23c8e65fdc49eb31b08fb7308cd1563f659d05aaeb4c7

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 193e65713ff6ef7d57388b4442749410
SHA1 ca0b0c0e95226bd084359a9d48c900870efa5846
SHA256 650b90b111a478227abf2e8749d4c459f60138166acb8009db702636bb934625
SHA512 cf7cedf38b7c3e76353ec5bdf0f9f547cf446f7a564032aa746b348d934a48ec270a0f9fc7c7aef895b5a2d9c96d96c62ee29ae9fc891294bc55ef4e1d93af6d

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 13f1a3b8815e5bbe8069e4a568a4c5d5
SHA1 93fdf756680d17ce86613c1e033747482bc429bd
SHA256 25a14af0841538cf0eb27fb891c2255941f0514d40ba041ccd99e38207bf60f6
SHA512 eff41fc6e088d6336a76e8e204ff389d0c788619ec22944d0f993cbe9edf52e032f25587c725b1706dbe4ec4434856b1cf062302e011260f2f79f9bcb5f8e243

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations

MD5 bc6142469cd7dadf107be9ad87ea4753
SHA1 72a9aa05003fab742b0e4dc4c5d9eda6b9f7565c
SHA256 b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557
SHA512 47d1a67a16f5dc6d50556c5296e65918f0a2fcad0e8cee5795b100fe8cd89eaf5e1fd67691e8a57af3677883a5d8f104723b1901d11845b286474c8ac56f6182

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 2703304d7b9c59a11b88790a5c5d6720
SHA1 2dd4ddbd3f3d113126376b3471a80c257342a2aa
SHA256 9cfa35666067dac3906613fa40095d6ddedc3fa5097168700af5597949966eb7
SHA512 9774860932e86991832b243743d87345588418e79c8c4570e86068583e28345b89a4888ac805cd5d1de37a33b9822936bb9fc31721b93939f273f489e60b5099

C:\Program Files (x86)\Steam\dumps\reports\927e02d7-570f-4204-a4ff-1855f0d075ba.dmp

MD5 0d8acec108b03b1611b54f5337e8c6bb
SHA1 99335b93c595d31a4725dcecaa31cf4d8ecbc08c
SHA256 11d77bb442ef097957feed19fd79bbf149a1e76a49c3ff08495ee5717cc04b75
SHA512 e6c6c29c99ab62554149c122ebe6cfa666d632b116e40e5d681f543e06761f91530ac7d1d68f25897044ab9cf97847c76cb314e9b238509c7722957ab680a6ab

C:\Program Files (x86)\Steam\dumps\reports\ec18a53d-eed6-46d4-8311-2d85a2765dc2.dmp

MD5 3784487154c459970ac2b6dfe6f1f013
SHA1 bdb434529859b6cc0ae4c5d19ac58fac2e4f2ab2
SHA256 25fdcdc3aa7dc071b141cfb48d7c8e519ffb832e32c3947dd24f3f7faf03e2eb
SHA512 aa8c881a958d9105874754dc3b6e620f2e8b8326585cef070e421b1951db06a3b2229533b94e7bd5c1727fa26df5f82ac585ce77ea0c528eb7e89100605f2676

C:\Program Files (x86)\Steam\dumps\settings.dat

MD5 47cb08b564f47e325f0471168fba63a9
SHA1 c3f1d2186571b286bd8c0c99deb1d74dde55d15e
SHA256 d31283352bf9965c85615d57c0ea704684e760ce2eaf4cacbdbb9cc9d16ba715
SHA512 d41318acb81b0fdab3232c8a6d013020ce8eed4dc97fb9e010b319f10dfe9ff74b4c16b98bf972e0b9182754d0eea8f0b2d0508776df252173259cd0e00912ba

C:\Program Files (x86)\Steam\dumps\metadata

MD5 72b32378321c453faf08f1b9c51836e4
SHA1 dd06ae6b18c11f7be29e20d20a5423226d051642
SHA256 f7b0d12055daf13369cb3ff6c5b4a1e9343c965223db0be71f70f5b1bd03dd91
SHA512 a9955178023450a6a76e2a8966c7dca02abdf21c5e304773a7471d97b6190c97ff90049c4aaa2ba5e36f86fadddf9d4fe4f890f75beeee3bd2127a9e576a73d5

C:\Program Files (x86)\Steam\dumps\reports\1d4faddb-47a8-480f-8cef-f11ccb1e93ec.dmp

MD5 6e66cf8257e385792b2d72e4621c1fda
SHA1 3c3adf86080ac8513fbc614694cffe4117f0c7a5
SHA256 a32e1143e74e3c4ed0f321eb85c671d1c43008e37049ea939df8ec1e6260b872
SHA512 7c298b265318783972b9be66fad12710c693c30bbd1a9b5a05c7ceb4705d9a96aa06cf2543fabe938997d5b9e5f46519baa24b792f6c7900b3ec5a6cc8a51430

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 09013fabd27943a132b3522c15622b0b
SHA1 7473343e77574972fae6b67a50eb2e97fb10aabd
SHA256 8c48f6a157ce92732674d79e099ef302c0ebe906f6da96ad8a7a2477435dafb9
SHA512 c6bc0dc210f3ff4adeb834d9c170889c36ca39fcb7aa0417ad835dae024cb8c24b434b939ac3e1dcdbb42dffeee63f39ecf09e29c6e8192b9068e79c39d85ec0

C:\Program Files (x86)\Steam\resource\filter_banned_english_cached.txt

MD5 009ca439b8e68dbdb83850d51b07c736
SHA1 b8dd1986d15aef3dcba09c954577c780b549c582
SHA256 4bfbbfd0114ee78d7795835c64aae6dc6b525547748c5dd1150d7d1ff8757c43
SHA512 25e90b8b737b30879ec9073457cc7b30bdc46ed71b8885ce14f9c1946476d65c6bbdd0ddc19bb09c406cd9439837aec5c8ad007dbb5a4378842e1634429b093e

C:\Program Files (x86)\Steam\resource\filter_banned_english_cached_timestamp.txt

MD5 d49e693fb03340eb54c6004b76bec573
SHA1 63e80187f1a04089699496fa9342db2946074fdd
SHA256 f832d2a4fbf3776afff7ae9937a853f2baf27bd3959ac6d721be15a75ef98d77
SHA512 753a2495d0e38db0b041987e0b0effc4586406e64d8f288c29ef371da42648a96dd532dffabf7de2ac0327fba593fc3145c3ed3f193d6708ccc1bd1e72474727

C:\Program Files (x86)\Steam\resource\filter_profanity_english_cached_timestamp.txt

MD5 620f6f76855420ae829662199575e3e7
SHA1 1ddaf342a219fb994787134054ae00e47dcf3b22
SHA256 026dbbf5c52440b787d8e5a3d91212511a180d7c049b6ebf1f61c220c81714f3
SHA512 b02ff5d11da8a00384fd3a2f14c19f1f6795c71c51818ae0f4c1f1c08160ab4524ef0bb750cc7e090e2a677b98d814bed37d93a453a0519ad9a6c83b3fc73d7a

C:\Program Files (x86)\Steam\resource\filter_profanity_english_cached.txt

MD5 0b8f38d6f219adb6af9a46e34c8b55c5
SHA1 abfb7eea3e2073ef536ef4c020b79dce54028174
SHA256 c6cced2a542c64817209699a48ba5c17f32ad47a5bb799d395d707f665378de8
SHA512 4a4dcd5efb3433f23848b7bcc18a430f05107985e48f280874f0058eac863b3ddac9f849ab55271f619c026a6282387f553f1ec25e16eba7cb68c850f314beea

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 8bbace3d9fc36efbf2ee2847092a23b7
SHA1 dfd1dffb3b8b54e1f36da87759e8c878c61883d2
SHA256 448d102344aa13bda161596cb1efd1a8b7151b5cd815befbed588a883615acd2
SHA512 31f10ef619589c2e7d4b3719d56c98268550f670d7e1c650ee640a862fa03451a4156c15d47f99868de0b3633a6452c0fa61c654c8bd6fa5aab8643e6a0b2201

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 b1155f1d24350bd75bb1321108f31ca8
SHA1 9697b1d98ac7a90f450a65bf77a33c02bc1ac609
SHA256 ccaad6878aa14c7b57d1863dbe89137019a56fc4fd1004116b60ede668a315a1
SHA512 b9cfabbcdeaaf9593bc3f93a178347919ded1564b196bf3fc15c2c493b805a4e34c95b59423fd4640a9f1357d2207c0de8a2bd8d5fbebd0f1da359c69438e1d7

C:\Program Files (x86)\Steam\appcache\librarycache\1161040_icon.jpg

MD5 7ecdaf8a54ec52b20640a88527512903
SHA1 3133a4d748ad3be61fe9db759339cd5de73339b5
SHA256 7bd8b75aec0a4d4a377f3ca3a023fd8b7c5fc7dc6a2a66d17f8cdfe5b731ab0c
SHA512 60ae2031eed0c38264f0d8db22a9b6efeb3f80c791e916e15a1730853162d56e0da014dbd93a5479bae4f3bdd5705ca89be70c90574a524abd1c276ed5c55a2d

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 f84862befe7483ab05584f4f69087f69
SHA1 c718c887db5e0512235111638ae70ec20db78180
SHA256 6244517079a8666261ca0adb4bc055ab69aaf8e675f49d343490c1cab150b655
SHA512 c5210f79b761472907fa9042cd332c3c5e06707b36f3972c79257827008c1cb3ec6d410344f4f56a14c92835d1d0aebf90d7982116c1a262d6168f35b96a88b8

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 32cb86d09e304e8ea1ae8c7c3c3c86a2
SHA1 a859327bda09299c007a04f26791aece61a04bd1
SHA256 3df998e77dfb592c3e8d4718436371bf9d67f7211dbc050dae55b438c27eb2c5
SHA512 170d3f6fdad4caeffa79ee0046ee08aed8cd2ca9629cd68615c0a5ade7014d8c3b7b0c3ca5b6df2ce574a92ba40c4b6a5e045ff7bc4165d4b9c998a4e77ba376

C:\Users\Admin\AppData\Local\Steam\htmlcache\LocalPrefs.json

MD5 a12574ffce257a0752830d8daa788846
SHA1 5dc2bf17a66851cac1802b50ca944ec0895eac47
SHA256 4fec886fb17275c4a70ca52fa3595508b51cd49d35b344aa59afc79470c0fca5
SHA512 720e0e869c99fd08b16450b68bd64ccc4e3d3d83f6488b1f7a27a5e72649294700d54aca50284482c121f994cd342a38bb8a6e38d511df22feec8254e647311a

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 d72bc8755d33e4a2b6ea222f06a99967
SHA1 5fa94bdf992c81b974198c8c9ceff95ef89ee2ed
SHA256 8ae925201069188584a0a22ae27bf5eca5e513d12115e668d7320e15304db8eb
SHA512 fd7043f1c6c9208aa3900b9ef499cdf5ac323c46ed346c6f75381fbb60960efddd2ee9ef94592298ce0c7a2da1f1160f6e0a7640c070d8c975011a377c296503

C:\Program Files (x86)\Steam\userdata\1839466726\config\localconfig.vdf.async9896.tmp

MD5 2660fab67c4ca50530721bb9b3925f21
SHA1 25105c56feccead7d4b8baba88cb927a67224835
SHA256 44c502f89e58b5709c967b8dec91dea03c2c3c6de942d846f745675fc69b8820
SHA512 6f5fa0285a7363996d1bae9f524cedfc076865b1a6d92c60d9cf70e9288d81767d4ae33960b669b602f6de4f7ad2adbddd69883d8b5a207e8de172354ec9c2a0

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 9264aaf7d528bdfa22f7f733e27a2377
SHA1 a85de81b3fd40e051719fc2e931de2bd3bf8fb7a
SHA256 94b95e1783f87af9247d11c375cfc9c6d7f39f9024c91c753e77ac3dbac1eaa3
SHA512 fa47717ad4476c56ea6f5b30e5f943d3814b422131f0317fe23957d74511ea95d7e394973b1b752bb25b5bb46f01ce2ad8d28551525736a32a766a4d43f6fef6

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000025

MD5 d159ab4cbd3b14018b2670f87060a4e5
SHA1 c53dfb41e0cacc2855f0149b28f140c8ab068665
SHA256 0978c6ccecd3dcc05516578397b3484a5bd06377994749a8e785fb7b05fd28cb
SHA512 f5a812199747b2ffb17f9d9b1e0b91f2f7f26722aa078ae8698c5f9a8ffb6a6f6796519a98155abaf7697d4d6f618e887cad7225fc0f2d3a0a3fe3adc24f0f15

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000024

MD5 8fa8263d94d02e0687d789154b14c8a3
SHA1 2a3541c43fc2099c72c7929c9661b88b89e8f051
SHA256 2fe595a33703619cc7dee3266492d467407d71a49277e7a8db8d7909eba806dc
SHA512 2c6cec6696c211a9f58565189153835cfae472495686be23336fbb5eb1de018f615f174bc8b80296da18e4cb2f4f25937e6fd3100eb7cec6e6368d3aef3cae52

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000036

MD5 355368c09ae89434b648d473ec54f5f4
SHA1 36ffe749e3c296d6e57da59f463cd2aa8f69b0d3
SHA256 af611344e2754103acef3e836d8cdfd1970391514324a3495cc04128cae9b672
SHA512 390540adb50f913669816189b8b215f76d005489e87d073132d4f958fed52c5d0a49590499a14fea6b2a1863efe7dfd4046a087e61661b9edf8805423021b22f

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000035

MD5 02a0adb8033eacfb33fba9bb1b771b71
SHA1 be35a2af2aec81b8d1c7b091713446c841964948
SHA256 0fd28202e936544c1119cfcb0696ecc75576d64d7a12ac04912b9c9a1ad4612f
SHA512 37f93baafd7502d1143f98298d5e94225c4cfc4ec8347c23d3bacf11ba3817e3883dff5dc502ac25be0dcea2e534a29e2814e718540cbff2be38a5b9867fed67

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000027

MD5 1d7363064d454b57f9c84df28f566ce7
SHA1 773b8a0f0c6cbda10b0c2ba62fb53d323946e311
SHA256 f2f4d59a808653e110b074ab0dc600b249e7451cc609eeeff3efda1e32ccf7d8
SHA512 f8a9e4c39d6c3e12ad9d01db9c0318fcb82b5dbe97b57ca6576a482ce157f456786752825e397122ea45fbce77e6c3cf62a2671c1973e40dcbf3cf26852cd49c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000037

MD5 e4d6931e1b120ddcfc8d117811a79d66
SHA1 3b0f9a1ec83cad1fa822e657d8191d088e8c4e4c
SHA256 d5fd43a7bc8ffbbdcfa010508e9678ba7824924f3e275ad24979e2d0bf2420f6
SHA512 ffa85c12190466f8a5a596e7d9d709af69e4eabecfe1011d9f9c6d8bd7c7f9dcaff057d73169d27858df4ced76bf257f2e94f8b419bc2732cb5b50593c2ec1a5

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00002f

MD5 8d37798ec05ac744f0b1acb75ed4ff22
SHA1 8cb40fbe393e6e8cd60f54afdbfa5c0faee68950
SHA256 114bd66d5cdd11168df25c5d9caf25e41cdb8715097b301327d2090ad916d823
SHA512 5c178a6f841f12ca1f856ff04739276b110d1a38bcdb1dc26d36a7c624373e6f3985ea2c17c1a9229ddfb0237691c35e27c6db2aad2daaf9f6d64983520c4bad

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00002b

MD5 d9d8f0eb20df1e7e640a2cab3e9c31d9
SHA1 5b5b20116a847511461d1cdf25f5c4f8455d3702
SHA256 7a23518ecaebf07ea26a0c4831ceb4af6090bec24c0041e3f9c3e60e853450d6
SHA512 bd2f56114399f5a8c29400456dc077f41376b07295a183a39e7a4d5fbe4ef12d994a4b8fffa1758c32a73744ca39464fe30b54e893cc13f0c666a43aad4e6139

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000032

MD5 b2125579901d7c9f400e0673413f7a06
SHA1 63991670d9a9898b14cf36caae30a578386d127a
SHA256 995baf00be63204c43fb2b4493f1665865ffe0cb666e8400ab12d40c9dc3275f
SHA512 38412bae976525a16cbac9716e83b89b6be1cca7af7fe05445e174aadd959b288cef1f6a275d553d1f4834b4b889d84e47c8db60c7a8d4405a1e605fa0d4c9ee

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000034

MD5 a4e53d011855ef64f32d2e97615379ac
SHA1 55c4dd71957f701ae2df06b20b95696d4e44a510
SHA256 f9247b1f45788923345fea8a9f866cbade1b13e49d0fd072debc2c11e2b33ab7
SHA512 c7b5a1dbbe99d880d680fb17f4aa722c034d58ccb258d7b29659493892d52d1c57a736041e91af61b29994dde7ebcf56e92cc4099625130b37e3d0b4bf27d977

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000033

MD5 3ac7290736398cb91501417a520819dc
SHA1 89b0769c32713236e4a76727c1321176e8bc4aa3
SHA256 a2ac1a3b76a8b49aee4249447fd72967ec24b4bc2464fe0a951b1cd6a1e87a2e
SHA512 572cab6d6fb304c3756db0c6c4130649131efe3817bdd7c551ff74c1d73ec66321bc4dc9df7374eee1cc95233df7f0f105b5a1170dab4c3ab74140f8639d684c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000031

MD5 307e3e50a7fa40e6bf89f5f2c4c810e1
SHA1 61de99fbd9b0e03b7c426dd8fe045078af789701
SHA256 6be2bcac127e9e6fd7490fa339119d6eb42a39c806db0646cc0a193a12f5eec4
SHA512 ba6b1b1b9d84732c966bc036f112fc9f48426502f1725b68af77e094283ad5c3e4047e6f4f625fb69d52e8be056a8ecd5edc8ae3e8c0cf46d498ed9aab7b07ae

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00002d

MD5 1364c7287081aa305b54846c7e8f1421
SHA1 fc1a32034839ab949740b92b4428ee03bc8f5496
SHA256 0554763510cb420836d597fd6ebaf3ebfa9860b71020ae24c04eb1f378b238a4
SHA512 3d4725de1b1f641f53d97ba8be802841a05595986be0ea504d550a3a82e73bbf64496cc97471388db4e53a13677ce5ff5d97737d8bdac15460a75adde2adf6c2

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000030

MD5 9ee2c2f2b5cbfbd5b3e8c582e6f29322
SHA1 5c31eb87c1d1e3a136c239c7cac48206487cdc52
SHA256 90980e27cc5fd7bc13d6b0cfdbf45de42fc3c6dd72eb67c75c00915ea7dc6c3b
SHA512 e36060482e20d40e081f03942dd7f051cee1e6cbc8f6ab0b5edfacddbdcc9d4c27dd3a64fcf3717bddda31b233488f42c5ba5da937ac0667339f1d31c506cc64

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00002e

MD5 5cd9ca4c5d08b780da78118d7b5f30a6
SHA1 39bb8221e7a22617572b65cd00d322573aab158c
SHA256 840d3c8551e078daefaa73ecc498048593048bb712c19fb298d99d20c01b17c4
SHA512 e41505a269cfd41d4bb8f93635e0346550cc3a0420fad81e621bcdf95d2133cb59b0a172db053d02c6906371fbf0fffe42a24daaa506a47d1ebb26babb6d1ac0

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00002c

MD5 32e4efd452c1ebb164b24a58e010924e
SHA1 21a43daa8615060a24a6e1b2ac785f720e3741b5
SHA256 ea26cbf409ce6cbe495a1c5bc5523e2e2b9ab3897a5b266e0cfc825a9759f6a4
SHA512 08168b9c33d2fa8df1dd60646e8d1714fa4edde1fbd2a2220e9421bb3cac2337e61062aee58c31ad80c132b336f2867fe04f3e7f73eb45f92a72ff506589ba6e

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000029

MD5 e5d14f2a497e0df6cb0d5a0f03865026
SHA1 6202b2ec91f39416bfa25dcb4a2e7b2a751e8bd5
SHA256 ae9efb3df79807f93f71d29fbd4fad239b10a85bfb89d7e274ba0414261f018f
SHA512 69c47da7c7c6f0b30134dd9761c041d276c4ca9465e8c2a3708fb2da2352881204bea82cf56e90b43d210f81ca6b88ec9d1c6f33fd487aa502febbd27c546ab4

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000026

MD5 e0b66abd08331c9af1034ce915a5e1c7
SHA1 3010e55c0566a30cb0c71d6a182e09af7df3cbc1
SHA256 15442d410e832f6d63c620956d87b7c50346fa6b6e6ba233052d2785ecb5212b
SHA512 25f553bda1bd5ddfa028b708260c4b98675fd6f199495374051e74c955c56c80fbfbf2ed40d11e8a136e4aa6c1a3f25895712c03065b539f742c5a031efe54c3

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000039

MD5 07247cbd12d4e4160efd413823d0def8
SHA1 517a80968aa295d0a700a338c22ba41e3a8b78a7
SHA256 41464efd9a32a5967b30addc21fe16cd0a35870fda56658b531a9a2434b4d829
SHA512 27e0e7505d41891e70bd06733f96e82e45061d621a1d20bbc524fc89c5406a799cf53d98c0fa256cb4ebfc19750c9a05531a8d273cebc260d48948edffdf6244

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000028

MD5 ed96af112ae58cc87d257e3a15a15058
SHA1 2fb2963ca13d8e2dff6bc71e9ead9b0fdc686cd0
SHA256 fc76b07c4a37f312ff1883efefc994e48bfc407942abbe823d665d46c2a883d2
SHA512 16adb69862af3c24cbf37be97c366d441112222fb4f39938295e89cee92344914c346f5672d146a1edf0008eed491eb66cd91615318374a4a9e12598ee48224e

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00003a

MD5 2d64caa5ecbf5e42cbb766ca4d85e90e
SHA1 147420abceb4a7fd7e486dddcfe68cda7ebb3a18
SHA256 045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f
SHA512 c96556ec57dac504919e806c7df536c4f86892b8525739289b2f2dbbf475de883a4824069dbdd4bb1770dd484f321563a00892e6c79d48818a4b95406bf1af96

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000038

MD5 d45f521dba72b19a4096691a165b1990
SHA1 2a08728fbb9229acccbf907efdf4091f9b9a232f
SHA256 6b7a3177485c193a2e80be6269b6b12880e695a8b4349f49fccf87f9205badcc
SHA512 9262847972a50f0cf8fc4225c6e9a72dbf2c55ccbcc2a098b7f1a5bd9ea87502f3c495a0431373a3c20961439d2dae4af1b1da5b9fade670d7fcaed486831d8c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000041

MD5 09c6216ec9634a56785dea3c3cb9e3c8
SHA1 f02823b1a39c45a15f9f7900f8d91ae083dd2fb6
SHA256 9a3fc82ee0bd5d116e0be29c85d76425ee050a580fbc27de849886a4fd400d2b
SHA512 edc39a6d9cfdb0acfb3b3ac76d27e86f868e33a764a2dff839298a1d29768f75fc4588d9e2361c2ccc7383e254d300f44861a9e5bbfa791171279550fe2b0fa4

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 d37852d31ca40c373fd79f07235a13f9
SHA1 0c963abea77c7b34db00b1685be94625b1d26eb8
SHA256 3b81b6a26a56e523002df4beb02616d3072e9255b89f99d45f23bc8df664c595
SHA512 ad08940a91bc950ed2ca05655e5cbf91862dc0fecddd02ab4caaca28c66d6b3da645471d0bf03f58e690af1d758ce8854942d761f2d31dd065335a89ab42ed6a

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 29920d55ea7602c168a5dc0ae4125d19
SHA1 90fde420369c48e16bfe48184973cd40511e535a
SHA256 dbf7e99c55d263b2e43dbb4b0fd688f6531883d0cc9de260e2b9955e49b3b32f
SHA512 f85596bd62d684772463203b5fd093a84a63596e62a023341cac5281034bfbe706b3b9c155ca09cbe5ccd211288682bcef3a35a1aaa6c6c32f6202d7ed93ddff

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 1e6224814caf17bdb5c50856ee3c6ce7
SHA1 2338ca0ba8c672a3c5cdcd8761c414d33fc318c4
SHA256 ab28d32e59b0efb42e9f04ed56697c66d1f465b69455502eb1bd8ec2a589c960
SHA512 45914c51681b2594f65f70520f1bf4a2f713ae94ef4e312cdf1ed089eb2d35fd7aabcb4675772cb8eeb5aebe2237d85ae9c5e64003f5ebd7e16c61f7231340e1

C:\Program Files (x86)\Steam\appcache\librarycache\438100_library_header.jpg

MD5 dbac976a6c6f15648a833640ab4fea17
SHA1 e778b0ec3fe0baa5522ed822cb9189ce79b38431
SHA256 2c66e2b298652df099b28d69fe0b41980872253cdfbd99c823ab1c2295f7cb35
SHA512 31fd1e6f38b9b9031c62dac0f129bcd073d612f5ee7cd61343048c88daad0b116612490ae4d7885cc0bd113ab7ae998924dc6fca6c7a5b647b3aa7761626fb1d

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 f4105c886b71a381e185920f2ae2b3fd
SHA1 b42a58cc04fa80be7141f2b461397e665f6928ec
SHA256 8d63a52103e22ffb89334f8dd7c63e8b887cb68de67dd487fed85be1be7773a3
SHA512 4f4802ba9ca3ea130c83c247dff912ad04541e23532e85456f8ca8d46cb565cefbc3824e0857375de1e9f8de0e124b90cf85affd1644a09c2bd9b4e48bd8bb54

C:\Users\Admin\Desktop\VRChat.url

MD5 cf121d41d50f71b94bdc4d745322e58c
SHA1 2632887d0e170bc7fddd4d18f6f202e3f0d9607c
SHA256 d23501f6a273c258d2439cd44ac23a21324d4236ad90b2be23f8530f824062a0
SHA512 321bcd707c8e570adef67e5ea818a16699b61030773f4b0e3d164d9d314451255212016360e74c37fe62dc0f44fbe5e6914b6b8795c4301f7a8e35ca21b3611c

C:\Program Files (x86)\Steam\userdata\1839466726\config\librarycache\438100.json

MD5 5216ef382c2d09e344ae46f2c073acab
SHA1 91040770b2b51d00e6b7c32a37315eef249a55bd
SHA256 2200afe5bd5dccc0cfe9d34b29eedc49014dd673e5b9b2d1797e3f52a14b5617
SHA512 0a5bc2a98fec77d33e0aca0934d547746883d5ce2b6cfe23e36dc9afe5fbd51dfe12d955213cd0123b4ca004e225182bea6722d0870ea65ba5a808756e893f7a

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 7af22294ddbfe1a464fc3ff4c5a8f114
SHA1 8fab107ac051bcd23ae775a1b93e4abf513b04f0
SHA256 604a89c25a811abb2e8aac882f6011fae97638322147e01022da73b2f4987248
SHA512 74e1ed88ff0d95387ea4e4388cfeaae1a201e1f95dcd1229e3a2bfa8f45fe6720d5b5e8650dd0f2cbd22bdc1acba41b1e50bb992fe57eddcf419f8b1893a9021

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 386628f8f8519325b050d1ad13cc6ec1
SHA1 b2cde648f4d50e27acf8dc57f2ecc0b59c10a34f
SHA256 c548009c2cff4e1d9c60c7fdfc0e482cfa209e4a8b3845779288bc49f08d7bff
SHA512 5f2958beaf2c14a43ac1f97e18a70dfdf8fe6c343ca4ec83dd9761249b61d2a2664689f3528846798e5d4aee29da86d39afae0989a06c5ab7d389cb0105218d9

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 b7696f7fbd143a3c307a0befbe4040ce
SHA1 91fab126bc95909f6b5695234a919133ee43aefb
SHA256 7c4d7e2842b390fa4bc1914aae1b724246da86161f274c00be9af8ef4f9b6d62
SHA512 a4e1e5e15343ca257373b1da0519d7bf4d05a3ba892b334af8a02989096a76389eebf85d082c457628d62d32de599b4bb45fea039aaf1a57b63fcdbb43ab5871

C:\Program Files (x86)\Steam\appcache\appinfo.vdf

MD5 3ad88c8b5fda1cea22717d4ea778c626
SHA1 e56991f73484b8c3f9598e2b9a8a4ce852920bfa
SHA256 9ff78c2c2382f3980776045ed949e58fc4d2d75927b2bd5ed19771c7b082886c
SHA512 bbf8c52ab2d6a32d70036c7dd6074af60b9fed0fbd2f0795b650973133b3a2909cf9a0fac20ed663d5b3ced1b16ef9a69d971568667e0f596a7667fa9b31321a

C:\Program Files (x86)\Steam\appcache\appinfo.vdf~RFe6cdb46.TMP

MD5 83348152d72ea61c506e27aa29492b8e
SHA1 de8e3c7bc1f084197ce7de519f886ce70ec85f23
SHA256 ccb1f1d8523bd345d869591ad5ddc298e2fee9b93bc8b386df44809f1a3a275e
SHA512 d0c627881b00d100133b2876e063059ccb896e593f6b9bed8cb7dff390a3ee863ef48f6e7c55bcf429ce8ed24bed1b92ad90c564cf2c5e1de7ed42e3d78e2c93

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 4d94a89294b9da2ef3370f7d472a7098
SHA1 b92a2e8c812c557c5ef3fb55ddf3bb0e99551131
SHA256 1e36e4dc3808816b14d0216aa373fa717d794df7bd2991847cb4d313c011ee47
SHA512 f4a0848ac9fbe378775960db96938c4785583ff2cd99dbc32d5702675e4589de8abc4dc0f9a09b706dbcad7a3a422ce9134cddf8fd6e85cfa682a31485bd668e

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 e3c4731c42c034df2f486b7af82cb878
SHA1 7fc8722876554de00dd4c14e17c4517ce24fbf73
SHA256 9c91315ebdc9293a44bef9f2ebe8fab49cb2140b33791b3473207c1a1bde46a9
SHA512 309c7161ba250a880c5eca6a0b7be9c64cd040a206f230c54a4bdd4cb252fba19b68b7fda6fefb8aac34a6e9b98c5902d5fbf564ab295c17b33fcba635d385ab

C:\Program Files (x86)\Steam\steamapps\downloading\438100\VRChat_Data\StreamingAssets\Avatars\avtr_7f56f978-1fc0-42fb-bb37-635738ceee92_v25_u2019.4.31f1.vrca

MD5 96c9ea1cee259293fcaa77cb7aa42739
SHA1 9af3db3133de85c61534bc0fa6e6c20788dce179
SHA256 4462a46cefdb91cd4286061e9dca806d1cb2bde2f4a5429dcf9d9df7848caf72
SHA512 c305b8c47a2db6b4acc961003c6a4ce813fa07d2012294acf970f3363919c1dae797648e9bd4eb685ab7268ca5c67b9101b14200630eeb64559c1a58b2c981db

C:\Program Files (x86)\Steam\steamapps\downloading\438100\VRChat_Data\StreamingAssets\Avatars\avtr_d474fbff-1cfa-47c0-be52-cdf688a936d4_v23_u2019.4.31f1.vrca

MD5 eda9268cf396abe61271ca11e53021ef
SHA1 34016902f0c85b7600b09a0d94267db5fae415aa
SHA256 6929f58fe52962db0af82be7244820f56c61a73dfad9adf8336c59312b6a3b78
SHA512 f8665ea8303bf5dc8d9f8b38e9ec8198cec8e3dbf840c245f492e2ee40c795853350e961fe710d7167a753011be7ed230c244c19270249247f49c5896eb4946f

C:\Program Files (x86)\Steam\steamapps\downloading\438100\VRChat_Data\StreamingAssets\Avatars\avtr_07092c96-84a7-461e-a04f-3bd8f081cc3c_v30_u2019.4.31f1.vrca

MD5 e8b691a73c9d3fcce07dce7e614c2c09
SHA1 c7669f8ae2a46c5c97ce1e4eed597c08f63e84ea
SHA256 9da69031ef602433bbe2821b0f00c03e5d43df9945e2eaaeb8b83f3969a18c90
SHA512 6e0d31cb052c2a1cbd0e62f8106203eba4222be54b69ec07dcadcbc4d39d339a267b8f8b6034915538cf300e269895e08dd73fd7ad604285860d651426e85312

C:\Program Files (x86)\Steam\steamapps\downloading\438100\VRChat_Data\il2cpp_data\Resources\Sentry.System.Collections.Immutable.dll-resources.dat

MD5 262003ff2013cf79d79518448d59f2b0
SHA1 69d071b70b2d0f166e11d545345d5f601f06ba26
SHA256 cdeda19448b3c583d912ff379e24c5e390e088a91d6e92a2fbef9042c1a1c85a
SHA512 bee9167f7cc6a3e2d0d9297c33b04487d41088816258995cfc3c57be8fef29e4bc839ee52679ec27e1d06c522c8476ace819cfe46593be053749c021335b944a

C:\Program Files (x86)\Steam\steamapps\downloading\438100\VRChat_Data\StreamingAssets\Avatars\avtr_3a698831-6120-4484-b04d-8ccb188d32bf_v7_u2019.4.31f1.vrca

MD5 a451105da391bd7fb3f4322ae4f54e15
SHA1 7f6f671c13c16e3cb2cbaa3f086a3066f1f5f3f6
SHA256 418c6d96e062017a052085d5d055e5f6d81d2ba7282429b22731677091711de8
SHA512 18cf6545f29c3db06dbf0984a07743355362503ac856c55a39cbd19db58f2edb1207638f7f07ff7208ec5e8c9b52774c35123c3679842239848df07b84ce0c3b

C:\Program Files (x86)\Steam\steamapps\downloading\438100\VRChat_Data\StreamingAssets\Avatars\avtr_e4f4c5fe-cb84-4b61-8ee7-c35f89a73495_v153_u2019.4.31f1.vrca

MD5 860245847999dc13a6edee3a622f99f6
SHA1 7388e9a15a9ee89ebb6804fb078532903188d97c
SHA256 152f0767eca79ec6f302147d922803485aa0ac4864b1b91bd86519d53d506057
SHA512 2dab45fcd74a1319de2ec23088118dfe463abb9a52aa6e0983ab11e900eeeb915a016922656ba2bba3bb7f72ab77c5c0edfdccc8d818dad13148acf00a2fad33

C:\Program Files (x86)\Steam\steamapps\downloading\438100\VRChat_Data\StreamingAssets\Avatars\avtr_a0012827-9ef5-436b-8d0b-02363afc5777_v130_u2019.4.31f1.vrca

MD5 1773fac726b1f82857e925b9fe58097b
SHA1 ca6ab31267d3b27eba3e27f7f9c789447cea95e4
SHA256 2b6fad675b6973eeac6f1915d005282839635b31e319bca40adfa49749e1b695
SHA512 0140ca8138121f000ce9e45a37ac5db46da9f1ce28098083103644a54966a5a7eab0c9b99ce0e02cabd2d1eadf609ce5eb5b24f9de876b59b8662bdd32ebec6d

C:\Program Files (x86)\Steam\steamapps\downloading\438100\VRChat_Data\level5

MD5 afe0592af1a555fb68194a3215a3972b
SHA1 3abc08b3bf301d2bb6dba1d08c38030e7ede5065
SHA256 ddfcb3bf21dbcb1f6f868b676854fc3f5d0a33a7af25a9b8553e89f81f230c35
SHA512 d1c7592eec0ddd41ff4fe790b422c7d120f090e37b4f24fbdc7a4e1155ede19d76b4fda1344dd04943c9055c036c0d959031fef0efd6418d143210ebb8192258

C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat_Data\sharedassets1.assets

MD5 cd4fd0a49e13e8850e79df99488742ab
SHA1 998e89ca12fe28892b769ac53ae9368cb5ac2b2a
SHA256 843a897c59ac5ddd7bf476050181c30e59964bcae65ed74a9ca3212b6f52e205
SHA512 60c0731c8188c219c8eec1bb9f44e69b05ca55aaa8a0beb94688327e2401ef91b09310040c239563d57ad27cd41b11e793f3c918accd0f7d702a0ba9b30a1fea

C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat_Data\StreamingAssets\Avatars\avtr_8385a57a-af69-4193-9db1-fc42f5a5ef6e_v31_u2019.4.31f1.vrca

MD5 fc1e8bf5d3b04ed5f91ffa934dda92aa
SHA1 af5d6a18ba2c6cdf9be6201135326aa031ebd811
SHA256 dd6ea55197920c1d4e69696dfb237289a38543b2c7009ddc77a64e76ec42b63a
SHA512 7fe580c771f19a3429d41cc471a46eb18e37577ed45b8ec3f5e69660783ad5c9ba575a7977260949d1efb8c984db0b29fc06e1e136995f21615530d66c49ae56

C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat_Data\StreamingAssets\Avatars\avtr_da64d92d-03f2-4f3f-bdd5-f587752f4b82_v7_u2019.4.31f1.vrca

MD5 f2da8250c1cdd7f77f7fcc32005425b4
SHA1 cf1c33f9fdacd67412bdebef4cff7c70d40d1a6d
SHA256 368e9628e01570d169d9f08a4dacd07f8cb2162fa93e763c0a627fdfc833921b
SHA512 eb6019da5fc448a3bd115ac533e02ae4168b66ebb7a58ead98cea732a9e1429fc010e391971005d5eb41318ea0d4c3209932ec7ef1fdcebbc5ea351be6befbd3

C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat_Data\StreamingAssets\Avatars\avtr_ad3617cd-a8b5-4dab-a2f2-66937f7721a2_v18_u2019.4.31f1.vrca

MD5 bb17271156ab3c21661dc5d68b0f7823
SHA1 83795b3923d863c83fef43fbc2d60a56b73b6ee5
SHA256 d3fe4693890f414ee044a81d2034b3356e9835738785acc41782868a34928ef8
SHA512 31b0ce1d7dd0e28c682e5fd63d2c2af7c6030c552ecfd44320b60405d123307b3d7035946e6ab1fa26c70c0fcfec67977425f29977184209d4ed53b0a8332173

C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat_Data\StreamingAssets\Avatars\avtr_a2b4025f-3eab-45dd-92a7-4307a9f3db3e_v43_u2019.4.31f1.vrca

MD5 97d8a5055511f85060ed6d8d502e3dec
SHA1 fc41236d069f65ea496a911f69954b8e641debeb
SHA256 2d4d15f38b55e5a7c0cf693dcaf165890fc051c44c4cf778fdb2547593859613
SHA512 bc8c396f0bef824eacbb3cb92115fb2a61321b498925edd862899b0e303af682f5a4b5b5dff0f9f72761b7b5ebfa8059bd7903fcb0fa4594cb270dfba2ee0de3

C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat_Data\StreamingAssets\Avatars\avtr_a0e9acc2-7ebb-4af2-a946-f7ab23b896fb_v12_u2019.4.31f1.vrca

MD5 5393ee7f2f21c8095541cae061bef03c
SHA1 fb1fa62a0cf0caab4add59348284278c03983470
SHA256 e36ad400e07ef2e7a1bfc1b0569ef6d4c458d1752419f8a775fed27cab504a92
SHA512 38d6f6a4b05be6c9605318743efe2d05aa7a47a168cdd4ae2fdd842b0701f113d97377c6133ad339bd979b014353b9ff035ccb8e1935c125cbde78deefd0e402

C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat_Data\StreamingAssets\Avatars\avtr_8fa2bf67-380a-40c1-a3d6-c782afce65bc_v10_u2019.4.31f1.vrca

MD5 62071df09a5be676ee994896a0f8c659
SHA1 2cb0b85382d38dd5f267f0eeb3764921fc719ecb
SHA256 bf1b4dbb2f7cd8d9e92fbb5ea88b596989d45f807616a0529890be41731589fe
SHA512 196ddc71d61898c6076c3b8cbf7d2e97df4505f81c577a6e6efef424148687e670d2257ca0db22a0b825d44a6af65d1594c3d9124296881bc363674e5fe20f6c

C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat_Data\StreamingAssets\Avatars\avtr_8e5d1fe0-44b3-4f7f-abc4-ec4b62288be0_v28_u2019.4.31f1.vrca

MD5 0b8e488edaa3ef7849d23a200ba542bf
SHA1 96fcdb3d12998de0264f84726aa015b6e3a6b6a4
SHA256 ef6493f1fc74c63a7c3d062ea7502b8f02d63d7a77835ccd4bf13870ab85ecfd
SHA512 e5c32bddf3d66029cbce2e868a3d1fad7cba2f34c623d13498db9d92ba2bd0c39c2b2c6d565a5f701bc1e8e6b7b7ad90ed1d300f068f0a60b30abd542c361578

C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat_Data\StreamingAssets\Avatars\avtr_7f56f978-1fc0-42fb-bb37-635738ceee92_v25_u2019.4.31f1.vrca

MD5 a3e7aa0c163e045f436ff7a8dbd3e715
SHA1 796012f3a102fcb61207fdbd4b6b7a6c9e4b6d98
SHA256 4767bfad950c4f3bdc1016b3dc636392d44b764943fb2493a0774feda746d6a0
SHA512 46c2ebdd53365baadbfc2fcc7190e639ddf279a8ad618339a403acb492022ab7ecd9e178cef49933f4638174e226b50c292d5e587ea0d6fa3734c1758f36dcf8

C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat_Data\StreamingAssets\Avatars\avtr_7d735b2d-31d1-41aa-9d35-f9683bb0a8ce_v24_u2019.4.31f1.vrca

MD5 37cc00f5b1530cca7e9b656c3810a0c6
SHA1 0cf4001f063593020f6b5a2749faa27f134c7b96
SHA256 010ab74e8bab09633bf8c30de34ef849d932429411c333b49a18af9515bead17
SHA512 7ed3bbe383e1efb60fa385a0ddfecf4492a76738651c934844733971a60684f20069a808e9ebfb0730353c377ee1341160d8b2ed108945ba7a4b77f4ca2d2bcf

C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat_Data\StreamingAssets\Avatars\avtr_4fc72a98-9f44-4354-bc9a-e2abf53d6661_v15_u2019.4.31f1.vrca

MD5 e08f79766b64e1a95a359a23c4a03960
SHA1 b367145d65c01c6b317821590257bae39f2bdb9a
SHA256 cab76914ef43a3f17e2e9e0c89b487586987d76a36c23dd5a96450d834263ae9
SHA512 0dd88d443d2f5991e3b936974f25f4334a3e79e3c18c8ed361b899ec9b4ec9a141c7ed12e3ca054f1f4ef126563e7fbc1b1ffd15b168f7b6a4c38773e16a284f

C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat_Data\StreamingAssets\Avatars\avtr_4aafd3c9-9842-400b-8a7a-d6b460d77866_v10_u2019.4.31f1.vrca

MD5 770744d76076cc0bfe1b1311c56c34a0
SHA1 64074455e30dc8c3df8877876cd7e74a479d2ca8
SHA256 e6088170091f0501e4a479d2a2bbc9fb546aff0962413826d46415b68b2b1199
SHA512 ecf00becf79243e800636cb47b29aa2e2d31668dc80b822bb30e800f428acbc290b3bd7b36c6450f962c4d9b8052051cd2c213014e0e12d846210e5db8264c3f

C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat_Data\StreamingAssets\Avatars\avtr_4309bcf2-71de-4412-b035-4d617bccdb87_v3_u2019.4.31f1.vrca

MD5 c1d3a770bbae1b3b7e13f13402864378
SHA1 802361c10844b0eab3e3a52993f0c284e81d5549
SHA256 d40ae6b715b16f4e2153c4c3c84f4a8fbeafc559af65a465e165104f46654ce8
SHA512 57e2ed0aece93c30cd0e7519b7395d8ffef32744811edc7d2dabc62e556186aea210a28fec96e609a6463196c1e7b2d4a1901db1ed340c11703587f67464aae0

C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat_Data\StreamingAssets\Avatars\avtr_36e884bd-bf32-46b2-8386-57144593cd7f_v38_u2019.4.31f1.vrca

MD5 1e3f7d15a345e6ed9f798167949d0692
SHA1 cd94cdfce46e764e10051b046cd7a8d2fddb99c6
SHA256 291587961b8541d9b38176a7edd3695308e3f777370b7cf5b5287990ab2c9da2
SHA512 5d47f9611b248a0d7c64f5afd0dc14a3ef6893ce4cd84fd803adcf94eda366cb89b84a8917247244ad9e43df3d3de67cc4e2bf7b187b8770d2220e9b0868281d

C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat_Data\StreamingAssets\Avatars\avtr_22dcb538-be74-4836-aaf3-33ed3ba3913e_v24_u2019.4.31f1.vrca

MD5 a2fcfb63b8e0b043bf0f7ec55dc845a9
SHA1 e98be57127804f60eaf348d95e292dac625bbebe
SHA256 944163136c303bc053ff8a58aa025e52019f385583359745f80955dd445977ae
SHA512 817a8dd9c44a3a667bc35335e3d526a15020d1119b82f91842b8a4ebfc217464d33d299dcea8d623138a516b3d41f1f1ea361916b98e5739bb2264f9d9024338

C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat_Data\StreamingAssets\Avatars\avtr_1579c4b6-d647-4ded-a5c2-b78b9c6ea686_v11_u2019.4.31f1.vrca

MD5 c84740981da6be838218f32f5009b54c
SHA1 e64f7379e013cc3246e0a23e6d3576215b41b860
SHA256 570067cf9c0564931ad0eb0500adf6d44d529119b3c280f10c9771bafe22020d
SHA512 8943533ded2e66b651e9fbf82cc880818a7cb8404303e6d69555e0c85f2778d0656d31013bc958c218db7b88bc26313f24e32ff6deed9ae5736b8b668ba588e7

C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat_Data\StreamingAssets\Avatars\avtr_087640e2-3af3-41cf-bff5-fbec2a524f6f_v30_u2019.4.31f1.vrca

MD5 a9bb5b94c50ba1d071b6b6333d6aa1a7
SHA1 b5334c4b41bcb85213a99c0e9be017df34dba7ec
SHA256 b9037d13ec4a71e1b95d23f6ce6433433220b66f082f81586167a6bf1628bf7b
SHA512 e34895e1f9497dc88e44b9cb839dd283d2e01af37398ae76c2ef6ec2d6e5037f287f74acbff308e0640d176c8ac907f4f9f08ef8df8973b3610bb51fc07a2566

C:\Program Files (x86)\Steam\steamapps\common\VRChat\VRChat_Data\Plugins\x86_64\vrc_image_loader.dll

MD5 7524985ccc6c7de978674b05d9551789
SHA1 3b982197d74b1246830ff0fac4d3c2042a1dbfb0
SHA256 e4090904693a5fb9b03b0a7ae1f0334b7f6ebed603972b46e26a397eaabd525a
SHA512 917cfd969089a110671b30ac6c241ab4fadaa24693e3cc33f49c54d75798dc7c72686e4055e970dafbf02b68da48b861b732b3c8bd69c43aa237419f1e3e1559

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2019\installscript.vdf

MD5 694f8b0b8b20547d4af535951021e82a
SHA1 398db427a34a04738b8215202cb6ad24f54336e3
SHA256 331dcc846361ec44f1c7d1c0c080a5e7abddfcae454e5c1a3d779a89adb13446
SHA512 a43366eddfbcbfbffefd34cc7eec4f1d4a17bd441f45574275bc26154cef7023eec0c47f09847674c9cbbd1354bf7920f0635bd8936e55ae2da1ca928597a05a

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2010\installscript.vdf

MD5 081bca29f369001a81a328369a67bdac
SHA1 9056314563128ff716ecf15f542e7ffcc1f93c00
SHA256 f2d06079d05f4d9e1ce402ba0247127c403b5b12232ab38956d2765b32012e89
SHA512 ab787d0511295bcdb3edc67a744a82abc2df0b59cc50e0edb72865a4e4f4c471a0f4888af52d92d6ad4dd986dd35594dfed21ef8afaf9264f6b8826c50904f8c

C:\Program Files (x86)\Steam\steamapps\common\VRChat\installscript.vdf

MD5 43897a65b07266bd8bedf9cf22307c20
SHA1 d36943953760bfacf4c2ef79152d4b8edee68a30
SHA256 e44e3780c5fc1af584e1d095e4515bc534a3048de43b825066fbdef0dd6436c1
SHA512 aaef57e00a2c087bbb72643d2e11aad753bdd7a03d3da1c3c18382a680d128a523f8de9500bd62d620c592345394280a44913f482bc8cb9315475b6b2317e6c8

C:\Program Files (x86)\Steam\steamapps\common\VRChat\launch.exe

MD5 c1069547608ebb2810cc3424f1b99f82
SHA1 a12fff007753bc1f86536322a5d1ee69d800980b
SHA256 33a0bdbbacf3aa78432c6fa91dfb85a55299e25702ef6ffc059e43acc2b2e9ab
SHA512 488b5b62d58e2b67c471d139f9154292af2de1f2d39640ea6130dc589f97b3d78f345fbfabd5a8b71f345394dac1bf949ea9e9d62c5fc9ef2fafd95bdb151a27

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 97c519720656c5ed76e8814d3adf2a96
SHA1 7de956c8e0a4d60841108727287b3dbd24537206
SHA256 62c2b5e8c4316ed9c6fe869f3df411ef8970a03fe58821d63b395b1e3f475499
SHA512 5e2b108059708c238e47c2b358f768c637ecb43a937c5ee4dec2e146b118c3f4819fea31c1186f0db9304579533df4f89b8f9cefd9653be71875230fed85bd73

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a86c7d11d833c1626a5351fddc635a6c
SHA1 b2f65bcb3119ae8848b69dd8f11496757892f9f6
SHA256 c0323ceb5aa90f6f528014dac2c8b09e473fc1727ebf725330d149613a21b144
SHA512 f0fa2ce0fd62fe33d733b872757ff3570df097493360a3b6f50aa6c4537d2c30e7f131b2bd55edc79e7d56d0e66d57049d4c3d65e2948b8ad50403447c168b25

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\7\CacheStorage\index.txt

MD5 797b7f3e886ab2ae05a0552cb9785473
SHA1 53ca91a366e7f16fc4047219ff2c85eff9e226fa
SHA256 92bf870688bde541ee3432ce4a3ab0b7805b034c6024a514657e581b40da75d7
SHA512 9bdd58bccee605b9b408415c1fd9f609d19287ed91e7c436f5d1bd4bddb5d925f0336f4bae77619b5936c353d82c80af7df608300049c53ce5b6c1a0afd455cf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\7\CacheStorage\index.txt~RFe6dd5c3.TMP

MD5 5a938ce207b0a31dc6491eac37a661f2
SHA1 e5f26afa91ac77701c041e59678bc4e7a7f7cbce
SHA256 3642e0b4bee26594836d748dac735433050b068a233290f92393a21310e943bd
SHA512 943639e8d3d40456ba4404f10eabe47c39f9ab9a2a3b75391c4782ea2504a73d6898a639d0f2b50a045d3fb44298e4cd320a1398b8058e13506fc56d26c47943

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 845694fe1e4fd15ab0c2d41457eae232
SHA1 f7032e426efa1e8ccddf0b8f235e23d0dd1c6e62
SHA256 083d23b4b4823f44231331ec717484ee7dc9878a0323a96ab4f4f30db0b9bbfc
SHA512 374fa7b03960bcc50be779a1054f724b9147d6e772111723bb6d14a61de0835c51e8db2d8163510ffc2b54e6c98c661e59d8d216e499d0c6e4c863183881f9b8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0f663db164e59b3cf28926cc77dd647c
SHA1 814d65845bfdf67f1760f6cabb5f9248ccc30b2a
SHA256 53c79d4f8151be5f93a681cc099098f68b69a6925544b3e60ab691ba079748a1
SHA512 b3844af3958a062c238827c33767b447e032d5405e9ed451a22f5ebc155353ac65868a254c1f01f55e9fae713708db9944ec977229f70496e5abdbbda45e3448

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 d9c3d5579c76e8a9217d56f0eb8fc829
SHA1 0278a99df818225908da18db53ac33c96ed6909e
SHA256 cf457122f9b78864f0df5282565538e0ab958f46511f88dc5ef3f24ea2713186
SHA512 4abf5e866139a489409b380cb5b79ea3693724cd203d75bbaa9273797e5aef8545c5576d357cd673e69a30c60a5ed0656fc92ee08c4420d97e8d6634649e9a94

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000fb

MD5 c516fc64c2ce2da54e42fa31bd5e663a
SHA1 91323242547fb20ba7c4751ba23469907dcf38e3
SHA256 23625b65966e0e7aee05db5af64384107139cfb3b23783e51e2d98bd6b7c8921
SHA512 69b802c19e43c72d0ba03b12ea31b9a4034073ef7cd9db7c6bf1ba649a927abc99ad08655c78bc9ce380a6ee48442533ad23ac44e2728252f040a20b598f7296

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000fc

MD5 0c09ecadc992eb2eacc5746e1e1344f5
SHA1 472bf3982b7f0c032d340ba3d2dd98136bd7f783
SHA256 b96a585f43a2cfcb2991f151c4cd786d9dc4cd4a0604815d9caae0c39b769b92
SHA512 15a5bf7c85efddc3af852fb77238889249e2cbd9c22e439d79ed39881eddd3fce3506f5911cf7e933f4a3baeefa0a74de211cd92c67934342ead4b4c58a53c22

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000ff

MD5 62648e6e3910199480832b555c8418a8
SHA1 870b6a7bb756b92f3499a20f3d3fea6b320b25ab
SHA256 8631d292e0c4e26adb84ef6a8635aac042ca4615b3fb2c610c66581093ccf274
SHA512 196bfbbd286b7567480513201df291e2295eaaa361ad77620a63fb97b2e657dcac50b34ddbda274a8070385d15359b58b8140f72e38e77ad78e01b543168c401

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\7\CacheStorage\index.txt

MD5 fc7432437c8f947ae3f1e0a352bf57ec
SHA1 f593ea8ae87496dbeb7412956f290eecd8529b48
SHA256 9a2bd1fa705cc2904e733c00578413bbcd599fbce01f345fec78aff1688a1f75
SHA512 2f0c5d8f7532c705a25b9a73cf104fcec2599029bd9794ffb729f78f77fef5b423c602d35952d03e496eb56851098db82df21b4ddc07f164eda1fe9da0e38ac0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7666c2728c9ce0ea449fd73d2a3be05d
SHA1 1aa18c1274de47ce94bfa064545f8e5f34653c0d
SHA256 c82420ff9a41548b2b894b2f3b8016efebc3ec3840054dba563b4b4a278ad5ab
SHA512 a6d7589dda15b70c07cf80411b44e0afd1cdd2e13a91bdf4c55a0a4d61c35c0d2af86af35ffc0ed133825bcedb31db8f13678568ee0ddb79ac1456e73461cc67

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 75b0dbacf4eb83aaabe9bb2ec2f50726
SHA1 9c5e906ecc0eb7a6c009d2c9af15b539404f0c8c
SHA256 f4a00707aee07fc545b8fac53a6b228bff6040a6715b9eaa25078ae9bb9f8408
SHA512 bf084555976cae1c6fd51c24994a2a103b6d8e1a7a9682ddace320ba25996f27dd2c78453fcbf5b5627a799d37a051d2ffdf69962101998bcaaba678be1b95c3

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 732cbca4d18a6bd4abddf8958be227d8
SHA1 69609a1adcaf904f13a0d5df03ca085662a7c4f0
SHA256 86511f9f4349062fae6e5bed4d67cb93589d8786c34f596e955bdd85e49d7efb
SHA512 35980f463ea53c1604b5cc6255f2df3511a15cfaf54ec62a838801100748663f4d78e94fa33205b1a7123d3e36e8abc2792da49e1f31b24ab540abe96547b5ad

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6da80d454c32bef088fb5e026f7332ea
SHA1 9efc9e4a914181edbb5485fad9c9dbfe97480677
SHA256 29fde53ba15143ee7e63db063a850375f1a7ccc0d9e88a9efbe6e802fb7c05d9
SHA512 4ac951161457cb51112dc16c692b211b10bb4e1acd8879c9154e9e5260d04b3779beb42ef1ce288cad46a1956fe517832673faedc2f018d37a25ce9e857ac900

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 a7e182235915c1b0650d9b5c355297ac
SHA1 caa3638a0c1400f7c5125fffb978b5314d28cdca
SHA256 fa0998cee3b840b454fd119c54a8aae2f299f9b36aa138e99103a7b45fadca3a
SHA512 40c4f58739903b9f4025a1402165b3f19014f744285a3cd08461d13f7dd9d32c4f87d5a889dc9b1320ba8e5c772678b4424459e935f94f4da4b627bc74c7e1fa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\7\CacheStorage\index.txt

MD5 97cfe642848331f270bd6d1cc14bfafe
SHA1 c9d14db72aec89c50f242029a330a65a11159fbb
SHA256 a9b17cd34f89e921f560f070bcf0116c37c53b48326d6c25a7f0ac9f81686f67
SHA512 29a23caf5e4bb09175cf18a75a8bca16b836b162986c572fe742a41eb019c966793cec455c75a280c0b2509045ef89acf81315843347f88671df39acf67e552a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000124

MD5 c13a4abe06af6a47d5e62517fcd4915b
SHA1 a2ae312b8e96890ae55f56c73e4e4c1afa96685c
SHA256 c0e700686718ba247defdde0846e7e45f7c2afe880e4ac520373094089cf2d36
SHA512 442b611fb1a9b330e15ef1c37ea42b1479861668a9e4233f27d6faa135ed8a20dbe9dc600cca519167897994cd03669dd2d980e3aca6f75bb3498be0917a3545

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 6830099db1fbe6d03d1e9f6094904dc8
SHA1 bdb57133c80f9536cf787328be04b5463bfa9e65
SHA256 b04d5e1424a5057707a81bd973e5f67eb62406a517a12b37351cd369b1f6ee7d
SHA512 dd173565d75fd4a26135e631d95987c56d1f5c9d1171068c2a4edbd10777a98421cf04359a4a57c6ea5dbd2a396413d3761d83e1a1b223d37e60eeac99d2331b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe6e855d.TMP

MD5 97ec9915a563801aea6a234c6cfa7445
SHA1 05f3dcb6ebec68d05aee23890e12f09581e5f940
SHA256 34ccf17c267bc54c72a2c6c538bdfcce181961d8fe0bbf48b4f2e16aa65d1c56
SHA512 d63f958ece166a54a402831eabe592c3e6c10ed8cc4a8c8320229c9adeae2ce675b7913bbec98d670a0d909554d7220c06b031618c18a8d5223ba05d2c7b5ed0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 4ae85d6a84320861d65d5eb710e10131
SHA1 60c159122627a49c59106582ef940dc5b61b1156
SHA256 62d87fa58abc124100423c6b01b76d4a2caa51d55655e05c1e686eb838a2eb20
SHA512 a35a818e1dce8794ebf3ad4c680275bf1f091125e9548302a8fc0bfd6c8546639d941f55cd522a48ad3c8aab0e24ef80bd19f5496d7217ac1da06296887d5629

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 a8e9cb534d17128a1779d86529c74f34
SHA1 26f929a83a37a7a73c99ec53b5dce169f5cb85d2
SHA256 1484586247f6f6155c05f9774ab2f078bad9aec4c76383ccb948be75683d33d2
SHA512 29b10661826aa703bbf1f75551e342969981929a30f2f2ee30597e571e9b6af890eae1249212d016906d0853fa7a8d195dfab42a1da08eb01b0cb9fe73fb3a7e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00012b

MD5 115c2d84727b41da5e9b4394887a8c40
SHA1 44f495a7f32620e51acca2e78f7e0615cb305781
SHA256 ae0e442895406e9922237108496c2cd60f4947649a826463e2da9860b5c25dd6
SHA512 00402945111722b041f317b082b7103bcc470c2112d86847eac44674053fc0642c5df72015dcb57c65c4ffabb7b03ece7e5f889190f09a45cef1f3e35f830f45

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir24476_1892326422\Shortcuts Menu Icons\Monochrome\0\512.png

MD5 206fd9669027c437a36fbf7d73657db7
SHA1 8dee68de4deac72e86bbb28b8e5a915df3b5f3a5
SHA256 0d17a989f42bc129aca8e755871a7025acb6292ce06ca2437e95bedbc328fa18
SHA512 2c89878ec8466edf1f214d918aefc6a9b3de46d06ffacff4fdb85566560e94068601b1e4377d9d2eabefdc1c7f09eb46b00cf4545e377cc84a69edf8e57e48b2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir24476_1892326422\Shortcuts Menu Icons\Monochrome\1\512.png

MD5 529a0ad2f85dff6370e98e206ecb6ef9
SHA1 7a4ff97f02962afeca94f1815168f41ba54b0691
SHA256 31db550eb9c0d9afd316dc85cdfd832510e2c48e7d37d4a610c175667a4599c6
SHA512 d00e2d741a0a6321c92a4aab632f8f3bafd33c0e2875f37868e195ed5e7200a647b4c83358edcef5fc7acbc5c57f70410903f39eac76e23e88a342ac5c9c21cd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Temp\scoped_dir24476_995315861\Icons Monochrome\16.png

MD5 1b3a4d1adc56ac66cd8b46c98f33e41b
SHA1 de87dc114f12e1865922f89ebc127966b0b9a1b7
SHA256 0fb35eacb91ab06f09431370f330ba290725119417f166facaf5f134499978bd
SHA512 ce89a67b088bae8dcd763f9a9b3655ed90485b24646d93de44533744dfcf947c96571e252d1ad80bdec1530ff2b72b012e8fff7178f1b4e957090f0f4c959e0d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 4a84e96cf32154cf4a1ab93c922db369
SHA1 5aa0b1a1e919e1822330794d75d4197fb68c6c11
SHA256 18e6a247f991c93d7ff5c806fa34b41684097e6dae663e6a6f283bd060b8129e
SHA512 392f70db7e83151f023a48abe6221576acddb16d93c107f479430b3d3ee70063de84cdc094ad0ce7379edda13ab1cd8cb30c0e0bfbc0a77b00fdf3ee912ccc29

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\804dadac-0e8a-4815-8a2a-090525e92dc2.tmp

MD5 3d147eda646a482f04814b13ebb0f2c7
SHA1 2c68135dc464e9145382a927f2a79c2d83fdf65f
SHA256 7865f78038f461ef7a0d5b27b3b95144c8a5fcec15846469ea46ddda50040a4e
SHA512 2a8f59a55c6171e05e861cca7ab24a69555b365648f2572c385ff4ea3ad1c1b18cebcd286d173653f6bf2b46fc56ce3e2343529276653ae53a86ec9621fb8b03

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 687da71c9bac7fac576f18994503c816
SHA1 73a7aa61e9c3f2d02769bacba11446860df1f0a8
SHA256 703ad4de2437c60cd6083720b04ac20b8760a5c01c186c17e56b16c17ab78089
SHA512 917258dae7977f030db80dfae83045863ec972d07237a2817cfac841159bd83d2bb6c9bfb19a1cf4ca507273f49b47008b19afc6cb9f0fbe4d31ce3357403123

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\592b3d0f-bc2c-40fe-82f9-be23ea472d57\index-dir\the-real-index

MD5 694599118997b06e81bed68f8f5aa25a
SHA1 7d9c8d6f0edca1cc803117582472082632f29ee4
SHA256 41c7c3ff1accb832955ec3764fd4e5d174708bc81823f8da37eb21aa57c7e80d
SHA512 e986fce4a9b206c5ca024bcbb1b071843e6bbd17660f6c1f5a6b6791649aca08e8ddc259ea749e18e5b4015cd14bc93e5baf0d9bbac429a15b0f0ca31fa1ae70

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\592b3d0f-bc2c-40fe-82f9-be23ea472d57\index-dir\the-real-index~RFe6ec9a9.TMP

MD5 bef80bb9c002cb269b7c1ed1e16f67af
SHA1 41aa7a2429b785671a9919894fe6529cc857a884
SHA256 9596ae66c82b8b5186ed190441058278f4ab16b303fe13ca4c81a26e78cfa6ec
SHA512 7e4e243ef0038ba262483aa624e96829b3e15cbfacbadb81d40e348ac99e26c57ac126856d01664291a15dca83cb585bec5c8d0374e3e85b8b1a2bd57bc4d764

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00012a

MD5 d184fafd758c0c9ff2d264c230fb0f18
SHA1 5a28ea145347a6b33550dbf35a851d3e854dcde1
SHA256 79ec09835122cf102d1eefa09ad5c467b3231c821f1f1d9fbc4f1b6f00ea823a
SHA512 1339d4aa69870ab3e05eb9eb27cdd3e9cc2926466ce84bc803768f2203c5687a8271d1fe0f283da2a2d637c2e1904abf7cfb985bed86183e3f29696fad67e011

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 7174b42421d5c2ebc7ed143c8a7191f3
SHA1 6eb63743a9581fe8d4ec633b2efe6a930f4d5d7e
SHA256 668c0a4c8793e3838e9eaea2cbd2b5b9bcbd5864ac4b0b25ef3407d6b78742fb
SHA512 e372a59eaa08a521b57b949d4f61513c5d7c0057536e26952ae37d33079b5861d3c9013d0ad12e4701d088161a5b80875c4364bd3b2d43b740a2a51fa7398f7e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 8e16e3ce36a79e2dc7ed2d74cb1aa615
SHA1 0ed2a8e67279188a5d511704bc1a6ae5ac5119b7
SHA256 ce2679f254a7d96bb37a0fadfdf51eb9511060e9064f322a8041d3ab9f9b38a5
SHA512 464d0f1449f3ab437b20042ca6e96168b12cad39c5c9e2a46cb74d8796af6e48a56a1d7ae14c9280c3125515d24995dc15d216cf078cd25b60576f145be238a9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 50f1c32f8723df6cd6722a74d6548a08
SHA1 a85aa1cd1495cf1bc09ba9390c906feafcfcb64c
SHA256 e2543ad3d949b4b07faa2c4eabaab27a3aa2affa3dcd0fb61707ede18a57307a
SHA512 1b1dbc2f70b4ceec8dd54c7bab0024403ced2eed48c95550f859cd95edf92112c3221a64c425ce4a8b943217106db81a3790910bf12f142b4d49f6908a15a307

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000121

MD5 13531122d97514dcbf386303a9effc9c
SHA1 39c61d5e94c96ae36e4c078767d68e03f3e598cc
SHA256 582eff67b912390328543c48e2928d0f863f25dc14b8a64b3a3a639d8fb0859e
SHA512 e00eb59c6f0f4093058ba0b8bf3497d2ca21e4069315b2988e1158be33f176e6389e3b9b2f75c4a3015fc6c1c04b6525a2d01a4e597f769791fcf00035b733d7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000127

MD5 27d28e1ca9ba29c9692d527d8c9d5b38
SHA1 45470fd64bc00570d10b2baa537e82c4b6a177b5
SHA256 18eac61511697a508351592171e09505fa5fdd7eb1d4bd963a60aa493c15dd58
SHA512 8605fd6bbb6b714cafc33d05c02fe91f7b292013e53a84e15f4a1a75f5680f1b10d7abba900134860ad0f3b2d4f82a95b22caaad4f6421b5438ffa956ca22580

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 3451da414832f75fddf392ba9bec2797
SHA1 32c81c80a0626431e88e75daa3838c969a2c5963
SHA256 34008883dc04e388a1045ced76b6ccb9ca9de1438a038ce136bb4c0f838c684f
SHA512 6ccc7c28407e71803810572f388ac1b26d08a25bade44c427ed35933e8b7503ee2de74f18ab02d0bc89d5d20a49405a9e26ec940e6feb081b251a6bf0b156ee9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2b0dd241237a550c9a0c35a27a395c8a
SHA1 5f4e8ec8bb7e25f8e071dd7a121aaf58f40c34a1
SHA256 c5dd8859a77c65933ec9d1fbe19cbf7ac95c84769c8aba1f19596e990e5f978c
SHA512 25682bbcc583cde9b13b76e6ca055751bf494d9558e0fcda7e88cf7e86d1fe0a75b9427f31bd5b9fe5b29e6e8f03f34f3ecc406f053c805c3beb8cb1c2316798

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 4790775446444b09c24f952e1a5f689f
SHA1 020cb1e2c73bf92a47da0139bab85beaed756b9a
SHA256 426fa6b67272e4b887bee674f847aac938586d65a0bed225ad78c701ac92da0e
SHA512 8e32546cbfdb58f0ad888b9fd556c9fea848d5a780fb7476cadc91653130d69b09325b11c089e410a11b4d875d63256fa3fc9a2e195ebd0430c0e746c4a36de3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\ba9c161d-5707-48a2-b532-7f55e778709a\index-dir\the-real-index

MD5 6a21600cf651d5224619beb7016a0084
SHA1 5661adf32136d15949200d2ecb8e5cea6f3a9241
SHA256 1082a730debfd64f95439b00b09fc662d2e90acf9416495a2a293b7f9e62487c
SHA512 536f2a3ae41d311a8af1e5d7d2154f091e77ecd76d0f0bf73a5ef9e6e6e849acc37ca21f561aba4e2232582f7524ad51099142740afdda11adcd3b68abee7f48

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\ba9c161d-5707-48a2-b532-7f55e778709a\index-dir\the-real-index~RFe6f30a0.TMP

MD5 799c89cffad5c7a6ba4a46561ce5b9dd
SHA1 8583391c0463fd156998c4849891f28b7c618148
SHA256 746035a40aa823a74064cb89e39669a90e9dab1198149500a038b21ca0a8a4f5
SHA512 cf4220c1b85b4567ddf514cde60f63ecb98abf4419caef4c49ff4f91a0b416f5545cdc799e6fd09bf05634c175709768540775c2ec84f647bba25d52b225d98e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 4404c2ab845d88b4f8afdcf9030cab00
SHA1 5a07de6d3e3941cf0d41d5bcec76d8bf702a6ff2
SHA256 cd1590a93c2f14e4ab589525e4f6e2b5b4a3141b8df787913d72814198b94eea
SHA512 217a5b22e0797edc2e8f44551456c243720176b478f29f00ff5024d98918b384f434d21a92f48475dcfb874d807c0e6de9636d310744e8205c90b0a45ea04f13

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\592b3d0f-bc2c-40fe-82f9-be23ea472d57\index-dir\the-real-index

MD5 32c1a801cf32c7c501828421e43d3f8c
SHA1 aed51ab7707e62bf7c3bb171213de128289641d5
SHA256 a7a36e0d75e8f37da42ba9651b6741bf55376290e47b6dc0dc31b250533f959a
SHA512 21f7ef640a45e427213ff1799c147c8346333854bd3c32aa7f9efacb7740de838cd7f928ae8e6d9f3d7f1d1864b14b06c3f82d7debfa31406e662c27d469b913

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 63fa4122f803b90887aaa10eb4905519
SHA1 3f373e8ee68afdea282a4cc0fe07b4f55c1a746f
SHA256 fc5b59385f9f010dc2c949bd9a738f83981a4eb14bc77f3c153496ea512c060f
SHA512 263bbf50db8abfe4ddc4cf649d8353f6e1da9285df1aa1028f510585fa0afea2d851c1f47cbd5ef130bfa3291bc798581412341096f47cd22876360b807e9eb9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 77b2727c5e407bd2f904c245f4ef9076
SHA1 50400ee699f863321895e230c66954d947254022
SHA256 18c15513a81f15de119307476116c4b5ccb2178596e030c4c299eec7218dad46
SHA512 148a685d917d78bb1df587ea20e80963425a7d1a4fadec67b8c34d10a3495584d304f400d8b800736e0db1b207d73e2ab9b51ad72bf1ba6e9cda15aa28967a6b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 f8d98865487f1a0449a234d727dd206b
SHA1 c83eb0421f6186e4931b6b868c21acaac77bb4bb
SHA256 e508a4604beff7238fcb6ca1377653a06303d2cc7ce62db61e8d16f1a46a2057
SHA512 86926045a3a666ee34cf7322df34e6342d16817ee582d682f8d81b339c32872223a734aaa65c6ae3ed880127cc3ad900e9cbdfe8f5a24ada7c0dd59531c22206

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 b6319edfb0599b96948422e79757f3c2
SHA1 4b3de2632d520e70d6ccae51133469a9e923d9a1
SHA256 9445cf61ed0246826e1a4eb31326b425c2a22387aa73fd18eb685dca65228458
SHA512 3783f28fa7ab3e3e7da10b9d7b798e5ed86e19a05ff3e3d7158e64568e600553ce497f9b43bdd092945fbbd360d7032179c4fada002c84af6d6fba2d16ffc5f7

memory/23916-26619-0x00007FF9F41D0000-0x00007FF9F41F1000-memory.dmp

memory/23916-26620-0x00007FF9EFE50000-0x00007FF9EFE96000-memory.dmp

memory/23916-26623-0x0000011C5D4B0000-0x0000011C5D4CD000-memory.dmp

memory/23916-26624-0x00007FF9F2EF0000-0x00007FF9F2F30000-memory.dmp

memory/23916-26622-0x00007FF9F36B0000-0x00007FF9F36CD000-memory.dmp

memory/23916-26625-0x00007FF9EC020000-0x00007FF9EC4D5000-memory.dmp

memory/23916-26621-0x00007FF9EFCC0000-0x00007FF9EFD57000-memory.dmp

memory/23916-26632-0x00007FF9F2EF0000-0x00007FF9F2F30000-memory.dmp

memory/23916-26633-0x00007FF9EC020000-0x00007FF9EC4D5000-memory.dmp

memory/23916-26635-0x00007FF9F41D0000-0x00007FF9F41F1000-memory.dmp

memory/23916-26634-0x00007FF9EFCC0000-0x00007FF9EFD57000-memory.dmp

memory/23916-26637-0x00007FF9EFE50000-0x00007FF9EFE96000-memory.dmp

memory/23916-26636-0x00007FF9F36B0000-0x00007FF9F36CD000-memory.dmp

C:\Program Files (x86)\Steam\userdata\1839466726\config\localconfig.vdf.async9896.tmp

MD5 61539859e6110ddc8a01123371abdc48
SHA1 37a51e6557bb053a4e2490cef618ad7dfd2da13e
SHA256 4f2a65f4288f521b42901cc238274c620b1279d3bc2d07e1ca68b2be21dcb09f
SHA512 d46099bba2c5db5d4d7db9792afc42d38858a583ccddee7ba62ceac46b128864eaaea60a77ba45cd19fdfcac7e528a63fdf77fe9948af611861fedefc1ebb116

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 6b2bb11df4e8a82066bf28a6e4100399
SHA1 b21dd82c583efb021018986ab14693c9f0ea7025
SHA256 ab4f66f6c28d29955685d4904ba973b9cf800ed53405d2d98144c3e6693f98eb
SHA512 3013ac9d0a4c44863b93fd64dc660c4c19627981bb6a7d4398a627ffe9070b51d2eb1b775958b40b725da4b6cf9313116dc3501ca1b5e075d56cdf63dbe9d900

memory/19312-26715-0x0000000000900000-0x0000000000A34000-memory.dmp

memory/19312-26716-0x0000000002D90000-0x0000000002D98000-memory.dmp

memory/19312-26719-0x000000001BC20000-0x000000001BC96000-memory.dmp

C:\Users\Admin\AppData\Local\VRChat_Inc\VRC_Quick_Launcher.exe_StrongName_dmkua0ch4023edv4rqoiopq2enxe0fsy\1.0.0.0\user.config

MD5 791eba58dbcce3b32bcbe10eacec62e7
SHA1 0d2b2b74cc097f88d659dd10a33063c227cf504b
SHA256 abd9c413675b529438305d11287eef6b4e5b3a4bc82d501e539da22889ef5e1c
SHA512 71fcb607f1d8c41bb485419d20b0873ab55fa0120da462dbb889fe45b8a6172fd9fd0eca9bc28597f6142383bf3895e49aeae6d116f8d51f1377665ef41a1189

C:\Users\Admin\AppData\Local\VRChat_Inc\VRC_Quick_Launcher.exe_StrongName_dmkua0ch4023edv4rqoiopq2enxe0fsy\1.0.0.0\user.config

MD5 e9a9b36d4ccdeaba3c2138443d38a662
SHA1 fb548f2dc363e330f7c1ae2d94d1ada4b9828fa0
SHA256 479b8f531262352d73e3b6e12d032ce9d97cbd1075934433c31d648623b5d57c
SHA512 cfeb042eda7e88fb5719fdafb560466ee977d4899c7d6c202ff36069ded650845d66a80ab468b85ff75285fd62d7769d0b197732b6ca77d4961b0290cce4fda3

C:\Users\Admin\AppData\Local\VRChat_Inc\VRC_Quick_Launcher.exe_StrongName_dmkua0ch4023edv4rqoiopq2enxe0fsy\1.0.0.0\user.config

MD5 d0f82633a36a1cf5fb3ffabe39eeb570
SHA1 b922fa1ac23b384e4bde5e81476746d05d9e3f57
SHA256 3f06af8c653b31bc8297ea5947a149d3d7bbfdda88f8baa93c160ffd55559a24
SHA512 4f0807da508766fc3aaa82b0c39d117477fb262b86cf6d32aa5f27a57596b174cff8fddcd656d27f8cba20328536a1e88eaa0f8a46d385ec601be762524be68a

C:\Users\Admin\AppData\Local\VRChat_Inc\VRC_Quick_Launcher.exe_StrongName_dmkua0ch4023edv4rqoiopq2enxe0fsy\1.0.0.0\4sovrfq5.newcfg

MD5 9ba845776307ac5a3f943dfe4480d299
SHA1 91a34c410c9f580b4b41585cb207b6aee244dd38
SHA256 b1d7dd40f5fbfa1d9ad1b32fdfb77b0dbc33b1aba72125b8b9781c7da3887c26
SHA512 7788c7c62fa5b933378c18f6007e5b6953ed46166dc0fd78206843aa09a89567d618eb762e46fd391cf075d4ef0aa9e4554b41373d07f9d9009a26b3276d6efd

C:\Program Files (x86)\Steam\userdata\1839466726\config\librarycache\438100.json

MD5 8f6daf64717cd6bac328e7726d2976b2
SHA1 469e74af6ac89bf45107437d14897211de835778
SHA256 e3e73ad12420340861908aea3a42547a1ca6c537761b857bc00b95758a884524
SHA512 0dca1b9eb0b08d6bc8727b763627f561010ec329ed287a35d12fa3b446a8f0b360cfc08c2c87c1dd97628d65979eebc07014d9179aa179a8e89859d00ed009fe

C:\Users\Admin\AppData\Local\VRCHub\EasyAnalytics\libssh2.dll

MD5 fd6e90c61ea06df0d9eaa0d1508edb3c
SHA1 128463a084422909ab7f4d3dbc142fa107a9034d
SHA256 0df9d271d720ea3869627601f6a2281d7a774c5c12f9bc29f68ab4137b0ccb1a
SHA512 4ba989d332f082b584b46e56dec4b773f12dca849735f9bcfb3edb1ca182ecc98699ce992a3d4b8836c1e7eb60950e1d28e226a0a8b7bc7a41fa27bd687b9cbf

C:\Users\Admin\AppData\Local\VRCHub\EasyAnalytics\libcrypto-3-x64.dll

MD5 7e0a2cf743434f49623fa89615217874
SHA1 08c7193b40d183cd739e8716501fe9c34c606953
SHA256 ff234e0cfa8cc5dbe45b9285f37820b3cfba8d00f0104edb9e71c308bf5f99a5
SHA512 9003e95d7147e6af521823abf7064d77a686ef920e9008d0577c0762815cb42fe300b8ecf4c8a70216c4b10b36738e963134139e5da7ffcf80d12e2bea1ae58a

C:\Users\Admin\AppData\Local\VRCHub\EasyAnalytics\jsoncpp.dll

MD5 a8509b87c244a9162146c461255b70db
SHA1 55c447a0473d725c31714a1c54f5b6cf2c3bcdb7
SHA256 44b3502e2552eefdf99c32b27091ff0b862e018540eca39fe3074eb3c38ab39c
SHA512 550ae6a643b68f9d7089992d2a54f70998ea129ca08c93713ef907ce8a44c672de8ed81312f442e8e89fd78fbca31d654dd8ee3ec67c18b8ab0deddde4d47795

C:\Users\Admin\AppData\Local\VRCHub\EasyAnalytics\zlib1.dll

MD5 d962751c7e124f8ad78e874a9bdde041
SHA1 e542a6ec1b6f60694e402cff1a9af2ea486cf846
SHA256 260225d3bcada20e0e0b3e39f55ff8b5e54b43ee1e7ae088444b53aa09e71270
SHA512 b2ac8338ac07390fcb043f2cb3512dfc278d8fcaf207486dbadf7715d9efa96c890475a5355d150f80528ded5981d589be0dd89812eaaefa0742890b865c0d83

C:\Users\Admin\AppData\Local\VRCHub\EasyAnalytics\libcurl.dll

MD5 a32d7be4e0cbe2932f878d97515d35f4
SHA1 53192841f7143426e4333eb7b80689c560466243
SHA256 60f49b75758ee416563ca60e6cf94ea96830f273d9941acbab4f9e9593b622b4
SHA512 d789707d4a6b1d27f340c64afa32da44f78242323deb7038e768222333d01b11a298ad6587cc6299f8e1183c15bb0341030e647358f406f6cf77ceb6e81fb8fe

C:\Users\Admin\AppData\Local\VRCHub\EasyAnalytics\EasyAnalytics.dll

MD5 4951748ae19560db458ba59e29f4aa8a
SHA1 9c3d8cb73c2fdb27cb46c0226b031c1724a8b24c
SHA256 4e23d4455be3652b3113b0109778324385b07b4c67c790e9458b3b336b2c3070
SHA512 a6e78786e16ff363c6be4039da2c937286437af5c9dac192350f88a3d02a6026161f6bcacf95bc65a6d90effed751945f5b1a7e7ef484b94efb702294ac5a1d7

memory/19956-26794-0x00007FF9EFCC0000-0x00007FF9EFD57000-memory.dmp

memory/19956-26797-0x00007FF9EFE10000-0x00007FF9EFE56000-memory.dmp

memory/19956-26796-0x00007FF9EC020000-0x00007FF9EC4D5000-memory.dmp

memory/19956-26795-0x00007FF9F36B0000-0x00007FF9F36CD000-memory.dmp

memory/19956-26793-0x00007FF9F2EF0000-0x00007FF9F2F30000-memory.dmp

memory/19956-26792-0x00007FF9F41D0000-0x00007FF9F41F1000-memory.dmp

memory/19956-26807-0x00007FF9EFE10000-0x00007FF9EFE56000-memory.dmp

memory/19956-26808-0x00007FF9EFCC0000-0x00007FF9EFD57000-memory.dmp

memory/19956-26810-0x00007FF9F41D0000-0x00007FF9F41F1000-memory.dmp

memory/19956-26809-0x00007FF9EC020000-0x00007FF9EC4D5000-memory.dmp

C:\Users\Admin\AppData\Local\VRCHub\Config.json

MD5 db2f6ea15632b7df96e48c35fa566116
SHA1 92595dfbb8e23fc355f719411ac7cf97a7b666c4
SHA256 5ec39766857d7f8e4f14784aea4dffbdb3fe2fa15a679b1a0f52887fe5e63a79
SHA512 127d512a70675ede65bee95bed3d81d55d53cccc04034aad673211ba10c3906322a8f67061a119f96e60ed0dc9064eff3c7d66babded95e30ecbb895405cb842

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2010\vcredist_x86.exe

MD5 1801436936e64598bab5b87b37dc7f87
SHA1 28c54491be70c38c97849c3d8cfbfdd0d3c515cb
SHA256 67313b3d1bc86e83091e8de22981f14968f1a7fb12eb7ad467754c40cd94cc3d
SHA512 0b8f20b0f171f49eb49367f1aafa7101e1575ef055d7007197c21ab8fe8d75a966569444449858c31bd147357d2bf5a5bd623fe6c4dbabdc7d16999b3256ab8c

C:\Users\Admin\AppData\Local\Temp\HFI4578.tmp.html

MD5 18e469c91482973282469bd59152996e
SHA1 7bc6d97d26fdbb125385d40f7009dbe0743260d5
SHA256 38065ac133e7e95624ec4b2474acae48e407bae2464c887b91682852cc4a5110
SHA512 12c346d5866678a3de5b49a8af7659e33c2783ef21afa17388029dfeda413f8b41691dafa135600f086ccad3a0217d1cf90738304eaf4aeda42a2cdacd61371e

C:\Config.Msi\e714dc6.rbs

MD5 18166b9b078f2280c7170f8927b3da7e
SHA1 eb6e6793cdabd50ef2e6c887133400e1c9dc96c7
SHA256 a7a63b10a69df9b249c0c9ffb13458137d6606c686cb2c2b7384bcb5f568fe33
SHA512 6193cf479048baf6648a5459b8dd6170ce1558b6171cb881bab41346c812ea9acc6f58f8301750e14d7d4801ca3f40b99e06610d89bd72c169a2be9cc89c6f59

C:\Config.Msi\e714dca.rbs

MD5 413784205ca6c6f8cb7531d206955dc6
SHA1 92a94c4a54933f036319a3fc28eb8fc3bda2547d
SHA256 47e3adea3ba1818d050e9b43a6d62127837fc7b9212f2dc2dbeb8f88d52a3786
SHA512 42d024eef3370762bfdb11f064b7ad6860ab2fe884215a5650a96b5f06042a51fc9ea12c366c952fe2b3903927677337145a3df5f626f6f8a4e0393349a5f549

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2010\vcredist_x64.exe

MD5 c9d9eebccef20d637f193490cec05e79
SHA1 15d032d669078aa6f0f7fd1cbf4115a070bd034d
SHA256 cc7ec044218c72a9a15fca2363baed8fc51095ee3b2a7593476771f9eba3d223
SHA512 24b56b5d9b48d75baf53a98e007ace3e7d68fbd5fa55b75ae1a2c08dd466d20b13041f80e84fdb64b825f070843f9247daba681eff16baf99a4b14ea99f5cfd6

C:\Config.Msi\e714dcd.rbs

MD5 20917f262a67d77a52c49159292cb6ca
SHA1 9bf083f808447f75248f6e3f4e6ba01d278a4e8d
SHA256 4aed7028a0cef4fbe0fdae08c3b1c94f0f37632b50318ac86cf3734172c42f33
SHA512 6b9afa3938de5e3c970984bd95c18bb2efe9a88d22ef7e826d33d77a377b9972242f874159a9ce065919ccc102691aaabfb1317b7e586e43db519b857008c4ac

C:\Config.Msi\e714dd1.rbs

MD5 85cdd40dc7a1b4c068cbe4a9fbefc196
SHA1 d25c6b3af48dab7bc892b72d631651f4c009dc6f
SHA256 928d046a710681214667304ac13ceef37998222a1bc0affafe9506846c4e0db7
SHA512 7953a73dc7df2fc05366de7725b5d9e126e098c6a77ba9bd92448149c8e59450ff7fcd04a8378fac6be81105f56c7e92543cba0dd0ae4348c73d8a7cb7977369

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2019\Microsoft Visual C++ 2019 x86.cmd

MD5 a8d147a22093c77cdf20d663748877c6
SHA1 7fe518339330ec20fc78352beb841e7a7b070b87
SHA256 8098ebcc001ca152aec47352e9b7d8f086512519cc430a8ec9c82f67fa9c29a5
SHA512 642676197b92ea837d475ccf2754217d1ed0bba7985cbd72202eb9b27541b08093c37dd3217b8946182bfd6b8a7f4f54357f294fc32d1449279390aa65a169d2

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2019\VC_redist.x86.exe

MD5 fedc87470a950d6c723e6538c5f27817
SHA1 17674fcc6cf3a2ffdc391bdcde082aa936e37a89
SHA256 5c7dfa4fd52809813cf9350c4e5807434d78a0bb1fd0d61c85e02b41646a5780
SHA512 17d286311f8aee8866fb7dfbb12fc28fe98e57a460c086fd30bce421c1cd8c0549d92ba5a90c4557eb263ad29a0655da9022603979079022a414c0c5805cf9a1

C:\Windows\Temp\{6768A323-5B72-4D4A-AFC7-E16CDE14F3AD}\.ba\logo.png

MD5 d6bd210f227442b3362493d046cea233
SHA1 ff286ac8370fc655aea0ef35e9cf0bfcb6d698de
SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
SHA512 464aaab9e08de610ad34b97d4076e92dc04c2cdc6669f60bfc50f0f9ce5d71c31b8943bd84cee1a04fb9ab5bbed3442bd41d9cb21a0dd170ea97c463e1ce2b5b

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2019\Microsoft Visual C++ 2019 x64.cmd

MD5 1c39b0799c57e7d2e97ba432faefc85f
SHA1 8b5029489d50b8b93ef9864dd056bd035d98d591
SHA256 c39c8d1d2065c790e39ec9dbd242d64340774e12db6ef90dbe2933106b46864a
SHA512 ddfe19d501bdc713d85dc1ba96bfb2a14ea01661b5115e1374fc80c83d5d6ab6fffb2375ca5e0121725a3f6d853fe7ba72cf6791cdab699a3171bdd288d05948

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2019\VC_redist.x64.exe

MD5 ba584d9886d6eaee8daa852a0605dd00
SHA1 1effe7db3f42d670a1352c5c9b451c4db3e57ab5
SHA256 c2d74d9b85d0030eaa134679a2392268baa773185c5a21657390e43f8b518f69
SHA512 3076aa5583c2ee719f9755fb6aefc1f01f37a33491a7d336c39f9ad303e671574498a0dc16b64e3744098c86ac43ccb916557a4866caf1a5f4b1f5ec68446d47

C:\Windows\Temp\{890B86FD-55C3-4F28-BCC0-9CBC3914F109}\.ba\wixstdba.dll

MD5 eab9caf4277829abdf6223ec1efa0edd
SHA1 74862ecf349a9bedd32699f2a7a4e00b4727543d
SHA256 a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041
SHA512 45b15ade68e0a90ea7300aeb6dca9bc9e347a63dba5ce72a635957564d1bdf0b1584a5e34191916498850fc7b3b7ecfbcbfcb246b39dbf59d47f66bc825c6fd2

memory/23200-27303-0x0000017F34DF0000-0x0000017F34E84000-memory.dmp

C:\Program Files (x86)\Steam\steamapps\common\VRChat\EasyAntiCheat\EasyAntiCheat_EOS_Setup.exe

MD5 98bfc93faf00b1cb0dec008988d89b25
SHA1 656de3845bd34bb1e7928e936415c5b9b3d854a5
SHA256 94567bf0dfcf48bfd6a2fa073e854ff6c8fb38ea114d5913dbe2c1d2554bcaae
SHA512 1be9c7d533ad4a8f0bcefa69aef9505fbf8adb24bcd7a985b0ebac2b5f8d6b8112207b9192ea6082746f257539dce837fa7556044e98477f476a598e9e8a610b

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 739cb8624bd87b098e2293d4d683b327
SHA1 3680f0a1afc9ab71a4432feff31547a9d83ebbf2
SHA256 fbf416835bebb3a43224d92cc4c8b20e540919cb02f02d6fc9eab06eb0489fdf
SHA512 65e505b6f51e0d183814096c5f714ad44767a09721c7b601b870c9b5f526c632c37b9fafcbfe0e9da1c9da405f8b287efa8e97f99d74c3a8885fd487b9f25b09

C:\Program Files (x86)\Steam\steamapps\common\VRChat\start_protected_game.exe

MD5 d1e1a1feb8171aca968bb6ea84403281
SHA1 95636ea7514e347114a4fa2e5d9a0a3af404da4b
SHA256 41505e16657a08b14450f3002fdcf9cd67f5ffcb08daa760cac5a9010ea57933
SHA512 2d923c38c6f88869530e32bd611981b44142893f03381c7a9ab6ce34e6017856894882fbb8da42de01bdd5c96daa282241e163b7aee048c4d20d90c1368b15c7

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 a21742c946067313aee61352a2fcfae1
SHA1 060d0eb21ca7c6d6b4601eebf3fc6d0b4390b6a5
SHA256 f67f107e2c74a5640df89ee1b045f3e59a098115ad304ba49b53203cad449ede
SHA512 eba24292da875d35b6dca0d4798ff3fa85640864f191306a714ff4dfa8734c939e2ec116f2a2df055a4af44216305917ccb21c956d0d31137a1a187c72542449

C:\Users\Admin\AppData\Roaming\EasyAntiCheat\48b35a4c-b2ec-993f-8fb7-3198782a24b6

MD5 bed53153944fbb6981f63f3d2fef7168
SHA1 f476bf4dd0c6c9f61681d9bb2f26d3f2d4419d5f
SHA256 95a628655fefa1c2c3a9e24305a33f179db0891bb807332cb48e4e3c1550aeb0
SHA512 273fdc55fb4fc5ec14d70922213aaa096f9c39e6c8d7633122a6a476c8e4fa3b5a60d021f2be45b91e570d9917090b9347ba0ee8712ea75258700f70f71adee9

C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.sys

MD5 e736ab47b62aeafb5413140766419b85
SHA1 4d33664ba441c11bf24c095209748a08a2882579
SHA256 77120a24813ba880db7dafa8273286080e85fe023332fe3bdcdf0e6ee333e87a
SHA512 d246e9442911f264e68eb0b3743d560b9bcf55007748abed0902446710160948f297503a38e90fda6bc9268ef5b9723412cdb3bd2430ecab6b6f7cf340758f59

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 3af06eced29cedb7d0df5693d4c20ae6
SHA1 38e54f1bf7d0a1c07746a1aefca8cb9b0758c737
SHA256 39fabcc98fd2dbee0b55639f6100d5f85df23a54e2057602bb6a3dd31294bd97
SHA512 e994e6f168080b8d10f9ad5fea0a6a95b006915f57c78c94480195db16518c3100329a8aaab4effa2beaaa2f1f5bee4c959d0c41bd63c4af306ccb4ef9e78e8e

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 c8fe224a41c86917bca9c63ee53e653a
SHA1 153136f285833f1c362cbae46c0368597e657b95
SHA256 c41b319eb37d38aaf0ee99e219e16729f6844f4f10981bae9b7321e2dd7fd0cf
SHA512 a97522e172838ddcbcc77fdd304abb80ac75d7e90f75b0a4e592282a9bd2f4c9beaffa14112fd749021830386f568b3d113a08dfcd9b256a37906dc162bed224

C:\Program Files (x86)\Steam\userdata\1839466726\config\librarycache\438100.json

MD5 f8852ec3c59b23f1681bb92219f7c49b
SHA1 363cbe9fa6812a72c087c6d2dcf882bf899a44de
SHA256 5ff8b0be423e3b5b8b646ef29f7eb646e641a9c79d96d73c09cd6dbec16dfae4
SHA512 55ba197e97e43243b0fd0ef838b98dfcf754e7cf9c63039517f54cdb5e39f82c4148fceb0b9c3d145ab40c88b29ef80513d88b7abebdb2ea9d41f9cf61dbbfce

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 1f4be15d93dc93d9c6d9a95b7ad30190
SHA1 c634fed27c5f36fcdbd1a7224d9cce0c61f3ffce
SHA256 fa465d157239421c098917fe53ad0d31a9dd6dee0807774e01e26628b337223b
SHA512 69281b8fde2c271bf9d197d59e450eef3f170159865957ca93683fc08099087f8d2c55eb3eb87f6d1126721ca708d84f5dd98cf1c692dbb4e42a84c6142eddc9

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 37e1ffea531c1719ffc8a134bd3fe9b3
SHA1 a629e2adcb20ae2da58b1cba16b0c5f469744818
SHA256 5844ca1152dddf6effdc59ca460f660ef020d456ab3c2507cfced2b15ff51ff3
SHA512 a1374f067ead5e286d1673cdab96edd95900432953feb90783e2136b6d4fe58dbbe425ca6a6ab9956a6a8aca327d63e59a6aeae2bb066ff4512258410a4b9d11

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 8f1409c391261bf92600555ea94e357b
SHA1 a864496c2adc310aacd6cb4d1c275b456206efe7
SHA256 dcf7978329edf5846d3fd4e7e95571919385e8949d67a9b1f3f1ddefbd31e792
SHA512 ecd68b406bdc717685645f7d250f21a77fd21df5d7010cc4b25d3dc7e08a376b38d25a8979ccac3aef36d3a9bb052c1419a922a09f5e27f72a09c77c55c1834c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 d909bce6498fb23369e244af96b614a9
SHA1 091862c84a84d87e696c552cc1675150a8230aa7
SHA256 4dc51ee4d8ac2b156983c9c06d9eb8d236c24b11de885c971d1aaa7ea7a34300
SHA512 69238c95a8cc5899ad39b2e5eafe30b764b1cd88c41745417801250d786078d683f348dd75089ec7385cd02a59a179f4a862703b2d8285abbe9f2430ffe07138

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 cb15b21ff0d580ac3f16ce1a82947967
SHA1 647b85b5e4582924251fa392fa8695202a4a57a3
SHA256 5c237ec413c869cfedc8cdc71dbc18760f601494a6541d0f48feac22c5658624
SHA512 231f9187703d7fb6d13959ead88a47d54bf88fbfe92370f32d3c2571ac16d82639d57d82727e80cff006356c463297aec3b472791102b876e5c8a7b87c0fac47

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 1988b85c74a4de64836d5c4aa5dbf5ff
SHA1 ee66b55453653aa851d9ae7db01b50c3a1564a7c
SHA256 3775f42bef635868d85798be4f87a2c4ba02a745ca9edcb762cb0a259d4313cb
SHA512 f0002394895327543aa16be9d52137e1a3961c78583b377cefd70bf7823b538c3225b0675a8c7dfdc8cb8f9afa3dafc3102d942ef3cc9ece30a1ff88b4526b2a

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 d1dd1e4ff078cd5147b85935bbde1fab
SHA1 3e5b8084f65a2c994c8368f699338b0fe7c6ef6c
SHA256 bf63da16476360db9766358d3ee3a2322ad001a25f03446ebf9964e452e2e660
SHA512 e5bf733d046633cbf97d033ce89a532ada2da97319c7324980cb80972f4a2f5be7ec5c95ed0e55e18578e84db364280f2ebd5dcb3ea3c812d7a405a20321dfe2

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 a1860f6852f817454ad2f8582c8e7c01
SHA1 b2ea3a899dac8d42bae264050afd51aebb883f89
SHA256 25252eca908f87e3a68213a8cf272f02d460317cbe7e5f3ee898b338e85353b0
SHA512 01b6de11ea22616c1d98b36bf7f524c6e72b20e9b7ec58370d1d6d9c5fcb0f29ba7298727b6e18d5cf78fdd4a8484ee7d5b2e533c49eb6ac42319b75959cd40f

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 eb0a21cfac33167ac4beb6c64b4d8f09
SHA1 9517dd94ff1743a3e1862515f59908339ea94057
SHA256 26f2aadf0091311c00eae8d62301ace7271a822e43f68115d72a1820bea8e983
SHA512 b4009658f99b47a0b4513843a921509f2a6ae233f75f52ce878b428651011536791074ecd6092c536545f0c45f7ba0ad19a5b08ca1c5312b6fd4c4953c274b57

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 deca1e85b210a5e17dd5c171dd57c1a5
SHA1 f5b9ed60e3b56b9991591e87a5e47f4b8b8cc8fb
SHA256 a77a2da149e4c5c4fd05c51b89cc4ca379975e53260470b099c584d0f95a28ee
SHA512 bd731208a98b7cdb27a3e81e88f53dcdb8b57dc8ce4cadf4223e1f0cbb72bf68801b975a0ff183e28ca41bd71fb02f17b5d24b97d8e029c795b2db7724113302

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 8637b7ea90df6a0918737350de034b6d
SHA1 43a9cf60392e57a38a1bf6e9e5b4b16a043408df
SHA256 1ecbb009eef085755a8e53fae3e2f8038e23ee46e055d3733a4b21d12b27e94b
SHA512 64f05407986a4b4500118fb38fe109a193a70a8cd63a00f8d18cc8a9b49b75614ab6505344f3c65913482b164f54f6f23ceda309a837f1e7485953251a3ae0a3

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 a6111b483ec9d90a47ae8399579e7efe
SHA1 0b45ca4bda5c6a23a552da7c186ca2052e8a0d47
SHA256 19c0e6d183b29316fdb918906a7ecb6c011297b353c2bbf33caa037214096606
SHA512 503e21b33a242d62aa4e8c35dcfd9a031ebb4a603b3e78d75b4986dd6744cbd9773b2181057cb363475ab39e3ca4ac4558fbf89d07f6d45cafd5c1e0fdef5273

C:\Program Files (x86)\Steam\steamapps\common\VRChat\UnityCrashHandler64.exe

MD5 e20ed2e42b6867b20b8f76765ee99dea
SHA1 67aae8cb3ad36d1fd9f8713d4b0dd76f7e0d314c
SHA256 17ec01fe2cf53361374942eb2c2a2798c7812fe1ffe864fbbd263152d2858d83
SHA512 00a0514afc5fe9f760e871e7b63c8c0851c22a646c1b98953ff2fa53f3aa6ae4a646c2d2ee55a674f39ac7316a19b637f4e441c0936b816f5143aaec1b040afd

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 956478ab3178e945e676bbc2fa6224dc
SHA1 0ac1477e68db24370ba746fa4f8b85be1b7bd0c9
SHA256 b520a2095f992f997c0f321c73c56cb59f5f4344fb76a58398a3bab9cd147aa2
SHA512 ebfaeca2fe84b60eb2e4369f0629bfe3ff92ec6f739ca6b457ddc1d2d2b6bc5ed5b40859b3ca0a2cd47d7ad2e35cea6ceffa30ae873e660e9e7fe5191c426207

C:\Users\Admin\AppData\LocalLow\VRChat\VRChat\Unity\99b1a9cd-c61e-438a-8e39-fbd94680de47\Analytics\ArchivedEvents\173073707800002.1fa14f5c\e

MD5 a80319126499d84d26fb48387b0508ec
SHA1 ddb8dded1537019f79f9ef7053e641f728fe92f5
SHA256 80cacfc1d9aff136aeb61cadc213d9618ec40a76c3bb01ceb6f0a7feb276df48
SHA512 ea99d14cb33e422d68f1b3d4b918e27a581c6ff5df781aa6bbf2e4b466dbbb6d191ebcae6a1a45b0509e616d8ae4730350dd1b3378310eae4d043a050a975cc4

C:\Users\Admin\AppData\LocalLow\VRChat\VRChat\Unity\99b1a9cd-c61e-438a-8e39-fbd94680de47\Analytics\ArchivedEvents\173073707800002.1fa14f5c\s

MD5 3fe8fe28892f007c8ec7f893b4992816
SHA1 0e19c4f2119044ef9829b28874d412d244db8d27
SHA256 a566bedb5e37f283622924e57a46fde421dc6d4abc870fc66c60e73df5b10edb
SHA512 150a55e9f2c7915fbd562c175a5e430c8c3572ad66f772559ada158d8048578cae1be58c927145489bf7796d80e84b5bb4f75fbc6f5f4a172c4982d0b2983b0c

C:\Users\Admin\AppData\LocalLow\VRChat\VRChat\Unity\99b1a9cd-c61e-438a-8e39-fbd94680de47\Analytics\ArchivedEvents\173073707800002.1fa14f5c\g

MD5 c81e728d9d4c2f636f067f89cc14862c
SHA1 da4b9237bacccdf19c0760cab7aec4a8359010b0
SHA256 d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35
SHA512 40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114

C:\Users\Admin\Videos\Captures\desktop.ini

MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

C:\Users\Admin\AppData\LocalLow\VRChat\VRChat\Cookies\Library

MD5 fefbdac984dfa0240acbab1bbe6ab820
SHA1 b97d0371b9e46d3580cb6296f01de51faa593e25
SHA256 8f000c3450d6f7c733d02f6ec3ab4fa2aa4bf6175ded995e897de0b412286066
SHA512 86bd9dce8832ed3b1f9cae6246cd2f6c33a1aef6d5febe905bcc4ab9a767ad08fabb3ac088a21e97e91091850fc885ce1673b6911ccfa933330a10c3d3c10187

C:\Users\Admin\AppData\LocalLow\VRChat\VRChat\Cookies\Library

MD5 24e7f0b83438d8bb6c040faac05b0836
SHA1 a7b0ab03b605917f5603add8088f4e9426fbd591
SHA256 18ac610e5f126ade065cd0f595ba0e67834c834a5d41f7767d87f9a0a8ebb54f
SHA512 a4ee2fade9027d337214269a9ec9bb1aff5cb1dccdf1275ee0c8ea980a515dfa6f55981bdd1ca53e90002aaa3c43bccb4831e41d6032c4583bebfb7af82390db

C:\Users\Admin\AppData\LocalLow\VRChat\VRChat\Cookies\Library

MD5 d222fd633b0e6088aa1b078e0ce2d043
SHA1 30208095bebc96b186596a4ed0322e21353e23bb
SHA256 db5ebf5046a0a349c52d38502ae96edcae6fac5c118dc1eb93903e5be53a599d
SHA512 57847cab45a17e67a6d7a984b69d687bab77560e75b9576f25433830f7ecbba38826d5a5dddadb621f9c6d60c49e03ed1decec5b452e48f362f7da64f2a5b309

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 a578ee96d0cf09d6ad3e79267ea240d4
SHA1 37bc6704efa3ad62ff807239175a94df972319df
SHA256 bbb36fe7bdbd608a8ca70a96c043483f12c9f4638f01927f4dc83d77528d9679
SHA512 a20bf5a1acc59fb32d879d2f7f558454571572e420d0cac8c12a967de51b924fcfd10c58d9e27aa87a03ace82d074d6794506d4ff89524d6e8517ecdb3291395