Malware Analysis Report

2025-01-18 23:48

Sample ID 241107-wbglmswldv
Target YEAH.png
SHA256 15c952ff76ab4feea15da576ac14b2c0f15c217ce350ea7155d586dde20b0ee1
Tags
steam defense_evasion discovery persistence phishing privilege_escalation
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

15c952ff76ab4feea15da576ac14b2c0f15c217ce350ea7155d586dde20b0ee1

Threat Level: Likely malicious

The file YEAH.png was found to be: Likely malicious.

Malicious Activity Summary

steam defense_evasion discovery persistence phishing privilege_escalation

Downloads MZ/PE file

Executes dropped EXE

Event Triggered Execution: Component Object Model Hijacking

Loads dropped DLL

Checks installed software on the system

Adds Run key to start application

Drops desktop.ini file(s)

Enumerates connected drives

Detected potential entity reuse from brand STEAM.

Suspicious use of SetThreadContext

Drops file in System32 directory

Subvert Trust Controls: Mark-of-the-Web Bypass

Drops file in Windows directory

Drops file in Program Files directory

System Location Discovery: System Language Discovery

Browser Information Discovery

Access Token Manipulation: Create Process with Token

Enumerates physical storage devices

System Network Configuration Discovery: Internet Connection Discovery

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Enumerates system info in registry

Suspicious behavior: EnumeratesProcesses

Suspicious use of WriteProcessMemory

Uses Volume Shadow Copy service COM API

NTFS ADS

Suspicious use of FindShellTrayWindow

Suspicious use of SetWindowsHookEx

Suspicious use of AdjustPrivilegeToken

Modifies registry class

Modifies system certificate store

Suspicious use of SendNotifyMessage

Suspicious behavior: GetForegroundWindowSpam

Checks SCSI registry key(s)

Checks processor information in registry

Modifies data under HKEY_USERS

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-07 17:44

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-07 17:44

Reported

2024-11-07 18:37

Platform

win11-20241007-en

Max time kernel

2699s

Max time network

2677s

Command Line

cmd /c C:\Users\Admin\AppData\Local\Temp\YEAH.png

Signatures

Downloads MZ/PE file

Event Triggered Execution: Component Object Model Hijacking

persistence privilege_escalation

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\gldriverquery64.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\gldriverquery.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\vulkandriverquery64.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\vulkandriverquery.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steamerrorreporter.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Common Files\Steam\steamservice.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2022\VC_redist.x86.exe N/A
N/A N/A C:\Windows\Temp\{24ADC5C1-7ED8-4DF1-B78D-39E91BF9C857}\.cr\VC_redist.x86.exe N/A
N/A N/A C:\Windows\Temp\{0E1B9534-C116-4E8B-9ED7-486319B09FB7}\.be\VC_redist.x86.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2022\VC_redist.x64.exe N/A
N/A N/A C:\Windows\Temp\{D1005605-C15E-4AB9-9912-DF991E244651}\.cr\VC_redist.x64.exe N/A
N/A N/A C:\Windows\Temp\{DE5C1821-5422-4D1A-B84F-F4FF2B3DDF78}\.be\VC_redist.x64.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steamerrorreporter.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steamerrorreporter.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-2410826464-2353372766-2364966905-1000\Software\Microsoft\Windows\CurrentVersion\Run\Steam = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -silent" C:\Users\Admin\Downloads\SteamSetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\{47109d57-d746-4f8b-9618-ed6a17cc922b} = "\"C:\\ProgramData\\Package Cache\\{47109d57-d746-4f8b-9618-ed6a17cc922b}\\VC_redist.x86.exe\" /burn.runonce" C:\Windows\Temp\{0E1B9534-C116-4E8B-9ED7-486319B09FB7}\.be\VC_redist.x86.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\{5af95fd8-a22e-458f-acee-c61bd787178e} = "\"C:\\ProgramData\\Package Cache\\{5af95fd8-a22e-458f-acee-c61bd787178e}\\VC_redist.x64.exe\" /burn.runonce" C:\Windows\Temp\{DE5C1821-5422-4D1A-B84F-F4FF2B3DDF78}\.be\VC_redist.x64.exe N/A

Checks installed software on the system

discovery

Drops desktop.ini file(s)

Description Indicator Process Target
File created C:\Windows\assembly\Desktop.ini C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\assembly\Desktop.ini C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Users\Admin\Videos\Captures\desktop.ini C:\Windows\system32\svchost.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\J: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\P: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\N: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\msiexec.exe N/A

Detected potential entity reuse from brand STEAM.

phishing steam

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\system32\mfc140chs.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SysWOW64\XAudio2_1.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\system32\D3DCompiler_40.dll C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File created C:\Windows\system32\SET4C84.tmp C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\SET4F7E.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\SysWOW64\SET3A15.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\system32\SET4BE7.tmp C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File created C:\Windows\system32\mfc140esn.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\system32\SET2709.tmp C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File created C:\Windows\SysWOW64\SET27F7.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\system32\xactengine2_4.dll C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\d3dx10_37.dll C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\SET4129.tmp C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File created C:\Windows\SysWOW64\SET442A.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\SysWOW64\X3DAudio1_4.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\system32\vcomp140.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\system32\SET25A2.tmp C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\xactengine2_5.dll C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File created C:\Windows\system32\SET3C67.tmp C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\d3dx10_41.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\system32\D3DCompiler_41.dll C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File created C:\Windows\system32\SET551E.tmp C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File created C:\Windows\SysWOW64\SET5A8F.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\SysWOW64\SET47CD.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\system32\SET48EA.tmp C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\SET4CD8.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\SysWOW64\SET4DB5.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\SysWOW64\d3dcsx_43.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\system32\xinput1_2.dll C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\x3daudio1_1.dll C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\D3DCompiler_37.dll C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\SET5637.tmp C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\SET474E.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\SysWOW64\X3DAudio1_5.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\SysWOW64\SET56DD.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\SysWOW64\mfc140esn.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\system32\SET3504.tmp C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\SET3A44.tmp C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File created C:\Windows\system32\SET3A44.tmp C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\SET3938.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\system32\SET43B9.tmp C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\XAudio2_5.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\system32\d3dx11_43.dll C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\D3DCompiler_39.dll C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\xactengine3_3.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\SysWOW64\D3DCompiler_40.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\system32\SET4C83.tmp C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\xactengine2_2.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\system32\SET35EE.tmp C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\X3DAudio1_2.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\SysWOW64\xactengine3_0.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\system32\SET5A9C.tmp C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File created C:\Windows\SysWOW64\mfcm140u.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\system32\SET31D7.tmp C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File created C:\Windows\SysWOW64\SET40E8.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\SysWOW64\mfc140esn.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SysWOW64\SET2991.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\system32\SET2AF1.tmp C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\xactengine3_3.dll C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File created C:\Windows\SysWOW64\mfcm140.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\system32\SET295B.tmp C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File created C:\Windows\system32\SET3BE9.tmp C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File created C:\Windows\SysWOW64\SET488B.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\system32\XAPOFX1_3.dll C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sd_ltrackpad_swipe_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\switchpro_rstick_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steam\cached\steamui_postlogon_dutch.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\switchpro_button_minus_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\sounds\ui_steam_smoother_friend_online.m4a_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sd_rtrackpad_swipe.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\bin\cef\cef.win7x64\locales\nl.pak_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sc_touchpad_up_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps5_trackpad_r_touch_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\icon_button_gridl_disabled.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\public\steamui_finnish.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps5_trackpad.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps_color_outlined_button_x_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\userdata\1456296740\config\licensecache.async18912.tmp C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\sc_lg.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\icon_toast_newturns.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\public\steamui_thai.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps5_trackpad_r_right_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\sd_ltrackpad_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps_button_triangle_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\switchpro_lstick_right_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\update_hosts_cached.vdf C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\[email protected]_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\joyconpair_left_sl.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\appcache\librarycache\440_logo.png C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\downloading\688420\Mono\etc\mono\2.0\machine.config C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_040_act_0311.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\resource\icon_newfolder.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\appcache\librarycache\774941_library_hero_blur.jpg C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\Feb2010_X3DAudio_x64.cab C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_040_act_0332.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_030_inv_0324.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\[email protected]_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\sc_button_l_arrow.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\switchpro_lstick_up_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_010_wpn_0452.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\resource\valve_logo.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\shared_rstick_click_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Steam\steamservice.exe C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\public\steamclean_portuguese.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\sd_r2_half_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\switchpro_lstick_click_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps_button_x_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_090_media_0160.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps5_trackpad_l_down.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\resource\filter_profanity_swedish.txt.gz_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\[email protected]_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps4_button_share_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\shared_buttons_w_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\appcache\librarycache\823130_library_header.jpg C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_035_magic_0345.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\icon_button_back_disabled.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\icon_buy_down.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\shared_outlined_button_y_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\bin\cef\cef.win7x64\locales\en-US.pak_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_040_act_0329.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\APR2007_d3dx10_33_x64.cab C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\switchpro_rstick.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\appcache\librarycache\1817190_icon.jpg C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\resource\filter_profanity_norwegian.txt.gz_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sd_ltrackpad_right_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\icon_button_fullscreen_over.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sd_ltrackpad_left_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\shared_lstick_left_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
File created C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2910.0\Microsoft.DirectX.Direct3DX.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.AudioVideoPlayback.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\assembly\tmp\QPGYXX48\__AssemblyInfo__.ini C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File created C:\Windows\SystemTemp\~DF7548EA9A71FB20A4.TMP C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\assembly\tmp\3MZSQYLG\__AssemblyInfo__.ini C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping18856_863345492\_platform_specific\win_x64\widevinecdm.dll.sig C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
File created C:\Windows\SystemTemp\~DF15C41E40F3200222.TMP C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SystemTemp\~DFEAFC90A9F86C6FA2.TMP C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\assembly\tmp\1DO6YGQN\__AssemblyInfo__.ini C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectInput.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\Installer\SourceHash{B8B3BB4A-A10D-4F51-91B7-A64FFAC31EA7} C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIF33.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SystemTemp\~DF884E14E9546DF04E.TMP C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\assembly\tmp\5ZY4HSUI\Microsoft.DirectX.Direct3DX.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\assembly\tmp\5HP2TCEY\Microsoft.DirectX.Direct3DX.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File created C:\Windows\Installer\e5eff6c.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SystemTemp\~DFABAB937020610B07.TMP C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File created C:\Windows\SystemTemp\~DF26CB5E2D20AFFC6B.TMP C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\assembly\ngenlock.dat C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping18856_863345492\LICENSE C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
File created C:\Windows\SystemTemp\~DF32D994256273B9A3.TMP C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI337.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\e5effa7.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\assembly\tmp\PAHKZR8T\__AssemblyInfo__.ini C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectDraw.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\assembly\tmp\R1XFV3AZ\Microsoft.DirectX.Direct3D.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\Installer\MSIB68.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5effa6.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\assembly\tmp\ZJ7UBF2L\__AssemblyInfo__.ini C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2906.0\Microsoft.DirectX.Direct3DX.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3D.xml C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File created C:\Windows\Installer\SourceHash{0C3457A0-3DCE-4A33-BEF0-9B528C557771} C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e5effbc.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2908.0\Microsoft.DirectX.Direct3DX.xml C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File created C:\Windows\Installer\e5eff93.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\assembly\tmp\3MZSQYLG\Microsoft.DirectX.Direct3DX.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectInput.xml C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\Installer\MSIAAB.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\assembly\tmp\ZJ7UBF2L\Microsoft.DirectX.Direct3DX.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\assembly\tmp\EPP8DOA9\Microsoft.DirectX.DirectSound.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2905.0\Microsoft.DirectX.Direct3DX.xml C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
File opened for modification C:\Windows\Installer\e5eff6c.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\assembly\Desktop.ini C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A

Subvert Trust Controls: Mark-of-the-Web Bypass

defense_evasion
Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\SteamSetup.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Access Token Manipulation: Create Process with Token

defense_evasion privilege_escalation
Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Common Files\Steam\steamservice.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\Temp\{24ADC5C1-7ED8-4DF1-B78D-39E91BF9C857}\.cr\VC_redist.x86.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\Temp\{D1005605-C15E-4AB9-9912-DF991E244651}\.cr\VC_redist.x64.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\GameOverlayUI.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\GameOverlayUI.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\bin\gldriverquery.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\Temp\{DE5C1821-5422-4D1A-B84F-F4FF2B3DDF78}\.be\VC_redist.x64.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\Steam.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\bin\vulkandriverquery.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\Temp\{0E1B9534-C116-4E8B-9ED7-486319B09FB7}\.be\VC_redist.x86.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steamerrorreporter.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Common Files\Steam\steamservice.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2022\VC_redist.x86.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steamapps\common\BadNorth\BadNorth.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\SteamSetup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2022\VC_redist.x64.exe N/A

System Network Configuration Discovery: Internet Connection Discovery

discovery
Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Steam\steamapps\common\FPS Chess\FPSChess\Binaries\Win64\FPSChess-Win64-Shipping.exe N/A

Checks SCSI registry key(s)

Description Indicator Process Target
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 C:\Windows\system32\vssvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters C:\Windows\system32\vssvc.exe N/A
Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters C:\Windows\system32\vssvc.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr C:\Windows\system32\vssvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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 C:\Windows\system32\vssvc.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steam.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\GameOverlayUI.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\GameOverlayUI.exe N/A
Key opened \REGISTRY\USER\S-1-5-21-2410826464-2353372766-2364966905-1000\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steamapps\common\BadNorth\BadNorth.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\GameOverlayUI.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steam.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steamapps\common\FPS Chess\FPSChess\Binaries\Win64\FPSChess-Win64-Shipping.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\steamapps\common\FPS Chess\FPSChess\Binaries\Win64\FPSChess-Win64-Shipping.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steamapps\common\BadNorth\BadNorth.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\steamapps\common\BadNorth\BadNorth.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steam.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\GameOverlayUI.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files (x86)\Steam\steamapps\common\BadNorth\BadNorth.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2b C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2e C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\26\52C64B7E C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\29 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2c C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\2C C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\2D C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28 C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\29 C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\2A C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\2B C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\26 C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27 C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\28 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2d C:\Windows\system32\msiexec.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell\Open C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2410826464-2353372766-2364966905-1000_Classes\steamlink C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2410826464-2353372766-2364966905-1000_Classes\steamlink\URL Protocol C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\60DB5E5629367203C8625813703DFCA1 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F84DEC95EFBEC084A883CF70C9B2CEF0\SourceList\Net C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.30,bundle\Dependents C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{e21a7345-eb21-468e-be50-804db97cf708}\ = "XAudio2" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{bcc782bc-6492-4c22-8c35-f5d72fe73c6e}\ = "XACT Engine" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{5a508685-a254-4fba-9b82-9a24b00306af}\ = "XAudio2" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{f5ca7b34-8055-42c0-b836-216129eb7e30}\ = "AudioVolumeMeter" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4c9b6dde-6809-46e6-a278-9b6a97588670}\InProcServer32\ = "C:\\Windows\\SysWow64\\XAudio2_5.dll" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{248d8a3b-6256-44d3-a018-2ac96c459f47}\ = "XACT Engine" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{cecec95a-d894-491a-bee3-5e106fb59f2d}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_6.dll" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6a93130e-1d53-41d1-a9cf-e758800bb179}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\899C6AE5CA5D9DE4983CF9521BC7DCD3\Assignment = "1" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\899C6AE5CA5D9DE4983CF9521BC7DCD3\SourceList\Media C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3b80ee2a-b0f5-4780-9e30-90cb39685b03} C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{fac23f48-31f5-45a8-b49b-5225d61401aa}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{e180344b-ac83-4483-959e-18a5c56a5e19}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3eda9b49-2085-498b-9bb2-39a6778493de} C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\DefaultIcon\ = "steam.exe" C:\Program Files (x86)\Steam\steam.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\5040806F8AF9AAC49928419ED5A1D3CA\SourceList C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\0A7543C0ECD333A4EB0FB925C8557717\InstanceType = "0" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\0A7543C0ECD333A4EB0FB925C8557717\SourceList\Net\1 = "C:\\ProgramData\\Package Cache\\{0C3457A0-3DCE-4A33-BEF0-9B528C557771}v14.40.33810\\packages\\vcRuntimeMinimum_x86\\" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{77c56bf4-18a1-42b0-88af-5072ce814949} C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{e21a7345-eb21-468e-be50-804db97cf708}\ = "XAudio2" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{c7338b95-52b8-4542-aa79-42eb016c8c1c}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{5a508685-a254-4fba-9b82-9a24b00306af}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F84DEC95EFBEC084A883CF70C9B2CEF0\Clients = 3a0000000000 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{65d822a4-4799-42c6-9b18-d26cf66dd320} C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0977d092-2d95-4e43-8d42-9ddcc2545ed5}\ = "XACT Engine" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4c9b6dde-6809-46e6-a278-9b6a97588670}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steamlink\DefaultIcon C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steamlink\DefaultIcon C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeMinimumVSU_amd64,v14\Version = "14.40.33810" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{77c56bf4-18a1-42b0-88af-5072ce814949}\ = "XACT Engine" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{f4769300-b949-4df9-b333-00d33932e9a6}\InProcServer32 C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{b802058a-464a-42db-bc10-b650d6f2586a}\ = "XAudio2" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{f5ca7b34-8055-42c0-b836-216129eb7e30}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4c9b6dde-6809-46e6-a278-9b6a97588670}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x86,x86,14.40,bundle\Dependents\{47109d57-d746-4f8b-9618-ed6a17cc922b} C:\Windows\Temp\{0E1B9534-C116-4E8B-9ED7-486319B09FB7}\.be\VC_redist.x86.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeMinimumVSU_x86,v14\Dependents\{47109d57-d746-4f8b-9618-ed6a17cc922b} C:\Windows\Temp\{0E1B9534-C116-4E8B-9ED7-486319B09FB7}\.be\VC_redist.x86.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\A4BB3B8BD01A15F4197B6AF4AF3CE17A\AdvertiseFlags = "388" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\A4BB3B8BD01A15F4197B6AF4AF3CE17A\SourceList\Media C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{54b68bc7-3a45-416b-a8c9-19bf19ec1df5}\InProcServer32 C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{6f6ea3a9-2cf5-41cf-91c1-2170b1540063}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{c7338b95-52b8-4542-aa79-42eb016c8c1c}\ = "AudioVolumeMeter" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{cecec95a-d894-491a-bee3-5e106fb59f2d}\ = "AudioReverb" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{cac1105f-619b-4d04-831a-44e1cbf12d57}\InProcServer32\ = "C:\\Windows\\SysWow64\\XAudio2_7.dll" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\09A86F63C932FD435BC8463B1035EC53 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0aa000aa-f404-11d9-bd7a-0010dc4f8f81} C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{629cf0de-3ecc-41e7-9926-f7e43eebec51}\InProcServer32\ = "C:\\Windows\\SysWow64\\XAudio2_2.dll" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2139e6da-c341-4774-9ac3-b4e026347f64}\InProcServer32\ = "C:\\Windows\\SysWow64\\XAudio2_5.dll" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4c9b6dde-6809-46e6-a278-9b6a97588670}\ = "XAudio2" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3eda9b49-2085-498b-9bb2-39a6778493de}\ = "XAudio2" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{cecec95a-d894-491a-bee3-5e106fb59f2d}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2410826464-2353372766-2364966905-1000_Classes\steam C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\A4BB3B8BD01A15F4197B6AF4AF3CE17A\SourceList\Media\1 = ";" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3eda9b49-2085-498b-9bb2-39a6778493de} C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{cac1105f-619b-4d04-831a-44e1cbf12d57} C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\A4BB3B8BD01A15F4197B6AF4AF3CE17A\VC_Runtime_Minimum C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3b80ee2a-b0f5-4780-9e30-90cb39685b03}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{b802058a-464a-42db-bc10-b650d6f2586a}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_2.dll" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{03219e78-5bc3-44d1-b92e-f63d89cc6526}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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 C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8 C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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 C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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 C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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 C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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 C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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 C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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 C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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 C:\Program Files (x86)\Steam\steam.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 195360.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\SteamSetup.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeSecurityPrivilege N/A C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Common Files\Steam\steamservice.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2022\VC_redist.x86.exe N/A
N/A N/A C:\Windows\Temp\{24ADC5C1-7ED8-4DF1-B78D-39E91BF9C857}\.cr\VC_redist.x86.exe N/A
N/A N/A C:\Windows\Temp\{0E1B9534-C116-4E8B-9ED7-486319B09FB7}\.be\VC_redist.x86.exe N/A
N/A N/A C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe N/A
N/A N/A C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe N/A
N/A N/A C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2022\VC_redist.x64.exe N/A
N/A N/A C:\Windows\Temp\{D1005605-C15E-4AB9-9912-DF991E244651}\.cr\VC_redist.x64.exe N/A
N/A N/A C:\Windows\Temp\{DE5C1821-5422-4D1A-B84F-F4FF2B3DDF78}\.be\VC_redist.x64.exe N/A
N/A N/A C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe N/A
N/A N/A C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe N/A
N/A N/A C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4572 wrote to memory of 3320 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 3320 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 1408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 904 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 904 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 3168 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 3168 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 3168 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 3168 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 3168 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 3168 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 3168 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 3168 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 3168 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 3168 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 3168 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 3168 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 3168 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 3168 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 3168 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 3168 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 3168 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 3168 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 3168 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4572 wrote to memory of 3168 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Windows\system32\cmd.exe

cmd /c C:\Users\Admin\AppData\Local\Temp\YEAH.png

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffc890f3cb8,0x7ffc890f3cc8,0x7ffc890f3cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1960,5313363508854501234,11196375340459302373,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1952 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1960,5313363508854501234,11196375340459302373,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1960,5313363508854501234,11196375340459302373,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2524 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,5313363508854501234,11196375340459302373,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,5313363508854501234,11196375340459302373,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,5313363508854501234,11196375340459302373,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4956 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,5313363508854501234,11196375340459302373,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4616 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1960,5313363508854501234,11196375340459302373,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5520 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,5313363508854501234,11196375340459302373,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5292 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,5313363508854501234,11196375340459302373,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5176 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,5313363508854501234,11196375340459302373,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5256 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,5313363508854501234,11196375340459302373,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5804 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,5313363508854501234,11196375340459302373,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5884 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1960,5313363508854501234,11196375340459302373,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4684 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,5313363508854501234,11196375340459302373,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3492 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,5313363508854501234,11196375340459302373,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,5313363508854501234,11196375340459302373,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6104 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,5313363508854501234,11196375340459302373,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5032 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,5313363508854501234,11196375340459302373,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4712 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,5313363508854501234,11196375340459302373,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5788 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1960,5313363508854501234,11196375340459302373,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6540 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1960,5313363508854501234,11196375340459302373,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3528 /prefetch:8

C:\Users\Admin\Downloads\SteamSetup.exe

"C:\Users\Admin\Downloads\SteamSetup.exe"

C:\Program Files (x86)\Steam\bin\steamservice.exe

"C:\Program Files (x86)\Steam\bin\steamservice.exe" /Install

C:\Program Files (x86)\Steam\steam.exe

"C:\Program Files (x86)\Steam\steam.exe"

C:\Program Files (x86)\Steam\steam.exe

"C:\Program Files (x86)\Steam\steam.exe"

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" "-lang=en_US" "-cachedir=C:\Users\Admin\AppData\Local\Steam\htmlcache" "-steampid=18912" "-buildid=1730853027" "-steamid=0" "-logdir=C:\Program Files (x86)\Steam\logs" "-uimode=7" "-startcount=0" "-steamuniverse=Public" "-realm=Global" "-clientui=C:\Program Files (x86)\Steam\clientui" "-steampath=C:\Program Files (x86)\Steam\steam.exe" "-launcher=0" --valve-enable-site-isolation --enable-smooth-scrolling --enable-direct-write "--log-file=C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-quick-menu "--enable-features=PlatformHEVCDecoderSupport" "--disable-features=SpareRendererForSitePerProcess,DcheckIsFatal,ValveFFmpegAllowLowDelayHEVC"

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=crashpad-handler /prefetch:4 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files (x86)\Steam\dumps" "--metrics-dir=C:\Users\Admin\AppData\Local\CEF\User Data" --url=https://crash.steampowered.com/submit --annotation=platform=win64 --annotation=product=cefwebhelper --annotation=version=1730853027 --initial-client-data=0x298,0x29c,0x2a0,0x294,0x2a4,0x7ffc83b7af00,0x7ffc83b7af0c,0x7ffc83b7af18

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1556,i,11930869775373221062,4108559487754660767,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=1560 --mojo-platform-channel-handle=1548 /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --field-trial-handle=2168,i,11930869775373221062,4108559487754660767,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=2172 --mojo-platform-channel-handle=2164 /prefetch:11

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004CC 0x00000000000004D0

C:\Program Files (x86)\Steam\bin\gldriverquery64.exe

.\bin\gldriverquery64.exe

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --field-trial-handle=2740,i,11930869775373221062,4108559487754660767,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=2748 --mojo-platform-channel-handle=2724 /prefetch:13

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3080,i,11930869775373221062,4108559487754660767,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3084 --mojo-platform-channel-handle=3076 /prefetch:1

C:\Program Files (x86)\Steam\bin\gldriverquery.exe

.\bin\gldriverquery.exe

C:\Program Files (x86)\Steam\bin\vulkandriverquery64.exe

.\bin\vulkandriverquery64.exe

C:\Program Files (x86)\Steam\bin\vulkandriverquery.exe

.\bin\vulkandriverquery.exe

C:\Program Files (x86)\Steam\steamerrorreporter.exe

C:\Program Files (x86)\Steam\steam

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --field-trial-handle=1972,i,11930869775373221062,4108559487754660767,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=1968 --mojo-platform-channel-handle=2084 /prefetch:14

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=3804,i,11930869775373221062,4108559487754660767,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3796 --mojo-platform-channel-handle=3752 /prefetch:10

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=3496,i,11930869775373221062,4108559487754660767,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3560 --mojo-platform-channel-handle=3812 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=3972,i,11930869775373221062,4108559487754660767,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3976 --mojo-platform-channel-handle=3968 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4372,i,11930869775373221062,4108559487754660767,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4248 --mojo-platform-channel-handle=3784 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --field-trial-handle=4492,i,11930869775373221062,4108559487754660767,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4496 --mojo-platform-channel-handle=4424 /prefetch:12

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=3800,i,11930869775373221062,4108559487754660767,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3988 --mojo-platform-channel-handle=3992 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=4612,i,11930869775373221062,4108559487754660767,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4616 --mojo-platform-channel-handle=3960 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=3768,i,11930869775373221062,4108559487754660767,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4628 --mojo-platform-channel-handle=4436 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=4056,i,11930869775373221062,4108559487754660767,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4316 --mojo-platform-channel-handle=4856 /prefetch:1

C:\Program Files (x86)\Common Files\Steam\steamservice.exe

"C:\Program Files (x86)\Common Files\Steam\steamservice.exe" /installscript "C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\runasadmin.vdf" 2021910

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2022\Microsoft Visual C++ 2022 x86.cmd" "

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2022\VC_redist.x86.exe

"C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2022\\VC_redist.x86.exe" /q /norestart

C:\Windows\Temp\{24ADC5C1-7ED8-4DF1-B78D-39E91BF9C857}\.cr\VC_redist.x86.exe

"C:\Windows\Temp\{24ADC5C1-7ED8-4DF1-B78D-39E91BF9C857}\.cr\VC_redist.x86.exe" -burn.clean.room="C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2022\VC_redist.x86.exe" -burn.filehandle.attached=608 -burn.filehandle.self=616 /q /norestart

C:\Windows\Temp\{0E1B9534-C116-4E8B-9ED7-486319B09FB7}\.be\VC_redist.x86.exe

"C:\Windows\Temp\{0E1B9534-C116-4E8B-9ED7-486319B09FB7}\.be\VC_redist.x86.exe" -q -burn.elevated BurnPipe.{B56FB080-AFB4-4046-8721-5B9B7D08CA3F} {17338ED5-021D-4C12-9ACA-8BBDE64F7453} 13012

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\srtasks.exe

C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe

"C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={47109d57-d746-4f8b-9618-ed6a17cc922b} -burn.filehandle.self=996 -burn.embedded BurnPipe.{448C6F5A-C711-41B8-8F89-044B42CE4491} {7A14828D-5CC6-495B-B07E-D10D963046D6} 13892

C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe

"C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe" -burn.clean.room="C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe" -burn.filehandle.attached=572 -burn.filehandle.self=588 -uninstall -quiet -burn.related.upgrade -burn.ancestors={47109d57-d746-4f8b-9618-ed6a17cc922b} -burn.filehandle.self=996 -burn.embedded BurnPipe.{448C6F5A-C711-41B8-8F89-044B42CE4491} {7A14828D-5CC6-495B-B07E-D10D963046D6} 13892

C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe

"C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\VC_redist.x86.exe" -q -burn.elevated BurnPipe.{0FEEACF6-6155-4F92-BF18-1C25FB4B25ED} {B7D584DF-44CC-4A7F-B04F-7C7BCDCE38E7} 1556

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2022\Microsoft Visual C++ 2022 x64.cmd" "

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2022\VC_redist.x64.exe

"C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2022\\VC_redist.x64.exe" /q /norestart

C:\Windows\Temp\{D1005605-C15E-4AB9-9912-DF991E244651}\.cr\VC_redist.x64.exe

"C:\Windows\Temp\{D1005605-C15E-4AB9-9912-DF991E244651}\.cr\VC_redist.x64.exe" -burn.clean.room="C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2022\VC_redist.x64.exe" -burn.filehandle.attached=604 -burn.filehandle.self=612 /q /norestart

C:\Windows\Temp\{DE5C1821-5422-4D1A-B84F-F4FF2B3DDF78}\.be\VC_redist.x64.exe

"C:\Windows\Temp\{DE5C1821-5422-4D1A-B84F-F4FF2B3DDF78}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{1738C5E6-E2DE-4785-AA33-4843EA5FC98B} {C551669F-67A1-48CE-98E8-9A714FEDE3EE} 6140

C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe

"C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={5af95fd8-a22e-458f-acee-c61bd787178e} -burn.filehandle.self=1012 -burn.embedded BurnPipe.{7C35A8ED-33E8-4741-9B9C-253511E4447B} {375B0C35-A4FC-48AA-AE51-B86593542AEA} 1184

C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe

"C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.filehandle.attached=572 -burn.filehandle.self=588 -uninstall -quiet -burn.related.upgrade -burn.ancestors={5af95fd8-a22e-458f-acee-c61bd787178e} -burn.filehandle.self=1012 -burn.embedded BurnPipe.{7C35A8ED-33E8-4741-9B9C-253511E4447B} {375B0C35-A4FC-48AA-AE51-B86593542AEA} 1184

C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe

"C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{4EDC7B31-116A-4A80-ADFB-E4833A6EB754} {2AD4F751-AFF3-438E-813E-9770EB132514} 18184

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe

"C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe" /silent

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx9_24_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx9_25_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx9_26_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx9_27_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx9_28_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx9_29_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XACT_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_0.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx9_30_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XACT2_1_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_1.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe xinput1_1_x64.inf, Install_Driver

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XACT2_2_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_2.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe xinput1_2_x64.inf, Install_Driver

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XACT2_3_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_3.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx9_31_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XACT2_4_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_4.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx9_32_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx10_00_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XACT2_5_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_5.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XACT2_6_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_6.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx9_33_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx10_33_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XACT2_7_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_7.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe xinput1_3_x64.inf, Install_Driver

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx9_34_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx10_34_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XACT2_8_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_8.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx9_35_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx10_35_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XACT2_9_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_9.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx9_36_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx10_36_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe X3DAudio1_2_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XACT2_10_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_10.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe D3DX9_37_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx10_37_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe X3DAudio1_3_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XACT3_0_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_0.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XAudio2_0_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_0.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe D3DX9_38_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx10_38_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe X3DAudio1_4_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XACT3_1_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_1.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XAudio2_1_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_1.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe D3DX9_39_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx10_39_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XACT3_2_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_2.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XAudio2_2_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_2.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe X3DAudio1_5_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XACT3_3_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_3.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XAudio2_3_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_3.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe D3DX9_40_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx10_40_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe X3DAudio1_6_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XACT3_4_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_4.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XAudio2_4_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_4.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe D3DX9_41_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx10_41_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe D3DX9_42_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx10_42_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx11_42_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dcsx_42_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe D3DCompiler_42_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XACT3_5_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_5.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XAudio2_5_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_5.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe X3DAudio1_7_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XACT3_6_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_6.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XAudio2_6_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_6.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe D3DX9_43_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx10_43_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dx11_43_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe d3dcsx_43_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe D3DCompiler_43_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XACT3_7_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_7.dll

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe XAudio2_7_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_7.dll

C:\Program Files (x86)\Steam\steamapps\common\FPS Chess\FPSChess.exe

"C:\Program Files (x86)\Steam\steamapps\common\FPS Chess\FPSChess.exe"

C:\Program Files (x86)\Steam\bin\x64launcher.exe

"C:\Program Files (x86)\Steam\bin\x64launcher.exe" -hproc 10c4 -hthread 12b4 -baseoverlayname C:\Program Files (x86)\Steam\gameoverlayrenderer64.dll

C:\Program Files (x86)\Steam\steamapps\common\FPS Chess\FPSChess\Binaries\Win64\FPSChess-Win64-Shipping.exe

"C:\Program Files (x86)\Steam\steamapps\common\FPS Chess\FPSChess\Binaries\Win64\FPSChess-Win64-Shipping.exe" FPSChess

C:\Program Files (x86)\Steam\GameOverlayUI.exe

"C:\Program Files (x86)\Steam\GameOverlayUI.exe" -pid 5196 -steampid 18912 -manuallyclearframes 0 -gameid 2021910

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=1924,i,11930869775373221062,4108559487754660767,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4412 --mojo-platform-channel-handle=4396 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=4820,i,11930869775373221062,4108559487754660767,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4792 --mojo-platform-channel-handle=4340 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=3476,i,11930869775373221062,4108559487754660767,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3788 --mojo-platform-channel-handle=3772 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=5020,i,11930869775373221062,4108559487754660767,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=5024 --mojo-platform-channel-handle=4940 /prefetch:1

C:\Program Files (x86)\Steam\Steam.exe

"C:\Program Files (x86)\Steam\Steam.exe"

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=1916,i,11930869775373221062,4108559487754660767,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4644 --mojo-platform-channel-handle=4700 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=5032,i,11930869775373221062,4108559487754660767,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=5048 --mojo-platform-channel-handle=4824 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=5044,i,11930869775373221062,4108559487754660767,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4996 --mojo-platform-channel-handle=4476 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=3088,i,11930869775373221062,4108559487754660767,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=5100 --mojo-platform-channel-handle=4456 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004CC 0x00000000000004D0

C:\Program Files (x86)\Steam\steamapps\common\BadNorth\BadNorth.exe

"C:\Program Files (x86)\Steam\steamapps\common\BadNorth\BadNorth.exe"

C:\Program Files (x86)\Steam\steamapps\common\BadNorth\UnityCrashHandler32.exe

"C:\Program Files (x86)\Steam\steamapps\common\BadNorth\UnityCrashHandler32.exe" --attach 10368 17567744

C:\Program Files (x86)\Steam\GameOverlayUI.exe

"C:\Program Files (x86)\Steam\GameOverlayUI.exe" -pid 10368 -steampid 18912 -manuallyclearframes 0 -gameid 688420

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

Network

Country Destination Domain Proto
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
GB 92.123.128.186:443 www.bing.com tcp
GB 92.123.128.186:443 www.bing.com tcp
N/A 224.0.0.251:5353 udp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.171:443 r.bing.com tcp
GB 92.123.128.161:443 th.bing.com tcp
GB 92.123.128.161:443 th.bing.com tcp
IE 40.126.31.67:443 login.microsoftonline.com tcp
US 13.107.5.80:443 services.bingapis.com tcp
US 23.192.21.216:443 store.steampowered.com tcp
US 23.192.21.216:443 store.steampowered.com tcp
US 172.64.145.151:443 cdn.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 cdn.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 cdn.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 cdn.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 cdn.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 cdn.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 cdn.cloudflare.steamstatic.com tcp
US 23.192.21.216:443 store.steampowered.com tcp
US 23.192.21.216:443 store.steampowered.com tcp
GB 104.82.234.109:443 api.steampowered.com tcp
GB 104.82.234.109:443 api.steampowered.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
GB 2.23.210.75:80 r11.o.lencr.org tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
GB 2.19.117.24:80 test.steampowered.com tcp
N/A 127.0.0.1:62782 tcp
N/A 127.0.0.1:62761 tcp
GB 104.82.234.109:443 api.steampowered.com tcp
US 162.254.192.98:27018 cmp1-iad1.steamserver.net tcp
US 8.8.8.8:53 cmp2-iad1.steamserver.net udp
US 162.254.192.98:27020 cmp1-iad1.steamserver.net tcp
US 162.254.192.99:443 cmp2-iad1.steamserver.net tcp
US 8.8.8.8:53 cmp2-atl3.steamserver.net udp
US 162.254.199.184:443 cmp2-atl3.steamserver.net tcp
US 8.8.8.8:53 e5.o.lencr.org udp
GB 2.23.210.75:80 e5.o.lencr.org tcp
US 8.8.8.8:53 e6.o.lencr.org udp
GB 2.23.210.82:80 e6.o.lencr.org tcp
US 162.254.199.184:27018 cmp2-atl3.steamserver.net tcp
US 8.8.8.8:53 cmp1-atl3.steamserver.net udp
US 162.254.199.165:27018 cmp1-atl3.steamserver.net tcp
US 8.8.8.8:53 cmp2-ord1.steamserver.net udp
US 162.254.193.75:443 cmp2-ord1.steamserver.net tcp
US 162.254.193.75:27018 cmp2-ord1.steamserver.net tcp
US 8.8.8.8:53 98.192.254.162.in-addr.arpa udp
US 8.8.8.8:53 99.192.254.162.in-addr.arpa udp
US 8.8.8.8:53 184.199.254.162.in-addr.arpa udp
US 8.8.8.8:53 82.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 cmp1-ord1.steamserver.net udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 162.254.193.103:27018 cmp1-ord1.steamserver.net tcp
US 8.8.8.8:53 cmp1-sea1.steamserver.net udp
US 205.196.6.132:443 cmp1-sea1.steamserver.net tcp
US 8.8.8.8:53 cmp1-lax1.steamserver.net udp
US 162.254.195.69:443 cmp1-lax1.steamserver.net tcp
US 8.8.8.8:53 cmp2-dfw1.steamserver.net udp
US 155.133.253.52:27018 cmp2-dfw1.steamserver.net tcp
US 8.8.8.8:53 165.199.254.162.in-addr.arpa udp
US 8.8.8.8:53 75.193.254.162.in-addr.arpa udp
US 8.8.8.8:53 4.4.8.8.in-addr.arpa udp
US 8.8.8.8:53 103.193.254.162.in-addr.arpa udp
US 8.8.8.8:53 132.6.196.205.in-addr.arpa udp
US 8.8.8.8:53 69.195.254.162.in-addr.arpa udp
US 8.8.8.8:53 52.253.133.155.in-addr.arpa udp
US 8.8.8.8:53 p2p-ord1.discovery.steamserver.net udp
US 8.8.4.4:443 dns.google udp
GB 172.217.169.35:443 tcp
US 8.8.8.8:53 35.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 123.35.104.34.in-addr.arpa udp
US 8.8.8.8:53 p2p-ord1.discovery.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
GB 104.82.234.109:443 api.steampowered.com tcp
US 8.8.8.8:53 ipv6check-udp.steamserver.net udp
US 8.8.8.8:53 crash.steampowered.com udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 208.64.203.173:443 crash.steampowered.com tcp
US 8.8.8.8:53 ext1-sto1.steamserver.net udp
US 8.8.8.8:53 r10.o.lencr.org udp
SE 162.254.198.44:443 ext1-sto1.steamserver.net tcp
US 8.8.8.8:53 ext2-sto1.steamserver.net udp
GB 2.23.210.75:80 r10.o.lencr.org tcp
SE 162.254.198.104:27021 ext2-sto1.steamserver.net tcp
US 8.8.8.8:53 ext3-sto1.steamserver.net udp
SE 162.254.198.46:27030 ext3-sto1.steamserver.net tcp
US 8.8.8.8:53 cmp2-sto2.steamserver.net udp
SE 155.133.252.69:27019 cmp2-sto2.steamserver.net tcp
US 8.8.8.8:53 e5.o.lencr.org udp
GB 2.23.210.75:80 e5.o.lencr.org tcp
US 8.8.8.8:53 173.203.64.208.in-addr.arpa udp
US 8.8.8.8:53 44.198.254.162.in-addr.arpa udp
US 8.8.8.8:53 104.198.254.162.in-addr.arpa udp
US 8.8.8.8:53 46.198.254.162.in-addr.arpa udp
US 8.8.8.8:53 69.252.133.155.in-addr.arpa udp
SE 155.133.252.68:27018 cmp1-sto2.steamserver.net tcp
SE 155.133.252.69:443 cmp2-sto2.steamserver.net tcp
NL 155.133.248.42:443 cmp1-ams1.steamserver.net tcp
US 8.8.8.8:53 cmp1-fra1.steamserver.net udp
DE 155.133.250.4:27019 cmp1-fra1.steamserver.net tcp
GB 2.23.210.75:80 e6.o.lencr.org tcp
US 8.8.8.8:53 cmp2-fra2.steamserver.net udp
US 155.133.229.20:27019 cmp2-fra2.steamserver.net tcp
US 8.8.8.8:53 4.250.133.155.in-addr.arpa udp
US 8.8.8.8:53 42.248.133.155.in-addr.arpa udp
US 8.8.8.8:53 20.229.133.155.in-addr.arpa udp
US 8.8.8.8:53 p2p-fra1.discovery.steamserver.net udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
GB 172.217.169.35:443 udp
US 8.8.8.8:53 client-update.steamstatic.com udp
US 151.101.131.52:443 client-update.steamstatic.com tcp
US 8.8.8.8:53 r10.o.lencr.org udp
GB 2.23.210.75:80 r10.o.lencr.org tcp
US 8.8.8.8:53 p2p-fra1.discovery.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 ipv6check-udp.steamserver.net udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
GB 104.82.234.109:443 api.steampowered.com tcp
US 162.254.199.165:443 cmp1-atl3.steamserver.net tcp
US 162.254.199.165:27018 cmp1-atl3.steamserver.net tcp
US 162.254.199.184:27018 cmp2-atl3.steamserver.net tcp
US 162.254.192.98:27020 cmp1-iad1.steamserver.net tcp
US 162.254.192.98:27019 cmp1-iad1.steamserver.net tcp
US 8.8.8.8:53 cmp1-dfw1.steamserver.net udp
US 162.254.192.99:443 cmp2-iad1.steamserver.net tcp
US 155.133.253.36:443 cmp1-dfw1.steamserver.net tcp
US 155.133.253.52:27018 cmp2-dfw1.steamserver.net tcp
US 8.8.8.8:53 e5.o.lencr.org udp
GB 2.23.210.82:80 e5.o.lencr.org tcp
US 155.133.253.36:27018 cmp1-dfw1.steamserver.net tcp
US 8.8.8.8:53 cmp1-ord1.steamserver.net udp
US 162.254.193.103:27018 cmp1-ord1.steamserver.net tcp
DE 155.133.250.4:27023 cmp1-fra1.steamserver.net tcp
US 162.254.193.75:443 cmp2-ord1.steamserver.net tcp
US 8.8.8.8:53 36.253.133.155.in-addr.arpa udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
N/A 10.127.255.255:27036 udp
US 8.8.8.8:53 clientconfig.akamai.steamstatic.com udp
GB 2.19.117.41:80 clientconfig.akamai.steamstatic.com tcp
US 8.8.8.8:53 41.117.19.2.in-addr.arpa udp
GB 2.19.117.41:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.117.41:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.117.41:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.117.41:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.117.41:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.117.41:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.117.41:80 clientconfig.akamai.steamstatic.com tcp
US 8.8.8.8:53 shared.steamstatic.com udp
US 8.8.8.8:53 steamstore-a.akamaihd.net udp
US 151.101.3.52:443 shared.steamstatic.com tcp
GB 2.19.117.22:443 steamstore-a.akamaihd.net tcp
US 151.101.3.52:443 shared.steamstatic.com tcp
US 151.101.3.52:443 shared.steamstatic.com tcp
GB 2.19.117.22:443 steamstore-a.akamaihd.net tcp
US 8.8.8.8:53 cdn.steamstatic.com udp
GB 2.19.117.22:443 steamstore-a.akamaihd.net tcp
US 8.8.8.8:53 52.3.101.151.in-addr.arpa udp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 r11.o.lencr.org udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
GB 2.23.210.75:80 r11.o.lencr.org tcp
US 8.8.8.8:443 dns.google udp
US 23.192.21.216:443 store.steampowered.com tcp
US 8.8.8.8:53 steamcommunity.com udp
GB 104.82.234.109:443 steamcommunity.com tcp
GB 104.82.234.109:443 steamcommunity.com tcp
US 8.8.8.8:53 22.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 52.67.101.151.in-addr.arpa udp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
US 151.101.67.52:80 shared.steamstatic.com tcp
US 151.101.67.52:80 shared.steamstatic.com tcp
US 151.101.67.52:80 shared.steamstatic.com tcp
GB 2.19.117.23:443 tcp
US 23.192.21.216:443 store.steampowered.com tcp
GB 104.82.234.109:443 steamcommunity.com tcp
US 151.101.67.52:443 shared.steamstatic.com tcp
US 8.8.8.8:53 23.117.19.2.in-addr.arpa udp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
GB 2.19.117.23:443 tcp
GB 104.82.234.109:443 steamcommunity.com tcp
N/A 127.0.0.1:27060 tcp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
US 8.8.8.8:443 dns.google udp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 cdn.steamstatic.com udp
US 8.8.8.8:53 shared.steamstatic.com udp
US 8.8.8.8:53 steamstore-a.akamaihd.net udp
US 8.8.8.8:53 cdn.steamstatic.com udp
GB 2.19.117.27:443 steamstore-a.akamaihd.net tcp
US 151.101.195.52:443 cdn.steamstatic.com tcp
GB 2.19.117.27:443 steamstore-a.akamaihd.net tcp
US 151.101.195.52:443 cdn.steamstatic.com tcp
GB 2.19.117.27:443 steamstore-a.akamaihd.net tcp
US 151.101.195.52:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 27.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 52.195.101.151.in-addr.arpa udp
US 8.8.8.8:443 dns.google udp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
GB 104.82.234.109:443 api.steampowered.com tcp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 steamcloud-us-west1.storage.googleapis.com udp
GB 216.58.212.219:443 steamcloud-us-west1.storage.googleapis.com tcp
US 8.8.8.8:53 c.pki.goog udp
GB 142.250.187.227:80 c.pki.goog tcp
US 8.8.8.8:53 o.pki.goog udp
GB 142.250.187.227:80 o.pki.goog tcp
US 8.8.8.8:53 219.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 227.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 steamcloud-dub.s3.dualstack.eu-west-1.amazonaws.com udp
IE 52.218.40.40:443 steamcloud-dub.s3.dualstack.eu-west-1.amazonaws.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 ocsp.r2m01.amazontrust.com udp
US 8.8.8.8:53 40.40.218.52.in-addr.arpa udp
US 8.8.8.8:53 90.193.84.52.in-addr.arpa udp
US 8.8.8.8:53 51.201.222.52.in-addr.arpa udp
US 8.8.8.8:53 133.200.245.18.in-addr.arpa udp
FR 3.165.130.26:80 ocsp.r2m01.amazontrust.com tcp
US 8.8.8.8:53 26.130.165.3.in-addr.arpa udp
US 23.192.21.216:443 store.steampowered.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 lancache.steamcontent.com udp
US 8.8.8.8:53 cache13-lhr1.steamcontent.com udp
GB 162.254.196.23:443 cache13-lhr1.steamcontent.com tcp
US 8.8.8.8:53 e5.o.lencr.org udp
GB 2.23.210.82:80 e5.o.lencr.org tcp
US 8.8.8.8:53 cache11-lhr1.steamcontent.com udp
GB 162.254.196.18:443 cache11-lhr1.steamcontent.com tcp
US 8.8.8.8:53 23.196.254.162.in-addr.arpa udp
US 8.8.8.8:53 18.196.254.162.in-addr.arpa udp
US 8.8.8.8:53 cache16-lhr1.steamcontent.com udp
GB 162.254.196.26:443 cache16-lhr1.steamcontent.com tcp
US 8.8.8.8:53 e6.o.lencr.org udp
GB 2.23.210.75:80 e6.o.lencr.org tcp
US 8.8.8.8:53 26.196.254.162.in-addr.arpa udp
US 8.8.8.8:53 cache1-lhr1.steamcontent.com udp
GB 162.254.196.8:443 cache1-lhr1.steamcontent.com tcp
GB 162.254.196.26:443 cache16-lhr1.steamcontent.com tcp
GB 162.254.196.23:443 cache13-lhr1.steamcontent.com tcp
US 8.8.8.8:53 8.196.254.162.in-addr.arpa udp
GB 162.254.196.26:443 cache16-lhr1.steamcontent.com tcp
GB 162.254.196.23:443 cache13-lhr1.steamcontent.com tcp
GB 162.254.196.18:443 cache11-lhr1.steamcontent.com tcp
US 8.8.8.8:53 cache5-lhr1.steamcontent.com udp
GB 162.254.196.5:443 cache5-lhr1.steamcontent.com tcp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 5.196.254.162.in-addr.arpa udp
US 8.8.8.8:53 steamcloud-frf.s3.dualstack.eu-central-1.amazonaws.com udp
DE 3.5.138.150:443 steamcloud-frf.s3.dualstack.eu-central-1.amazonaws.com tcp
US 8.8.8.8:53 150.138.5.3.in-addr.arpa udp
US 8.8.8.8:443 dns.google udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:443 dns.google udp
US 208.64.203.173:443 crash.steampowered.com tcp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 steamcommunity.com udp
GB 104.124.170.33:443 steamcommunity.com tcp
GB 104.124.170.33:443 steamcommunity.com tcp
US 8.8.8.8:53 33.170.124.104.in-addr.arpa udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 steamcommunity-a.akamaihd.net udp
US 8.8.8.8:53 steamcommunity-a.akamaihd.net udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 store.steampowered.com udp
US 8.8.8.8:53 store.steampowered.com udp
US 8.8.8.8:53 steamcommunity.com udp
US 8.8.8.8:443 dns.google udp
GB 2.19.117.4:443 steamcommunity-a.akamaihd.net tcp
US 23.192.21.216:443 store.steampowered.com tcp
US 23.192.21.216:443 store.steampowered.com tcp
US 8.8.8.8:53 4.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
GB 104.124.170.33:443 api.steampowered.com tcp
US 8.8.8.8:443 dns.google udp
US 8.8.8.8:53 steamcommunity.com udp
US 8.8.8.8:53 steamcommunity.com udp
SE 155.133.252.38:27028 udp
SG 103.10.124.119:27044 udp
AE 185.25.183.163:27055 udp
BR 155.133.227.52:27052 udp
ZA 155.133.238.178:27050 udp
US 162.254.193.73:27056 udp
HK 103.28.54.166:27024 udp
AU 103.10.125.146:27024 udp
DE 155.133.226.72:27046 udp
ES 155.133.246.40:27017 udp
NL 155.133.248.37:27043 udp
GB 162.254.196.82:27060 udp
FR 185.25.182.51:27042 udp
AT 146.66.155.68:27052 udp
PL 155.133.230.101:27053 udp
FI 37.27.120.223:27018 udp
SE 162.254.198.50:27040 udp
US 162.254.192.70:27043 udp
US 147.75.193.63:27018 udp
US 162.254.199.173:27018 udp
US 155.133.253.39:27059 udp
US 173.237.26.20:27056 udp
US 162.254.195.70:27043 udp
US 205.196.6.211:27049 udp
IN 155.133.224.21:27048 udp
US 8.8.8.8:53 38.252.133.155.in-addr.arpa udp
US 8.8.8.8:53 119.124.10.103.in-addr.arpa udp
US 8.8.8.8:53 163.183.25.185.in-addr.arpa udp
US 8.8.8.8:53 52.227.133.155.in-addr.arpa udp
US 8.8.8.8:53 178.238.133.155.in-addr.arpa udp
US 8.8.8.8:53 166.54.28.103.in-addr.arpa udp
US 8.8.8.8:53 146.125.10.103.in-addr.arpa udp
US 8.8.8.8:53 72.226.133.155.in-addr.arpa udp
US 8.8.8.8:53 40.246.133.155.in-addr.arpa udp
US 8.8.8.8:53 37.248.133.155.in-addr.arpa udp
US 8.8.8.8:53 82.196.254.162.in-addr.arpa udp
US 8.8.8.8:53 51.182.25.185.in-addr.arpa udp
US 8.8.8.8:53 68.155.66.146.in-addr.arpa udp
US 8.8.8.8:53 101.230.133.155.in-addr.arpa udp
US 8.8.8.8:53 223.120.27.37.in-addr.arpa udp
US 8.8.8.8:53 50.198.254.162.in-addr.arpa udp
US 8.8.8.8:53 63.193.75.147.in-addr.arpa udp
US 8.8.8.8:53 70.192.254.162.in-addr.arpa udp
FI 37.27.120.224:27032 udp
US 147.75.193.65:27032 udp
IN 155.133.225.19:27015 udp
PE 155.133.244.52:27059 udp
GB 104.124.170.33:443 steamcommunity.com tcp
US 147.75.193.63:27047 udp
US 147.75.193.63:27016 udp
GB 2.19.117.4:443 steamcommunity-a.akamaihd.net tcp
DE 155.133.226.78:3478 p2p-fra2.discovery.steamserver.net udp
N/A 192.168.1.92:55940 udp
DE 155.133.226.78:4380 p2p-fra2.discovery.steamserver.net udp
IT 176.206.77.45:55941 udp
N/A 192.168.1.92:55940 udp
IT 176.206.77.45:55941 udp
US 23.192.21.216:443 store.steampowered.com tcp
N/A 192.168.1.92:53737 tcp
DE 155.133.226.78:4380 p2p-fra2.discovery.steamserver.net udp
IT 176.206.77.45:55940 udp
DE 155.133.226.78:3478 p2p-fra2.discovery.steamserver.net udp
N/A 192.168.1.150:55156 udp
IT 176.206.77.45:55940 udp
SK 77.48.130.125:55157 udp
DE 155.133.226.78:4379 p2p-fra2.discovery.steamserver.net udp
N/A 192.168.1.150:55156 udp
SK 77.48.130.125:55157 udp
DE 155.133.226.78:4380 p2p-fra2.discovery.steamserver.net udp
DE 155.133.226.78:4380 p2p-fra2.discovery.steamserver.net udp
N/A 192.168.1.150:54061 tcp
DE 162.254.197.38:4380 p2p-fra1.discovery.steamserver.net udp
DE 162.254.197.38:4379 p2p-fra1.discovery.steamserver.net udp
DE 162.254.197.38:4380 p2p-fra1.discovery.steamserver.net udp
DE 162.254.197.38:4379 p2p-fra1.discovery.steamserver.net udp
N/A 192.168.1.150:50176 udp
SK 77.48.130.125:50176 udp
N/A 192.168.1.150:50176 udp
SK 77.48.130.125:50177 udp
SK 77.48.130.125:50176 udp
SK 77.48.130.125:50177 udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
GB 104.82.234.109:443 api.steampowered.com tcp
US 172.64.145.151:443 cdn.cloudflare.steamstatic.com tcp
DE 155.133.226.76:3478 p2p-fra2.discovery.steamserver.net udp
N/A 192.168.1.92:55943 udp
IT 176.206.77.45:55944 udp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
N/A 192.168.1.92:55943 udp
DE 155.133.226.76:4380 p2p-fra2.discovery.steamserver.net udp
DE 155.133.226.76:3478 p2p-fra2.discovery.steamserver.net udp
IT 176.206.77.45:55944 udp
N/A 192.168.1.150:50181 udp
US 8.8.8.8:53 76.226.133.155.in-addr.arpa udp
SK 77.48.130.125:50182 udp
DE 155.133.226.78:4380 p2p-fra2.discovery.steamserver.net udp
N/A 192.168.1.150:50181 udp
DE 155.133.226.78:4379 p2p-fra2.discovery.steamserver.net udp
SK 77.48.130.125:50182 udp
DE 155.133.226.76:4380 p2p-fra2.discovery.steamserver.net udp
IT 176.206.77.45:55943 udp
IT 176.206.77.45:55943 udp
N/A 192.168.1.92:53749 tcp
SK 77.48.130.125:50181 udp
SK 77.48.130.125:50181 udp
DE 162.254.197.38:4380 p2p-fra1.discovery.steamserver.net udp
GB 104.82.234.109:443 api.steampowered.com tcp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
DE 155.133.226.76:3478 p2p-fra2.discovery.steamserver.net udp
DE 155.133.226.76:4380 p2p-fra2.discovery.steamserver.net udp
N/A 192.168.1.150:50181 udp
SK 77.48.130.125:50181 udp
DE 155.133.226.76:3478 p2p-fra2.discovery.steamserver.net udp
SK 77.48.130.125:50182 udp
N/A 192.168.1.92:55943 udp
N/A 192.168.1.150:50181 udp
IT 176.206.77.45:55943 udp
SK 77.48.130.125:50181 udp
IT 176.206.77.45:55944 udp
SK 77.48.130.125:50182 udp
N/A 192.168.1.92:55943 udp
DE 155.133.226.76:4380 p2p-fra2.discovery.steamserver.net udp
DE 162.254.197.38:4380 p2p-fra1.discovery.steamserver.net udp
IT 176.206.77.45:55943 udp
DE 162.254.197.38:4379 p2p-fra1.discovery.steamserver.net udp
IT 176.206.77.45:55944 udp
DE 155.133.226.78:4380 p2p-fra2.discovery.steamserver.net udp
DE 155.133.226.78:4379 p2p-fra2.discovery.steamserver.net udp
DE 162.254.197.38:4380 p2p-fra1.discovery.steamserver.net udp
N/A 192.168.1.92:53749 tcp
DE 162.254.197.38:4379 p2p-fra1.discovery.steamserver.net udp
DE 155.133.226.78:4380 p2p-fra2.discovery.steamserver.net udp
DE 155.133.226.78:4379 p2p-fra2.discovery.steamserver.net udp
US 147.75.193.63:27026 udp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google udp
US 23.192.21.216:443 store.steampowered.com tcp
US 23.192.21.216:443 store.steampowered.com tcp
US 23.192.21.216:443 store.steampowered.com tcp
US 23.192.21.216:443 store.steampowered.com tcp
N/A 127.0.0.1:62782 tcp
N/A 127.0.0.1:62761 tcp
N/A 127.0.0.1:27060 tcp
US 8.8.4.4:443 dns.google udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google udp
GB 142.250.200.14:443 tcp
GB 74.125.105.39:443 udp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 39.105.125.74.in-addr.arpa udp
US 8.8.4.4:443 dns.google udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 151.101.195.52:443 cdn.steamstatic.com tcp
US 151.101.195.52:443 cdn.steamstatic.com tcp
US 151.101.3.52:443 cdn.steamstatic.com tcp
GB 104.82.234.109:443 api.steampowered.com tcp
GB 104.82.234.109:443 api.steampowered.com tcp
US 23.192.21.216:443 store.steampowered.com tcp
US 23.192.21.216:443 store.steampowered.com tcp
US 8.8.8.8:53 lancache.steamcontent.com udp
US 8.8.8.8:53 cdn.steamstatic.com udp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 clientconfig.akamai.steamstatic.com udp
GB 2.19.117.14:80 clientconfig.akamai.steamstatic.com tcp
US 8.8.8.8:53 14.117.19.2.in-addr.arpa udp
GB 162.254.196.26:443 cache16-lhr1.steamcontent.com tcp
GB 162.254.196.23:443 cache13-lhr1.steamcontent.com tcp
GB 162.254.196.8:443 cache1-lhr1.steamcontent.com tcp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 steamcloud-us-east.s3.dualstack.us-east-1.amazonaws.com udp
US 8.8.8.8:53 steamcloudquincy.blob.core.windows.net udp
US 8.8.8.8:53 steamcloud-us-west1.storage.googleapis.com udp
US 16.15.178.118:443 steamcloud-us-east.s3.dualstack.us-east-1.amazonaws.com tcp
US 8.8.8.8:53 steamcloud-us-east1.storage.googleapis.com udp
US 20.157.180.96:443 steamcloudquincy.blob.core.windows.net tcp
GB 172.217.169.59:443 steamcloud-us-west1.storage.googleapis.com tcp
GB 172.217.169.91:443 steamcloud-us-east1.storage.googleapis.com tcp
US 8.8.8.8:53 ocsp.r2m01.amazontrust.com udp
US 8.8.8.8:53 59.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 118.178.15.16.in-addr.arpa udp
US 8.8.8.8:53 96.180.157.20.in-addr.arpa udp
US 8.8.8.8:53 91.169.217.172.in-addr.arpa udp
FR 13.249.8.192:80 ocsp.r2m01.amazontrust.com tcp
US 8.8.8.8:53 192.8.249.13.in-addr.arpa udp
US 8.8.8.8:53 www.msftncsi.com udp
GB 2.19.117.157:80 www.msftncsi.com tcp
US 8.8.8.8:53 config.uca.cloud.unity3d.com udp
US 34.111.113.40:443 config.uca.cloud.unity3d.com tcp
US 8.8.8.8:53 157.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 40.113.111.34.in-addr.arpa udp
US 8.8.8.8:53 cdp.cloud.unity3d.com udp
US 34.107.172.168:443 cdp.cloud.unity3d.com tcp
US 8.8.8.8:53 168.172.107.34.in-addr.arpa udp
US 34.107.172.168:443 cdp.cloud.unity3d.com tcp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 34.107.172.168:443 cdp.cloud.unity3d.com tcp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 cdp.cloud.unity3d.com udp
US 34.107.172.168:443 cdp.cloud.unity3d.com tcp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 cdp.cloud.unity3d.com udp
US 34.107.172.168:443 cdp.cloud.unity3d.com tcp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 34.107.172.168:443 cdp.cloud.unity3d.com tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 1fc959921446fa3ab5813f75ca4d0235
SHA1 0aeef3ba7ba2aa1f725fca09432d384b06995e2a
SHA256 1b1e89d3b2f3da84cc8494d07cf0babc472c426ccb1c4ae13398243360c9d02c
SHA512 899d1e1b0feece25ac97527daddcaaeb069cb428532477849eba43a627502c590261f2c26fef31e4e20efd3d7eb0815336a784c4d2888e05afcf5477af872b06

\??\pipe\LOCAL\crashpad_4572_COMCIYFAXUUHXDIZ

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 e9a2c784e6d797d91d4b8612e14d51bd
SHA1 25e2b07c396ee82e4404af09424f747fc05f04c2
SHA256 18ddbb93c981d8006071f9d26924ce3357cad212cbb65f48812d4a474c197ce6
SHA512 fc35688ae3cd448ed6b2069d39ce1219612c54f5bb0dd7b707c9e6f39450fe9fb1338cf5bd0b82a45207fac2fbab1e0eae77e5c9e6488371390eab45f76a5df1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 6d2b1e645da7d5d98031e41881b2b41e
SHA1 3caa7a7d1ecc1e0e6d74b20f6d0a74d340ae118c
SHA256 b759180bd2da4b900d4ba69aa0acc2f8f6d308311fff1b522bd6b65f6baff823
SHA512 2e0be35a29dcc23d0cb77d1e44d799e223ebf841613618680ac7804340c6e558ac91e936b5a372178f3c3b25fe20777a63704d0c7d6df8f300f0a80c697a405e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 035c2f0781711a270dfa3e0054feadd2
SHA1 210062d9029e4f26c12946161f984e729ab41023
SHA256 d98ad738469636cfdffb5173cb0fdaeb4e6c900496f79f51efb7a38245406a1a
SHA512 cf3d1d81c4576f34984abaaa5d03ac8e7758457edf5f1fe7af2018316fe724db7aa8c344dc033713dac9ef1a5fe83b1318e344dea89cccf485658d24f9f8986d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e3d657f3d91d716b7e8c7a36429e291c
SHA1 aaac73bcdf2ab90596322802d09811a9c5be62c3
SHA256 51f01a9ad923167a0e081bcb829363bf1f93c0e88872aacaa5f3fd04796681fa
SHA512 473deb8d74a19315ac799274ae4b41e75da80dce4a82c96ed8de4b1f898fc0f0577490259bee1c834c060c95a2fd047600791b3828deeb8e623c9915abc7555e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 894c4da8e82690b10477e33945c1eaf8
SHA1 783d380546d4d795e970057ae87d0ba2d4fc2aed
SHA256 a759e1f27f286135942fad765c595dab877304e5d877a5506615cc23b73548b1
SHA512 d43a1f55d283a09fa9878478b80efd67a8a7019ce48e72bc7a661c6b8703f5be237084f77c0bd6c8ab4be8d33b8f19126d426a5113a9b1f950032024d3591582

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 20f76db275942aead5aa8eac39bf29a4
SHA1 fb5d3569da1a014d5d6b1fa87ea53d59dcbbad47
SHA256 b215f220bbf6e7765e1f69a73cc7828bb539df3db314d1d740e147eef245f85e
SHA512 1e0eb64334edc96a4b5e50036d35f9f0d7598d9107873e83a4451b7b8ce61a0af1cbf6bbec37e32d80d47179f909a09fab5fb6c4e5ee46e5b6ac4f7cda820567

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

MD5 45886a6a9aace3fad669a79bc3191ce5
SHA1 c24b4a569c0fee533ca9db199feea061ccda03f9
SHA256 99d8caa7d664ce601c1e90e2b94cd63c6c5ff70f3d9871223f356f89341a43a5
SHA512 2dfc402d0c3f39bac280ea49bcbf9edcf7d849c23ab97422ddc0c46d2a18250e90bc66a6a407e437defa1eff3ea745ea657fc2a21f6211525e35a560a31c59ff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

MD5 9fa060a599b0ee1912f2073ed59df3c8
SHA1 eaaeef616747d09506c6ed1d96901d2c8d1ad4e0
SHA256 7924474a8f327264982347dc932997ed49890ea4114925024ba678fba2d4e90c
SHA512 93837c0d1bf848ff603073bce6ac252f770a35fad094b294609682e11b04b463292c74c8440891e89741f28fa67a888ed6fdc1575fda99a3c2b6065ccc4e7b47

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

MD5 ccca1d507e618047398d2b7925f6ccea
SHA1 107b142dfa77a1df956f8051b1569e7767d4a2e7
SHA256 f56b99fc2b763e22df8d023fb1d9dde3afa04c52560abfbf0fda5c75649c599f
SHA512 f1d40a2ae4369811f1fc44ade60b0321d42eaa1369f17ec998010470291c60b536e5a563bc01cefa3776b6aab3214c6e2c9b50234eae4b0fc70647df3212a37a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000034

MD5 daf4bc548bc47e46ac4221c35e57b3e6
SHA1 232e6919b20457c5564cfb4d5510582a15073b27
SHA256 d2efa5f3652a92740b4f9349f4fdcfa550c0564f99c8eec357518b6ae8c9ebae
SHA512 45125729ef6cc2fe403545f096872b0470be4d932da283aa708ff9323fa0da18157b586efe7243aaa30480c0d7d2bd0606ce78644beae976ca81c350e134ff36

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000035

MD5 d285b525b70a051564f76ca71504e368
SHA1 333744cde9de37b4936c98e90f5a38b1d90af845
SHA256 bce39f57831630e2ac08ef2cc9bcb6cf6395149ebe4c487bd136cf8881591637
SHA512 5739f18afd9c2f07723e4e1ed9526d90ac2e541284a57efc51b464e0eb3f9ac7ebb58304d453d300e98110efb881ef0d3f8673847f01162bca0b02290c1cdfdb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000032

MD5 a823c1c52a5803dda53893d61d244d21
SHA1 5b79a3e1e0ee39d91a4e071f40bbd244d4901559
SHA256 a8cdfe7f4becb5323cd77c1c7ea183fe47849a64287ac4e05df9969b02be8132
SHA512 6344330f4f6b432d6bc38a07666ecb05ac482f0898784e120c4d7c54e3ebcb7cc4db542f75966fa79a93e26def9cdd63e40667ec309d23680a60dfb3281c46cf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b237dea452a1fec62039ba9416796ce1
SHA1 79dbf7efd7ca489ca100970a610bb89ea4adb40a
SHA256 5c2d164bf55d12051d84ad2a80e97cc362033385b0887a0b21c3d2f0bd35650f
SHA512 f4939588fed867c09a86d60839633fccfab509d7bcfb72bf2bf90c77638696d03ba02de2c66983495b5dc3732311512e745cdc0e0f79e7b9f11c369cbf853d1e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 851a51682e157bbdea2bcf787903d4a6
SHA1 45c0eb0196b4b5e3c9aaaae68956e7e7a88c71fc
SHA256 43991f4ced9550561459a4c531975b3d2447af283d8b5eb12de959055926ef3f
SHA512 34720257dd31b709ea1beecdf5faee7f151e63bb5430e403e556570bc84a5609f05fae100a549b020e478bdd75493d4bc8f58ad096679485248f727a4e9ef179

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 a2f5c46b7f4bbf9fb74eaaab4e69a4d0
SHA1 9b7ed601143df51dcac7e954261b1bcae0facda0
SHA256 af36c525abd04f68a4b2f87c1cb5986fa1ed485c8605a17ae670386691d02972
SHA512 14526a9df9690a938f00f2641f869a190ebcd9218a790e9f4995a3fdab5b3bc21c4debd577942f247bcc16fc2c239d26fec37a61018505f6e7275ae6f30385bf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 dce33f1adf8e33539d4073a47338ae77
SHA1 0b9f14d0917a081b9a2cdcf2d67f4668275df844
SHA256 5da4edc3614f78f70a5737f747d4314ef0137fde7467caa37e8a625283de939d
SHA512 3c320bcb35e546ceb4f14137e09e6c6b712df00321c22b593d798d27e4fd8f667481cb5ec6c4188855f1f7c4aa7cb8126375ee77d7a7925e2ccbdd5dbfbf7fe8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 92f215048aea7d444116aa30bb92b0fa
SHA1 bea43577f45bff415fa2cdd766a1d1e223003651
SHA256 ca7cd6837cf689212939a2eed9d76dc07605b0fc83f32d397f6fa571aff39345
SHA512 e7349c8d7ce15122426e038cfa8a3a3ee5f1b8354dbf4b0fadea19e6bc487774f3675e88cb6133835e1a27d0d527b917b0fcc68a994a83bbcc333aa8d01cf45d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9a9f7daea55682c93a492726153a71c6
SHA1 b5162dc6ce5568097c39f10fe7eab521c3c2793a
SHA256 ac261ba4c5148ec27d84464b7d0ef2d78b2c86ffc4f24f474560e23df6824132
SHA512 6c2dc61986bab65eab33afebbfcc859afe15d1e663d1b64a009e7ce2ff4a2deae039574fb822baaf19eec9137dab2ebbfd6af3c128eb49e8848b6d7b65399843

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e4d673d490e475d74e612d286ee1a7cd
SHA1 0ac70e22bfeed68ff7e17a6db2810a126e6d0c98
SHA256 945f89f128e14a0f3f7d47396a49d1e49b6818281b68ab2a8c2484800af47f23
SHA512 8d26dd1a89f42b1b75123a4ff50db25a083f4bd6943e11bd4f74218203c3e4e44a33f4fd49f80b7640755d9b20f400e47d805d1a373da1a9e15c5d424169749d

C:\Users\Admin\Downloads\Unconfirmed 195360.crdownload

MD5 1b54b70beef8eb240db31718e8f7eb5d
SHA1 da5995070737ec655824c92622333c489eb6bce4
SHA256 7d3654531c32d941b8cae81c4137fc542172bfa9635f169cb392f245a0a12bcb
SHA512 fda935694d0652dab3f1017faaf95781a300b420739e0f9d46b53ce07d592a4cfa536524989e2fc9f83602d315259817638a89c4e27da709aada5d1360b717eb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 af4a8488720b6732803eac09e4a6df41
SHA1 47831f515646d0d60acaecbaf637284526f1fbdf
SHA256 5bac523f6d7f235d7c9c92ffe2f6522e35fc24edeb0c194d105f9efef975d479
SHA512 edcd0f9617c990e0e784088f7114a94bb083f834d57dac6179d0d4fe7499b65f926a1225208bd5dd72d898919ef6e8a2cc5aeb1c06ab0664745bb43c4884853f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 b29558e220b821d99f945cf1d19ae89c
SHA1 412a2d9988ade4aad07e9296be3facdd5a3fc271
SHA256 2676774328cfb2371936411655837474713a174da5831e19034b99cf6672b9a7
SHA512 34a2544a808a40b28dc312d5ef126ad51583d30ef4ac370ab7515f9ae1fc967a99c1ff05cd38aa174968c9cbb4819b85c17c07b6e80d4b01bbc72d3e2a485416

C:\Users\Admin\Downloads\SteamSetup.exe:Zone.Identifier

MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512 aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 8eb88acad4bd3562bd63da46a66a5e69
SHA1 8fb34f11d4f55d060f5f08892aa4c548efa7b7c1
SHA256 a08d4296ee0f38190c8ece49fbfe68eaf8a129aa98f47f5bb487b7ccd75b3082
SHA512 d11bde79a3c31f7e5a63fea64fee83a114408aa8f768200e1bae74e978e6c32060033ee80594219568d1c070e125d3ae7d641c6372dd38420a9f03e365affa5c

C:\Users\Admin\AppData\Local\Temp\nsm6EE.tmp\System.dll

MD5 a36fbe922ffac9cd85a845d7a813f391
SHA1 f656a613a723cc1b449034d73551b4fcdf0dcf1a
SHA256 fa367ae36bfbe7c989c24c7abbb13482fc20bc35e7812dc377aa1c281ee14cc0
SHA512 1d1b95a285536ddc2a89a9b3be4bb5151b1d4c018ea8e521de838498f62e8f29bb7b3b0250df73e327e8e65e2c80b4a2d9a781276bf2a51d10e7099bacb2e50b

C:\Users\Admin\AppData\Local\Temp\nsm6EE.tmp\nsDialogs.dll

MD5 4e5bc4458afa770636f2806ee0a1e999
SHA1 76dcc64af867526f776ab9225e7f4fe076487765
SHA256 91a484dc79be64dd11bf5acb62c893e57505fcd8809483aa92b04f10d81f9de0
SHA512 b6f529073a943bddbcb30a57d62216c78fcc9a09424b51ac0824ebfb9cac6cae4211bda26522d6923bd228f244ed8c41656c38284c71867f65d425727dd70162

C:\Users\Admin\AppData\Local\Temp\nsm6EE.tmp\nsProcess.dll

MD5 08072dc900ca0626e8c079b2c5bcfcf3
SHA1 35f2bfa0b1b2a65b9475fb91af31f7b02aee4e37
SHA256 bb6ce83ddaad4f530a66a1048fac868dfc3b86f5e7b8e240d84d1633e385aee8
SHA512 8981da7f225eb78c414e9fb3c63af0c4daae4a78b4f3033df11cce43c3a22fdbf3853425fe3024f68c73d57ffb128cba4d0db63eda1402212d1c7e0ac022353c

C:\Program Files (x86)\Steam\Steam.exe

MD5 33bcb1c8975a4063a134a72803e0ca16
SHA1 ed7a4e6e66511bb8b3e32cbfb5557ebcb4082b65
SHA256 12222b0908eb69581985f7e04aa6240e928fb08aa5a3ec36acae3440633c9eb1
SHA512 13f3a7d6215bb4837ea0a1a9c5ba06a985e0c80979c25cfb526a390d71a15d1737c0290a899f4705c2749982c9f6c9007c1751fef1a97b12db529b2f33c97b49

C:\Users\Admin\AppData\Local\Temp\nsm6EE.tmp\nsExec.dll

MD5 2095af18c696968208315d4328a2b7fe
SHA1 b1b0e70c03724b2941e92c5098cc1fc0f2b51568
SHA256 3e2399ae5ce16dd69f7e2c71d928cf54a1024afced8155f1fd663a3e123d9226
SHA512 60105dfb1cd60b4048bd7b367969f36ed6bd29f92488ba8cfa862e31942fd529cbc58e8b0c738d91d8bef07c5902ce334e36c66eae1bfe104b44a159b5615ae5

C:\Program Files (x86)\Steam\bin\SteamService.exe

MD5 ba0ea9249da4ab8f62432617489ae5a6
SHA1 d8873c5dcb6e128c39cf0c423b502821343659a7
SHA256 ce177dc8cf42513ff819c7b8597c7be290f9e98632a34ecd868dc76003421f0d
SHA512 52958d55b03e1ddc69afc2f1a02f7813199e4b3bf114514c438ab4d10d5ca83b865ba6090550951c0a43b666c6728304009572212444a27a3f5184663f4b0b8b

C:\Program Files (x86)\Steam\public\steambootstrapper_bulgarian.txt

MD5 4c81277a127e3d65fb5065f518ffe9c2
SHA1 253264b9b56e5bac0714d5be6cade09ae74c2a3a
SHA256 76a6bd74194efd819d33802decdfddaae893069d7000e44944dda05022cfa6d9
SHA512 be077b61f3b6d56a1f4d24957deaf18d2dff699bda6569604aac4f1edb57c3cfd0abc5e2a67809f72e31a90b4aed0813536c153886da2099376964c60e56001a

C:\Program Files (x86)\Steam\public\steambootstrapper_koreana.txt

MD5 202b825d0ef72096b82db255c4e747fa
SHA1 3a3265e5bbaa1d1b774195a3858f29cea75c9e75
SHA256 3d1399f5323a3ece1b1a8b3b31f8fd7f50c3bd319ab3f1c38c6e347452c95314
SHA512 e8fc7cc09f431301d22a07b238179ee053505090e3c4db30ead061513fe7159f1fe8b80efc93f4597fe00f01087bbe0bb2231e13693d72c8def138657cb91566

C:\Program Files (x86)\Steam\public\steambootstrapper_vietnamese.txt

MD5 f350c8747d77777f456037184af9212c
SHA1 753d8c260b852a299df76c4f215b0d2215f6a723
SHA256 15b6a564e05857a3d2fd6eec85a5a30c491a7553d15ffc025156b3665b919185
SHA512 efb86809a0b357b4fcd3ba2770c97d225d0f4d9fb7430c515e847c3dd77ee109def4bef11b650b9773c17050e618008fc03377638c1db3393ac780b5b0bc31b2

C:\Program Files (x86)\Steam\public\steambootstrapper_ukrainian.txt

MD5 cadd7a2f359b22580bdd6281ea23744d
SHA1 e82e790a7561d0908aee8e3b1af97823e147f88b
SHA256 3dd0edfbe68236e668fb308f92fe7c6493dbb05bfca85a48de93588f479ccc99
SHA512 53672dd13e6ccbe96f6d4a61297c595b6d6cba8de92caa51ccf8ab1d8a82eea5a425eab348f295b9ec27de0026ef849d9230f751a46e040be8863923f91b8519

C:\Program Files (x86)\Steam\public\steambootstrapper_turkish.txt

MD5 29f9a5ab4adfae371bf980b82de2cb57
SHA1 6f7ef52a09b99868dd7230f513630ffe473eddf8
SHA256 711675edb20b3cb70acf6cf75f2eea8e0d87c8ace3e11c8df362b4517427a34f
SHA512 543fe63f791250e05e8fda24fd2ceadebb4c8925e8927de49ae490895c87eed3e61a9ad50237532649f99fe3165836261de215ee3f66ffbfc6d677ddeea7732a

C:\Program Files (x86)\Steam\public\steambootstrapper_thai.txt

MD5 53f7e8ac1affb04bf132c2ca818eb01e
SHA1 bffc3e111761e4dc514c6398a07ffce8555697f6
SHA256 488294b7faff720dc3ab5a72e0607761484c678b96d6bcd6aad9ee2388356a83
SHA512 c2e79c2505a6fd075df113ffce92ad42c146424ca39087601daa4ed15a2b5528d478a093921d9d8a738c7b6b963275a0693ebe526b6e2135d14ced03639d0e70

C:\Program Files (x86)\Steam\public\steambootstrapper_tchinese.txt

MD5 194a73f900a3283da4caa6c09fefcb08
SHA1 a7a8005ca77b9f5d9791cb66fcdf6579763b2abb
SHA256 5e4f2de5ee98d5d76f5d76fb925417d6668fba08e89f7240f923f3378e3e66f6
SHA512 25842535c165d48f4cf4fa7fd06818ec5585cc3719eff933f5776a842713d7adb5667c3b9b1a122a1152450e797535fc7a8e97ebdd31c14b4d4900a33ede01f3

C:\Program Files (x86)\Steam\public\steambootstrapper_swedish.txt

MD5 b2248784049e1af0c690be2af13a4ef3
SHA1 aec7461fa46b7f6d00ff308aa9d19c39b934c595
SHA256 4bf6b25bf5b18e13b04db6ed2e5ed635eb844fc52baa892f530194d9471f5690
SHA512 f5cee6bba20a4d05473971f7f87a36990e88a44b2855c7655b77f48f223219978d91bcd02d320c7e6c2ec368234e1d0201be85b5626ef4909e047e416e1a066c

C:\Program Files (x86)\Steam\public\steambootstrapper_spanish.txt

MD5 66456d2b1085446a9f2dbd9e4632754b
SHA1 8da6248b57e5c2970d853b8d21373772a34b1c28
SHA256 c4f821a4903c4e7faea2931c7fb1cf261eba06a9840c78fdca689f5c784c06c4
SHA512 196c2282ba13715709ece706c9219fe70c05dd295840082e7d901b9e5592e74b1bb556782181cdbe35bd1ab0d6197fef67258b09491fabc6f27606dbed667d49

C:\Program Files (x86)\Steam\public\steambootstrapper_schinese.txt

MD5 56dcf7b68f70826262a6ffaffe6b1c49
SHA1 12e4272ba0e4eabc610670cdc6941f942da1eb6a
SHA256 948cad1bb27109e008f2457248880c759d3fa98b92c5b4033b94f455cb8ac43f
SHA512 c3fd9caf0bd4c303a7cc300faada9cfe6dd752e82d67625b31f4c0c2c091596508bb477fe19f758fdf79b25b8ac3f5320a8785d2b6705b9bcc28a054a59454e2

C:\Program Files (x86)\Steam\public\steambootstrapper_russian.txt

MD5 e04ad6c236b6c61fc53e2cb57ced87e8
SHA1 e9d4846b7e6cc755ee14a5d3fa45ee7d3bf425a4
SHA256 08c775efa77c2a92d369f794882e467b6e2526e61bc7aa7724f48e174524502e
SHA512 0dfb7e6d811d649103499018f3d115c542fcaba420ceb69124a4d837fe162ce514e7be2040860c5ef5f9c01c961fa6eea8730606b73ec107d87597989b6fd331

C:\Program Files (x86)\Steam\public\steambootstrapper_romanian.txt

MD5 6367f43ea3780c4ee166454f5936b1a8
SHA1 027a2c24c8320458c49cd78053f586cb4d94ee6f
SHA256 f8d1972e75a320344e3c834ba0a3a6a86edb39e20ef706bda9b7965d440d1998
SHA512 31aab33e0d272cb43a8c160b3d37256716a683e5052192fd0e4d3cdaf30a10a9afa9d26d5d14ad216ee455627c32892a711d2bc137ee7a7df9a297f001a19e32

C:\Program Files (x86)\Steam\public\steambootstrapper_portuguese.txt

MD5 eb8926608c5933f05a3f0090e551b15d
SHA1 a1012904d440c0e74dad336eac8793ac110f78f8
SHA256 2ed2b0d654d60e0a82b0968a91d568b775144e9d92f2b077b6da75f85ad12d04
SHA512 9113c42c38836f71ff0cc7019aff8c873845f47fbf1ab97e981cb038f4d8495b6df784402b1ee9666e8e567ae866b0284c81e6a16efb47131d5ef88569c4843a

C:\Program Files (x86)\Steam\public\steambootstrapper_polish.txt

MD5 9b0b0e82f753cc115d87c7199885ad1b
SHA1 5743a4ab58684c1f154f84895d87f000b4e98021
SHA256 0bdeee9fa28d54d384e06ea646fbcfe3f06698a31dfdc1a50703ffe83ad78d32
SHA512 b7780b82fbe705bc8e5a527c011eb685c99ef0b2eb810617b9f82b891341af95ef1c2f46dce9e458c0c4dcc3e7a0d21db6c77f03419cd1c4b521a9b72f9017df

C:\Program Files (x86)\Steam\public\steambootstrapper_norwegian.txt

MD5 58e0fcbee3cca4ef61b97928cfe89535
SHA1 1297e3af3ca9e4fe3cc5db78ebbfa642e8a2c57b
SHA256 c084a68b65d507eb831831aa2ab9afb9536cb99a840d248cc155ff87fad18425
SHA512 99aff0c481e34cd0e4fcbb2af471afb56d91aa11be664462b08e17ae169ca03ef77e7063b4ecd0f38ca7b2f6dc0bf2e316c7b31dffbbcfc763cd8fae27dc78d2

C:\Program Files (x86)\Steam\public\steambootstrapper_latam.txt

MD5 7913f3f33839e3af9e10455df69866c2
SHA1 15fa957d0a6a2717027f5b35f4dbe5e0ab8ece25
SHA256 05bc1f4973c6d36002ac1b37ce46b1f941fcb4338282e0ec1ec83fb558d1a88c
SHA512 534e541757d19ee157a268bf7ea358b48015f400542fcfa49cdb547cd652926160f015fe2cf026d9c4996e56ab90ca3899dfd457997d915bf6bc9d7bb00ba804

C:\Program Files (x86)\Steam\public\steambootstrapper_japanese.txt

MD5 7e1d15fc9ba66a868c5c6cb1c2822f83
SHA1 bfe9a25fdc8721d7b76cecb9527a9ba7823dc3d7
SHA256 fc74e26a8baabbe4851109512d85173b75dbf7293d41eb3b92a1957a773c8265
SHA512 0892be14a858cc860766afb1c996b2c355108a7e50971ea3ec00d15069e919a6eb05a61fa839bea3938492c391e274144c5e248f4c204a602bf36adf27e5b406

C:\Program Files (x86)\Steam\public\steambootstrapper_italian.txt

MD5 8958371646901eac40807eeb2f346382
SHA1 55fb07b48a3e354f7556d7edb75144635a850903
SHA256 b01ec64d75fd1fbd00fbeb45a3fb39244911a8b22bb43de4e0c03f205184f585
SHA512 14c5dbb017822336f22bf6779ccd4a66604ddc5f2c3caa24271e96f739fef007754d96844efa422d6682cbcd2d3bc902c36f0f6acb3eb87ed8d7b3f885973554

C:\Program Files (x86)\Steam\public\steambootstrapper_indonesian.txt

MD5 1514d082b672b372cdfb8dd85c3437f1
SHA1 336a01192edb76ae6501d6974b3b6f0c05ea223a
SHA256 3b3c5c615fd82070cc951ab482d3de8cb12df0b3df59fbd11f9d3271fa2fbca4
SHA512 4d41c945ce7c94746875b0dbceb14811d4966de4e97fe047406a304162fde7e1e2a16367fc2e43978e2e5aa66749f036b4444aa2312673c2cc3af296e8b77f55

C:\Users\Admin\AppData\Local\Temp\nsm6EE.tmp\modern-wizard.bmp

MD5 3614a4be6b610f1daf6c801574f161fe
SHA1 6edee98c0084a94caa1fe0124b4c19f42b4e7de6
SHA256 16e0edc9f47e6e95a9bcad15adbdc46be774fbcd045dd526fc16fc38fdc8d49b
SHA512 06e0eff28dfd9a428b31147b242f989ce3e92474a3f391ba62ac8d0d05f1a48f4cf82fd27171658acbd667eaffb94cb4e1baf17040dc3b6e8b27f39b843ca281

C:\Program Files (x86)\Steam\public\steambootstrapper_hungarian.txt

MD5 18aaaf5ffcdd21b1b34291e812d83063
SHA1 aa9c7ae8d51e947582db493f0fd1d9941880429f
SHA256 1f45bb7bdfa01424f9237eec60eba35dc7f0dc4e8c2e193fe768fe96d3ff76d5
SHA512 4f3e56d1abe26b56d3f805dc85baaca450c0c7bec57ebcf8a6bb6ebb8588307dad130c83bf792bac76694909a14fd6a4d7d1e9b31e32fba11256343b9fc18154

C:\Program Files (x86)\Steam\public\steambootstrapper_greek.txt

MD5 189ba063d1481528cbd6e0c4afc3abaa
SHA1 40bdd169fcc59928c69eea74fd7e057096b33092
SHA256 c0a7a1df442ac080668762df795c72aa322e9d415c41bd0a4c676a4dc0551695
SHA512 ce59ad9b17bab4de1254e92ce4fe7d8c8242832f62ab382e8f54199a9932cd11b5800cc33895441426373d5210cc74104e0271b721a7e26ed400b716ae4d5903

C:\Program Files (x86)\Steam\public\steambootstrapper_german.txt

MD5 5c026fd6072a7c5cf31c75818cddedec
SHA1 341aa1df1d034e6f0a7dff88d37c9f11a716cae6
SHA256 0828572e4fa00c186dbf1d9072a6154d65cb499c6a37e338f3305f77a2fee382
SHA512 f9d28714b2a05f8d9025f1692e4d7e8baa6daf6176353f65646a38814a242ef2adededa44419edd69f10cf96ffba506dab7cb6e52111457bf69cffef12174b12

C:\Program Files (x86)\Steam\public\steambootstrapper_french.txt

MD5 10c429eb58b4274af6b6ef08f376d46c
SHA1 af1e049ddb9f875c609b0f9a38651fc1867b50d3
SHA256 a1f6ba57ee41e009d904905c0ce5e75a59ee6790e08542561303109e1faafa13
SHA512 d8760f61760bffd8671b727d386ae220e7e6e68829a01553cfd5eb60ef8bd1d7c1b25e7b17a6db5bd17ba6712ef44999726764459318e784843c73bc4facaf46

C:\Program Files (x86)\Steam\public\steambootstrapper_finnish.txt

MD5 9e62fc923c65bfc3f40aaf6ec4fd1010
SHA1 8f76faff18bd64696683c2a7a04d16aac1ef7e61
SHA256 8ff0f3cbdf28102ff037b9cda90590e4b66e1e654b90f9aea2cd5364494d02b7
SHA512 c8ff15373b37e848e6239a82424569e77c82a5fc557d17e7d2ed1d0d2b2f7d026cc1e2bc98cb5ee945c02cfefb82803c23fa6a26f48ff0adcf762f94cd5dd035

C:\Program Files (x86)\Steam\public\steambootstrapper_english.txt

MD5 da6cd2483ad8a21e8356e63d036df55b
SHA1 0e808a400facec559e6fbab960a7bdfaab4c6b04
SHA256 ebececd3f691ac20e5b73e5c81861a01531203df3cf2baa9e1b6d004733a42a6
SHA512 06145861eb4803c9813a88cd715769a4baa0bab0e87b28f59aa242d4369817789f4c85114e8d0ceb502e080ec3ec03400385924ec7537e7b04f724ba7f17b925

C:\Program Files (x86)\Steam\public\steambootstrapper_dutch.txt

MD5 31a29061e51e245f74bb26d103c666ad
SHA1 271e26240db3ba0dcffc10866ccfcfa1c33cf1cc
SHA256 56c8a86fa95eab0d8f34f498e079b5516b96d2a2f1ad9c2a888555e50e47f192
SHA512 f85865c1e9ab45e5586d3dd2b45d15265193e8a3c34b6bb1ac7e415a1ea878cfb044e8e01012e917e4f00bb9e0a422f56253f328df1bac99a145e19433354cf8

C:\Program Files (x86)\Steam\public\steambootstrapper_danish.txt

MD5 03b664bd98485425c21cdf83bc358703
SHA1 0a31dcfeb1957e0b00b87c2305400d004a9a5bdb
SHA256 fdf7b42b3b027a12e1b79cb10ab9e6e34c668b04eb9e8a907d8611ba46473115
SHA512 4a8cdd4b98432ba9d9b36bc64aab9a2eab31a074d1cbdfab3d35a14216c60752b5580c41bbb70104993420043685d3bd47eb6637b8fcbb3f42f76a15e4be041d

C:\Program Files (x86)\Steam\public\steambootstrapper_czech.txt

MD5 2158881817b9163bf0fd4724d549aed4
SHA1 c500f2e8f47a11129114ee4f19524aee8fecc502
SHA256 650a265dffdc5dc50200bb82d56f416a3a423eecc08c962cfd1ba2d40a1ff3f7
SHA512 f3594aad9d6c50254f690c903f078a5b7a58c33bd418abdad711ebb74cfbdb5564679593e08fb2d4378faaf4160d45e3d276ba1aa8a174ed77a5791bcac46f28

C:\Program Files (x86)\Steam\public\steambootstrapper_brazilian.txt

MD5 0340d1a0bbdb8f3017d2326f4e351e0a
SHA1 90d078e9f732794db5b0ffeb781a1f2ed2966139
SHA256 0fcd7ae491b467858f2a8745c5ecdd55451399778c2119517ee686d1f264b544
SHA512 9d23e020875ed35825169a6542512ec2ffdb349472a12eb1e59ddc635e57c8fd65fa919873821e35c755aa7d027c9a62d3d0fa617340449d7b2c4cf8dd707e93

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 f28e11dc131b20c0437efedc0c5026b2
SHA1 e3816561562759a74eee7534ec80795d37b07e0d
SHA256 2fab004255f17966250b0dc84b082a9b6d992b9fcd1bd11ac34ada68cd41240a
SHA512 2d6904e7b282ef150150028b9b0d6c7eb0dedcaac3c4fdead0fa9c5bd96ba9232583a5fa27d65fa1e391f3dc1531e145dce61bc961667e9232b752fc1a6371be

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 2f40f41dc79e5bf5e6af827fd116295b
SHA1 35880f8d5c064e1d7c58653a2f9747cbbf94ba4b
SHA256 955e82d3170529e76ea47642184444c8e0278df36e9410e5ddfe4ac740cdadd4
SHA512 a9cddc668d849e20b7ec0a6e51d9a2f4971fad85bc2014df60600fbb996f280d45491e32605d298687cd04cfe082f497aeb3bc0d51293fa755bc3697d3d9a7bc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 b84102ee8a9bd9c67d11e55a7a97dfeb
SHA1 09feb7d54bf18929865fa2f316a9c2c138a257a8
SHA256 f29e0ffe54d8e0060fbb231e039c67cd6e0bbd9de05874b1b1bc4a49c7eef160
SHA512 72ba2871b2d0a46067367bf66cf1e712aee2407cd0c30e698d684819361e157334f7d3f24132ce7a45ff487d75b45763977b5673955e0f63e3701b4226666051

C:\Users\Admin\AppData\Local\Temp\nsm6EE.tmp\StdUtils.dll

MD5 db11ab4828b429a987e7682e495c1810
SHA1 29c2c2069c4975c90789dc6d3677b4b650196561
SHA256 c602c44a4d4088dbf5a659f36ba1c3a9d81f8367577de0cb940c0b8afee5c376
SHA512 460d1ccfc0d7180eae4e6f1a326d175fec78a7d6014447a9a79b6df501fa05cd4bd90f8f7a85b7b6a4610e2fa7059e30ae6e17bc828d370e5750de9b40b9ae88

C:\Program Files (x86)\Steam\package\tmp\graphics\[email protected]_

MD5 577b7286c7b05cecde9bea0a0d39740e
SHA1 144d97afe83738177a2dbe43994f14ec11e44b53
SHA256 983aa3928f15f5154266be7063a75e1fce87238bbe81a910219dea01d5376824
SHA512 8cd55264a6e973bb6683c6f376672b74a263b48b087240df8296735fd7ae6274ee688fdb16d7febad14288a866ea47e78b114c357a9b03471b1e72df053ebcb0

C:\Program Files (x86)\Steam\package\tmp\graphics\icon_button_news_mousedown.tga_

MD5 00bf35778a90f9dfa68ce0d1a032d9b5
SHA1 de6a3d102de9a186e1585be14b49390dcb9605d6
SHA256 cab3a68b64d8bf22c44080f12d7eab5b281102a8761f804224074ab1f6130fe2
SHA512 342c9732ef4185dee691c9c8657a56f577f9c90fc43a4330bdc173536750cee1c40af4adac4f47ac5aca6b80ab347ebe2d31d38ea540245b38ab72ee8718a041

C:\Program Files (x86)\Steam\package\tmp\resource\filter_clean_bulgarian.txt.gz_

MD5 836dd6b25a8902af48cd52738b675e4b
SHA1 449347c06a872bedf311046bca8d316bfba3830b
SHA256 6feb83ca306745d634903cf09274b7baf0ac38e43c6b3fab1a608be344c3ef64
SHA512 6ab1e4a7fa9da6d33cee104344ba2ccb3e85cd2d013ba3e4c6790fd7fd482c85f5f76e9ae38c5190cdbbe246a48dae775501f7414bec4f6682a05685994e6b80

memory/4784-12960-0x0000000000F90000-0x0000000001442000-memory.dmp

memory/4784-12966-0x0000000000F90000-0x0000000001442000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\ShaderCache\data_1

MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

memory/6784-13008-0x00007FFC973D0000-0x00007FFC973D1000-memory.dmp

memory/6784-13007-0x00007FFC96D30000-0x00007FFC96D31000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\DawnWebGPUCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Local\Steam\htmlcache\Local Storage\leveldb\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Steam\htmlcache\Local Storage\leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Steam\htmlcache\DawnWebGPUCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Local\Steam\htmlcache\DawnWebGPUCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Program Files (x86)\Steam\config\config.vdf

MD5 6e6a2b18264504cc084caa3ad0bfc6ae
SHA1 b177d719bd3c1bc547d5c97937a584b8b7d57196
SHA256 f3847b5e4a40d9cf76df35398bb555117dfe3626c00a91f2babdedb619d6ad53
SHA512 74199ff275400b451642cde0a13b56709735676959d65da11ac76dd645ab11dac5de048ff7ede0cb8adb3a3056b3ecbeb3dc7481bac3768d02051e564c74b679

C:\Program Files (x86)\Steam\config\config.vdf~RFe5a8166.TMP

MD5 3cdebc58a05cdd75f14e64fb0d971370
SHA1 edf2d4a8a5fc017e29bf9fb218db7dd8b2be84fe
SHA256 661f122934bbc692266940a1fe2e5e51d4d460efb29d75695b8d5241c6e11da7
SHA512 289c40fae5ec1d3dd8b5b00dd93cf9cada2cb5c12bcfefea8c862ddf0a16dced15d6814dad771af9103b3a5d3016d301ee40058edde3fdea30d9767146d11cd6

C:\Program Files (x86)\Steam\config\config.vdf

MD5 a2ec2e91c3ef8c42e22c4887d032b333
SHA1 e2c738a2e9400535b74e2263c7e7d1ecefe575f2
SHA256 8f9f970835f133258a7f740126012439385bbaa5a1d6a9d0d967a390977441c3
SHA512 b069d241efb19e09ec8b5e60ef6c43e00d5cc0f774b9340127c2180356dd1964ac625c1afdfaee5f99e72b26f56046fc329aadbbc365b403af765a55e9c9aab3

C:\Program Files (x86)\Steam\config\config.vdf

MD5 87053d47bddb6771987739d8a9b08234
SHA1 657b480f04d28d3acf9a58416687533ccb4cd247
SHA256 bf4922312fe80c73a15a77f315038f3e7f2d121c14ae046d55dcc4bf47e57ce6
SHA512 d8de13aa4c8e6125244b0dcd4476ecea72276fbf7f6302918885ec2ac52cfe4e37b85ab39c46348a21c77c72a412adf9a4e1df74c370de5543ff78e598686f59

memory/18912-13121-0x000000006EE10000-0x0000000070151000-memory.dmp

memory/6784-13128-0x000001E5FF7D0000-0x000001E5FF86E000-memory.dmp

memory/9592-13129-0x0000018B9FB40000-0x0000018B9FBDE000-memory.dmp

memory/18912-13132-0x000000006EE10000-0x0000000070151000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 e622c0df6a807c7bb0765be3c33a17e1
SHA1 5208a156537e8f4b39ea9a0c1b4ad132390dcc53
SHA256 abf1f2240b61cd84f858e8b806ef35237331e3a857de55621b13c9ca7e259a92
SHA512 2290164a21315c8c30875831fbc45ca68c0969682f6ff5673d77c8e4ad28b411211256ac0467c85aa33d1600743f8ce45ed53d1efc691ca4eb07c484b460a2ac

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 6d70603cb633a4135820afeb1f09ce8b
SHA1 58cf976d054aaf89526574283be7bf4592ea053b
SHA256 b12af282d788c00ebd9d6fc323d3c0c4345bcf58b18390560d58457cb4eaa319
SHA512 3e0302aa8ec93867d2ef66c25d5711be181d82360ac20f212f4a9eba54c46503a5fbd494ef6dcbdc5d8a79c1a9379c0da5560ef366c7d2637a8f3cb70426f3f9

memory/18912-13144-0x000000006EE10000-0x0000000070151000-memory.dmp

memory/18912-13147-0x000000006EE10000-0x0000000070151000-memory.dmp

memory/18912-13152-0x000000006EE10000-0x0000000070151000-memory.dmp

memory/18912-13155-0x000000006EE10000-0x0000000070151000-memory.dmp

memory/18912-13159-0x000000006EE10000-0x0000000070151000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\LocalPrefs.json

MD5 1bd2ba281f31801acc4926f77a92f2f8
SHA1 8fdf9338076a055c7c7b1e93bc06a9465c3c2d77
SHA256 51155648fa5c7d70fcb7c93645578040e6c886b25b625e8af17737adb1026fc0
SHA512 0432d61ff3cb4ef9b2426e25cde01810ec343423ad40d8115cc81def358e2064c492f3e3bd012807955ecc5c490f7ebd9311b40696919ce27f7530ca68410fba

C:\Users\Admin\AppData\Local\Steam\htmlcache\LocalPrefs.json~RFe5b8efe.TMP

MD5 8b9c9902732f741051553d87758d8da5
SHA1 b99d53b3577b037aa156b73715c4e4c423188de8
SHA256 1bea13d30434ce25411a804341a03f35f54f58027f5cbac49ad2cba62b0ab559
SHA512 43f49f7a20bd553c17c2a2b95ca2cd146311cafe7ce80816d7da63831ed14339c19c4f3afd9f8a1aae8c0e57f5a0fe92b5d58555315bfdb84b151f5dfda02cf9

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State~RFe5ba276.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 6392dd584000a8e4a08336160cc8db45
SHA1 83d7cdca5c138818a003944c8d7bfe7d659e3650
SHA256 9b75eff36d9c4456fa28418be241f6cd107ba2b71e1fd1559c32876c5009ed3c
SHA512 217364b70a36fc26ee2626be15d2f04822ec0d31c96f285b0a094e55be7cc593f75fb620c471a0bee064cd9bf9236b0867379d63166109e5fb370fdab03e3b22

C:\Program Files (x86)\Steam\config\config.vdf

MD5 31aa82cfd597f0cbc023d3dddd949848
SHA1 30bfd99ce62ef5dd228baa5507bccd9568846b8c
SHA256 d38b4b088532463dc675e1277a0f9401ad710c64cbbd23811f4627c76c16b683
SHA512 fc9e24effbe5ca2e12b654eca48b82182feb7f87d55a6a3db5bc1bd50236f27f9890031e5501ac82a94c56d048dffacc98b5c08f9d641f5114693472775eeb16

memory/18912-13220-0x000000006EE10000-0x0000000070151000-memory.dmp

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping18856_863345492\manifest.json

MD5 2ff237adbc218a4934a8b361bcd3428e
SHA1 efad279269d9372dcf9c65b8527792e2e9e6ca7d
SHA256 25a702dd5389cc7b077c6b4e06c1fad9bdea74a9c37453388986d093c277d827
SHA512 bafd91699019ab756adf13633b825d9d9bae374ca146e8c05abc70c931d491d421268a6e6549a8d284782898bc6eb99e3017fbe3a98e09cd3dfecad19f95e542

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping18856_863345492\LICENSE

MD5 f6719687bed7403612eaed0b191eb4a9
SHA1 dd03919750e45507743bd089a659e8efcefa7af1
SHA256 afb514e4269594234b32c873ba2cd3cc8892e836861137b531a40a1232820c59
SHA512 dd14a7eae05d90f35a055a5098d09cd2233d784f6ac228b5927925241689bff828e573b7a90a5196bfdd7aaeecf00f5c94486ad9e3910cfb07475fcfbb7f0d56

memory/8224-13246-0x000002221AD00000-0x000002221AD9E000-memory.dmp

memory/18912-13261-0x000000006EE10000-0x0000000070151000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\LocalPrefs.json

MD5 afd9d774d25560a188ce9a90029f1c3b
SHA1 1ea48e47ce0b3d24b003a1a913ad1d426ed867a6
SHA256 1cd545010a30d0058a9933267bc125f031806fe89d31777f455d497c3623d22f
SHA512 562c0aca8db24a4455e0788648ffb341ebc3ea4950b16a2e948f949e502d5802a45e3e223cc7de7247aea9e0d80fdbb233c1543186749eaa9f3aba86cc1f0d18

memory/18912-13273-0x000000006EE10000-0x0000000070151000-memory.dmp

memory/18912-13276-0x000000006EE10000-0x0000000070151000-memory.dmp

memory/18912-13279-0x000000006EE10000-0x0000000070151000-memory.dmp

memory/8496-13280-0x000001C5FE640000-0x000001C5FE641000-memory.dmp

memory/8496-13281-0x000001C5FE640000-0x000001C5FE641000-memory.dmp

memory/8496-13282-0x000001C5FE640000-0x000001C5FE641000-memory.dmp

memory/8496-13292-0x000001C5FE640000-0x000001C5FE641000-memory.dmp

memory/8496-13291-0x000001C5FE640000-0x000001C5FE641000-memory.dmp

memory/8496-13290-0x000001C5FE640000-0x000001C5FE641000-memory.dmp

memory/8496-13289-0x000001C5FE640000-0x000001C5FE641000-memory.dmp

memory/8496-13288-0x000001C5FE640000-0x000001C5FE641000-memory.dmp

memory/8496-13287-0x000001C5FE640000-0x000001C5FE641000-memory.dmp

memory/8496-13286-0x000001C5FE640000-0x000001C5FE641000-memory.dmp

memory/18912-13302-0x000000006EE10000-0x0000000070151000-memory.dmp

memory/18912-13305-0x000000006EE10000-0x0000000070151000-memory.dmp

C:\Program Files (x86)\Steam\config\config.vdf

MD5 253916cc1b0602706c7f5dfd59ccf751
SHA1 a8405fe416fefb5b3d26130a6f1d1195f77248fe
SHA256 2faf1ce01ec420f5ae8ed2a9622c46efa69c68a671f049f3d6462e6600173ed7
SHA512 8ab701dc029f75f8c0de45fcfecaddb4b8b723e0c39a91d8e0f823d0df872ee39d075c24c28703e2879248620cdc8ab980e99b9f02d92c20f0eb2152d19b3b56

memory/18912-13320-0x000000006EE10000-0x0000000070151000-memory.dmp

C:\Program Files (x86)\Steam\userdata\1456296740\config\localconfig.vdf

MD5 7658fb39e7da4d02a0266e0ea40c06f6
SHA1 6335c10f3dfd999c52eb617fb7333c089139ce68
SHA256 3077722db3c2f7d8cbc10067396571c1350cac2b921c7092c6d0512c4f1bc96c
SHA512 d8af2d8f837b65422e9d1c0956cafce82cea62bc26e5732ed064d9d73ef435c091413e1e10bd0e3772c0cfbe4b3edd41fc394521a84badb42eb01320d9afa7b5

C:\Program Files (x86)\Steam\userdata\1456296740\config\localconfig.vdf~RFe5ce0e2.TMP

MD5 d50a8be6485deb9327fa0362c04245df
SHA1 6a997713254aff5698a375ec03bf31ec1c26a6e3
SHA256 9bbc63c8abb60985dfee6c2223d4a15d4e5b5ff53549052ba5a1558ee0877de0
SHA512 e79119c80fd8500ebf1d1e85dcfe526b270a33785a2be9ddee8fd83cdaebac1675618153d9d9e9b06daed318c11b39acd0378fb493a4a2a387ee0723a31fc427

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 beac43d9941b99f801740167c4d7c04c
SHA1 9dd2bb9394018c869914f6bfe753044212de928f
SHA256 76ebcdf68b712fd338e4fb3efebf4545042505ecc30a6791cb3a200a711a500b
SHA512 d49fac30c956b555b8bbb1ff54350c9fa282239b6317bc186882ae7e9f894dcd958aa7ac4fd121a7ae4a040ff33a2d1652070ed6ae6e01706ec669083ce8dc3d

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 85e300313a8331f7b0d49fa816d57f23
SHA1 3dd27a3d504961ca6104d83b682cfa75cb86f903
SHA256 a05929c17c62f23a10a52ffaa207db134295fcccddc29637f5d5ed9d938176e8
SHA512 3a8e46372a59b594e276fea0e718fa5d33131c3daaca87a289886be857887dc9ce2006b7b41476bd2438970cb264b2d2c37c7726302fa00ece7ae23000e54f7d

C:\Program Files (x86)\Steam\userdata\1456296740\config\localconfig.vdf

MD5 0d339232725cd352d47de3168e39c737
SHA1 9f97bfd36a4eead4c412df27485144bc1e13da9d
SHA256 f0072f162eeaa9c49e807960a6642df0ae8f207dd722accaed9d611769e334f3
SHA512 44258b23ddbb3ac2151aca0fcef7919d1e765267e2a0ce55cee86f8f588640db539f0e0caa4fcff12f63ae947d9a6d806670c760ac407ba25d62ffb66733d76e

C:\Program Files (x86)\Steam\userdata\1456296740\7\remote\sharedconfig.vdf

MD5 0b7765037fff002484ff20c37bcfd619
SHA1 c818da256b671d222c493c0762feb9a5603d2d37
SHA256 87e7e6fc1035395b3d5e788996a775c46c94652da5ba980d836d1d8dbfce3e3f
SHA512 b3b49495ba4322414b0c468e8102994767ca6f0656071021c6c64befc70b5ae46351e9cbf67fc85fbc3fe95b6e03766d388c5c9cdaf806af0b9d785318ce004e

C:\Program Files (x86)\Steam\userdata\1456296740\config\localconfig.vdf

MD5 452457cda75c433b1cf52d62d39bddda
SHA1 9fad487a4385865de373e37eeaf8239754708599
SHA256 153d29b7f9a33b61ca4ce3910ac2dd64a5cf835ee6665ac07c85c51f7ac88a59
SHA512 59bb97766540ba99dd522ed234e8e946b18c19e7445a200c4b1e5eac239072c3d84be77d8795dbb6e3441e1035583d18a7fa21c6d0ad76cd134111f6dce86081

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 59bf3d1d836052667187db1ab2bd89fe
SHA1 c915be6b6761509a4387c6cf21c82951a9954fe4
SHA256 6ed5f483fd81212a4cfe80beb12ce837be56a223c9a7b9949cda86cb3c13f691
SHA512 8b69495ccf6a1885e9fbb7be618ef1ecc15e29791a770aae951c935b17560b99330a49243b147865bd9bb4d9ca3f217559d85aa3f08ef4d264f4e2962e6d4ee4

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 3850cbe7d1e9e6fef40664eb789160b0
SHA1 482efb2c3fc1cb5810332494f74481d4834460f1
SHA256 8dac1eec3f40f21c25762710c93f309e9d035d22be719e46cdd55a12a35daa70
SHA512 10655749592965e38b4056526e4ed8edf6fba76dcc1ffc29eec0c09d0310c50516eee066f08c21b3c325b3ec831a39b74e9d6646f04febbdf3de0567ab10086f

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 34e649208dfadefce03a14f11a4dfc7f
SHA1 994f6b6b21cc827b4e2b8ccd2a6b7f2615430a92
SHA256 ad07f910d61fc1e7536e8dd28aaae225b2a2fcefc9c515e34c1ff78c09188d4b
SHA512 d7026aeefc7c785fecf45ae3db36d7381de88c1a4e8e317d06359dda854afc7fc3c9b5d0ad765d3eb8798574ef432d02b5ce81c081a14471da84f732d3068716

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 de3c7cf225279f8ecf6699a094591934
SHA1 db0a4fc510b26f79e0c3f8c25e4a10a28f754c2f
SHA256 6baba45b709331e66f72ac0abc6ca18035b8a817c069deabdc52734a36490877
SHA512 9e39e0ca68c407e369cdb0973fb4162e16ca332f9b8488af0578077191cc96dc8176c276ea3ac2a430abf83595b5929b5646ecc56a34afad07a37f3a11a19ee8

C:\Program Files (x86)\Steam\userdata\1456296740\config\localconfig.vdf

MD5 404c7d83e51dd1a7d553e30557b15e59
SHA1 8ba12515f075ed2bfffb1c8b03d748c657f5b2fa
SHA256 ada3f94106330c39e1f4252031cab6e1ac78e340eaeb75ee61859249dc27045e
SHA512 24ea82abeafee9f252d2ba8de8d5978447905988786722999332d5d4e11f48c8536401d9222d900cbc0f958fb4a72105acd381360113a1f7f990ee153c56ce93

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000005

MD5 ef94e26e09fd6962f86f29c1c30f7447
SHA1 c574353d60b5973522a96fe726b0d26092167386
SHA256 2c3a7f1d3f5524c76c35942871974ee222eb012c65ec7f19d83c392f87b50847
SHA512 77abdad3b1f76fdd8eaa4cb3b2dcb9e5e0c00f46f25b52420e24129c4b178b34103329de52c15b130c3dec214c77e25eecbd2294855c1b3ca39936c8c94a5b26

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000004

MD5 e13edde4a25e96e573f37bdd11e020aa
SHA1 84a0c3cc6cd74b149cc27de2b0fe48bc2acb70d2
SHA256 45b526e6aa5356b278aa37e67593a25d09c9653e8a0e71fb8e155111d3b7a515
SHA512 9ba4cce47994f949731e594538f56f423ee46a8e602fe922ab6e1d173b87831ae5a80d967d695fc45a08b25aef5c494518b43cde6b4709db690e904b2cc1c053

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000009

MD5 6b7e9d2fca3a807995e65c6a12decc75
SHA1 f4a3e5d132c45cbbd0d065b748adcdb9a18a5e47
SHA256 f301268c5c18183b9460ee7d520564377a3c47ecd7dbe9926e4db054e33bd5bd
SHA512 d8ab7c2535353bc6ebbe9b2432bdce618ba3a9a759e413629dc94fb752e08e6d9ffe19871d1f4dc226a85320c4f91a0804dd2748d28cfe3964f5369bb269656e

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000008

MD5 b507567f09861406425726176430b282
SHA1 ef31ff9a5a918797c76752018a667e29e415e580
SHA256 4390634070a440bead4ea3dc609984097da973983ac140b094149b4bbed1349f
SHA512 23e8a4e14a2a8608c817b88080fabce226ef7c280f5c87baa27780dc1307d60f75d215a91c3de6651f17e6df71219b3e51f2665ce9553c71f427a38e7c81d65b

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000007

MD5 fb8a686df2e4d5987c9e43e10b480df7
SHA1 bf85d7c64d6c23fb859989f0229c083aa857197c
SHA256 b6b6c978ff263141e66d878ec683c0092f651fb874a21556d921e62e6c7ad887
SHA512 e21e7287672434bfdeb7de3cc63bf98ebf923fc709941364f68a8fe4ff19259c7518ebef4aa1ae5218ae845450deff5d10dfcc114f562bceeb24b0244900ee57

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000006

MD5 c9e90bc8ec6a09d8a69f4a4dc6fe8b6a
SHA1 f099ace175891bb8b81eea2595bf8de8027bec6b
SHA256 8fa6b37e750ce1df8e880691ea6dcd4aa922b55a722aa0b1df8ed6302aaf723e
SHA512 c4bda62806935165c94191234b8782408876f1336279a26d58ab3a75f41c51433ad24516c0354a8a047c1e743c4fbb8989938b6a1ff29ae0585b3fd08230a497

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 25695d290d5da7c3c4293223f0d66e10
SHA1 bc122b0dad84b8d97a5bc13d18cf47ede1e3f99c
SHA256 41069bfda4b18d3fa3351c78204a06dc417cee9d772c2d184fd157707cffa424
SHA512 1a25606b4193fcc3e359aef827de8ab48bde9a47760a467f9f09a8a2d2de03519f7661e93d75be4cc6c277b1a76c106c8b6e00028b007810f80673cac3153cfe

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity~RFe5d17d0.TMP

MD5 7dc04f5de54ecd0ed50928fca77071b8
SHA1 45a4f102d537143e4f041db4650c84636c8cd851
SHA256 409dd4a383ab1f5a676c4d9a4e154ca2b89bace29d5bc1210f6cafea73b964f1
SHA512 f0a56a789aca04e403c743af14943c9a75d8782076714d7674257114af2192b70ba1f7021d0b49f3c2b45402b7251c41facd935c9df6e9b99eef88b0ea218efc

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 82ea7ebc13b1ff241cfbb78888493e6e
SHA1 1020ec23a7a6459ecfa1c3dc25312adc07a443de
SHA256 58779e8bb41efb38fc7685c52f1ae2cf88805555e827122c0076ffb3df6c5a5b
SHA512 854e50612814cc49c02ee798540eaba845e72b0346f16651067b69a17c41997df1aae72a1ccfbef2fdba6a2da865a995d5c0bd48d3ca687839286c0f712d555c

C:\Program Files (x86)\Steam\appcache\librarycache\1113280_icon.jpg

MD5 7ecdaf8a54ec52b20640a88527512903
SHA1 3133a4d748ad3be61fe9db759339cd5de73339b5
SHA256 7bd8b75aec0a4d4a377f3ca3a023fd8b7c5fc7dc6a2a66d17f8cdfe5b731ab0c
SHA512 60ae2031eed0c38264f0d8db22a9b6efeb3f80c791e916e15a1730853162d56e0da014dbd93a5479bae4f3bdd5705ca89be70c90574a524abd1c276ed5c55a2d

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 b37486b80ca921b8c78ae2a78c3c80e1
SHA1 e155a4c22b3019ea45e0b99f7c98e916317b780b
SHA256 e578d78ca3f67d58630aabc3471559f58514ff08ceb8e557d0d18f0a04ea8fdd
SHA512 c2312d011e222592deb93892e13e79bf2f9a0cde3a42c733efdb3d93d59d560f8d7abe9114a7ebf0008ccfeaeaa16c3472b8e13ad1301c7f2e6c0f7e8b19f39d

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 af1363c1d8f6528b13a7c97c4cf35bb4
SHA1 01f54658617cf3c85bf34ad909c6314a8839dc55
SHA256 ca7c8d2f2b46737c18c6514b9c0061313eb2a1a9960e431ea155b30e3d4d075a
SHA512 1f47494457dd66202372f6b293c5f692592059c87f1f576a4a972a9b090e2c3d964a7a3f7c3f96570e49dba0dc978f5db9e67349596026e515c3b9121105c7a7

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 59414230835a1faa6f8da03774d096d2
SHA1 7e84915db07349899e052ffb3894939111e1aea1
SHA256 3d51b38221d5e5de9305b8d537b3c0d819766873e50fd8a1ae83c759830f74c0
SHA512 905c6bb848ea8e277704f5f58f105f6218258544f8ead08b9fdf3d816b320df83b63562d3d1cda4fff4a43ddce14be72ef5f410e8fbb585a2eeb7e0eb01e7be2

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 231882c96164e07858a7fa2228113cab
SHA1 ea7a78bf8ccd3770f796dd89e283c2b02284c8a4
SHA256 35e6cfe5c35df70e7aa3cbfc22f35c50f96f7a0d5a50a4b17f3b288e0b2d75b2
SHA512 0c663d280f71fcaed9166ca592dcd459227c17dc59aa0a63339a74b14c30057cb9ba9ae24f7505d6014f22192cd028541ade5b09bd4e64d4bb9eee04d689edf0

C:\Program Files (x86)\Steam\userdata\1456296740\config\librarycache\2021910.json

MD5 0b6da93212cadc3e12ae46e7687db7a6
SHA1 fbbac858cc41c590f7d3a27e0b54b7822f1a7b84
SHA256 498aebe12ef969a17373a9f085646752832de7eedd6614560e77e9ea0331fd9e
SHA512 7638d937d6d0b3287ad5c1b45890dae649374554f0334c6b8c0c918ae3851d1d0e6d038a743bee1e70c8a845edc7dfe25b174db9411fb15973cbff3894a21725

C:\Program Files (x86)\Steam\userdata\1456296740\7\remote\sharedconfig.vdf

MD5 aada85cdcd04887e485be841170b7522
SHA1 5c310791114ba636768e172a84833a6d4a14eba2
SHA256 742d0d11e06ac06886f1930bd70c45fa72131b7a87b37dd709d8f2c6677dd964
SHA512 60f55fcdd829d43e57ad3c7a1822d78cf76dc2173770fdf20a1799f04cd1ebe0c5f4667246c0b81eb191f36185959ff486677108b55effec3b8e5ad11f6c6656

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\FPS Chess.url

MD5 005170e54e35c1d7bd3c86ed7ef936eb
SHA1 dfb6c820f0d5ddbd64814965dd216650d708f4ba
SHA256 25ba84604c99767bad5944e60a8c5a5acf89107dccbc7caa4d703bdb82dd0f9a
SHA512 5cccf6c70bab983ab609878fa0a908aa73b730f88d0521ea60c061056bb779f44d2d16b13032bb0378e93678763d957d1031d89c34bce795217d3fad1f1c02d3

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 686567f2b78bee3b9561ba44a52b7951
SHA1 fb927bacdbf26c632071357ef17b0919346e858e
SHA256 cac756feba741c49c208fc25ac94bf043c5f1f340fc7be021ff51de93715b1bb
SHA512 0fec06de62cf5235723492cc82890d5a9107c4e22cc1503395184e27b6b219c1f4ae87b1ffec0e683ec668f05567c97c1dc88d6b9dccd10179318a03554f63c3

C:\Program Files (x86)\Steam\steamapps\appmanifest_228980.acf

MD5 9036e5ffdd48a272988d38c882be4ee6
SHA1 e032db769c8437053a35476298e807cae4944473
SHA256 31fbeca467f6e0b5c1530059e7dba1e08503646781de9b1460843b5a020ea294
SHA512 72d535e7dfed83bd79e76a2ef1ceb2a530d195fe3cf9da32779c4b644d07e7e2493c371a868605e61689cac6dcc8c9cc09f90ca68603a24ba7671b25a6435df2

C:\Program Files (x86)\Steam\steamapps\appmanifest_228980.acf~RFe5e1ea2.TMP

MD5 d661702721b5f234b7a7e729629c957d
SHA1 6a6ea8e4a48ef67da9b0c35127fc9a0c38e9a951
SHA256 1774c5d46b834a00f98ad8b20e6cbb2cec85b641b4dff4d1a62a86b690fc4236
SHA512 5e19018318532b9022eee88b7ead2ca73b2e064120403f89188b1cbfdcf641f4372713008c6528d8a1e45282cc8e5b63b23af02cfc4252fb2e1987b4d589aa5e

C:\Program Files (x86)\Steam\steamapps\appmanifest_2021910.acf

MD5 5980a74be9448146f3de78d01bb5024e
SHA1 6887be0a0c056b28eb9dd6880c998f2f2d8bed7f
SHA256 7b14866a879fbbf3f2a0888c0fb687f2779664cdb74b671548293a1f9a2f57e4
SHA512 b6af0f7d0cc73872599d926167549565292f60960ff042abe5330f9ab7043f702f62bb089b89ef8f1095fc98c3c4352d0fcdbc68d76bd797f7797e1100fac355

C:\Program Files (x86)\Steam\steamapps\appmanifest_2021910.acf~RFe5e1ea2.TMP

MD5 566cddbdbf460ff7f199345945d1b808
SHA1 f1b481f1d385047e875c60b87f60dcd8f36feadd
SHA256 2630c38d8728f0cc66da4b1870cb79094345dced3397c5fa9c0df08f037fe89e
SHA512 0227bdd1b0aab15b6398a5792e182926be4e02b417dfb7a8391d6d27f221920839a8b50be67134b4b3a0a9a7f3eb51015a48388967c3fda82ef040c3e1fb3d41

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 19c6738a8cbf12d349884e3e005cedee
SHA1 5b7b98d7bff49a979ee7e17795cc43a7beebb480
SHA256 f2c06dc46bda80c253a77e43424f151b100575c208367db6ac9bc6da5958d18b
SHA512 52be213082718c2f22bc542bbb76ce6dca5ea5ad492b09f5ef4d65130d859c49d831c93940c96a9f1bc9cb58b9d25f82e892c20490c0ac84866e31fa165908da

C:\Program Files (x86)\Steam\steamapps\downloading\228980\_CommonRedist\DirectX\Jun2010\Feb2006_d3dx9_29_x86.cab

MD5 a084472cc573ca3920694b6a84ac267d
SHA1 864601632defbc50dd27fb163f2fa64a9e50c4fc
SHA256 8ad34448949365cb49cadaaf40dd403d0b229b744a124833e04627a532bb77c5
SHA512 589fcea51e5ede7851fcfd9225c2c6c0ed93c151e2dabe8b4807bc9568b12611bca184c1cc02f5531f07c121f8d82ab66885fde3653ad5ee9418424b323ff6d8

C:\Program Files (x86)\Steam\steamapps\appmanifest_2021910.acf

MD5 7af6b1b197058265435c99d7c0981041
SHA1 8acd05d8ce92be1b780487204bdf75a06713794f
SHA256 1048ef9868f9a6e946c48e394e0093fb4084f81784e311672458f8044ecc4502
SHA512 442c7f341432d71c9548ba19a7c6ea7ee7781c255fa326eb5175ba9b028ca43dad851f8d1b031697c5cec9396cf0ed852d4ce8a2a26b01a4c80c71635857f50a

C:\Program Files (x86)\Steam\steamapps\libraryfolders.vdf

MD5 ef9a9abc65767c3875f1d09e62ac48d7
SHA1 d2ca7061201172fb38d898fb8efd214c3649adcc
SHA256 93fc9c4aafacff4cc6afb0c89a87942091626b9a78314669875fce940574aae1
SHA512 361edb6b111d6c73fd47294a93a3f1cf15009f852fa7aa88d3b0e8b5a00f882f82299baefd5df9e6785370a9d6a6db5e5a7febb2a371d9d10d3447526544bb43

C:\Program Files (x86)\Steam\steamapps\libraryfolders.vdf

MD5 08d88784065456a7b9606ba17bd2a5fb
SHA1 bc2411448533afd7db9e0ac4a4278663a08b4959
SHA256 3f87858f3a28e413ae1b888509dcbbb5d3d9740ff00bb87911d0f4677fcd22a0
SHA512 e174cccdd1729beecaa2820634d6c53fb5b9dd5fa44a4bf6b076c0e37cbd8a2d60d9a157cc8f2b974176ceaaf74cf7be3693cb2507d42b353b6c3e361ea1b990

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2022\installscript.vdf

MD5 a9c8b105bbde7bf414b4c6d9232acc0b
SHA1 099a7a7e5f94ba152a8280fec2b8bc8573695658
SHA256 3ed4655112f3862198fd657babb53d61eaea364ea2704acf28a9870ed0b449ea
SHA512 ff3b209225c75c9055149282d8e127642d44c1f97cebeb177dc1262d06c2855345bf422aa900ee915a2c778ad79a4169b07fe749d6795867a7e75e649e72775e

C:\Program Files (x86)\Steam\steamapps\libraryfolders.vdf

MD5 cad7d637aa68ce4b9bc9fdec77fd79e5
SHA1 99ff0e257f8336aaac3f25e4e51094229d8b3bbd
SHA256 ea6ddf40fef5f51d63340254c4a1b5202968a59fd772cde428e029e59b3d89ee
SHA512 830b2f97c063f33873929026fbcfcd674d7e0a6bf6505b6e513b2dcbd9f58335e31b0aaae8fb7409af74d108aabf3eaa95b201fdd7d9a543b780929eec7cf952

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\Apr2005_d3dx9_25_x64.cab

MD5 fe9e6c4c7d7aa341a84f039d954560e9
SHA1 0830cc54adec654ab4394032ec4e046185ba01e5
SHA256 b4188ce988af9c4771ae0abcc7edc42a091133f9f20196564f51755dc55ea85d
SHA512 40322144e859063872af8b91b1c6682e92974b26c13cb92e17d179560f6706be4f9a7eac0e5a3c6664a7576b5884e8b4f3bbc35976d6cd2867ab9359e9d1815c

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\Mar2008_d3dx9_37_x86.cab

MD5 cec089e2479e50634e1cea97b279eb86
SHA1 97646b2edfaaf691b8bc9bd9699f0cbaea724e75
SHA256 0be4fe173c7becbab42a25421f28d54629479e240a3378b37ac4b657bf60e128
SHA512 b33a0ff999e2ef7c35eca4042470922d084e1580193bd290365c5d9c39db223532a79f9ee476dcf62f550cc7f8d6b26dd869e49cfd1d52d61e01ee5e76cc0060

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\Nov2007_d3dx9_36_x86.cab

MD5 f6df33e7335dbd4bb9e74b88f66764cf
SHA1 90ce4cecf5cf2c6051b61aa9be9151e1305d56db
SHA256 89026e7e14fff8164de3c13a774d539e789637104d7bc84b8bb4e059b76a9679
SHA512 dfdd67c849d0d6bc5400f724a299a6b2091c2359bdb002882a3157a559dc623828c4647ca882c810ef423a5ae4375f27a18f86662703d58be6dcbc90ad8972ea

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\Nov2008_d3dx9_40_x86.cab

MD5 57176018dd94a20912c4424b1347dcd1
SHA1 e000e83ca40533035a0ad13249fc75d591f95e28
SHA256 a259dd75611610bc0fd9c874e68ec89bbae4ac5f8db0857705a35de616604641
SHA512 f309012efcf8afde14b74363d40358c5a5a64fd86817a2455b5ad6f04661d8b5a12b11555b664f424740d7092596467f4aaab8a8827eefd62ceb9e3d1ebb4527

C:\Program Files (x86)\Steam\steamapps\appmanifest_228980.acf

MD5 28cfae683e11212284a91bf034b84d40
SHA1 fd0e920892f3b87df1f1c10edc2528c2b5c57792
SHA256 1ac2ef6d7e6866f56e729b77c32a646074fde7950eb0a7472e35682dc4081acb
SHA512 edcf57a7c9bade9dccea2216a485fb113d8b00ca797d0416869865aae92f5ada1f09ddb6dfe9c678946ffb6d8a4fa0b83839f4d6cf4203f3fc410cb3004e3db3

C:\Program Files (x86)\Steam\steamapps\appmanifest_2021910.acf

MD5 fc004aefd6f4c2e98fcc4d6d783ecd0e
SHA1 95c1419ea04a0afce172b34359c53e88970dec7d
SHA256 13094e190db57b5782d30a6bcfdee0ad7c3b3305b47bbd006922b330a64623bd
SHA512 416dc5865dc02e5d28b7233161fac059233ce7e7d0853faa6921f444b966e39209bc89591c181b370fd7498f0ef420dd1039dc74f075bf92f27e5bc5d9769b3e

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\installscript.vdf

MD5 41bb1033b07eea2e5fc09acb64c9cf47
SHA1 7fdf558821560bbc18ad062cf345b91d26143fb7
SHA256 66a16410fb82c61b70cb8369b4643457fae6ecec553014fcf738173dbac7a958
SHA512 86dac531b050a7d309e61d318cfa3d7a1d80a2954f44f463dc049e51f720e0eba3ef261376b2f30590a8031804bea104fe3ba23fd3cc1d6e54c7d83dc7802601

C:\Program Files (x86)\Steam\steamapps\common\FPS Chess\FPSChess.exe

MD5 71418fcc4c0ba92c2a103a6b8de37e1e
SHA1 e0fa219e4dbc3ef5e2c9891968a06c8c226b62b4
SHA256 649eb0d17af9d933f837e239029b80f3f41324798b40bb6f1ea43e0be910495e
SHA512 f9414c210645f272798091dfa923e08dc3853bda4e3838fe3414df1d43b9166fd3ff8debe77fbd4627e50d0ec34994c660767068aa57f1f66003f59258bb2a82

C:\Program Files (x86)\Steam\userdata\1456296740\config\librarycache\228980.json

MD5 5216ef382c2d09e344ae46f2c073acab
SHA1 91040770b2b51d00e6b7c32a37315eef249a55bd
SHA256 2200afe5bd5dccc0cfe9d34b29eedc49014dd673e5b9b2d1797e3f52a14b5617
SHA512 0a5bc2a98fec77d33e0aca0934d547746883d5ce2b6cfe23e36dc9afe5fbd51dfe12d955213cd0123b4ca004e225182bea6722d0870ea65ba5a808756e893f7a

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2022\Microsoft Visual C++ 2022 x86.cmd

MD5 a8d147a22093c77cdf20d663748877c6
SHA1 7fe518339330ec20fc78352beb841e7a7b070b87
SHA256 8098ebcc001ca152aec47352e9b7d8f086512519cc430a8ec9c82f67fa9c29a5
SHA512 642676197b92ea837d475ccf2754217d1ed0bba7985cbd72202eb9b27541b08093c37dd3217b8946182bfd6b8a7f4f54357f294fc32d1449279390aa65a169d2

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2022\VC_redist.x86.exe

MD5 8457542fd4be74cb2c3a92b3386ae8e9
SHA1 198722b4f5fc62721910569d9d926dce22730c22
SHA256 a32dd41eaab0c5e1eaa78be3c0bb73b48593de8d97a7510b97de3fd993538600
SHA512 91a6283f774f9e2338b65aa835156854e9e76aed32f821b13cfd070dd6c87e1542ce2d5845beb5e4af1ddb102314bb6e0ad6214d896bb3e387590a01eae0c182

C:\Windows\Temp\{0E1B9534-C116-4E8B-9ED7-486319B09FB7}\.ba\logo.png

MD5 d6bd210f227442b3362493d046cea233
SHA1 ff286ac8370fc655aea0ef35e9cf0bfcb6d698de
SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
SHA512 464aaab9e08de610ad34b97d4076e92dc04c2cdc6669f60bfc50f0f9ce5d71c31b8943bd84cee1a04fb9ab5bbed3442bd41d9cb21a0dd170ea97c463e1ce2b5b

C:\Windows\Temp\{0E1B9534-C116-4E8B-9ED7-486319B09FB7}\.be\VC_redist.x86.exe

MD5 337b547d2771fdad56de13ac94e6b528
SHA1 3aeecc5933e7d8977e7a3623e8e44d4c3d0b4286
SHA256 81873c2f6c8bc4acaad66423a1b4d90e70214e59710ea7f11c8aeb069acd4cd0
SHA512 0d0102fafb7f471a6836708d81952f2c90c2b126ad1b575f2e2e996540c99f7275ebd1f570cafcc945d26700debb1e86b19b090ae5cdec2326dd0a6a918b7a36

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 a9c87e13a6010aeb3b2c7594d8b588ca
SHA1 537403fb3e4587f433f05a49291960038a98dd27
SHA256 7af6efb581e10ac8cdeb8150ce340422d1e8f65ccae7cf6ca79b15a431305ede
SHA512 93b7b16eeeb8fee61f309071ec9b952c7078be202b8fabfbd0305ca7bfc10db135b9a10c5741028ac1f8fcf1d1f3c663ba784609e4878a33e2f970fb7d8e3900

C:\Windows\Installer\e5eff7d.msi

MD5 828f217e9513cfff708ffe62d238cfc5
SHA1 9fb65d4edb892bf940399d5fd6ae3a4b15c2e4ba
SHA256 a2ad58d741be5d40af708e15bf0dd5e488187bf28f0b699d391a9ef96f899886
SHA512 ffc72b92f1431bbd07889e28b55d14ea11f8401e2d0b180e43a898914209893941affacc0a4ea34eeefc9b0ca4bc84a3045591cd98aae6bdb11ae831dc6bb121

C:\Config.Msi\e5eff71.rbs

MD5 c2e6f13bbcf89db9bd436777d667d261
SHA1 438483551f42fa1342b726ce507bf89653eaf35c
SHA256 94e454646f1b1ab23b9b58714abfea0c2ee9ed771140894b657e3a7a27f089df
SHA512 50af550623ff4d9e644bb6a191e5709c11a423cfaa3efcbdcac2cb3f441c91b02b9f87e85dbcb63323c133afae7d9360326b95ab19fd392286d83f280f57ac8e

C:\Config.Msi\e5eff76.rbs

MD5 199967974e8bd284acb713158179ee5b
SHA1 2bdf3f6fdd0866456df759fef5e0b9817fe8008e
SHA256 ea52932d43303129a6771710abc04b1b4a99deeea78e90d48f42bf5dd9a4a67f
SHA512 3f17aad7d2966acd5e36920a0dcfaf7816f9ed1f3046b209fbf4b59aaf7019f67f186d4bcf6a21927a286614bfa139e4083c9c2bac9feff2f6d6d466c4f8e1dd

C:\Config.Msi\e5eff92.rbs

MD5 bbc2ac09f8823688d40e5ff00c76a034
SHA1 3267f66e3c7c9c191601d6e498e77a215636f1a3
SHA256 3fac6b3ae69cd61e9841021e62a30237387e9737442acb824c7c2b9ab5c1ab3a
SHA512 bfa461a63545bd049edd694e8517ad07a0397e65d3d74abe3a7395f05ba97c4aa4b8dcd6a4f2e4ec03feaca894c614828f5ef5d8ce9af055aa53013dc66132f3

C:\Config.Msi\e5eff83.rbs

MD5 1737b87c1ad8feae3f54f3da563bc7f2
SHA1 63d1f21e35675e5c4a4414a4dadae9f50a323c84
SHA256 d0200642dd1d3bd27dad6b6b8531a33dcb4a07ffd41a3126ffb55d34e9f1896c
SHA512 55b8c788d6cd4cf3c1306be531f45da354584c11711873d11b5803dc1555991048d1ac0810aabf5419e48c438c723e6d4c9d2e45e2b351268199fb9f3de1e9d9

C:\Windows\Temp\{30E31556-0B3D-4B7A-8610-8DA202B9456B}\.ba\wixstdba.dll

MD5 eab9caf4277829abdf6223ec1efa0edd
SHA1 74862ecf349a9bedd32699f2a7a4e00b4727543d
SHA256 a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041
SHA512 45b15ade68e0a90ea7300aeb6dca9bc9e347a63dba5ce72a635957564d1bdf0b1584a5e34191916498850fc7b3b7ecfbcbfcb246b39dbf59d47f66bc825c6fd2

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2022\Microsoft Visual C++ 2022 x64.cmd

MD5 1c39b0799c57e7d2e97ba432faefc85f
SHA1 8b5029489d50b8b93ef9864dd056bd035d98d591
SHA256 c39c8d1d2065c790e39ec9dbd242d64340774e12db6ef90dbe2933106b46864a
SHA512 ddfe19d501bdc713d85dc1ba96bfb2a14ea01661b5115e1374fc80c83d5d6ab6fffb2375ca5e0121725a3f6d853fe7ba72cf6791cdab699a3171bdd288d05948

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2022\VC_redist.x64.exe

MD5 1d545507009cc4ec7409c1bc6e93b17b
SHA1 84c61fadf8cd38016fb7632969b3ace9e54b763a
SHA256 3642e3f95d50cc193e4b5a0b0ffbf7fe2c08801517758b4c8aeb7105a091208a
SHA512 5935b69f5138ac3fbc33813c74da853269ba079f910936aefa95e230c6092b92f6225bffb594e5dd35ff29bf260e4b35f91adede90fdf5f062030d8666fd0104

C:\Windows\Temp\{DE5C1821-5422-4D1A-B84F-F4FF2B3DDF78}\.ba\license.rtf

MD5 04b33f0a9081c10e85d0e495a1294f83
SHA1 1efe2fb2d014a731b752672745f9ffecdd716412
SHA256 8099dc3cf9502c335da829e5c755948a12e3e6de490eb492a99deb673d883d8b
SHA512 d1dbed00df921169dd61501e2a3e95e6d7807348b188be9dd8fc63423501e4d848ece19ac466c3cacfccc6084e0eb2f457dc957990f6f511df10fd426e432685

C:\Windows\Temp\{DE5C1821-5422-4D1A-B84F-F4FF2B3DDF78}\.ba\thm.wxl

MD5 fbfcbc4dacc566a3c426f43ce10907b6
SHA1 63c45f9a771161740e100faf710f30eed017d723
SHA256 70400f181d00e1769774ff36bcd8b1ab5fbc431418067d31b876d18cc04ef4ce
SHA512 063fb6685ee8d2fa57863a74d66a83c819fe848ba3072b6e7d1b4fe397a9b24a1037183bb2fda776033c0936be83888a6456aae947e240521e2ab75d984ee35e

C:\Windows\Temp\{DE5C1821-5422-4D1A-B84F-F4FF2B3DDF78}\.ba\thm.xml

MD5 f62729c6d2540015e072514226c121c7
SHA1 c1e189d693f41ac2eafcc363f7890fc0fea6979c
SHA256 f13bae0ec08c91b4a315bb2d86ee48fade597e7a5440dce6f751f98a3a4d6916
SHA512 cbbfbfa7e013a2b85b78d71d32fdf65323534816978e7544ca6cea5286a0f6e8e7e5ffc4c538200211f11b94373d5658732d5d8aa1d01f9ccfdbf20f154f1471

C:\Windows\Temp\{DE5C1821-5422-4D1A-B84F-F4FF2B3DDF78}\.be\VC_redist.x64.exe

MD5 ae0540106cfd901b091d3d241e5cb4b0
SHA1 97f93b6e00a5069155a52aa5551e381b6b4221eb
SHA256 8cd998a0318f07a27f78b75edb19479f44273590e300629eff237d47643c496c
SHA512 29bb486bfdd541ba6aed7a2543ff0eb66865af737a8fb79484fb77cb412c3b357c71c16addf232c759d3c20c5e18128df43c68d1cba23f1c363fd9e0b7188177

C:\Config.Msi\e5eff99.rbs

MD5 cd52b7a92b70b635f307a9ec2651a7cc
SHA1 6ef3e173b406a7b5097302422b634809af44c880
SHA256 b581a3c9856138445502e9484e6be22f7a454d8225dc985dc0f7baa62f6189f5
SHA512 4f54764fcfd9a9f20722c4e0a1fc84d20307dba1823985b7d9806ede943f0ca8d5dab9b7201fefc03207a657ebad56c05ddaca7c4387c44ef50f1661292e6811

C:\Config.Msi\e5effa5.rbs

MD5 84ab04f653061a70d21737de0d4034a3
SHA1 cb86c6a8d64433b4587aa9b710cc9f27ff5d30ad
SHA256 5ea976506c496b65965d7046572470355fc4bd4771ad20341488dfb604542944
SHA512 f98221fa5c8e56f8899475c8219641b7096fab77469e21ae5259d371be965bddda5f3ad673ef618944899a219ff0e827f1eb85fa443f2611f7e3deb8264492fb

C:\Config.Msi\e5effac.rbs

MD5 90ea596b2af13bcefeca0b9c3cb80a23
SHA1 3d8cba2fc892122ca7828226b553b1dab7510259
SHA256 0f2cb15c58f5dbc40f02b3db21b5a5315c3130ea73443266550fc5dcbb6f42e4
SHA512 25f242524cb0927eff6a94dc9f1c6de0f6717f178b24aae8ae1f3ea9ba6637c4e7290b12dd588f65ccd90d06d71470304ca70be3bdefcd2f40d2eb08a2d4e06f

C:\Config.Msi\e5effbb.rbs

MD5 cec4546ba16597d33e39599c4cfebf6c
SHA1 4e67f51b9d4a5781214883bd132159fcb88da324
SHA256 38572933c4260e11bdfdedd6ffba4f2e36f416a4f298c023e6ad330ec07ced20
SHA512 1be47c238d7c9cee4d4165ef873f98d0a434a1ac179f5c1eec794b8876da711ada7e737f3658584c72ddd14e737adf824915cba329306e406d78edac49d7a0c6

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe

MD5 bf3f290275c21bdd3951955c9c3cf32c
SHA1 9fd00f3bb8a870112dae464f555fcd5e7f9200c0
SHA256 8f47d7121ef6532ad9ad9901e44e237f5c30448b752028c58a9d19521414e40d
SHA512 d2c354ee8b6977d01f23c6d2bb4977812bf653eae25e7a75a7d0a36b588c89fcdbdc2a8087c24d6ff687afebd086d4b7d0c92203ce39691b21dab71eafd1d249

C:\Windows\Logs\DirectX.log

MD5 45cd0e3e8e2ad54dc4756764b4caed68
SHA1 d994a36aec6dba9563688e2147be5698371bf9c1
SHA256 76db9ab782dfa0a6a2e2c3b60fce7a0a3e4bd07a8b44957b587ba68572c47f78
SHA512 c80312b3a973cc77c7eeb8ac062d08e4aa93094713337255c22d85e42d7f03b4ffd2be748e0c827d4635bb8bfd8cdf2e46f631388c79412979ecd5c68024787f

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\dxupdate.inf

MD5 e6a74342f328afa559d5b0544e113571
SHA1 a08b053dfd061391942d359c70f9dd406a968b7d
SHA256 93f5589499ee4ee2812d73c0d8feacbbcfe8c47b6d98572486bc0eff3c5906ca
SHA512 1e35e5bdff1d551da6c1220a1a228c657a56a70dedf5be2d9273fc540f9c9f0bb73469595309ea1ff561be7480ee92d16f7acbbd597136f4fc5f9b8b65ecdfad

C:\Windows\Logs\DirectX.log

MD5 e0806b73bec8bf965f8ff7afd9f273f5
SHA1 c89423de64ab14c36294cee9a403be1c6ff62680
SHA256 a15794e77d71ef414ef8c0bd76f4d4abe55a39fed207c5240dcda3f1ee10966c
SHA512 e4f03618e58284b121b6066309321d3060ecb48cea1b16dadfe4e06bcbc3482b8530bc9e947278623f18b81cff47b4201dc8eda9844e4d08d0cc89fcc72b29e8

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\apr2005_d3dx9_25_x86.inf

MD5 bae5034d79a545ce120f2c336de0f68a
SHA1 7276af2015696d5041214fa92eff4375b3d8b183
SHA256 f484ef48e0c6e2be8207d8c8c7308dd966d52bea1fde221b927d3e49f1cab0b7
SHA512 be58875949d23732ff63a6f505b242a44811cb9603a9863d6a78a4c9193b6336b89ec9a82666865888590a7b81ad99d466a3847e7c22d0de399d476364280a22

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\apr2005_d3dx9_25_x64.inf

MD5 f052926f0715b88b23ad52855b34df46
SHA1 c411b1ddee73a4b317d652bc3ec159ed58efffa8
SHA256 3d97810d00ceb3e7674a2ef81427d4180f77f93f9454837c5933fbc6a1ad5c1d
SHA512 8fad81eeb503d81b96c098190b5c4155f4bfe1cf2f36fdb5834a176c7c78d11b52efb6b3ba6f3168d7a21a1fc5e53fec770d125feaecd7d1cfad9cb1106d0b94

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\jun2005_d3dx9_26_x86.inf

MD5 62f8ec9c0d3bd54ace90cb15f5caa208
SHA1 e84f4a60c79f862aca0f917d1d30898af4036fad
SHA256 262ed4a65dd45e19f196cb2d9946326693ee31a86b51bf77116dec2727971cb6
SHA512 3de4ad76b207c2a0ecc10835cb787d61faa02e3531f6242a606ac0686cbfa156f59c30695effe5560d9a8481800b356873b7590beb8a739b33c0b1fcccea3fab

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\jun2005_d3dx9_26_x64.inf

MD5 134624a22aefee1fad4eb11445b8d342
SHA1 3f0f65ab8be678250660ba47f33f229643c118b1
SHA256 addafcf0cfd36587c12eb2692922f0fb134874d11005a0544cc054546a493933
SHA512 24bfc2d96b3078f82ba031045271460295f3a1e6dd3c8c30d8d50c98daa9051aeca93ed8ecae8722b70083d3b0ba41735f81068e7514e81767e1e119e45ad6f3

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\aug2005_d3dx9_27_x86.inf

MD5 e45a175750a672cbb2553087a8c5cf8a
SHA1 70d487f99e101bf39650594c27674313181a8ff6
SHA256 d02232a6587c460c026601517178318bab2ac29c59d269c6e3d1a3a993a9a1c4
SHA512 199882ada178e41be14af82001829d009379445028d3803d2a86eef899c01600cf2aa86123311b728e888498674379a35d40ed0964c2f88da24758fe3c7093d2

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\aug2005_d3dx9_27_x64.inf

MD5 7cfa60cdb7e697b40a268eb8814446e5
SHA1 e8e77082361d5a5ebf6163cf880f9700cff5741b
SHA256 0a8ffec8d7ef3a0aa005f604a045dcf80cf5b6473b4f26e30c58eee23e253fae
SHA512 77aaea559ef94d405194351b52643512a71990833dac22a331d5b78d569263db11bf969e26224ba8a362bf538782010ca074286ea605490d40c10f7d2d53d255

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\dec2005_d3dx9_28_x86.inf

MD5 e0b6120a048295ebbc629a9f8fbe53ad
SHA1 3d9cbcbdafc1f9058af74896a5859591e164555c
SHA256 d4d03c4ab3c8486d6331548e967ee17e011fdac90f63c0a9a44a744815a7da7a
SHA512 66c0b9501bb08d41bb708d0a724fe6ac27abaf735ca224074e594cde932ad1f9eb9db5defba8a8a71a0a12904f20324ee4d129a1ac9fcf816fe74d648379908c

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\dec2005_d3dx9_28_x64.inf

MD5 9a3ccc90b71d554e968eca0a812bf0b3
SHA1 0ed1ca28d7f6c8b4e017cd48b8504340cb4d736e
SHA256 510b6d528be3f2997b8bd811486dc3c13eb27a9de22d1bf030e6db0e632cca4d
SHA512 0f10d2ec9f72651927599b69dc3f4e037febfb9c2a18e02eaa49962903c1cf77b63ae6335c06effdfac26b87418ef2c7a2d53dd799a28d275632d8255ffa8be4

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\feb2006_d3dx9_29_x86.inf

MD5 f4c258b663ebf54c55d7d09b05b26ff6
SHA1 85af1252cf3d9ae7afcf8d576cdc17910203ad03
SHA256 f12f4bd86d5cd748b0fcf7106e9dff333c27c0886541339ba1f40c443bdc61cd
SHA512 cbd491fd8e847a4659758bfe0f5a4b56c97e539e3b3aa7ca601c329d858c882cceefb9ee8341d794235b7c2403a090f45a0ba8f2f44de3e3b1685d027d8bd19f

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\feb2006_d3dx9_29_x64.inf

MD5 0d951a2eda3638d4c976a5ffc1a9f8db
SHA1 fca89fa6bc6d4c25758b7baaff9136c3d73140ff
SHA256 ef36ece1a6bd8af3b0b9247b081d28ed511b7e18c43eb3aff364c9ce8d3a06c3
SHA512 89e960fbf9421a208476f7f65acf8047d231f3d6fd87fb31b01185ce88f5ebb1fa7513224124889082f41f1dcd579cc8bbb638f1af73081b4630fb07934dbb80

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\feb2006_xact_x64.inf

MD5 7d46669082d530935e79c74c4fd83bf2
SHA1 194a05e3b019beb07da96c3bef780e6154a78b9d
SHA256 b7ca1a4942057592c5b83b4425350da41c61779dcae608112141d727091842d4
SHA512 590a9628fb90d4140d6f96238caac46f8ab23a59e3a9d94a28d1638006085efdbfad259b9633e4a56585f6cc10119d67abf3fa873a426a1946af589c17f84fa1

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\feb2006_xact_x86.inf

MD5 9dda266ba05cd917cca889659e3b98c8
SHA1 2a2ba2ccb3c9d87c03198b9ef3b9c6e21d693055
SHA256 45146fd446fc8533dc5f97d88bee9ae220161f24797114d0bf3afc7c479ed69b
SHA512 26fa18c8058397b8b5d89baf1fb9cd689827b48781dbe40ddf884c0a3ff9cf8d8451c6c084a693e4fdf107ad181fcce35a2fcfb371548df948416b5713d8ce38

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\apr2006_d3dx9_30_x86.inf

MD5 a49046c25439fa900b1d1bf826506ce3
SHA1 deb71dad1d55dc5af2f80a1c3010c0d899bec187
SHA256 373cca07c0ceffa72901441219a4457de9ff110aededae5e4818588da39cd344
SHA512 d3e04f2e7b358faaefdd683e7ede8a41c2f65b7c8072754b03b2a5de416651f92712fa7d9bc6027d7326dc5bd8a497161685c04cbb7bb36a384aeee8dd77b086

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\apr2006_d3dx9_30_x64.inf

MD5 5d684b07779ae5b421e23167e2b9b44a
SHA1 1e3570908b810cc799f047221351cac7a3583787
SHA256 b70b8f62a2459580d22999301f1823bcb8a9bef54bd33b38e0af274a3a12e010
SHA512 6688f5a9952b36a0a83e806c9be99d9ffe9ba4982b76a9c7e8cef5f824c17ffe9e5ad9ef4e4974c6e2a9cb37e8c05584d8d83033182d1c5d00a786bd2b693e23

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\apr2006_mdx1_x86_archive.inf

MD5 b9dda5b7e6323561b289e0be4e4027e1
SHA1 510f83f8d2b50816e33df8684b35fa53dae51a47
SHA256 80d44f16d81ae8bdb1ef8f0efdf53911523280723bab4392285cbd33a0fc633c
SHA512 cfd470d44ca0d76e756f8a72e01ac7d60c498a0012b461c9b371fccdbdc6bf972ed848ad7487dadea7f16aec7f8749630b1aacc7f936e6ced30a6c798a6c139a

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\apr2006_mdx1_x86.inf

MD5 2ca62bfeb43facdd1fc06f20fb20397b
SHA1 ffbb8f6a8a11f949ca180a7e73279c4b775bbbb4
SHA256 2546a1875bf868edc621a1cd0ee262151faa08762bcced0117e1304eace0c04d
SHA512 3d16b07bbfd172dfa979dfcf4384baff35538de371dfd0b266e5110772f0751f9e5274fa92b06d1f289f8aaa585ca1fe382f8469561e74e343f37e8a05f85dbb

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\apr2006_xact_x86.inf

MD5 f67df97463d42bedc122fbedc37096c4
SHA1 42cde962b355cb3c6a7a7a88c8dc315f811a7494
SHA256 037db252501fd0e30303c11706d804d9eabbf319d0b4e88181ef8f297b4fef8e
SHA512 93815abbd6b6666438adb146bff476aa2728aa7475178259fea623dbfdae819bcf1accddddb7695ef23bb2913d234264ad2ec826bda6eae5d99459798b032144

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\apr2006_xact_x64.inf

MD5 09c9b7346b65f5ba209934f16e711c8a
SHA1 9d6cf0fe295475c438fce214d9d24d5579f2f29e
SHA256 d9c3216ada5dd7791ca852a8ea97765f94a7b56fed27b20916b5067eb82b14d0
SHA512 26b84a457b5bd17a5deba56926af156a2144213a2b75fb015641a7817fd2307cfb439ca22ec0bb584dd21f8f9e4c7b3cc749a350b26cfcd0257f5fbda23fd9c6

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\apr2006_xinput_x86.inf

MD5 53294b978995caafcb6a9ac8f67b8580
SHA1 c165d2c615261f135f60442ad0a6e589d681a850
SHA256 b604779115d32d439f77b33257c96f928ec4ce564189f7d0d357099c1da140c4
SHA512 a3da7e02ecfadb181ed13855b093908fca0aae2ee75e6bc4f873fe69a34cdc08f3bf504aac2ea98f9573437d2ff000e43ae8450c87036ead48e6c2b80ec523ed

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\apr2006_xinput_x64.inf

MD5 019f21ca754cc2e21d97c3a2a97d5ef6
SHA1 54d97b4018e0cd04c63f1221cd8da7a0990a2cb0
SHA256 f9d01e93e547045e1d232242c900530dfdfa54698586c7049281965e3bd01ca2
SHA512 0c0ef6a8bbc05eb81cdba8aa2c3f4a0d39f4859b6de495c79f813894253ad1ddca4851841064cadfb1901ea1f056c68560aae1e68bd12c590a143a6b7f0b16f6

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\jun2006_xact_x86.inf

MD5 fa59f92f7d32613a12189e75eaa700dd
SHA1 f2c3947427e7eca9fd1ad53427d1dec28a5f0f55
SHA256 6bdce6f6779712e38c6d9e6e5961217e417254089f096c719f25566e952cb257
SHA512 e8dcbd918cdd7d98a94d53413088e2f75e4d1a15d4f69b6927f3cf19760d9f2fc577659fd533b2e4e2997aa29f285b0fbb35830331997549e429dbdcc7ae9853

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\jun2006_xact_x64.inf

MD5 a983924d66305104b4e21a551dc66448
SHA1 23deca69eea790ae7afc30cffa55e87ac8520cdf
SHA256 fe9caa55be17684622fd7339b1b96e1f0d107dc33c065706d24a435d523c6e12
SHA512 83c2117df0fc37979ccca7d861598a8a127d135456f72597366ac65276906435ab99fa353f246f9f61634fe96f8376d38253300f177d5cedac194cc92407f3d9

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\aug2006_xinput_x86.inf

MD5 f87111f61ac57d80199cead8e63ec45a
SHA1 4a525a78a90fa87290f60f0598fe285f9f46c90a
SHA256 cc66d67daa1f4c31ff5e59c2606c3930f72204a5057c29b9d58dde37a47b1cb7
SHA512 ddb1b7259aeec662fa271f6a6d271e9d48c4b8ce4d47d452dc2ab15611421baa13cec0024e668309b7444b31fa5b24f41b032796c81a36e94d7e577d9c516712

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\aug2006_xact_x86.inf

MD5 ddb0d03b1d4a6ce09da5cbc61f5525c0
SHA1 ba5e1361e394301d5b9d9a4aec68ae21f19c70a5
SHA256 34e7227e03812fce5415b0a4c3d15a9e9b259350ac9873db2a98b2ea76ae2284
SHA512 2160652a7f8adfc346e0af6f822875c34d2d13f168b9895b063925979d4fcf33a7da777ce7d43c9ef2b23186ac00378e8c2d4ee115bb2ff794e863e8b6feec5e

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\aug2006_xact_x64.inf

MD5 d40e6c659cb7a757d8e751b050495927
SHA1 a9c515d786bc8f5c739fcf5ac1b6e15365f9e14e
SHA256 6fe310a67227203bbca3389dfe3403fa268cb424f4b525cca2d5407ed26670a5
SHA512 fb58acb95f1914da3c650168ed50fb6f75df68773daa8e8389db9c7c7c4d0e8bf93e46458fb76de676acc65132d781a7624f67289860a19e03520ecdbdb66896

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\aug2006_xinput_x64.inf

MD5 90d7a7386af9b951f939d869567894d1
SHA1 ef70a6efb5f7b32193bdec6c5ff13a4abeb4f00c
SHA256 35f25b9538e55172cf36729519581444e26b38a9dae5cccc4ad75dfa34ea08e7
SHA512 10920d0116aab01eb1130eb91b26bd91d4b3ff8e09a77db5b79f88c94c463389548c2b3ce494162d4b2c3fda903eae6c2d87492475c56fc901c37fc8306555ce

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\oct2006_d3dx9_31_x86.inf

MD5 8f7aa1f0f2389f3cac574652f5d6672d
SHA1 921f2161cf46c6314a330ff52c83f8a3f1058f0d
SHA256 a1c61096019a6ae1a9f31e3fe67aa2bb7e9e451967959d7088344f3f20ab572e
SHA512 a85c03ccaa27adf3c75287529f18e84f526cf91785e0f4281db0eb86feba78522603e21def19bd2a33e03ceaedd9109b8af1dbda4a3fe93fe6eb95366b6df747

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\oct2006_d3dx9_31_x64.inf

MD5 e2a0e651573cffbf81578b864b50cfe7
SHA1 1c739f17f63ce7c5ba00638259628f7fc919cf74
SHA256 c031987e68e476365cd885e41a072f85fdfc9e480c93871d024a5ccf26d17118
SHA512 abfc6452d055bf6a3fadafb9562352bda90ee0edae5a0fec798951ef9d39701835212533a60eaab67c5c0fcf01ccb9115fcea3779b024ee1e11f217cb676e7f0

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\oct2006_xact_x86.inf

MD5 6181c4b93bad5332b34180ac0bae5077
SHA1 259c8de2dff2a5dd8d4971fa1ab3fb0d193ae90b
SHA256 66998b21cbe6f05b12cdb4bb45549dcb1b4a92f8a1b910334150a8d767fa39e9
SHA512 8508ebc77b667907c5c2f587131f24cb25c5a67ab2f7d8b94216931457f486b37b9701397ed6ef527c9c6786f82a938a52d2b6cb0afddeff4101cb100e3ceca8

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\oct2006_xact_x64.inf

MD5 535ca39d61f752c3f1ba4956871fa27e
SHA1 4941efb676adedb9a46d7cc7415d8af03957b3fc
SHA256 4c388e9eaf3c39e75d003a58020e491b675b3a6054c702062a9c90e86f691d96
SHA512 f203958ca9c7d37daccd342a4deb125b60ef839b5b674a2a0220d7f0d770d5cfcd5c1f691470200bb4d8711f2f6a77d8b968e17020dbcec8c40b127a09f5f9de

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\dec2006_d3dx9_32_x86.inf

MD5 c28f4fd1644e2a20b1c897438e197e1a
SHA1 5178534444ed7dec8c63f02defe7bdb864c47123
SHA256 ef09d783bf5cff2cfba99946e5e71fda577b196a49c88bed1c51b5fd29cecf94
SHA512 7cf93260efb1d794a17ba25b1fa02ba03b0ceeed8131d274b805155072a9a2b92a899471a8b23add8bf46c6a5a3cda63499043eaa754001bb43cafd882c8e708

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\dec2006_d3dx9_32_x64.inf

MD5 39929631df326b944470256c4f9cbbf3
SHA1 932de27abf59c889c02ed747f0ac04f5e494492a
SHA256 ff00313af4a90f426492d72969f5efc6c56a17f2dd91f20cb5c0a38d9f1f2b6b
SHA512 8dd2755a2b2fb90c6880cbbde65d127f55d12df2bab4560ddf86d6793b2cd4733929d97efef5fd8eeb417731a571888c893188df0361ee57eb4437fab331cb13

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\dec2006_d3dx10_00_x86.inf

MD5 1b702c5bdf738a8abf4a3108097a6b7c
SHA1 c1d9c9d5e07117f273064bec36ac92b5ed624d38
SHA256 33291a47388edecc059f1825c1979142d7a9cd4a850716f9dce687deba1fa750
SHA512 498483dc823e76316e977dcaf7fbc557c3e60c67129a678701d5168105edc97f97479107330d5eb3989dc179273cc9b74d055827f036f2f3551a0a3d398f04f4

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\dec2006_d3dx10_00_x64.inf

MD5 eec826f7141bedeeef38c5a3528b5034
SHA1 529081aedecb7b9fbc7d9707eeb6415f98bc128e
SHA256 2a43ac72ab9a6f4771c02b6e10884921b733b86dbd7ebdfc5502d011cd5c8d05
SHA512 62cbe09326cd04c891faa124c65554fd631382a2e078c70ef72a1a07d57239b3ce599b57be3fccc755075174df1d63ac3597dfb3aef9b4ea34ba4597d804d2c4

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\dec2006_xact_x64.inf

MD5 ca414f7196d9b2a7a9d4057ca0714fac
SHA1 7eae4a5bfcd42915adeff5377036ecb4bd656999
SHA256 f2f2040b8d13705f00d8e20a53f22093aa0f8c8d6aa6224992ba727ace7b75f6
SHA512 1efb725a49a8ea7125074436bfe988af360b1ac22629d34a754cabaf3c151855d08e826a0e244cdf9b624b531de14d23f32c1c16c82f6832c8604cbf52882e11

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\dec2006_xact_x86.inf

MD5 211700aaa53bda6894be85df3dbdc792
SHA1 4874325e984b4f0d884cc732da474b3bb59d3848
SHA256 4c0a40094228a51f567bec65c2cdf289d268812c1af579e3c6b76cd3adb77e12
SHA512 8f51d965cd1ee20cac11256afc5e422d94d43435729d653b25c5347e108fa50e59c3bba18fbd7fe4e2a1a6bd54da1622b80e029a5914e973f3faf5884a262baa

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\feb2007_xact_x86.inf

MD5 5f1df74b0110f56ae0b6556dd2dbc14c
SHA1 c8c7d383f5e37c06015e1304b599568999bd4e09
SHA256 64b6020f43bbab7f7c2368fcfe7224165fef555b2bef813aa13b2d9f6295d46c
SHA512 06572fbaa625c85b05f5f4eaf880083607b6d010a8d4bfdb28cfbb1021b08e533f3491080faecb24055acb897b337d83caf9306fadebc1f1353763e8908850a5

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\feb2007_xact_x64.inf

MD5 42161a1071084cb4f32b0d7d748d9b62
SHA1 e7e29605c21b7a2c370dcf979a40c50b93ceb298
SHA256 184c1684c57de07983edaaa1ae2751b263497673ee8418af023a63fa03553f53
SHA512 2aa8e864dc28ee5d0583d044e3d8a9399d8d49b9fb1c522c1c640eb7b079515ffb0bac5280a220c23e15ea4c7ad45c7f1722e05e9f9baa069f4a2670e4976358

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\apr2007_d3dx9_33_x86.inf

MD5 044cae9c30c88bda73727243f5e5206d
SHA1 de744e349cf4ea458b10657d510966d21ad08d67
SHA256 349a09a2791d697bffffc61410a536cdcf258f0d7c86dda44a297e8aec4bdf00
SHA512 18e501142004afbcd28b41bdd3a9b19e2eebc047d7858ee11a9135f19759cfd8c643ff074a51e937bbcab7162888fd95effc146be21fe63dfc300ef03ed44056

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\apr2007_d3dx9_33_x64.inf

MD5 e40a6f3215c3f1397eb18b3388f95032
SHA1 4845590abf12bb5725d94d7aeb953a5686918537
SHA256 2d87efca75d8b9aeab3262841d52a7c56bad34ac6b9691f4df2d89b14c950f8d
SHA512 942f54a3984a29e1973ec096709de890fe870a9dfc84a8c5597244251cbd69f84543cc5cffe620a076d0a16dea6e393c6790553d6d9e2fea1af1c0f00a12140d

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\apr2007_d3dx10_33_x86.inf

MD5 fda5776cc944ebf6d84fb45c8a1a35f5
SHA1 f3b603dcdcfd6a310c2b0945f1a3b97276041ecf
SHA256 3286ba521fda888b1808f12955a58d7da4df7d2fdb472c7837a1e0e1a6317a06
SHA512 b051b04ce06ad21d08ace3a28d490214556f4b5be060ee05f8a4ff872d1cc72df05624021a9a0cc1efa4e63772f55cc61f11edf03537831a44ddd6ab409e83b1

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\apr2007_d3dx10_33_x64.inf

MD5 00ad98b94609033c2819745587b0eed5
SHA1 2a07dda60a97dc2b4a7cf3cfc6245e72cea0efb0
SHA256 3e61c4d723d282c36c5493d82644ea96715b7b548e50494d22b4a83d4e2b8237
SHA512 e7fea5f9186c324423c0b129dc3e8594df49dc84c61400f4635ccf688075b256d7923ca8f4483bf7b2fe43862e71aa134cf2c9545a23c622d0cc04dc7d6dac1b

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\apr2007_xact_x86.inf

MD5 99f23af200574f24c4c5d9ee12fd2cb8
SHA1 f0e50816ed808748f9379733921c9302551cd937
SHA256 008db10780aa8fb6f20b7aa5f5d513ca77efb36c8dddfb9ad89173ecaf700af5
SHA512 5e97d157ed8ad10f9cbb9490a16141fa52b2f32e09edc7e7f5e4b2d9c9bf38bbb85706d76543ca4ffe9b54d5fbc4b763b7df0893f1e7e56ae4c8ac1a720dbaf2

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\apr2007_xact_x64.inf

MD5 dcfa000ba60f73c2c02ab590faa1ae10
SHA1 154b9ff40cd92bfaa572b289662d0305fa2fa017
SHA256 bf6ca1165632efccb0292ae8b739ce68d78ebb95dd39b8e4c1717d78a026db10
SHA512 34f6cf1f3fbbdd79d04dd55315b0074abc21b9c26df6e2fc9d66c6d15f36ad35edea741000a84a25ea9a68a94d46f500398a27c8865a30746574741dffaadabf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\apr2007_xinput_x86.inf

MD5 e188f534500688cec2e894d3533997b4
SHA1 f073f8515b94cb23b703ab5cdb3a5cfcc10b3333
SHA256 1c798cb80e9e46ce03356ea7316e1eff5d3a88ccdd7cbfbfcdce73cded23b4e5
SHA512 332ccb25c5ed92ae48c5805a330534d985d6b41f9220af0844d407b2019396fcefea7076b409439f5ab8a9ca6819b65c07ada7bd3aa1222429966dc5a440d4f7

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\apr2007_xinput_x64.inf

MD5 94563a3b9affb41d2bfd41a94b81e08d
SHA1 17cad981ef428e132aa1d571e0c77091e750e0dd
SHA256 0d6e1c0e961d878b319ac30d3439056883448dcf26774003b73920f3377ecac8
SHA512 53cac179d7e11c74772e7b9bd7dd94ffbc810cfc25e28326e4d0844f3f59fd10d9089b44a88358ac6dbd09fb8b456a0937778f78ecc442645764f693ccd620b8

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\jun2007_d3dx9_34_x86.inf

MD5 b1d65a13b527d75ecdc30cabf407d103
SHA1 db6df8ce6c28cb4a0275aa134c2d42a0ed957fa2
SHA256 a568b7b8a0360ad94b1ed6388eca6ca9d8770937360a426a0fdadef9a4019bba
SHA512 7d80f772b36c408c258f7db1180bc09996620634e6304761f5c10659d0885bb8d0b19bcad50a13a5d99ee92dc8e15587534d966bd32c5a8910308eab623a7f86

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\jun2007_d3dx9_34_x64.inf

MD5 d203c1993f21a870871ebb0c99de313d
SHA1 e69a5bc70fe66f89fddd81330dc148a1e788a56c
SHA256 77f3fa1756181a90d2ee63c26cddfdaba0d720c9a49121db28746cd02b3e071d
SHA512 e03c341f2d8df6e8174447d32bccb56b096073a35a3d8193860bd4628d812d1fa381bd35a55e17b4f27c5c5fffddb25223d932e995736fc608030501954d45ba

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\jun2007_d3dx10_34_x86.inf

MD5 55e30750af2bf57321ad1097a512d725
SHA1 0af3c73afaae0e8a1fdabe25beeb96b32eafb9ad
SHA256 808983dfd3db7c3452589ea4e14ab4af8ef47dbad3b639f9a3c55685c9b73867
SHA512 0ad8b51a550243d3f24ec5934f2b5e53f1d8e0b87997a7cda38840b3160121f1e221e6cb09d3f5b384df74be2ed10d4dd92fb02aff98bd0ededab751ddaa7149

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\jun2007_d3dx10_34_x64.inf

MD5 bf312732fe77f600a36f2a7b98a346dd
SHA1 5e9c70959111dbe60ad86258cb5bb20d0e9caa0b
SHA256 0f75b7ef71e183476ec938705024eb8a10a77d7602a336be876c7f5d17429725
SHA512 10f3d128da5180ecccda522164269e4940b69a7f55af9501de648e572ab5275f02c113be5342969c73e118fb7ec49209883c4a8d6c4648fb898289f77ce7a3d0

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\jun2007_xact_x86.inf

MD5 757a5f0cceaf39b5c7c9bd61650fd12e
SHA1 a7b3dda77f0f2334466d324eefeb3e5f6809d880
SHA256 33b980fb973394d9d8cb4645914d4cf6793bf92bd311e0431ce9cacc59fdcbc5
SHA512 f4f969b017c9233bc4a2267118fe921689b3237d28fc2b251ea3b6227e0b17dee84dfb8df6491928791891dfcd265688069b92d8a88cb9dfdbfff07b24a4dfcf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\jun2007_xact_x64.inf

MD5 c8ca749e73883789faf6561a375d9b51
SHA1 fabee2ac65f1d4267da8df07cd3e4cf4eb19148f
SHA256 405d8cbe3c87b16afac2a9254497412a42de4ae2d8fb470a1234dc3260e0b90f
SHA512 56a0fd5b8f065b82f5f9b73dbcbf912045847180a6614dc48ed7b27fea3909839615aab0c8d0a122d9fca952e9591da5152b4c618e84a2d7aa409dea4fa4237f

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\aug2007_d3dx9_35_x86.inf

MD5 815d75e4264b1f9c0bbcc529ee7a290a
SHA1 cc956156066c87ce1bd2b7628453f1824a426412
SHA256 c0d87c1b079b54b75b86939199ca5ee1f796ae3de9c4ed0ae074a4fa01823c73
SHA512 bdaaca529cd52df20cf1e35b45e1824fe48d09442666b18faa3e948937026b09d880a27f1d915816bc6e1d98b0b486d590f867aeaa046317b7f48d6a0f949391

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\aug2007_d3dx9_35_x64.inf

MD5 0b3f4e715a43024fd00f769e62cd8b9d
SHA1 ef6de20d95a920e3b69307737976bb243783160a
SHA256 e34ad9e49f31cb9211e0f350405c344d93fc65075e470c8fe09dd78af68f2c80
SHA512 336df101ab341c5f22d516089fd31fd9f0541a01d3ac4ab4e171b73452ba3bab3cad84af50f1e9da17c46bcfbe7a1b52284e2ef2af49c67c6d6cce2969e14ec9

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\aug2007_d3dx10_35_x86.inf

MD5 741a5ce76295b86694cd7540870eeec2
SHA1 2c165af0047c98d2864379ea5fec33bb1507bbf9
SHA256 7987e2c475705bf8f049a15af946ec0cb5ccddf27c0b5c8126694421df601770
SHA512 b7d0a0bdcd060ee263860024abe5b054aeb2c8c8c7ccdff9cfa9886188d7177b1bb8799909b3c95aba181292b5bb9f9426ecab0a6a2689970afca5a1739fc4d3

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\aug2007_d3dx10_35_x64.inf

MD5 703b4ea6a182ee3b48026d01319579c0
SHA1 3184959599dcee4e74b251ff14dd2aac81e2ad68
SHA256 af4bdfeb4283f04e24475279931e042f17052224cf708f0c444fba2f2e221289
SHA512 a6e67befdb1d757bc08f6a726e6d79c4f51324edbd1f48730616e27079bfa60262b88b4c49cca046e3da3832e375dfc29b2ff48b7007443606da94793ef7ed84

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\aug2007_xact_x86.inf

MD5 8898bbb8acc1b54b3b9b6a2f6b0e2cfb
SHA1 e5ace499d26e573544be76c8e45cc5278d15022e
SHA256 c246c38e41ed71bde4b3cce4fe337826173896a04c26f8b2a00b06bb0cec024d
SHA512 b0633c44541cdaa2d2c3174027d849ecdf5ccf2149da4a2932f59db600cafd8b959aa0382973e23fec7a76ed7555e96065a4d8aa077f50c2a14e5080673aef30

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\aug2007_xact_x64.inf

MD5 a78f12b4514614db269bf55faf383875
SHA1 0425c3e3ccb15f691d6f5d30b71856138063002b
SHA256 2fcc4bdc6516418d3b4935c301e14f30e3bbd0adfd264bc34067b27b0b266b8e
SHA512 9d1cc2704541b71b246c2cc8e6e1d667cd7e691e42865aa5b0a800cf26386cf00781ae7727b7f90711e987148e98f4253e05b6d3872d3f69b0584bcf97b3fbea

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\nov2007_d3dx9_36_x86.inf

MD5 08ffe480ee5e54fc19a2feea46adced6
SHA1 c939391c489bb321f70707183b0d3f4b5f13911b
SHA256 843764f70f56d430c0695e263c895a135a631f793213d1005fafcf9c210d1ac9
SHA512 c05aa34b860b5620c982731af15889da5571395fb35faa24d43ccbb1b42dcc756769a0b9153c28112d7347f28d4ba933d8b15fb36a3e511ac99eb148f848ed99

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\nov2007_d3dx9_36_x64.inf

MD5 345ecd585eec22fb33a62e59c2758b6d
SHA1 2d6ed63996903c32b3e7ae24d86c924b11d53e7c
SHA256 d1b544b3912e73e5984cd759096120febe6f17e41a3cf920ef82431b9b569c1d
SHA512 6d88cd48bc32a008989ec4bb71afba0afeeaa12f17833fb4072c38b237bd006f192f4e4e7a65d8aebe5d6dac1d13098eea370b03ced343a5541e0ef23e813364

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\nov2007_d3dx10_36_x86.inf

MD5 582814cd47564fe8e3424cb2eb090501
SHA1 87a2114434564bb0a5cb4ea337577dd405f5e42d
SHA256 96f48bb810055699d37e9e27a65947483a0b4df304870e3b5448d3051b3e4926
SHA512 203d522271aacc0200bdd684934a8478b54a258f55ecca49a178ccabf418a328cd02ebd2a9656bd9dcd40c33de21d33664c5b16c1e7877de424d37b4f9b3e7a8

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\nov2007_d3dx10_36_x64.inf

MD5 60e353607750ae5e63cb8e56f443321a
SHA1 8f1b07f8cfbd66e9a7e3c15118bddd99b04d6871
SHA256 7a49ae818e199cf9f9bd831f94cb6d03a1e72a141d76546261979b30642757b7
SHA512 038aecc1264f608c6028ec2288f0d8de6c9202bb3d1e96fd247e889afa06f1ce592bc9e224f37e83f29c0984cca6c4e85ab11eb28570aafa20b076f2b2e5b6e8

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\nov2007_x3daudio_x86.inf

MD5 4287ed3f6647fcd80ec6b0f7f2606964
SHA1 27b2e4212295478645a017a4df820af6bdb4dd0b
SHA256 f882bdbc8230d24b24e20f9d0db447586e9493801900a8ba381eb493bd41f5d5
SHA512 c816d7127fb7fadb971b757ba76d4b918fe18bb16e5d2249b4bd80b0b6c47208e7ba5e11b521d9cd0a23d464c392f98a3c617b91c0ae799f3aa10401b4e2bcd7

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\nov2007_x3daudio_x64.inf

MD5 55402001ac41f0bcd1f457a36d298848
SHA1 a18fbdc9631610f2550f05cc3aed5a665afee7a4
SHA256 1cc72ca78433fbb72ee6b654c908748ea846c87c80424816745f285ed3bc910b
SHA512 96cb7ff1d43a7c1642d8ce9cb3c23ba460f6c083a7927fe0ad7a3ebb85649c384ef0542ee3e7dff6b99413b95a2a333327cd28349665901f466782fe96ee491a

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\nov2007_xact_x86.inf

MD5 7e2a5eadf9f1eaf90d5eac15b7a9f558
SHA1 907cf74056bf7ad91e47c98aaad9a092ab42fd02
SHA256 24714f229e479338ed89bdd6143140505fd63f517b7e71170ea6c072a1748b06
SHA512 63c2f438e6feaec2b9fce15617940c97862a54527d549fb6ea149e4d18199c1752e255c6cb167ff20b9cc1f74b87ffc97110b65652bc5c3883cd14894d21f8fc

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\nov2007_xact_x64.inf

MD5 bebd51d24aa338f6192e291d03684b6d
SHA1 cf2c0efb60f44748b0ef3f95276b0512719f130d
SHA256 841d579573afd51499c7cd8ee986a41db63cedb722e8fac351d3632ff470c161
SHA512 28fdc41091d761faad79c1af33da0372086689113df2f1cb40513d50727e5aefd652a977ad5c92bd62f1c5ef9cfc24c23bc6758ddd6a4d1ac5db0b5e401432ca

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Mar2008_d3dx9_37_x86.inf

MD5 020d1260794d5780937f0f7a919cd62d
SHA1 511ecd1186deaf129a5532b79fc776a9ab8fa9be
SHA256 d55858e166a2fe00d4acc30da756f0ab2c4dd5a79a9874eab3100722c74a1b75
SHA512 201e24e51dd859c35fa9d0a403993cb0b2eba67effbc598ca4491f05bff4f0805731b1e7cf6026b7dff9fbc3167c16b43887f080fa40ac11c6ffe09297401f9f

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Mar2008_d3dx9_37_x64.inf

MD5 ec75fe979fd2c2372ea75c72a905c832
SHA1 954642c9087489285c8f0786b63aee108ec08d04
SHA256 a4fda3373241c2748a969ddeeb6ef41b3cc1bca6608362ba87db75f69023fe9c
SHA512 dcaa772d21d1be7fe59f1ad32d10e7cb454ed2a4d98b3add201f8bef03718c29f9915fb4cb779111a954a9d93d898393ac2ba593c2d4d378b88bd492b7b5381b

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Mar2008_d3dx10_37_x86.inf

MD5 1242da12c637d5976af936f60f387c26
SHA1 a6890fa9d41f6785d54a7d3e1b229b64010089ab
SHA256 bae3bc2b7071d2d1c657a87a8c8af6c0fb5373f11c9aa5f61b406924717d0792
SHA512 7fcaf6ac1a8166e8c68d650dfea40bf329565d4ef92316ed0188a252736c9e288cc8f7d017b0de4af05245d1bf94a85b2dc72a93c618a1f2caeda45fd84a6a09

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Mar2008_d3dx10_37_x64.inf

MD5 b21f653f707315be4c85ff4630af305b
SHA1 32b0d69a786a2cd37d2fdf541931d90ae8656944
SHA256 f37681f4d49f71d48b1960c3efac74f28af9fa764b29ed3a40b5f424fc8f60c9
SHA512 e68348c9413f77749218fa34e55e416c7bac95f234522bb6eccbed1185a3f3af2a393511d3b83dbfc64580e1725f9f53e7e586570d696a3fee76761e8b0902f4

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Mar2008_X3DAudio_x64.inf

MD5 2f7b3369825c6b74f4b645ebf52c8e98
SHA1 105972c77223b943df6533d517c698241ddee9b1
SHA256 b7dba312a71ed109c9c54cc5cc096096eb8cf0962396e8dc996f8fa28307547c
SHA512 88a47bc3520f9fbc082f1ddca7e083cff9bdbe5c4a0a851925ea14d8e0f327f2a9982e5b4ac457e4950acdcf6788299c4e13a15ff38bb76c8d212f1466cfcec2

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Mar2008_X3DAudio_x86.inf

MD5 9ab8a749708995453ee8a995a877af2b
SHA1 eb8a0ad7f7b38aa190e2fb8a4a2d11cc9fa9b493
SHA256 0b6e28f00364a9ff436c3d99f0d4e80bf615f1450f420122324853cc0b88b16c
SHA512 9b0ed586fed0ffe25d4076b202afcc7ad580dbb05593e392a12d64b639098f8b7687463f213e53dfbb85616c5a3781adaef8f1ffd293c082a84291472266480b

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Mar2008_XACT_x86.inf

MD5 e3ad8befca2528572d6c51a15e072c94
SHA1 9718337261b8b93b546a5c20bee8b44d26707053
SHA256 6b0cc0dc993e172855864fa078c4e5c8f2f46bfc3200bf2ccdf3292931ee3cb2
SHA512 de4915424d8a53ede76394fac14c4de46838f21afc8bf30f560d2d00df4f366dc9ab48bb343be3580087a7d5862a14c08f83b5d9cc8e78aa4cce4e6b71b70c59

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Mar2008_XACT_x64.inf

MD5 d5debb90aee2d6a73bb448aaa99f985d
SHA1 950ff1a768bdabf14ca2cc6809431c3be8b19d9a
SHA256 1038a41e63ee8abbc8be85a86fafb2ac1d03defa6b88deb270f96a6ed1a97122
SHA512 dca65e91d4eb619fb34615a3c8683e04af84e843346b88bf4d52cae0c27e52b5a7a417c531eaf50cf45932e3fd6f5fff1bcfeeea4fe65efffbe791c8ac1a8101

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Mar2008_XAudio_x86.inf

MD5 35c6f6f109257f242cfb2ad2062d50c4
SHA1 222406bf52449ff0d5a7ca8ace6cbd3dd5f41708
SHA256 472bcfb54b5d63377da128596dfb30c8f200f79edaaf6d29de1afcdb71a3413d
SHA512 71180d47d8c177d84e68bcd6b9f948dc8c946f7a6c4091e20e04f1c8098b9ba92bde976194b06595834ba4b159a702c091d04ec823ac377b7ba7713f057f99ee

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Mar2008_XAudio_x64.inf

MD5 8eab978252843c5c47a913e4eee460b5
SHA1 b5ac7e6a36157c41d56e1113d7768e67530640c0
SHA256 10a2db49dd3bea59133bbd82b3fc0f8a959b65b0c250c11a9a6f3123b961e6e9
SHA512 d1b7be4eaba7126f3f64d625cb9c9d16dd40dd1dec96b4d647f9a5e24d6b945faebb65f25348d9ffbe092b03b1a54414cea9a2e4d1eb1deb102ab5abdb34d810

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Jun2008_d3dx9_38_x86.inf

MD5 c7fc0a82355bafed08a5597930b80263
SHA1 037419fc93581e053b4cd31c57222c8b8761e242
SHA256 06faf7f7ea5503dcece13d6537e57cd2581d5188a5d839fe7f118298a721b51a
SHA512 51829843dd7e2e501d6054f500fa523bf63f19382890880cac0e3f207a00dbc544195489de67c7dcf876d9061f2af12bd346513e1c98047b0c185669be5d8cc9

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Jun2008_d3dx9_38_x64.inf

MD5 df5538bc9e0494845a8e2d607e06e561
SHA1 a056a64230f03835dcf9bbc5d84edc2eb0c09484
SHA256 ddad68974990a21a8d4a91c47ef1034ddf0475551586f04e86b8cd2f0c990d6f
SHA512 4f19379034eb47e01de81a611facc2c8300c7b10306ebbabd232a249debb4acdcd3de42b71d851011be5b3abcae1ca232ae6891be79adfd754369dc0f16b249f

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Jun2008_d3dx10_38_x86.inf

MD5 d12a6b9889eeb330b4a4e86e9bd175ae
SHA1 62a4a7cb8fcc0edc240caea13b2b487cd012fb00
SHA256 f5f54664ec67f6333a9f0607d891bd0dc2acfee8cce09ac4ee0372b5d0aa12fd
SHA512 86274606e76b98b71dc4eec5180b3a52cb6627ac5ecc8b008512b7bad404e03b834b7129ce326a3c9c1cfa8b19bd5e97467a9390bc8a0e749771ca06d9f73491

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Jun2008_d3dx10_38_x64.inf

MD5 e2b760696e2300b1c9b6c2531b39d029
SHA1 1c576840cf04b73de362b28b943bd69b09b3883e
SHA256 0de0ada970774620c0905227666fc30910e64f3cfa4b99e4c5481685d12e3ded
SHA512 94e4bd9834c21acc7709fd28dc557455929f940be0a4a794105188dceed7e023f87a489a1de44a9f93f3780f6f9088ab3d4e829a0089bec74a25ba4297a0dd73

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Jun2008_X3DAudio_x64.inf

MD5 0225e16dbd17754f202f34cc1fdaa60e
SHA1 d8d7e02849d9594b346023e9e69a5b2a4fffc45a
SHA256 f4526ad18f081b84a139e6d98923569fc8ffc7644e20499e2f68abfb3e87753e
SHA512 2b308f4c4592a80d4215781ba7ace57f93a7449b2ce36a7c78203e1f16f1b7321dff6c32272180c9cbaee5d31afbdcd11f3d474004fe13c63752d3c0201d2033

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Jun2008_X3DAudio_x86.inf

MD5 7949a4d37b517c39295f0d656cbde501
SHA1 27313949fe172d687e9faaaf91044ef56b7c973e
SHA256 0064b7db5bfe52b6f40f61d962901c7baa116abbc72328f50586b6fa65f894bd
SHA512 93d947c95b7ae357bd47a5a050437cb05192eb6c84e9222a46d70ecc7c54bc2a5cb1d3f65cb2a4db5fe18106ed9be5a7aefef08f9634b28cd5cf128bd00352fe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Jun2008_XACT_x86.inf

MD5 59c4f83a7fa2a8dee4970d37a96c2b55
SHA1 75b42f58c61d8c8ae185cd8560dbfedb7c4d6d9c
SHA256 79cb10222e466d54908d30ee433830e9673d5a538fabc5f4568521c2aff66eb1
SHA512 9a9b7ea3b354cbb29d88797533332abd4d1ad195b28ee6af05a0c6f83343b1e2ae0ce172e9941eb5f0d7ed3fb0382c1319fe4808ea2bf8988a1dc63b78c8c095

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Jun2008_XACT_x64.inf

MD5 9b2753cd7967a014a6391b44900ce258
SHA1 d6d227999ad32de75e05ae7d7fc43640e8893ec4
SHA256 90577c4c3d5d0de80c805caf0cc713582698ef7224fecf4ff911ba6309c5c920
SHA512 31136e55f01d382cb20f7109d0369a3ab7c8997dde1b65e9214e410ab686add4ef6950241c0aa9fc93ea0cfe3134d98ae1f3f48b44e92a620715bf159d6f5914

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Jun2008_XAudio_x86.inf

MD5 e82ee7f4d71ae8bf90378bb6dc107d57
SHA1 6fc8e3437dc9d87213064e69bf0769d20fa7a739
SHA256 e5e435c4536f987e1087218b025e6dc66c24c3e300e839391891f1b3bfd360dd
SHA512 baea9f4d6c744f26b55426c9666f135c07f3e8af15fee04cdf34c0af83567815dadd5a4ac8a6547a49d58e0c837a28fb18c4fe1f50fbed8da9991bd2aed8ab7e

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Jun2008_XAudio_x64.inf

MD5 c564c4dd81be3fe65783bca776be371e
SHA1 b60e1e1e34b8c56fac53dd7af79e1e05e04866bb
SHA256 9ce21064f2feed9bc9426a6e92e9c850aae31abeb80c7906ff917fbf4cc03913
SHA512 5b790aa1a6215ce8687cf3503267e31d1d7b41b5e4675bc634be957fbe14c53556989278017f2c97336df13d16eeaf975e0602a4cf9c8356598c392977df4dcc

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Aug2008_d3dx9_39_x86.inf

MD5 b28ef6e3eebceb622d1431fedd9f545a
SHA1 c6ae73cbbdff4632911dc1759a9ccdd73056ac8b
SHA256 8a23d386626328f9519076f33d5c3b71c639f2347741442c3374974e6f61bd53
SHA512 4f2bfced9eedabd6ca807a1b88cc063d15a31ab0bd8e2b60c65d6daddac9a111c434a0fa7d7641813d9880612464351ea30368bf6f0ed9ffc69bfb4d51882d12

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Aug2008_d3dx9_39_x64.inf

MD5 9411bf36f2075b7e42468277e8020e40
SHA1 c38bb84e7381baf0d2720e5f1822781a639c04bc
SHA256 4cbb1c6804b9c76bba4e41f0d2a45f1daba7350af9da4ae6966651f7f4da041a
SHA512 c860da71a89c41e81c1c89b3e1f4e93e747d7dca1152a4ba063f53f899fc701fe24f14abecfe883571af518df4c2d766432ddbae2ccb2c52bd87d85f6ad015b3

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Aug2008_d3dx10_39_x86.inf

MD5 baa493c7a361f1ac0c5efc94f1568f97
SHA1 16dd101673b96b54bc5a38c20ec3ed785c6bf7bb
SHA256 e83f8d48323887af89648c5bd7af713b42d20ccb757be34675f1fa527e6cc33f
SHA512 2e8db3d1ce2830caa9a0f698bc31e2b907e39a233fb056fae44062b3ff732b3b62f12fcb2eb948c1728df9b64c4d8ee873c0f95e56c2ad1727140236ecc71095

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Aug2008_XACT_x86.inf

MD5 d2aedfbc8bd56092d658bd60b464dfa5
SHA1 54f8e1cd59f43cbe02767face39fa42f50ddd229
SHA256 f1daaa8d96108a4a338f62a4a1339143ddc566e194ca00dde5427136bfccb0af
SHA512 41d74bf9899e8d904bb0bfeed5e053ac3c453e0d591526aaf5305ba33128abfe29cea09bdc23e2131f91626a66f0ff58f6cc02fda9692e58fb2c476795e2b6d4

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Aug2008_d3dx10_39_x64.inf

MD5 b01ca47b1cffd13ec5d8a6a592ae8449
SHA1 e1b615488ba42c44922522dd47b2e99f1b5394e7
SHA256 a5eab981c313538afcd7abc7742854d251c736835ffc1f549a4768fdf49c3e71
SHA512 2609474f1ce19473ff8f5f4550f9eca077bcf063bff8ea7fe890493e1119e80e6b233141a8e9dbe7d9f1e167c4941fead6cafe506f98053e623728b7edcf4ea2

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Aug2008_XACT_x64.inf

MD5 f616331f6e6916d1d27fbcf357cf1478
SHA1 e5530aa845bca9b1c89abbbc189f65584008cedb
SHA256 cf09d632a4b2cc670d435f356f309dc58359735834baed10343fdfbf37eddaa1
SHA512 c39fd664f43c4cfad8e65d5d6b3ca845abc0b341cb663acc7e274a00c3218394d3d04cca850312074a294bcee4e5a0796a3c90d6263de63f8f83078d9c44c8ec

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Aug2008_XAudio_x86.inf

MD5 e0947065f559b93eb93a7ceeaa8bfd44
SHA1 39bb647363b00924c7c0b3792f8017d7c7d9e3b4
SHA256 f211a7d99b3ffa0180bd91f68b2c285564227e075d499e950e76fde04e7707e3
SHA512 620810dcd56857b2d3d5f1271c5d4979cc90977acebfea81edb472d02da8e6104e89984816a91ab57a2469253a391bcc378093f1adaeea7c0d35f7f1b794969d

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Aug2008_XAudio_x64.inf

MD5 fe4812a5425f1b6d9562b9609db16ba8
SHA1 01a206feff15ead479848ddf056a560701960fc2
SHA256 311bd58ed7437a1cc79692ae360a02efbc8ec51194abcb80bad78b2208a94d58
SHA512 2a98b997af381504ec8e2c5b182c73717ab81a455ae77c57036aa904f87dc8fdfd16a7835cc1e631e9435257da8bc631946b32d8f3bb72d260d1114c4c3c4390

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Nov2008_X3DAudio_x86.inf

MD5 e8adbd1e68258d5657a34ea722f3bd32
SHA1 ae4e88d17663889e841992436b524a35506ee534
SHA256 d0361ffe046b7a7a374a4938d419e4121365892e4f2138899f670619ab34ac6a
SHA512 62b132cbde7afebaf20a437b810ea42b7c782eff4fa1f83e2e586b2fd9303829ac90c54704e28f53010a8487e04bf92b791c85fff4c949a12cdff2132c2b09de

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Nov2008_XACT_x86.inf

MD5 87c8d16c6db20854f9610bd5be6e5ae5
SHA1 c17d78456637cc2a67b35d48f9cb3c730526425a
SHA256 31680e7a90d24eda04c910e1f3e6c02774cfc5c36ae08e7ac043665264702f83
SHA512 061d80816e2e5a7a2df68cd91a95e5f17aae8610a18b254abb7d5929826b14da5755eb01912eb369d1fb5725f2a4c144ce92e0d08b61799903d83fc91f35413e

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Nov2008_XACT_x64.inf

MD5 d28248a55a7747733c0e4356c1a15d70
SHA1 befab66a5faf1889c6eb2208698874b00024b78c
SHA256 2d8a68e726728e4f4be05e35fca812b855046ce4bf697f0dea14094dbd7e1d79
SHA512 f7b89d96e287ddf8200462c4eb0415f2fec81b7a69e5fd4bd5bd33cfc805287d287dc403060b01639cdb67b14ebe65e42f75c3a1fabbcaf8692d315cd5bf45a7

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Nov2008_X3DAudio_x64.inf

MD5 fe8f918218c40fcc007bf16e9cf0b76f
SHA1 2b66a5a714bc7a0ebdccb0029e179bb3f32009e5
SHA256 d04d052fa3065cdf00e96bcdd7dabf3583ef10b6d80fd67cb03c32f09f2e602d
SHA512 9845d8d2c0c0c618594e692abb382e4244d95f5a06c48d7ae694dd09ada670ff23bab07fbfd09310f60f6684267ed0709a1d146da6fbbecef4790b9373840b2b

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Nov2008_XAudio_x86.inf

MD5 052b3294a9345385406ac2056e724804
SHA1 79372406f5cf40deefd8ada18ba238e80360ac70
SHA256 950b5aef596fc5048732f6cf263dfca5bcc25df7dc17df91efcbc3551751a3b3
SHA512 9b0cff2968acd2552609169a138d40fcc25ff2c35b70ba61cabf769f4e5b54774f32392508867b6ed9198b3da5a858b3a7079d7c4a4ddb31f63e4d4985efd2bd

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Nov2008_XAudio_x64.inf

MD5 318d70544da7620126540b0712200e7b
SHA1 707c4a04f02e10b08a16528b0da8b284cfa315c9
SHA256 ed20b160dd26a5ed3c220a1fd9b5fc880b3280ebf56c2f73e76b6d4da5ef82bd
SHA512 4acbf6b35043ffe9c740e3e48fd9320e10f5dbe317dd89dcb97b68495b60cc2cb2cd98e57fad030ed053636b710d344b96667b69bec4b7727ba2508f35f23aeb

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Nov2008_d3dx9_40_x86.inf

MD5 d9f6cb1edf9f92a045f4b2b8ec17cdb9
SHA1 fb362c8de21847523211fa512cdbf73e5b49aa60
SHA256 955637638635025f01f82febab4a4977252a765439d90ce940fba752723b9db6
SHA512 e22fa0520dd3f905b5170e3ede4d9b9e40b0522c9b39308d150c01e5bc381949d70ce04818efa9eb2a08bcc3b26f2179db9a5aa1a5d14d757ee2dd2c5c3cfae5

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Nov2008_d3dx9_40_x64.inf

MD5 4f4a9d3074a4ce8fa141a17b0c2e97c5
SHA1 e77b4e76ef70fb08befd69a03b9f5dcf02c81428
SHA256 d071b30f56763506da0c939b8d35b0540bef3ef0d51a5cfbc45816ca91f891a3
SHA512 7b961d3b9ed247e75047a5bac6d65ed741fb3c210fadfb23d4b77653af7001fd557fecbc2bfacac00188894374ec7ef3b0a5c1b1f6ddb0c9ad3ee3dcd1f32027

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Nov2008_d3dx10_40_x86.inf

MD5 7a3a4c3b7c9c979261ab1fe477809731
SHA1 545004e59315dea0bcee6bde61bde3c45f79d107
SHA256 a4eed39cf36adccac4317e5822b30aa37ac5b001bcf4a24f7b5ccac6b8b71e9d
SHA512 556cf8ff26de695e39aa42fbbfe0bb986fca9ecdc08209c28404aa1b285cba8bc4ba62659fd0d929d138c781446fdcf2a30c0e1aa1487f6f1d75c9f15145c7bd

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Nov2008_d3dx10_40_x64.inf

MD5 f0769f57bd08036d669104f9bc942228
SHA1 18fd51cbdb46f1ffd47103dc026f1cabf4e4868c
SHA256 7f902d9ce6f6d71be1d16997ffc9661be2540522c73cc185516415a52dced2a5
SHA512 427acfacf52759a1ebd749022c375767fc283a625b6773e06f8965926e0b96a969a27a440bd661015b56eeffa6decce7322e43974172966520c9ea5f6164914e

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Mar2009_X3DAudio_x86.inf

MD5 c1501e224e63e7c7fbdbfb7734a8e4f0
SHA1 c6aff4de1b44499d304649b782346b0a6decdbd8
SHA256 aabd029d75f25244bae4ca17dbf9c4feebec0d5f121fcd388c175c3360be1bac
SHA512 e29f985810029a43a987ba45c905aae84d0615330e6fcedf81806a403f59c8861fdbb31935b0c610378d8131d38ac6798c778f5c6fada9f51838cd8a8cfcaa99

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Mar2009_X3DAudio_x64.inf

MD5 5e65d9cfe5f15381afe2016508800dca
SHA1 93a44fa2bd9559929c4ed459a336e1cc27738f90
SHA256 4da1a6bbcb7e84073dcd1898f854702ec32f5324478b2fa39c4a9868abeecd3b
SHA512 9ab50d72212f79f949679b7e7c19f698f2b1c6f1d695555d925b7cdcff800a14fc98535476150a15c563eab74d8a98316f44027b0e3ad2834735a6f94aa07646

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Mar2009_XACT_x86.inf

MD5 25b4458970583bd63b3e21ca5eda19b4
SHA1 a41a7c318342365d64f94da5c2b9d0490895d684
SHA256 764c3caeb1725a11701ca7119fdc49b3219553b79f9a5c1a02b20991391e5a21
SHA512 4239e25d6701e28a58424361d2bbcd27abcd91308ee2b5abde611304b0c2caf3cd807c8aaf3665569a565664b12c53e17aca73703ece809b9f26487d9f9a3778

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Mar2009_XACT_x64.inf

MD5 eb9c537b01096960889de48d1a13725a
SHA1 205f797be95c576f2b15760a25440f532011332c
SHA256 9369fb0a9d3353627c097fc19780e5e7126af47766ef6a4a95ff3ddcca56691e
SHA512 c82ecd2c952b1df01e6c7f7858341c62b36330945dfd0c6bdc404d14bee5682ca06a19448961e03a2093ea00040fd38ce60c126b9f155607b7435b28f74055f6

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Mar2009_XAudio_x86.inf

MD5 ce1394e17492dac92e0257482272617c
SHA1 f1babf395b608a9966cb5d89d85d131ce8263576
SHA256 1b66e4d80f9843fc73b0a6097fb8ed5f3d2cfd5cfb5c328904d2c370bd87bb3e
SHA512 c5b800c6d519d147e37b459b3c667d2e05b6e344ac38be69aee40dc1e20b232c9a123f0f6ec8fb5909ba8d76fbb24a626ffb2f76b08bb3d3984d6ad6541d6a9c

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Mar2009_XAudio_x64.inf

MD5 8d2a8bbe89cd936282ff828c10ae57ad
SHA1 acdedc9919abeead28ef07da56ea33f88c45c3a7
SHA256 4a554d09934581a87a4cc98749b525b6794947b64b8414d380edfd502713f9b6
SHA512 69ee567df6d9edf90a6a2a882b745597fe0720af3eaa0f23ae7241e7519aee5af435566bb1e0cd8b2f6bf6956b21f73d7af9d8e9511afe48a54f68f440aea2c1

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Mar2009_d3dx9_41_x86.inf

MD5 b37a5ff044eb65521a290c79ba1a3e00
SHA1 ed505464894bd3e52654834487f3821ae117edfe
SHA256 bd29711cc2ecd924990167ffa95f48842e24aeed3acef1023717040240b4bbb6
SHA512 eae4408cfa7f9c39b101489688cc570a184b8a57f3d20d3b0452a581fb80c4f485dc2f512a39669a92a5bde81fbf474e1585f566ff482e87610780c23126c21e

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Mar2009_d3dx9_41_x64.inf

MD5 d4a1295d35748a262f28c2d3ed7a116f
SHA1 f6794d7a852b3f56e93fcded600077220ebfef74
SHA256 12fe918aeb224a9bd4d2a8142f97c95d58a9a69e591e7e4f95014c155bb03519
SHA512 79a2c575482ebeb4157971c07df42c76b42fca1b00e213f3f311935977bc27c86ecee6b387d93e9dadee06bdbcd6d4edbd72ca0a66925eaee547f1bd195e7f02

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Mar2009_d3dx10_41_x86.inf

MD5 6f64b88a71edf6070f48277cc7e22125
SHA1 1c77aace8a83ecb9a388bdee2aaf38e78af08ac5
SHA256 0170a4b551b58d92a753e86793bf3af762fe3f8d781512f710a4d661aec8d626
SHA512 4349bed85d5c42f921005ad6915571b680cbf178dc1c9fc8f218dbda7cc34b76647edfa324d3c529dfba18da800bc010623a6ee8b34a5ede0a447d1e7dc93827

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\Mar2009_d3dx10_41_x64.inf

MD5 d9bc0224ff859db21a9f684ff138cbae
SHA1 dd4f2ecdc2a7801588166d92d6e6aaf769bb3627
SHA256 53dc284b87f5787804823977d2fbb528e393829367db5d2ac5dd79c581a27616
SHA512 29d5c1e3b54e79e322a966d954935a31aa7108aa31f04e711e36efbdabdbbd3282ff56df9d640fe48f8707d55a7af435c83b7f281177d4d5bf01364786596ff2

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\AUG2009_d3dx9_42_x86.inf

MD5 dff48361a5cb0dea034dc6f16de99477
SHA1 afa417acf7e9da37923255a623ef34c7f6446c80
SHA256 5989dc367a8f84815bcfa1c46ff756527c6250c62973220d1af354b70027eaf2
SHA512 750b69eee07e7d6e7fbdba722e2e1ce377729dca5fe52b4d57d23dd2b80b28b3af8403aa43c469a5042ad35eb09ba4dbefc40a014a137e1b5d87e0f2de203856

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\AUG2009_d3dx11_42_x64.inf

MD5 520790b3b1eb8bb9ff00e4730d17e256
SHA1 51872475e3c31bb749f0bffaa42ab4ae362b2dea
SHA256 f9c13939779d4526107cf7d3554c122efb564cff02228d02b0b6ff211904f5dd
SHA512 da76b41ba262ac7adcb2b48b8e3845b7c57b1c45a664a1f0bc90d420cfeae1ee454c2089ca37ca5df264759f016c781ab1bf17c026d9733df7271e8ee3320dec

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\AUG2009_d3dx11_42_x86.inf

MD5 9deabc0af1186bc22a6feacaddc5839a
SHA1 2a1fbc0737777513390210fe7fa48fa8805b15b0
SHA256 edf6764083b47c04fda52b149f565587c6a07d4455357fe3c27c9e56cc57a94d
SHA512 8a3dc2b4d25a2a4ed94cb70e88b051d9df9985f3c6a8af0725bb521e029015755b415c23a44ae8318aea4a04ec9b9c1ffc895df41d28c384d78a465dbb29ed3f

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\AUG2009_d3dx10_42_x64.inf

MD5 8d272f58bf5ce42962d7d9835e9b489e
SHA1 7e0969289f839b5dfe606f6ce6ed106460f97682
SHA256 2bfdd3d3bf485439013045b3a08942f457385bb89ab76d9479fbdd85f09e9d96
SHA512 0554257a41df07860233f26330020a45e2dab2613a6028f79914aec7552d5c54525b137e450202db1283b602c3d95908acbf9f1eed20dd79c21fda5963fc2b5e

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\AUG2009_d3dx10_42_x86.inf

MD5 b3a2e761e5da007cc6036c5703e12eed
SHA1 447e852f9bdc357b00864d4dccc7486f1313918b
SHA256 a80a00464775da82c02f628c5bc13cab0d0643ec2a44b28d2acf7c77d467becf
SHA512 28a106886578fb38f144602d2b29c72a906bb24a50b16ea7d3f71f8bd7f194fc0d7c8451dd1c3e9ecc59be3a866c07a23dd394a17d39eb7b55cde7b347bed3a1

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\AUG2009_d3dx9_42_x64.inf

MD5 ecbefd1db4cb52d5089b1d4b20a08656
SHA1 85134f773bccff3e874d27d7e79dcd1e9485c903
SHA256 4887cbec8545b02152eb16f6296987a43a256b69b408330eaee362184f298d98
SHA512 a50afd834f0d892af5eb33b9c6ffbb330ddebcebd123fc7f706f05efac9491b49dfdcfe6196f3b6a3c9f7ffedf4fa723e0499f03417552404c0fb4f4fa3c046c

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\AUG2009_d3dcsx_42_x86.inf

MD5 a156f288883f2c1e867896c114509aaa
SHA1 02d7a136da0bc6c8cec933a880c62b90ea8d329c
SHA256 ff9da1b0328fd918cf9558ee57387a4865afe98db1410cc16b1e921c5a744c48
SHA512 632fd6b2940a851bc82c2d57a962dfced3b2cc61010e037ef9065b4a8da5a0f112bc2c66984cf76334556bcde35d49dece1841ffca9c149526a56d3824178b02

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\AUG2009_d3dcsx_42_x64.inf

MD5 32b0f585bed3e042371e125ebc7e0f80
SHA1 dc0f6d3a501cceb50a92848f045725f93182f150
SHA256 f7a5a84bb654837193e0f40b579777f5c6cc2c7341cf90503d6a6709d319797f
SHA512 ff7ebc445ead8c5109585ecdc58c7bb20f9cf9debebe587ace38c64f70277ee6a9c9359af0ff55a1d4bdd2d01b958efdce743f30cf5b20bc8656fe4124ec5670

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\AUG2009_D3DCompiler_42_x86.inf

MD5 e7f9ca8ca804cc404f855be173f6ac61
SHA1 5cbe6a3e7cd65a66bb6ed17930ccfacb8c756fcd
SHA256 bb8834d2366f6899c507bae176a13dadbd44488451a263eac830be95f4bad43f
SHA512 cca663b914f6f6d1b86db83e4f2976b103af041ca171257b9815a689788018434228182bac943fcdc7770d43180d53f887ec987e9639edc26ecabc7d20dbc4e1

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\AUG2009_D3DCompiler_42_x64.inf

MD5 bf489f4a6f1c8772091caf9d3f96628e
SHA1 c0da8b93f1e17acd81e5664ff7f014cf470d12f8
SHA256 8977772e5392b8e79364b3b8d97300e97ad891f38d5a2dd306549401e46b05ff
SHA512 2e21de522c0be4b797262528399d7ec8604fbf466e8de49cc12b9c2e2daa3a8f0977e952bd36135ed4887516d31ff8c782273325d2afad48f8b3202f35b4ffbd

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\AUG2009_XACT_x86.inf

MD5 5b6e899df58c5dd0201934027490278c
SHA1 8379d615b05654bdbdb6512b98abdb93a9179796
SHA256 1eb88b5460824fd32eec9b90e7ef5cb529f51215046e539d39fa27a409709766
SHA512 2326b2b5f046ea663bc8723155098ab58341ace400fed48933575dc55b1cd14ee8f8d67194303783a1d1f412e395eddd8952127eb35d8ec745208a6889dc63cf

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\AUG2009_XACT_x64.inf

MD5 e8623d8be34f89b38932adebb2ab2df8
SHA1 f7d844b8c77bbf1bdbaf4c615be7591299185bb1
SHA256 5d57466af1801ff3a92b1540907f0e4b91d90189177d68c6b4c8833e5d57dec3
SHA512 a398b5057707743dc3077f04e3796fc231da56b54d58c826b13ec610bbdadb0513c56183156be2e45b47ae96971a9287097ffdcd709f496e96f8f7233375f1a0

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\AUG2009_XAudio_x86.inf

MD5 6d9bf03bfc9465df08d17b18c431926b
SHA1 184ff4a21ae4756179fd179d1c3d007842a7ec2c
SHA256 842cc52100b5774bcda19e40837bd552b308e74829d5b35a505822c7436892e1
SHA512 35efd74761fce6b8c7371cbfc5c8c50a0142a3fa3492dda3e566b031bb1dfd58633960230985d899348073de38295e25f76d716b153640a9e0e8ce6d59954f5d

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\AUG2009_XAudio_x64.inf

MD5 af52205973fa73d4227dd5e105f6a37a
SHA1 2e16e2914fcb65e55a117b24b992d6e8cbec8c55
SHA256 4348663aa7cfe22916fb13d93307e7384376fad9d6fa34c6196f80df42c61a33
SHA512 92b8ce27f01fec9c17c2677eb4e9e3f1dd592a94a3ea12e9580c8e206a8895c99b0498b2fac30323814c8da16a48555bf5a76eb72afcf5b99ee2e05c67cb4ef0

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\FEB2010_X3DAudio_x64.inf

MD5 49460e9297b0faab5a5d73e7aa2caa67
SHA1 a7e211f3d4ae808f67a798924c4d3314183df873
SHA256 68351f03f4ef83e4b8c359e3e130441081690a1866b838a1b35d64674ef3abbf
SHA512 92c4c0751e9123e1eb09da312bc44041d13262e26cefb807dcd1b354c5bd12c0d7197f1d3d457ddef89714b77ffe45db9c717332963c6daa507ae02a6d5fc941

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\FEB2010_X3DAudio_x86.inf

MD5 e84adf38d499ae39090ad60fd76d76e3
SHA1 6af4d58bc04aac2723e8b97649f1b35fb1aca84c
SHA256 d4da3e530982812d1e2a31570b80af541fac1b13c72997d2aad7ea3bfeaf4a4a
SHA512 6714992e7aee7bd0798fbec68f92c97ee502127580e21e1b6693ed6737312b44dbc9fd9ef579fe552590e9e5a4904df94e4116334265a34699a04aa76ab87c24

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\FEB2010_XACT_x86.inf

MD5 82c10b720e33be099f69e4010d44ecd2
SHA1 e95a2eb23db3fd610d71089500aad523f93c9469
SHA256 e850fdb84bcac0f667927e53fee943efd3f43be6c6a0ae1e17f3fff83ddb2635
SHA512 853261c439b26cdc8991ac289b9f9925976452ed613481b0cf09e75444882805ffa15633eba441d8e1a04641f5f6378b68e2270a6a48d3911d7f9c2c0b1235bd

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\FEB2010_XACT_x64.inf

MD5 45f4f5d8439b3a33df8f1d9f39a162c6
SHA1 e09440edc243b072aa589ed139ab9fdeff3193d2
SHA256 c7efd1ec4e4d31644a5054d32cc1e6795464472c05439573ae93e1727a5eea4a
SHA512 f8b7ab66b7fd182efddc2a851c6468a311705267afd5fb81554713b338f24642c5e7b5d5000b85e417154c4285457f9fdcdcf9f42c155c801f7a295e6ae3ea34

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\FEB2010_XAudio_x86.inf

MD5 e6e942a2cfbb587bfcc4203b5bb34fd4
SHA1 2e0172ea1936911a98e11a6e98990703e24172c0
SHA256 74c827ef94881099761e04397ef8f162fd0ccaf4876a5503c4b53a5216d2acca
SHA512 3d70d76e6f459819a1703c5019a2e10fe518ee6e8eb5d3313fe57d3d1b6313b52c4904398a26841c78a9ecf9d715e1201e834ab3df47265e070ec94417a78e4d

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\FEB2010_XAudio_x64.inf

MD5 1c4dc3c97e96135a784867d68d193bef
SHA1 5019f79ea9b624999fe58420daac619c5695994c
SHA256 da63330fd2a1538b714ee6cf2e09256446a04a55f866b3f70237d8a7165cb3e3
SHA512 d529d68ccdacd41a7bb688bf226a23f4d08639213d96e3e428c16176681c5f7d45ca8527291322b2a6d4dd14fea1cab3cf183006bca3b5a45fbf2e05c2ee1437

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\JUN2010_d3dx9_43_x86.inf

MD5 a11deb327119b65bacce49735edc4605
SHA1 0be2d7fa6254b138aa53d9146cda8fedbba93764
SHA256 6b33d32da02f664092d44b05237990f825b4062c105a063badcf978648b5e95b
SHA512 b0134a3d6f2d576e5fafb601014ab66fef91d661013acc8a7a9129940369a1d9ed5c0f228bb1666a4e891f09b4b18e83f0cb2080047aa84fa45ab663e5739a31

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\JUN2010_d3dx9_43_x64.inf

MD5 ce097963fc345e9baa1c3b42f4bfa449
SHA1 e7624afc3a7718b02533b44edfe4f90d1afda62a
SHA256 272650a2d9b1cfea17021f4bf941b21f2206791e279070d4e906ce0ce56ac16f
SHA512 f3c4f00eebd9d465bc2415d59c417bca0f5a07c8e13880b28704f770763609a653d4b06f53d98325b66c2c7094895190900c47980f81463215e919f00966ee7b

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\JUN2010_d3dx11_43_x86.inf

MD5 fb5d27c88b52dcbdbc226f66f0537573
SHA1 2cbf1012fbdcbbd17643f7466f986ecd3ce2688a
SHA256 3925c924eb4ec4f5a643b2d14d2eda603341fbbd22118cdd8ae04aaa96f443c0
SHA512 8aa2200f91eca91d7ee3221bc7c8f2a9c8d913a5d633aa00835d5fb243d9cb8afa60fe34a4c3daa0731a21914bc52266d05d6b80bfc30b2a255d7acdf0d18eb5

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\JUN2010_d3dx10_43_x64.inf

MD5 13c1907a2cd55e31b7d8fb03f48027ec
SHA1 ca37872b9372543f1dbe09b8aa4e0e211a8e2303
SHA256 a65f370a741d62c2be0ca588758d089dd976092cb910bb6b1b7d008741e18377
SHA512 545aaf268d141e2aae6800e095a1ae4eafe6bfe492d95dfe03789ccb245cc3ef3f50f43b10a41a3b0efdc7f8c63621b437323e133ba881f90a3b940095b80208

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\JUN2010_d3dx10_43_x86.inf

MD5 53a24faee760e18821ef0960c767ab04
SHA1 4548db4234dbacbfb726784b907d08d953496ff9
SHA256 4d4263cbb11858c727824c4a071f992909675719be3076b4a47852bf6affd862
SHA512 8371471624f54db0aca3ea051235937fc28575c0f533b89f7d2204c776814d4cd09ee1a37b41163239885e878fb193133ad397fe3c18232ad3469626af2d2ed1

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\JUN2010_d3dcsx_43_x86.inf

MD5 cf70b3dd13a8c636db00bd4332996d1a
SHA1 48dd8fc6fa3dae23cb6ca8113bc7ad837b4570d7
SHA256 d5200b332caf4fff25eb3d224527a3944878c5c3849512779a2afcfeae4c3ca1
SHA512 ae31a9e20743a2052deec5d696a555460a03d400720679ed103759241b25d55e2fbc247170da3c0c0891f32b131ab6a6845de56c2d3387ad233aa11db970b313

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\JUN2010_d3dx11_43_x64.inf

MD5 590fe1ea1837b4bfb80dc8cb09e7815f
SHA1 792b5b0521c34c6b723a379dd6b3acf82f8afb1f
SHA256 2c4cf75b76203cba6378693668c8c00b564871c8bfd7fbda01e1e841477b2a3b
SHA512 80bee8f1ad5bfaba6b3ac5a39302a1427dbaa5919d76c89b279dc753170ec443924eadf454746ce331a6682ee729ab79bd390a5d3b55db8d08fd6f4869101f53

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\JUN2010_d3dcsx_43_x64.inf

MD5 e1f150f570b3fc5208f3020c815474c8
SHA1 7c75fc0cf3e3c4fd5045a94b624171d4e0d3b25c
SHA256 5289b5ad22146d7cc0c35cdb2c9662742693550de8f013d1ec40e944288d155a
SHA512 a53618ed6ebcd50ef074b320eb3ebd38af4770a82caa808e47cba6a81982ced46cf954a1c5a383f171006e727d8211b4fce54c9faf27b4c14a770a45a09037b8

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\JUN2010_D3DCompiler_43_x86.inf

MD5 1a86443fc4e07e0945904da7efe2149d
SHA1 37a6627dbf3b43aca104eb55f9f37e14947838ce
SHA256 5dd568919e1b3cbcb23ab21d0f2d6c1a065070848aba5d2a896da39e55c6cbbf
SHA512 c9faa6bb9485b1a0f8356df42c1efe1711a77efa566eee3eb0c8031ece10ffa045d35adb63e5e8b2f79f26bf3596c54c0bd23fea1642faae11baf2e97b73cf5e

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\JUN2010_D3DCompiler_43_x64.inf

MD5 6494a3b568760c8248b42d2b6e4df657
SHA1 700f27ee4c74e9b9914f80b067079e09ec7c6a7f
SHA256 3e779533a273e3395109c7efac13ba1c804c01b3ddb16938406fbdf90d851216
SHA512 2bf68b123d7823ad7182e132d9e55f8de7580229e8e1b3b40030da50bb9bdeaf67bb9727ce2171fa83b7f804c24d9728ffabb44cb5017b16b771bb19e62b1b42

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\JUN2010_XACT_x86.inf

MD5 dbef26a0b937dc1859e9582aa88bf928
SHA1 25f85650c6f62e59c11f7234be22d34e890793b3
SHA256 ca604ce9d2ee43a09b39b23a6a2a048b1a79d85c7d78679cc73aacc75cf7a62e
SHA512 4259193cd51168020b3b02ffaae89d7b4a972273b227cc3116c8cac3874b7c329e66c989ad200f93b05d1e4f90657b5391f37d6d128108db66ad7d6a758aa34c

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\JUN2010_XACT_x64.inf

MD5 dc506eaa8bdc02b0918e8ce956b505ce
SHA1 9bfa75f2b2d7ba26a778623c8505e10428a1f6cc
SHA256 f3c288d84db29f7bc4d2c771341f765b5e1940a4827fcb55a65b48eec83c71d3
SHA512 9938b821370919a25e801cc19841e951ef4523fa62eeccade6825e74c43319e9bad2f76e5971ce5d26ec2fe55258f7c9390626bc3b934c84b70f7a2870976b89

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\JUN2010_XAudio_x86.inf

MD5 31d8732ac2f0a5c053b279adc025619f
SHA1 c8d6d2e88b13581b6638002e6f7f0c3a165fff3c
SHA256 d786d06a709d5dc26067132b9735fc317763fcf8064442d6f77f65012ba179da
SHA512 abc37922307f081a1ffdc956ce59598c19ad1939ecfb6ea3280aa6aa7a99c3eba5462731586ca262f7d7257d7d2a74ff57a45abf6b93521eb6f1c9f22f8eb244

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\dxupdate.dll

MD5 7ed554b08e5b69578f9de012822c39c9
SHA1 036d04513e134786b4758def5aff83d19bf50c6e
SHA256 fb4f297e295c802b1377c6684734b7249d55743dfb7c14807bef59a1b5db63a2
SHA512 7af5f9c4a3ad5c120bcdd681b958808ada4d885d21aeb4a009a36a674ad3ece9b51837212a982db6142a6b5580e5b68d46971b802456701391ce40785ae6ebd9

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\JUN2010_XAudio_x64.inf

MD5 dd987135dcbe7f21c973077787b1f4f8
SHA1 ed8c2426c46c4516e37b5f9aac30549916360f7e
SHA256 1a0f1b929724f8b71d5ce922f19b9d539d2d804c89af947d5927b049ef0fd3d8
SHA512 f0469c94219b4df99d7b9b693161a736fa8eec88a3f6c7f2cf92fab2ade048dfe61fcde3a4cf4f7a2aaf841d079a46b17259dea22cfb02831983f55bd7f61899

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx9_24.dll

MD5 bc831661963763ac4d504c5cabb1fdd9
SHA1 51b323ea377f9dcd52946f5fe77ceb5673d1592c
SHA256 94ec67763f67932dd4273ef5cc12889a5cef090ffea3ee78a80c7b530272b1b5
SHA512 fe97241d5d9ce298f62ae3295eb9f4091430c8c2c53e967b76e0aed76c3579f8bb07338a0de48e4547c63ab381b3b3d0989a183447b8e47496f35493541295e3

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx9_25.dll

MD5 5b48fe9d6686f0d54b26a005ace24d1d
SHA1 1c395f6d2aa729a607e69dca73f8205cefd26aa4
SHA256 4c54df27ce84d21b2924e64ff79b13e7876ce85d8e0c9c1d0abd8da73888187a
SHA512 6a4fa549578097ba36495ec210365c27d165065820f0fdad20864a3139949e72da00f9b7c614d07d8950307e596b693ed7a291a5c69cc0f9ba30c5f74d6332f1

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx9_26.dll

MD5 523ab607eef81cc4d909e7febd8a788e
SHA1 2fbf1444daab3312da6b34509763656a28252134
SHA256 8ea96fe01c3c86a36fcb3795ae03eb12034003e335ef475571efaeda17c5bc78
SHA512 791f520533f58cbccded4e7c1f64fc14d20942efe57f32a5ee75eca4107543718eb35ecaf52e6eb3d9112867141271b8c097766fcc3562f016bb612bf840528a

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx9_27.dll

MD5 852edc778a7a50077694f84d8e601234
SHA1 14705b638e1af81ddda5dc52f68c61ebfce5e9e3
SHA256 a70d571cd675c97c9eeb4a234dba1d667ffb54ec3bb14defb36b3e2f605ae257
SHA512 51c4031d98bfe3251a81ea9f4434ce38f077645a40d0ca413e31b6951c384a1635cb040c24ccf1baeef3d5a47d0d18d8b47fef3bcb28570d6e936fcea6f912c2

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx9_28.dll

MD5 be19b603dfbaa829ee5b7749b3ba97db
SHA1 3d42825b3e7fe5744f67ef145ed47bb524496305
SHA256 f3e391b5f1c1f9637cabf2b812b6f5d65e4776c89d779f506f6b643cc563176d
SHA512 095e8357911c1a06000f5df291bc3cbd80aa3a9672f485fd1f2b9bdb1172d1c7235449485948bee26fcec630d6b80fc927454f9b32cb31c823494c780e0e3df6

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx9_29.dll

MD5 99f4fc172a5ace36cf00aa7038d23f2c
SHA1 893e05e369c2388daec359ec550fee5b9122ed40
SHA256 c5e21c18f8c79bc517da59e3192c39ea73bdcaf85867628187f6b3cca07dd21f
SHA512 a4b86d84f99c3d0c0825e3581878aaa25207765bcfbf31cb07cd6bf69a9cbbe1c3068719b212e38f741e06a89b9bc6d217077a0dec7f9efb1be75fc3c214dd52

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\x3daudio1_0.dll

MD5 4e961525cc7ff0e5d7da19e170b7c14c
SHA1 7e3654ef7f7c9524ff415582f1b066f29b4234c4
SHA256 228dfece2b4555a243a73e7bf461036f1e53951977625651ff5a59deaeaf4b88
SHA512 8785d0b2188f36d53c1a2b99a669d6edff1c0c27905d5bda1615a503f115d5b0762f008481145cb0cb6a2589926543b9c8ed0ecc2e328593682e39b90fca2087

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\xactengine2_0.dll

MD5 2112fe0c46662d429347a7d7b49e3ece
SHA1 8cf607547e9c5a10f129a3a8f8f32bd295c0d5b4
SHA256 cfd1c2d34feb7d94f282e97bf762a99bfa7309dc7353d96dfe4aadc187d26c67
SHA512 77f77add8411d418798d643d783752896d3fcac002f15696caeaf45b5396d2d42fe53bfb409d66ad505cdaac0ef0a20a62aa45b50aebe65237d2c44af36bbc34

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx9_30.dll

MD5 e415862612e65f10d7d888443ecd7594
SHA1 aa8440ec3b5bac6594fd58d97c10c2ab7d419b2d
SHA256 5edeed79f2359527a55b8189cfa8b9b121cd608d44eead905a0f3436938ad532
SHA512 f5de2f9e045c3d579d98b25fbbb7b90aa9ddcada0c6bc4e103e5257394f3cbb7c968d89db61e15b10605561cefdd63456912aa428af5a62cb769ac8c4e5eecba

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\microsoft.directx.direct3dx.dll

MD5 a73e7421449cca62b0561bad4c8ef23d
SHA1 cf51ca7d28fcdc79c215450fb759ffe9101b6cfe
SHA256 7986e3fbe05418fe5d8425f2f1b76b7a7b09952f3ec560b286dd744bf7178059
SHA512 63d24647ac5d0beb8f1284973927263cb6e05b4c399cda3912178114b42d541dd516c6d67a453ea997d9d0cd9126a1802678062f0951c2547e1b445ba50dfbe4

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\microsoft.directx.direct3dx.xml

MD5 d2ecbcc04f7e087d738df9329d47c30f
SHA1 0f2d7c485020928227b668a148b0a60d99bd6695
SHA256 7b38e6dd8c567d17d94f595c33fb234284abe884a1148025f59c8e426ec30c03
SHA512 5662bbb30d7a601efac49f0e090cf05112565ac40dd998787e40d4ee6988f985ad8513b0d5f80e17f8ec9e7784af1c50a70137c0ec22b0c72107b601503bcbeb

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 659112d3846f66579250595cacf993be
SHA1 00c231e93b19fa433abed1907c312415725ff1fe
SHA256 2d5ccfce77293dbde0d3bdfaaaba66bd9f9ef44172d33c92ca5d3efcece3e8c7
SHA512 e25f7da3d33078685d71a891f936eccf9a9fefd5ab1cda297c1dcaa2f6886a868d38a50af2f7559d5a8caa3f2a51153f2c2d0e5a38d8490e40d90d5dd9f6bb0b

C:\Windows\assembly\tmp\30ROE94Y\Microsoft.DirectX.Direct3DX.dll

MD5 5e2b8b8a5ed016468716b9ff82a1806f
SHA1 f1772121149d87745738cd471d0e504301a9ad0d
SHA256 5b70f0ac40a38c903062a12ff7cd71d907e75238a044ded9b34fb51e9a9a2799
SHA512 4620c9bafb7dfaa8d4351d0d99ae3442ceb2220201f16bd9bab4fbeb1f411fd63d4f0e79abf6e762f4d0e62d42608fbeebd13943ce338eca59ad1080ea6c2728

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\mdx_1.0.2904.0_x86.inf

MD5 81700fd8d24ccd5ed83ce202dadcc625
SHA1 380473dc3560cc64fd0beca96674554d87085c28
SHA256 3bd14cf2a96544ece692e1911500f7196370a111017fb6b0e23db0f0d0f40dfa
SHA512 8ee1bd03fcd6125d22d1d35437537f594a84e67573ac72d440d45d419b88f5d3d1f5fcd8804e1a0b873714c1a71c63a488b8068f0c465e94940ea6e2db1c7860

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 d3f1922325be8e7e1c72bfd8179454ce
SHA1 89134f43ce2af4adfbc4087392aee6fe56be7ff4
SHA256 8418941d8f1d4c84288e0bf54392378dd3d87b602bb693ff4f8a633022681c12
SHA512 d33f513ff6c199acabe86eca6dc06d56c330ccb78be4d13fb6b1906a3cba3c93afe982b05cb057f2b88f6e6637452f4d99d4a4fe6f3f7c473de9e67a40758bed

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 9521e1dab8681d50da08db85d95cead0
SHA1 d105b10f9761e4e5b4eb252f5bb62a7e62dade34
SHA256 321a1dec0dbd05d20495a88dda4e9f57fac229813f5def4b2b7f2ffcae3be35f
SHA512 5d82668f38fcc9179460ec2eca50017a565a03a85551bad542fa2830851297f9976ea0cfd356af3cdcf36a1586b6c8072c94c24ccd0923842677ddf15efaac86

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\microsoft.directx.direct3dx.xml

MD5 1c124cc5c3be4a5e8d6619125b1b33eb
SHA1 455365d2ff521d135b75522a4ce6382aa73b7c30
SHA256 c3cc575c93690ddf44fd71fdeaff3d61552e9d4eafbef77840e4208522d81fb7
SHA512 1e9fde35b9c4d4a123a92545f5b15b12657d4652328e8d249ca31338f80b10a9b70811a16c40e82f286ce1b192bc545d29605c2ded4b937cf69088d9aa9943dd

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 4d422773f68fc530ce362fbb9e4faebd
SHA1 712d9066db7a836219c8e804742231ef479363f1
SHA256 1ed276eaddc84dce92383c0ff417ba6b220aa5ff982e4665637fff6ee405602e
SHA512 37dcb8cf8597328d0b287955b6aa5c6dc98b5786340fb725989825c654ecdd39eb66e42720925d87deefc8669422ae1d7d3d7eecc877b1a4acd5fed9d1216bb4

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 fb3bc0754921873a65f5fbdca845e6ee
SHA1 67cde5bc8577cd3040e275d290ac021874da9fe8
SHA256 f500c350dd71df7452b92444e19b4644b04283434a6557123f1e4d9fb078c3f8
SHA512 292b8bda44e6ff6449c4b38da9b8317491c0f0da3d1e5f7947741de27cc51bbc078fbf947c89c4be3a0b54f7066f0480990d1de57919edba3414aace77c47635

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 6c56381a02ce12d7df41ee37bff2aca7
SHA1 568e553dd1d00b9e031c84728964b20382545fe6
SHA256 7f84ae2381aa37d1f4ac371d0c6e48950b0b4b2d3bee64fee5b9ab7ed43eb652
SHA512 2a3a372933d6989f22dcfaccba03d7b5f528a009d7323776967da7397f0919d2b6e838243595381cab4e9b38d41fc517b8be1fd076d41ae27d77181ef02a14ce

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 87f832669478becaad751b6b34bd3c0a
SHA1 d4e534c2ee4479a9b2b6dfca29ef656be514baaa
SHA256 779ffd38ece103bc8f92bba6f36edc69c0f765bf40fcf761c547d610f4e3b310
SHA512 04046399ed5115552c7fa828fa586497089819cc16183d8fc24ec82686b1503097ac7fe0a5d77e284451079bd67d082d95be0cc17dcc6d062c5513bf7913b043

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 ccd53738df4fa27849b6bb05dd67d10d
SHA1 28126653a3d1b4574fcb0c09176f5fa0ff28ef78
SHA256 c29d337bf7639fbf424b34cc0409d2715762e1b4d82881fb524a2508381c9f62
SHA512 aa3a10504fbe49a4c44151beec7d9b543f4b89a51621fa60810f385bdc8a6821e4bfc37cd46f3688013f6f4facd33ab45bd0deb4a1fe16453e1be8f11f2119c3

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 643f47d8fff90c68780034be6aa503bf
SHA1 62c20fdaeae0b8edb3ad043f056308c9e2309e2f
SHA256 9ceaecf3c017f1206917265f756e0a6f7405539fcac776917532d447b50f8eb8
SHA512 bd8c3a42dc1d75430b21528969db5ddf5530c33c17aad63111de474adc02939a229419f29c38e600cae695913de48059b6f4b1fefdb3a993cba880282ea0bed7

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 af1827158ca2a45ce7c4f1db423ac8d4
SHA1 a4922f126b1e89c8aab957625f14754fd3e48233
SHA256 122370f9824b1c438779c5fdba1404d5aba4a09f9e4deec819a8d1801daf3a04
SHA512 71f6f4878fbc63512b10ce4e2aa94ff57b44235e6256c5e6a1339f0e821de97bdb1c0cd69a01730279b26b4c0287014a493aadffe806e8ba4cf0ced97c3016d9

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 51c3ea8ac8e7e4b58a44b04bfb704bbe
SHA1 5aa4950a53ba22fadb81e13e239566fdde4c45ac
SHA256 c11fee34e16c0f5303886aa29ee943d69f3fba4218e8fde040ef4d44d7f35393
SHA512 b35cb5a0cf13099cc27829c415482c3e77a7fa5b3ee668b9818c672c0b856d88a9f28315af9c11409fb438bc0f6d73224ab1dadcfcc810c6b2ef99b73624b6b3

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 933085360527de1b4947289ca468184e
SHA1 d5ee5e1e3c992c7518b5ce510c627c1564131b12
SHA256 78d85f0e2cb7d7bde534222f4ebfea1c9e06d37ecd3bb7ebd59e35f00b94b11d
SHA512 2e22398d7cdcd6a46daf3dd3478d861bc4012ba1b54862311ae031ebcd3f908352157cbeea528f22ef1824f8924c3f217311feaf1804cf675eafc07a8d3962eb

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 490807c150b7d8be44bde871f4df8c56
SHA1 69b68a5b8cc3f3e75aa2ba284654ca58bb62f23e
SHA256 36a21fc4f4c8f6ba4ad900613ee1b08ff43f2545585a2601c9fc4cf083d68a77
SHA512 9442e26de55009428cc6e747637c2cb64bd2f008541ccbb37fed4e83ff66845c7cf3874d93542e0ba544e2db61f4864b665b7720568eba284beb095489f3ca64

C:\Windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 1a3ed6da50cfcb9d806e21eee01bd95b
SHA1 e392daf0c1cc143154b402924d4076ed7b3ff1d6
SHA256 2cc7cd7c496fdc0af50f5465df6a0761c951c301883c774c9de679683140d825
SHA512 7c66e9f18e93e8bd551018592212f6e046c3cd34277b4d8671b723c4562a3adde0aef12213fe0926a5407f14e6c2c177f24cfb487f163f86009be19012f07cc9

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 f974504e3c76abf34e03efc1b6103203
SHA1 a4c86df3b14e55d0d189b19832bbaa1a7d6e36f3
SHA256 ea0f44e3f1c9e57021e3c04c05562304604d528b20fedcd5ea7d000d5ce13aac
SHA512 f9ebb7e6aa7a1da3b879ec96964a9658d4092c56de0ff8b6e06cd342d5b2057fde5dfe959bece8469401f564722552d91f4c8558fb4834bf8871e8e7122d3b6d

C:\Windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 18404ee2fbd354ddbec6507d1ae52e29
SHA1 4eccebf8950b4027e97b9a2fb3455229a335dcd0
SHA256 56ad9f480d7df8306235d355ffa444c684ff98b9df4b0cfa1801f1014031f436
SHA512 611e8797b4236ee92e6130d99241f5c7d53ca566bf096ddf1031254496e61f65dd8287ac6793c05dc492ced93f0936e475654b7139758b02a3683a7807e0d084

C:\Windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 9e7a8ee41c7084ab88e83d0ec34b6e8d
SHA1 abb344912f097036639d96e80a4422c42852726c
SHA256 3438b04c38670441bf80df67767932b72b0392a33f39563672b3097142afad04
SHA512 d98361df99b4cce0960ad1b172fe914361b556fef4708c75685cc557e21eb6abe5f18c20d2c9bb5f428be122b156e81bb5556e6f68decb3a50ec93da24549161

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\xinput1_1.dll

MD5 f1726346e583442541fe73429f8e9c10
SHA1 a1b7a4edd7d1164197f734218fb485165c075d0a
SHA256 69cd725c53e0302e75db20e9a3e4b33f58dceaa2e6ea4938b2733df8bc289a71
SHA512 ba17740271ea92c917db85c64d4ef63a8f2036fb1398abdcbedf9d49c09a53e34ea04e8b3f5a2ee41c2b2ecea6196ed7f9866ee48a9f3528c3b4c1f19dc167d8

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\xactengine2_2.dll

MD5 5c4d3843b491c047b7a619901fbd2ec1
SHA1 e02dd40f54e7dde0bcbd648e4fc6f723ac438bee
SHA256 4f996edb65022e33ae9c9f7acf7232c8d444f75c50c72894f6d3173b55404ebe
SHA512 474105b213bc067e0822ee22c769f0caa7a02f2d74a0422b676675fc45482db3a8a3dcb2744339a4c7fa029a2f58a2aef5db500c65cf646106d8ed096b17d062

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\xinput1_2.dll

MD5 33b62be226934e1b01f5043870c70427
SHA1 ad96f837accd277da2933d07aa86ffe3ef803b5c
SHA256 9714d146a785d458f0de8fef387d82c9f8e101c02407a0cbeb06f02a69518eec
SHA512 41f859fa59145ef6cdd6cfc4a14f90bb932d2c6aa339bda1763d8e315e6a78bde561010152460e6f996c9ac9ffe6650ccdf6ded34656081a0ed9ab1270773710

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\xactengine2_3.dll

MD5 69d841744b2bae38fbb2d40a230a549c
SHA1 2a6429b1b1758bffe3366ab72212fb9b02152d77
SHA256 ca20cf8e4034719a46bf67c6009486c2c1cfc2da10ffed3a67dcae677b4f6793
SHA512 d5e26da74fc84da90b0f60451479524f1d03946076d009328aa7f9939456762633006d11970dc4c849101728ca32350c125005eb4e3f75114d4528cb17a35b44

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

MD5 88acd049735d445f23e80ac85f7dec40
SHA1 d9090e45d4b03d339e5b7d583972c884b83b0b8a
SHA256 423d19d31a0d89ec20f7af2efc392216aa7b61b1aca131d348ff35413f77afde
SHA512 738156d01f9375bbd184edafa289a5e6a2ed1cd6aca2f740482b251545116a656ff1c73b66f947e46f625aa4d847c5a70f157a39f26e6053b381870b3f07b2c4

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\x3daudio1_0.dll

MD5 f77d5ab654881e683cff6650916c424e
SHA1 56d8f090755f1ec60b13e748b040069ea8759b5b
SHA256 77cc09cea6de69f12106e6dd9df1c0446a525a54c3953d69d64711b9394cc38f
SHA512 dcd1273673f4088e854057e47484bb363e1e7ce094bc2c98ad7cc9112877892c1d6fd591dd9cfb325d6c451f2d03a4cdcc238af1ffb5382b7153f079cbe13abd

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\xactengine2_1.dll

MD5 7c9952111f4c743b9f0d8b68b6ed93c9
SHA1 75dc863ed10e4e4a18fa06dc32789cf16c738c38
SHA256 666cef7d27a38f709063c9c581fd95e6b3fa27167bff4beff484dba2dc922a2b
SHA512 aaa3396fa9081f25b2eff6682ea26afbd297c8a61cee4540f9a947c1a96ad51f114a9985bbc69ea7d0251f6e4b1e835c92daf0f8c5fd66e477e3243ced3c9bef

C:\Windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll

MD5 d035348ec8968861af585b7132fe4c7b
SHA1 877ffdf77b9cdc1be14135cff0b756a231401617
SHA256 2e28c8fb8b87b5ffd1e0ea27710a2e785ef4741a89e4b3c3af726ec63d15a1fa
SHA512 94358b581510c68049ac92990674a6cb495cb8ff005f7fc03696c57ba8b4cb384c5035d9332d0ea39093ba5fa5c8082143896cd2fc7ac24a192520789c707458

C:\Windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 8f6edcc4b45596d01c32ebe2bf35394a
SHA1 7dbb8055ecf8a7f9f87cb4e0aa1f1997144d7114
SHA256 e41120ff1257d7ee953f6b9a1138cef2149420abfc6e5e609edcd01d4d0c63e7
SHA512 6ce55c1a06539b89d4efff3cb265828785b5ea76a5325cae2cbc3f204027ffb54b8895b2d0094a8251afbca8be1f8812db59d465ee37c4b08476d47718054934

C:\Windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll

MD5 46f26e2bafd44960e7f13b2ef80aa0bc
SHA1 2277bc8980e0f6c3672c2348b0494f0cc0ad611a
SHA256 489f65e1e00534835486e9255eec92b83edae4dade6dff867a380859ae53006a
SHA512 5b5147940803bccd0184b46e60560f967831541e707b5ef19781103e31235f1ba05d00e44a6f2ed061ebf5dd7013d9c696131a3edaa77d3aabb85b3255ba5489

C:\Windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll

MD5 cebd995ddeab2c525a5c4e95789bc961
SHA1 1c98da39d7eea36d73b361ddb24054038c2b8331
SHA256 0ee2a2c371a918cabc85143202864d0c3a4abf1b93a5029081a622e0acf17ab7
SHA512 158b3fe6e6605eb56a99b2135df529226f9af4b001ed0c2e1fd201a60054e2201dc22245ee5a02c6e7778337f1974ee21fa088e94b13a7402e61f64658de49a1

C:\Windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 8092f133c367147a35ad4c0c648e7c25
SHA1 93fee6fcff02f5d0069dd0c87f02065e6d676915
SHA256 c57e6abf04ebfdb442c4d7b45c32072faf60b4e849db130a0e3a68042c88db9b
SHA512 c124dc493d460c0569f393daf00bc6143cbc12e5c199e8d801b9aaad3c6a760290fa293ca12ea989705edfae340cc3351ddafffe99e8cea994caaaae4a9e6b32

C:\Windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll

MD5 d9824a9dd107e598575112b4ff897292
SHA1 adcc54d159f1eeead01dbd2fbc73c808ce519920
SHA256 ff4c03bbeb292317a77c86c1c81ae9564acb984b352fbef36d66e2d8bcbd79a8
SHA512 caa1f0411e0470a315ee8c7a62defa972ff17557bcfcf74016c64ad11b0f6fa46a126131a18e275e59e025814545e1d7ffe145377f6a0bcdb8cc93471e4c9bd4

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 f254836c2bdc88dcf82de7a2dd39676c
SHA1 12726d56f950cd837411d5824061b5a1e7f757e9
SHA256 81ae6386cc55cebd64e3008af7abd461408233c8e4e7dffbf26dbe4dcb7d3553
SHA512 1e98163e930be6511317dafb2ddcecf7c0f01625a69a89c553575cf58ab60306033fa0aa051902e68e844e930e7b610cf5571669b088c2b1f7ccb316c9da8e26

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 25c76c1e29d3e8e7398f0901f558a629
SHA1 2e907c9688a025538f1b2d0cf1860a2ae49fd2e9
SHA256 2ee41d4d591a39d648e90db4d47d0fa0557fd68197756ee2ee94fcde4d820cfa
SHA512 7308fd91859d00debf446bd6b594f3ea196dbe46a3583858c76d2cbb008a8698207f1ce7746afe3de4efb9a27980f5f813c77cc88e273fa82b2695d8f3d15039

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll

MD5 7ad4d9fabd109432eed91b359ceae430
SHA1 c1dcddd86f9fc630cc0231acd7b732fd55dc5f63
SHA256 f3359d5e41b1d4fec7230579a593e40fe44f6afdfacd1e2bbe52ee06d84686fb
SHA512 bfeaba581a7aeff86bac0c184da823e4a26516a3c4f39af6b6b1bfced73117f3816c567b182f4da0df1935a6e97b6d0520cf02f518736b52fd27d37750e863fb

C:\Windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 44c566d35c07d1c9f25c42fc01d29703
SHA1 90fe08eab0b07d835cec31f9716b7666fd5c00db
SHA256 16d594a7a59fa03fa66919efa6ab636fa4a290ccb307e3491638355c2e56c504
SHA512 1b21816756007025f05868b4b2d7c028dbca0ef0665a85db31155a8bbb5590906df0322eee7d2635bc9ef301d82e54754ee8f9ab2556852cdca32cce25b7b195

C:\Windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll

MD5 c0843f0f45edeef233b1e581ae75e3bb
SHA1 04569c78868eaa8927ba64f93312720117152843
SHA256 8c9685959706750091b0094522cec8644de1d1c6309e7a2fe02cef130d3a2b9c
SHA512 8fc293f5c5de65893d92c54f921c84f8a3f44fc733445dda7907ee09d062371ef05c11d014ba2017fd15908b911d0185a14b89d0a311a870fa33650c3176e442

C:\Windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll

MD5 75933586afd94ea24c5acd3dbc89a272
SHA1 970fd4b49d1368330c10279798991b901a233c2a
SHA256 406f473429573e9f0084aae125ef8f19f59291aa4c33cf7d40e7d996995a3238
SHA512 c096f0f11fb306c6a84886826306fe9c2862c3c79b14a8991a174224b41c2a68b76e5be506494d23d354384c715c5d82a1cacffff9644de9d6b93e9478087a1d

C:\Windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 46dcb4a0d818df3d50a7c87a3d49dea5
SHA1 b8283a0c7de391c8ae2c94bbdea6b9b590543fe2
SHA256 a1b08dd3f183a00b6fba170c7f0563d61e28e21c28eb674fd96faf2a0b87cd39
SHA512 b387e3d0249a5179d7508cd0171ff275453ec6f7e8fe916904a24efeec143dccd04f812d5eabd732997cf07c32ff83e7f51aef850a7c1da9d52e84f20528d078

C:\Windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll

MD5 0c453970e89db1c1eb9de087e6eab5ba
SHA1 c4c7e034773a240909332814f499730575a1cd71
SHA256 942e98f142373547493f13b14e1603b2420851aff013d3085bada7b6b2214d9c
SHA512 ef3b2cc2598b4ea58f00f93155319674450c8c35b706108ce3bbb5c2502efa179046d9d50e12725e6dc7a555f4880404ed03de15a0753606f20a1654799886fb

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 43c280c3b15ceb2472ab560d09629664
SHA1 e3a897d7608d03c93b5c2b8aef52703452cf6696
SHA256 bebbc40ca25ef22e9d16b0de1123e0cb0444fe7a78b4f0b4395bdfd81618698c
SHA512 5229eef9153b992684b6dcb4a32b231c63322b5e4b49ef262228c0dcca4760f97cda5d15a7fcdf77d813eb24b359101e716f72988374106ace13473f27e731c5

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 afcf5f50c632f3a5598abc28f196d77c
SHA1 294385693592f9d6320f8b0b18f45bc194d01a4d
SHA256 5e90089e69e4f7e2e42ea4a81fb62005c3710d0a4acdf207b97ed03f5641d013
SHA512 29746ffc665051e13386e452c3e41a593b6339e09a228927929be100cddb3e0e0fd3b54abe02eb7d46a3d97466ecb02bac362398b72fd8e804cbb21c8bc856d9

C:\Windows\SysWOW64\d3dx9_31.dll

MD5 797e24743937d67d69f28f2cf5052ee8
SHA1 7d39afbf94675487a9ff7e41d2dbb8daedf7ad00
SHA256 e2065619fe6eb0034833b1dc0369deb4a6edc3110e38a1132eeafcf430c578a5
SHA512 8804d0d95688a932c7bf7e1a023179de8df3a5436e356b36d803cb9781f3a378adb9fe69d03b28362755b808cbeb2cc718ab920672270de0b954996996328f5e

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\x3daudio1_1.dll

MD5 121b131eaa369d8f58dacc5c39a77d80
SHA1 d8fe20cb6f28bc5334ae64a8df3563d1985beb9b
SHA256 ff15f14174a5543f028fa49cca745582fe4cacf3bbe490749cf43444690ab359
SHA512 ffe19ffea137603e5401f133d461b30af6fc25b3affb8a8ce20b98e3270de398b9ecc83a6cd904ff42c5885d3806c7e175957bf4a5827dc2f067756a51bc40db

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\xactengine2_4.dll

MD5 6550e1a0a7be611592c31222fcb981fb
SHA1 2197a951ecac85f7144fb925f6daff9ae7811e5e
SHA256 1e0e09fc077bdeee3de065c663b83f6717d39d56778833f030955077d490d000
SHA512 4013fba5e4211e66ebd9f733ff35635cca82875d6af71dcfeb481a436efeab608fe41310bae63d55c7fdd64a5c5f64068ec1eeb997160c8ae27f21f28e2bade9

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx9_32.dll

MD5 26af232140c88b42d92a88f2198edf6a
SHA1 b62aed3f71d8963227e5021c2222192873ce753b
SHA256 e96693794daa05a75a83c11df2e7b42f2de61567c6ad0b69e353b50f6c88119f
SHA512 54a6a235af4dc3f3c693fba5ac2d487d96c9d7a2bb7deeab35d5a252e723e597226ec84e953625c8808546f91fbcfc42add85076846a63925fd9eabc09dbf935

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx10.dll

MD5 6f34f7405807dcbf0b9bf6811c94c6d9
SHA1 2de04a49825acf76a6a7aa02108337142d30b6ff
SHA256 fd2caa28493ea76021b93641958238b7a933f4f6db1a2070be03cc81d87d8307
SHA512 df623daace6702d25365697b62a4ab7d03d944306521022c6e65e94cf1970b5057da811f10e675c952d93a37abd1b862b8ce8648429780aeb99a4d55fda6aaad

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\xactengine2_5.dll

MD5 86c93789e9006f1ac47ed9dd47d4c8a1
SHA1 e9de46eb68271018aa31c71ef89d1ddef19edf7b
SHA256 ec68b5163cbb5f15e2fbe37fdf5fcb0d01dffbe53a460cb2cf668f31f0127ad5
SHA512 5a86661171f039946fa0568c6a9c655026c0a74c04a7789fadcb4acfd6a4faa5179d14149321920ceca9a1214910abec3e67e356898d5bdd044ffeefaeb57df3

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

MD5 bce73adcf5fcfac42ce15c6691275ea8
SHA1 484355fcbc55357c2f576fbdd64d33c8ec8ffa5b
SHA256 76eed293cdcdf17942acc313366b22b55ad78ee0389989438e63ab7ae145167d
SHA512 5e53f89142918eca969e005d006f0a106862877ee6e5d317ffa1b7c017730fd1d3d98e5e75f603183d0371da39c11022cf62232a2b614a9bc5e055f52d6da65e

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\x3daudio1_1.dll

MD5 489e5b8bb1bd1028ff1c798eaaec65e4
SHA1 da9c385c48a6f590347581c5c3dea67502b99837
SHA256 fac23787e7c199c1969806850b5a9652f66f6dcac86f48f6f834abc253848a55
SHA512 33e3c28d60c7063d76c6959ef18dbb0227466766c4be9ce920911e192b75c18d11943a2eb0bef2caa920a6efa29162acf9f6c9c07ed5ddf5858420b240e0c0cc

C:\Windows\DirectX.log

MD5 1f548d47a819bff249ad8eb1f9c725c1
SHA1 87a9f61d05872a2c140ca156a4bbd6047d72cc41
SHA256 8bcd355b15e46b27e68f8d183549cd2d4bcfff025c2029d4d4c99275af1e1705
SHA512 ff77f84836272ddab4a8403363b9ca38799d825e47ed18ee6ad117544b434f512ac8cc1c9074ebb47675273750f040c6cc95d7e942055a189d19d98437b4b906

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\xactengine2_6.dll

MD5 39000e033d39d19ccce21aeafcce2476
SHA1 6e7823e689a9b720a049a260380805a235ddbf75
SHA256 be45aef0889b03e2243282a912f41580e8566db666a782c26a1d4d7988799d03
SHA512 65047afe28308ce69e3b410b3b52b5fa4f615c95802019cb9b78ac69694e9987076af4bddb2ed7e47b0fbe73729c91b94c525e5b7644a42658663ed044b384e6

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx9_33.dll

MD5 cdb1cd22baff21f48606b3c1a18b000b
SHA1 9315b5db975a34dbebdb4dcae652ba1db01c482c
SHA256 c6b7b2ad7742dde5dd8d1a35fdc1c185e586e551ad9c74d3fb21759cd8ca4da8
SHA512 c5fb24de8f1ee6fc1ed6e74580b5d22599ea4eb6c3589645fff0b15dc8dca051c4917e60fbc00ca86542dd63a8f5e40da92ea77e24826c0c6bdba9b58c36d4db

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx10_33.dll

MD5 37a8171accf46a9c196054066c28827f
SHA1 886264510372602c2ee0193c5a185d719a61316a
SHA256 b04e2b089656eae01a0071359f9d7fb040dea804c1b9d2379431864174259c2d
SHA512 713b843a35dcfc32caa67c52ce0a32af6f54dfc4c11615d32613017aeeb257fb3f9168443a4288c71209e5d40f2e1b281febcbae6da076d2b57cf01aa3cd78b2

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dcompiler_33.dll

MD5 fae7e1d578c42a7c3d9d61a99d178bd5
SHA1 8ac88ff2bc5f616ed284a04ddcbaeb72fb1f304a
SHA256 12e238af4b4edc1f774213709a87a91b77b2c9d2d18fe475b027872923b6fa17
SHA512 75107c64acfb6d84e1b05ba78377dc4699ba83b694b7ace474665c85f3e5843db6d06348fefed539c6c2b233775c7ef81d7bfd81937207e04e637043633cd0b9

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\xactengine2_7.dll

MD5 7febb8ce2233cbae738b16d42ed29674
SHA1 fdc5682d6aa0ec57b8f3c742fe736d74b3c649cb
SHA256 a43c92af3fbe91dfe2a1d415342631fe64e18c7dd3e16e93b6c78947b68e7bd6
SHA512 73a3c07b13b31d2df1cece720a0268cfdb7ae2a066b9e613f7c4ff0fc37b94bd4f32207149d56e1bcaa5656fd4501b1d136d94e18e97c07a8e793906dbc7927e

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

MD5 45d4dac07aa361bcd77aa815d1724a16
SHA1 3bbdf7da5d51211ae269572961b5ebf508ada28d
SHA256 34ab99536ea59ad60ba6efda3ea6d18291ef096a0bab3664248d6045805da0ec
SHA512 d940002a8e0112a3b56a909008403b447e9cbb80e38b9bbd508f40aa68224f7e5d9681e1039e747ae939e0829a25be2319b9f9d0862cebb042e4c525ccbc20be

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\xinput1_3.dll

MD5 77f595dee5ffacea72b135b1fce1312e
SHA1 d2a710b332de3ef7a576e0aed27b0ae66892b7e9
SHA256 8d540d484ea41e374fd0107d55d253f87ded4ce780d515d8fd59bbe8c98970a7
SHA512 a8683050d7758c248052c11ac6a46c9a0b3b3773902cca478c1961b6d9d2d57c75a8c925ba5af4499989c0f44b34eaf57abafafa26506c31e5e4769fb3439746

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx9_34.dll

MD5 1ca939918ed1b930059b3a882de6f648
SHA1 0c388397620ce0edbb362bb3ab2d4a9f31a56b6d
SHA256 b6f77f06518d35345fb61172b6a13159125ed60c469d28b1a2e07970e9ddf81d
SHA512 d1e09da8551e588b8d5d5837a79da9ae4ddd6a372457d3c341e68e3da07c0c1e84decadea9534cc87ef9ef38c094171004f836e6f74831fd6531ce72aaefeb5e

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dcompiler_34.dll

MD5 75f206c195bbaca6ef28565b1c0cd75c
SHA1 4687454c58f64f2154f0e99bf5a323f73ca1790c
SHA256 5044a5810fd931339933a8d0c56115a5a5c27d8c0d8e348977e2724a032accf0
SHA512 84c0a8fd3e4293d85e919940f6f24d88fc6fd68f39cffefc34014656fee54256ce581ba408eebf5bf9dac3da9de19f2bf8403521c55881d3877dd64a8e50120f

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx10_34.dll

MD5 5aa9987f2e62b56d7661b6901901f927
SHA1 2cd4e3e70c3b37da134ecfeeedd377d1726d9759
SHA256 330e120d745e1132252df81800362a7ae0b61a9060afc800165ba8a1d55d3fb3
SHA512 af9e39f368b47b1500e5d68a6f234361fdfc29ea31c32f614c5887f124d6097be0b2d8f37287d0cd0b094d3a12e3f5881ea822542a1c85f10566604fd6228988

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\xactengine2_8.dll

MD5 499210c45afeaadee8cf4dcf7d5e570b
SHA1 de5ca60de47c8f54d531b88ea80d9a24a8e87a98
SHA256 15d82e89bea30bf82de6ba0cfbe97eeaf05d1e06bc0133f0d1ee8d0cc41f51f6
SHA512 f76f69bc3b6cb4f92e675eeedbd10a80f0b970d75ea04392484d477a4d02dec670cdadcb90be9eb215c4ad48a90d28347c9104f0835e93b5a9803fd62670536e

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\x3daudio1_2.dll

MD5 9e4efe7cc29ece294f3506fe0d8090bd
SHA1 b5d0e9cf45ac3b05fe21aed3ba41dd94b1ad1fa7
SHA256 7c06bb70d12cf78de9c6a12a53c95f9dba41c140a48bccd500483e5b87795a8c
SHA512 998d3034cf21bb9aafe0821a96c64ab0c38f770cf9c6a6820a2292b569510dbcd0e71ce56dae813614d9a148c146e095245e963905e71679c3cfca1ad98f5e16

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

MD5 98b1369d38333fe9143259687edfb25d
SHA1 3536573ce844dc1441b91e1124b6689b93add430
SHA256 d4e57566914f1d36f4ebfb6e164ce2170f1d5e6392189d0ad6de3ef3b0a9aad3
SHA512 3544088b8436ae6e48d22a7638d59f3c14fb914caeba17a87d1af469b82f818a1a71c5faacd52f69b5bff190b44fd91f893d07b7e05c2e9a9dd363bd75722057

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx9_35.dll

MD5 3ef18b78d17c962f2b71ac1cb7757684
SHA1 2380329c17c7a530075c7572d17592bb3a00c4c2
SHA256 2198022938156b790e9cfb0f7997494b66a11a1ad49b395be58251d635b66b26
SHA512 93e9bff79630ee5897bfb3bc496f778aba160312edcff9f0b8cdb8e8af3d5c7b73a8d95d54ab26cc638a2ff7cfa27153629f9fa8a4a687ae3c83e1178471e720

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx10_35.dll

MD5 f3764552e45880dc49b82f38699aa87c
SHA1 25e347799bb3f36bdee30aa78cd9e59c7faa5add
SHA256 db775655fd923e29509402556f86002dd9aea062cdcdba7073e1057a67b5ce50
SHA512 7e52bbfb4f309b9f5a9632efd3dc28a0509b7d5edf471267f7e794ce8479dd8cefcb29535327a7384bcc25b5331ff87c223fb70fbb5da22fea3c919ba4c5444a

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dcompiler_35.dll

MD5 5b441670a4f5f8bcce76741902b8af56
SHA1 b98df0c54483664ecdc92eccdcdee09d082972d8
SHA256 5a866cdf74f981e783624dafb0e72f133ad9f9b293856d7a18c7558fa357beb1
SHA512 0243deac1124425b65cfbc7d6465bfb09a4849e6c5be3645b808cd3fa487c3044c5b45e9943ee31542a7a47803c02f0b92c05c1e4bee18cf6076641e1c0794f6

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\xactengine2_9.dll

MD5 46ee68f04a75a1ccf40235ea6f1cba05
SHA1 43a30e195b8d894c69bd857ee377ce7fa6170fa0
SHA256 93a0d8fc38e4e9a301d9e721afbeedc5af40becc0b11a6e7e8e38f08f366ff6e
SHA512 16e4c624e4e74d8c1fd7652ae745a87de3698567faf0cf03651ad87f1f730405fc0d2eca68e4b0ff3c5c526c254aac232f9bd359ddb6563313a8f02db3603fa9

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

MD5 ffc75edfaca60d28b6e6c1da8488f0bd
SHA1 358ae6e2680666b994e721db5fac0105a86a9c6f
SHA256 fbe2e9cf7e400537a4871218113df178f70501ffeea59a8f0f721927124d6d46
SHA512 dadf216d9e92b349179b27cf436483dd5a52bfdc1db659f3d99b6d1bcc5f1fdf3b0fa4bc8bd08f89439ca1f07f5dc66625043f8065c0cc75e8b3627e59eb8d0d

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\x3daudio1_2.dll

MD5 ac49e8536bf510251611a77e2a6cb8dc
SHA1 8b1f64007fa777fa2aca1e456735ab872cbabeb9
SHA256 1ae37d90d39c36c142a51ab9fef7230788ff95080f2bc47734737bf82d3c2c9b
SHA512 2c33ba362315ab102e4898ae92f7bc71e7c0c7fda8cd79f896cfe76e5a2a4129bf6a1e48d75b82ed7d915c0ced819e81c0f89640677b6bfa388962ce19bde2a7

C:\Windows\System32\x3daudio1_2.dll

MD5 9355a1169ac104a3670c2a77d060ff60
SHA1 6935990e213c432e4fe3cd667148d95c0a33bd02
SHA256 b822d7de1253c52676f4e20f9c715e92759b43b69978dfef2527b6101e420ee6
SHA512 9897bf3ab16e869b47840b72e0d8166e0f6cfebe0b3254e278d7cb046a5d50fdd2d8624da788b9afbcf58fc95024ccd2e5b9b010de074e8d9500669f349061af

C:\Windows\Temp\OLD3CB4.tmp

MD5 87d52a3ce4936f6c93ac092c3cc2780a
SHA1 3be34b222d022cd4dbe28f0668c14af716f1025e
SHA256 9566e346fbf72928e9b48b3408c8336a9e77b331bbc729e8ced9f0670c51c699
SHA512 d7809bf29599e86a5c164d6cdf83e9b8a29ae08972c998bed5bb8a93a11742a5905867d2bc7118498985c4f1f4e6223cb0659e8d9784a2ec05b12bebf339983e

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx9_36.dll

MD5 44bfec5c9c82a2ee9871d88fd3b9a0e2
SHA1 e2aeb78330d0815cffedfe88438a71024577d4b6
SHA256 c12f0ab0338eb5031d3d04beaf7208ac848f7e037d21ff963d2af90221cbe935
SHA512 35c42ce3afeeb3710d3d96d2cf9ffa2828fe17f8d749fd149e3797e87e154508c77f637de0e424d38bb3fa56bca959cf9da7787323950ec8261b144c09ae306d

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx10_36.dll

MD5 d9158e78a368b08d9133043eb3058c12
SHA1 d71d6f103bf7433f442f55c355dc74fd4b8a736c
SHA256 aee0248f18dfef8194451a22c69adda1cca38c03ae9aa776114da9d8851d4c38
SHA512 8bcf2da86f708ae84141089f80131244d957e64c6fed0fc39dc688201659cffa7005bfd4cbbb315ee0a60c61e38ead3b4e4fcb3d2f0ecd0386a6fbe486d82bd9

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dcompiler_36.dll

MD5 fb4299688a0d3a37687c015ac2b9922d
SHA1 a4898d246afbb0ed399e77fa5ff29c99caf912a0
SHA256 f15efcab1780fe7d784a3cd3798f147fa249e81b7ef9a494b85dc7fdab084734
SHA512 664b139754d587dc32820354c1333fe6a5528b07b8bbfaf27374a5da7e86a4c3e7904250976ef3cf8620fd0568c34fa75704a8b1585c382b99d4ee46518617ae

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

MD5 c92c92060d535cc9800b6ce231276852
SHA1 79281861482c717e61fe9bae300e0fba310485fb
SHA256 e0838d8d562ed4683bc06ecdbc46fe19dcddf711a0c7909dabf62da572035dcf
SHA512 7c8893c92c005c7c21f829912da4b9e5a843e842826d5e362a9828710486240aa109f26e38a84cfc03617f4abaeda25f0ce215b8f6a1f9a65c58ef5606814d13

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\x3daudio1_2.dll

MD5 f6a9fc2ad2f9111372b5ab3bba3707ec
SHA1 bc7afb780d42a332497139b5236b809433d86009
SHA256 4c448c7f77e3b4385d2cd35d0c470589cdf0524e532f9cf7ae084a8f88aa949a
SHA512 6cb44bb174ef28cee3e3a6ac51897b5cceb3f2d06d08c556cf6476a285de3e3b03a624ca92fc11b95f29694629457fa39747e3041736f9b76e84f19a052ecba6

C:\Windows\System32\SET3EE6.tmp

MD5 bc78d5328541410510dde06b9fa92024
SHA1 f6123294896cc3c3d3cf5a9e0e03319f58da7cf3
SHA256 7a34a7a8af47c6b2cf890ecb56bad2454ba5eb1ef2df6fad9ee53c4770e941cc
SHA512 5284d695216aa4f70abafdea130326d8ee3c6d9a9858dfa3f5b184c6b8b185adebcbc92adb8a7530f9127ae1de30561986bf9c85bfb8b474a9812151a7843c59

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\xactengine2_10.dll

MD5 73e055af78a64f9b2779d44407ca2ab6
SHA1 d771ef11d22a79dba7deccb9b3efedcbe74532d9
SHA256 113640ae8cf78caa7cface2f906f9e6b60809906f5c26e08b2e90fc48430f3b7
SHA512 a8d979297ecce24a29459e7ff814e53c649a6c969869279dbf0f29edea4d73883441519a27e5e46bb1e4b5b942cb26907cea9a488de0067e589632687b25b5be

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx9_37.dll

MD5 ac3c517fb0fbbe45fe44007bcd3625a7
SHA1 eabe1601d0132882c7226a4ed04fbbdd5e8f0db0
SHA256 c2ccb84c672a9d8966e82a28005a4269886ee304972ac3590c0b8a9c1622a3d8
SHA512 89b44142355c494f2a21276d0629f3536adc0dd7cec101a1f2816031afcc8a96f94663ad46744c772d6b63d172ea62e9b957d6292e4a6184f958576f62b05836

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx10_37.dll

MD5 4a43e9a2b17e4cafa9cb5fec0b5b686b
SHA1 9e28d3d197958e65ab8dcaac91fa55cd1991c3f5
SHA256 61aaf973712f848b24c3e769e3252248ece96db63f206de0ca7ff43d9ed87a51
SHA512 8411bbd130427b690332d222233465bf79426670f565ac3b01a71929dadcfdd18002c54d60981dc1f202e6625f99ab73451805d64518fad9b5a9793407df2d71

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\D3DCompiler_37.dll

MD5 ea752dbce35045d3c830dc16578cc8ab
SHA1 0a9bdf391ccdd113fde4d10f0afc80d54df01259
SHA256 715876d15b590936e4d32602a764d810650eec134922b32eea742e2fa71791c1
SHA512 3cf5e79062203d39fdb74e789e22405b93de126deda3d698963682d51f264cafe9a91d433312bb7976fa9b50a4798060fcb97b6de7f0dd422eecac2a922e31dd

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

MD5 edbb7730845fe5ed4717b06f84c1cb2b
SHA1 d9bc196e34d69ca0ec91a5a835b444ac3e8aea42
SHA256 de817d92db706f329d50567221c42110ae781d679ef853cc684aec779ab51ccf
SHA512 cb7c5db143087a470d7ca7f5d4200ae62513ffc27b864528d851c310d0f6f68d55b6fa45b7d3e0b81043ada5f7f6468447e9a877b6c6e06099c38690a6c07d10

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\X3DAudio1_3.dll

MD5 c593fd0a96ee4b6390b653c4c641313f
SHA1 60d71ca2eed9ff8afa5561cf1dccca03607134b0
SHA256 74ec3e6b253af1b68252e62a5c08479453b3341d49c606adcf36913fe9ed9717
SHA512 1bb328d1a68dd7b7657d033bc2bcb8e2c096bc591e435b5691a4ad4f0f49cfad70d4e48af48d10eaf4ad13d479a3f4fef66b09a0852f8c61ff33937c7ea22190

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\xactengine3_0.dll

MD5 8a83673f0ab001870583fde2b004fa59
SHA1 be8d312b359a9b8f9f184d78c93c762cbc46e321
SHA256 887329745c479ce8d3023c969adf66780dd7e51ab536f0a08550ba4c77066c20
SHA512 583c73590d4b90576955783e24149125615b135f5bf5a815674e2546b93a8f89f6c3a286df09257e547bcfa8c0bc399abba59fb64158b411a83f28a4a4feabca

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\XAudio2_0.dll

MD5 418cdc57e55ee79c3f86c13a19b3d5e3
SHA1 cac2b8396b1c82a6f7ee2a3e3ec3d2e4c2f869fe
SHA256 e435b73193bdf651f7ae564eba05266595ac672db45e0e22dce92d0bcb3c6513
SHA512 1ba5a49d9102911d13d86ac4f0e4ecb44069c93a58e2e3225d9464755c14f8d57f230eb32049c2747385f7cbaa9c0da0f6001f27b685eebfcd94f3f5b8fa3250

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx9_38.dll

MD5 8f3eb548ac4ed90252394f60c77e3196
SHA1 e40bb2e3c99c55f2df9def2765bb014e01389622
SHA256 743e77a228e7d75442263ad70051e44534f7972c6326fd34b505a9c2c245894b
SHA512 bad441c93d37269a9d49edc39ded933e43baf2a563c425ea2db222a9859ecd1f076c2255c077a5afd07922b50adfda2bbb731ff6f292623b353a3dfbde4ce4e5

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx10_38.dll

MD5 a2650b27472c21cdd817eeede65648e1
SHA1 c0e5f70386bb229e289a476f2a95965699ba53fd
SHA256 bf463b7ee2235f351309b5fd790f514acf2b55a4a1f90222f7479024cc28fc34
SHA512 85320f262c10d80e889258a8584648dc20283d1af0467924e8745555c94a8fc056ac609b31d36a898829ad418c9df06047ecfcc644693bd136ccb50ecbd6fe91

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\D3DCompiler_38.dll

MD5 103cbfc5591008ad33046e20e8e1eebe
SHA1 4a8bd29d7cbe5652ba58cd6754318a03497d841a
SHA256 ddcaadbdd47bcba02c8d1880d456acc20732d21554977338ae507987ed04046e
SHA512 ddab1a2ab33b224ac3f9ed396415bbbdf96bd59bc6794fe26796ee87691154d5e1ca2abf8bb85e7a9fb6793446bf17f6f6f53b74e69443270f50ce0b85e06b6f

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\X3DAudio1_4.dll

MD5 e3832514bd21236067b7227f6165ef95
SHA1 bdde126bfa7e3133f33e3d3e7b4618422c61acac
SHA256 799b38139523a3b30d26e21798ee705375c61eed8ae2434fddb52fde51f4bb78
SHA512 e60bb2b8cea5864f3311dbc0ad8f7813764bd55153bc0554e2842b6973fe24a1ce9e4381fc6fb05792d97799fb247d591e15b7dc41eec2bf563bd4f7ca797d85

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

MD5 6f05a242d0253e19d67978780bc06528
SHA1 ed8c623b0e462e92185d498552a11be01723861f
SHA256 ea31341129f7558d34fc2fcae9e715343aaadfc57f06a33a6da18448bd71b77d
SHA512 2bafde8afa6918956f745b34397a4f6ac479d3696a363184ea75cb9e05c5d83796527ea6cf343004544173e5370bca0258d5636e3cc5cec16701d68d82cd97f3

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\xactengine3_1.dll

MD5 2e0e25252e1d41752876e9fe12ade175
SHA1 d9de3a83235166a4bbc4bc356419c07aaf3e3f8c
SHA256 088999560171c60129c95f9b541852392602561dce43e4c61a453d48065f52ca
SHA512 a4555cbbde372893c564e1fcd707525c92fbcfb6915354b0062474cc47fe36ef66a3af212c08da117f2f2121698e556633f8c399199344354ce0d4cea4d0a2ca

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\XAPOFX1_0.dll

MD5 dd165760f1b95200a3da2d9dfdb84234
SHA1 0724300a1cbaa32e03a234cf6080a67967c335d3
SHA256 8b396d275de2550af8ada6a1ff71f0f4870b51c8407e44044c2dde7ad6b754cc
SHA512 eb130afda1481dd0e27a19330a8be8045b3172e46edcc5a0cb089e191fe415c41cfbdf3af8f084a6ff58f89cf8d7d4d0879a3bae8f93a52ffc84da2d4fec5ccc

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\XAudio2_1.dll

MD5 e34ff0115b1ee3b4e03d22ae9840ee03
SHA1 746e6e84ff7f630643ff9381b9dff1f40a49ca16
SHA256 32a7c6a4edef46f025a4a5c64b892e29baaae948e86d9ed49e82014eec1441de
SHA512 7448bb3ebb8815e13e14514c8580dfb7f6de1a96c90f6611f6766dfb48ae7bc4a06efdc493060c054f222e7d9b308e062e1cabb19a60f50ff9e20f06905df58d

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx9_39.dll

MD5 8cb3defb8887c4f0846db1fc1304d6d2
SHA1 5fbe058848db16117ce7cfdabea1f178ba229a6b
SHA256 5d29988cad858f754ecc62c3d30de555f82cc21b5b26c448b890295e9b7bee82
SHA512 4cb675b179d05ead18d2e42329e0d10cd1d520cf9c8c0681b89aca79ac9c814e82941b0086135bd57721b66b55b6feae00bd29af804f59a486e935fda413fc43

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\D3DCompiler_39.dll

MD5 c4f1972497fe2ceb7d900938c97fcf91
SHA1 27c1886e7823813ac61c35ea0cd5b72ea0ea7dbc
SHA256 b99b655abc4ec45851cc2acdb7a348e739687200a4fe3be9c35d6738dd61112f
SHA512 8d35dd4000e1d632d0924b594d6ef13454159f8c3b85636f180486ff794b76f8a84d7977e340ef08217f0f68747b593eae0b44824a20c12494007f4a40cc3d00

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx10_39.dll

MD5 e6c2f1d8b667ddc04cb55b9f0159ef97
SHA1 9dc5c2d54397aeb56deafb63ee34b641f7030ee7
SHA256 613afdb8b44bb3bed945279229d9604a3cd553f8c2b9b091235cbab8cd00de61
SHA512 5cc39f19b6de99bad0be00fcbde9d498e23f29303c6ed4ba79c2b2bc63f259f9b617ecf6ac67beee8a71c03a0e80c29412e0159a5014a43a6168c37835bb0e00

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\xactengine3_2.dll

MD5 f3c6be26949caadb11dbf0086082fac9
SHA1 6b7a2475aacaf63f30964e9958713bec331c82ba
SHA256 e6a34c1f068f89d6515cb460eed3b4dbb53522c5579e6c75741482f0d40d9f99
SHA512 167afd32d847088d4973437f8b89badce194211f8fb1a14cf30df11848e4d4dd8d5243765edb1ed09df0f9b674cd7de764f1dae9fcac91f0ec98ecd259181d3b

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\XAPOFX1_1.dll

MD5 d95eaabf5d277ef91d9ca70151209e56
SHA1 3d47ebbd6236045309d2222a696b7141c0957379
SHA256 5ab63c0f040fdf65e681eba4daa55ed83e89ea10c426dc2fc763da0fc94f3ace
SHA512 6d2e73468485fee2b4007f1fdf16381cdd6c77edbe5530f63cbf8696646b14d06100fdf54a48547f29ea5775f29226b16808a5a1bd4c0778413855f80e5b8259

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\XAudio2_2.dll

MD5 50f4a0d5e6a0bafefa78f353533b8e06
SHA1 d370434eea3a557ed77b2363dfac720a5ed98666
SHA256 9c7897b4ee1bcd190b1c0b7b77e64ee731d234764683a1e2286af70d86b62753
SHA512 7686b893996b76a25ca7da971ca3a10400dcc682a05e8317a9d159a9317537de0bc20dfdef643e85e6ee548d7893138497fc156f77534124a8eb3e3ce47f0cb0

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\X3DAudio1_5.dll

MD5 350fefe18b86bd4d9ab2a96d00215a49
SHA1 be4ddfa0edc3a463471fc170e9706abac0a672fc
SHA256 315944bb2a1959c8a4bd2677ed415363e1611c7351ce55319dc98fd2aac83f87
SHA512 490bdd66920e36aaba2a4d12bfe4aacbead7403b1a623bead0d9ab5f68d80f46fa530c5f7de9e747eb8acbfbec8c635aea32655dddcb6a9d8e006339e1e8857f

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\xactengine3_3.dll

MD5 8ba296419af3417d1e9806b83166e472
SHA1 a2a8a64aedcbda68149a2726b094f1710cba71d1
SHA256 ef052bc9b7fde596fff3ea2d9c8fc994f3282953dead1b7f5477e7154af67245
SHA512 877e89553cbfb6afc6dfb22a590a468f035dccffecf842cb26010d5e62e33fe10e477d5cb157d321de3ecc59112ba616b80e767028eedeb4e70a591f1b81b902

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\XAPOFX1_2.dll

MD5 295e47a75f278580f9441041eaaea3d2
SHA1 0716ca729ca3d84e9dfb4bd97c1e12466cc68625
SHA256 d1a55061bcb42f69b7cf35e2985d48e30c7a90f0bc668e90390f465b36bd0161
SHA512 a3cee1d45759fe3323fe8c3c49600856a86b61b3174c4d9c71e58a95db4848683c71605f5bd8c04bec591da02d96b79c68c1135410930ca63d17f7a929f2dc4c

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\XAudio2_3.dll

MD5 47ed15dc87ae334c13c4dacd1be2cced
SHA1 54f94839c4e4d798a1f4f1fb6ee240957a738cb0
SHA256 04dec9d7c68962e01efec0aac0ef7a3499bc4c16e8a41bd61fe6641da48d7dcc
SHA512 da0707a153172c48036d885404035829ea251b7df5a9246fc05dd164ceae9604cb0cc931b85d77151bc613cd5e7e4d0430a4fd92697c8bbc8faf5fcfd1c140c4

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

MD5 44442b56a318475a3e7acb055ca79d29
SHA1 9ffe16ecdacd79269344643ca160d940e88e7292
SHA256 4c8befaece0c58eb75c38e2347db04557c1bd2a4a269282c3769d6bcccf50395
SHA512 d64ab17f7e1baaeb5aafa4e7eb100257d7a29b1f5caed394b2d3b656c4c9ae56a0f9b952f60573e3ebffa090740f95b0f173eaf2642d6245eb8c2bc6c619b096

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx9_40.dll

MD5 eea5e428ce63804f9b12d21c97b5968f
SHA1 77a7f48f4bdb7e66ed5e524bb8879e3da0d6cd1d
SHA256 16fd909aeb68d0d1aca8529dc7f78880b97d6649d70ce8d03a2c858bc28e216b
SHA512 545518dabd82441ddfc17fe1c1cbd7d14603bb58130de1307a31f73b93ca42afdf25dfcf481f0383c4e039edfe4a88ae7b84b06a2850c29bbc3550114e499c73

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx10_40.dll

MD5 91b4aad4412bb223b466f3dfb43e86da
SHA1 850aeb2b3ca15158be00faa5c161312cf4a876f0
SHA256 c05787cbf3aa4527baae96a425ceac910090ef48809990a450c33f3cda0e4767
SHA512 413f68d1ad36aa51389da62eb2fe89969e4460ab166ce44943e382fd2d1cad0953979eebb20af58dd51def3fefa1100ea9fe95c05714c36d5322e281cea1a1a2

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\D3DCompiler_40.dll

MD5 3384134eeb8f223178c2eb8323003ec0
SHA1 c8eaef8cbc91f4386e42904dee70abb6ab7304f2
SHA256 f0a6f156d13150de6ebb094233e5ff78581fbdb77bd0ff8d083698c42bc8e13b
SHA512 dafcf4c116d994c17d47d36b1dbc2ba8ca61cadeefa5d770adc391713d2c13ed2b6eb8d2464f4811cb472c8e1eef384ba21d7ad8203ba4e9ef07f33781feaaf9

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\X3DAudio1_6.dll

MD5 e763798cad2a90b6ab61854f50cd47dd
SHA1 419f2c98d2a3f419db1b1e9b5f4f7c3b9b636c1d
SHA256 574d14ab9a641c6cbadd78f2cd6c088b64b59c3646057952e63cad7d2778e1c3
SHA512 b455b0078786b7ff8362f7404095037a5332603383707a6dd493f381eae3e28135696fb4863e1915ea01c0f12ce10d021a18ab91cbab06b4d20142e0b38833fd

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\xactengine3_4.dll

MD5 686f8d1b4926d48227a06acd4d41cd1e
SHA1 324fd1d21a42f0c30bb071beb2cd5db9abbf3138
SHA256 d3bad7995b998f2c95dbb33020a198ef5a248825321032f051619f353d46182b
SHA512 6ed69ab933492870b7fbf4e178999b835846075fe103e65f9a0f9b1ad8d47c9277f31a7a0fb53f3620b591b103b02bfa8efec530d7372680f585b82e128edcc4

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\XAudio2_4.dll

MD5 e684c5fa18adf9ea14737757413bf727
SHA1 1dd454144e8c0f3aaf24db0b77f03737914d9a72
SHA256 bcde4317debd0052b1436a6fda60e1dcb1e308979498117fa0cb50061f38101c
SHA512 9686f92745a30fd9e442ff6a24dd89410aa483ccd46edbefce0fe378645292255a323e1aae146180e8a4ecd15765a996df959a302d5cdbc6dfa4c5fcb8252e4d

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

MD5 d001b26aaa9bec255c0b697732e571da
SHA1 adce71afb93cf04a86c1b9d2f80144ca35742d2a
SHA256 1707a6644d66406a9ac149b8fc959d964dce5c028ca3e1d0d5052e70f80515e2
SHA512 af39d48e90cd2cd575a8d039642985e25ead1fa51528a082d91c9bcaf9d1ec97afd0f66c0bebb53043221ef13dda69000ebbdaea87605efbe873f471e16a6f90

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\XAPOFX1_3.dll

MD5 c4479a4547390e3c5ef28d453abde4f5
SHA1 9b3af3d2ffcf52cc6628cb486372be2870771637
SHA256 c6956ac2ee59f71e86784138b5443de6970a1274ac161945b8a44dc1d535db84
SHA512 94a55bbff8a285d6b91ae72b70664b2c1a067890db175e20265be2d57a4b29deec52f08f0aba8ae07ed30dfcf96889ab835b971d2bf567758d3f7b881a7e5324

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx9_41.dll

MD5 3fa06cf5079b84155d18b05c08f7131b
SHA1 fafe52876151a08f39dbb6b4aa137dd85558ba5f
SHA256 6ac4df203af419d3f3b7d9a99e14a3490ea3ad307c474bfe36baea642b1421f6
SHA512 24d29c3ffb6532da860fef4dd93e61f7532cea3af94928495a3af0231e7dff6db5cad25713451a2e722c076462b94818cd6969a1c7d8905585b0f64e12174d1e

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\D3DCompiler_41.dll

MD5 781e8b5b6fdb3c9b4e4a4a9fb019960d
SHA1 292b9f02bc2377c6f89b505554394ace161c68c0
SHA256 69ddadf8f5be24f10382706480b55e2492008d102001779f976608e880c65aab
SHA512 718955c983708f3ce5b6796de28658603bb61270ca6f1b3ee01d73ca9a789db326a7998df38cbd6330e69bfe3d9504b0fd351fb7bb18566be6af03fa36b7573a

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx10_41.dll

MD5 1aa571774936717ee776dbed51e9edf4
SHA1 98eac7257ab3350504c0a70342b6b24658411f55
SHA256 9f4c15e1f68795727eded4737acc5a1aa85f896cd9e6924fddc9128b48f1bbd6
SHA512 bb47d95d594b249608e323c8ff383c0655a56e9192e1a2f3157e9c18dc7b9baabcf8e6b09d30fef570e0718edf673c56a23df5b5d5c6ec3242ad3d887669127d

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx9_42.dll

MD5 c6a44fc3cf2f5801561804272217b14d
SHA1 a173e7007e0f522d47eb97068df0ca43563b22bc
SHA256 f8b9cfab7fffbc8f98e41aa439d72921dc180634a1febca2a9d41a0df35d3472
SHA512 2371844bc86cdce2d1933625b921b982c4d1b84a39698b51180b09a2d45732407d721fa01d294ca92a88777607a1bb00283f6bcdd4231137a388216d0b09dd5a

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx10_42.dll

MD5 501ac862517c5445742bee8a2b88414e
SHA1 49f3f2df66d357aa84a5e7a0eb368ea595b7d95a
SHA256 46429c4affe041b08a7acfda0e9162ba42de966acb2cbcaf09ef976232073b51
SHA512 08dc13d5ad0a0d2aaca9d3dbfb53304216111da73bf48810df2982650d580757c10c8b9bf80ae5191e06ebaa44b2bf9c244ae141308748c3e7fb9ef6088900ad

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx11_42.dll

MD5 d09ac80a4b5312239852836c84df3392
SHA1 ba838d90a1e74d6b9a57abfc9729dd3b2e7fb192
SHA256 8c8fa8dce19e2f43e82cecd73a268e831a5ce0a16023845f7fa7fcb597772e85
SHA512 69232a47c80f01433716f3a9202af25e1b9a298a2b7b7d23b959e59d9c4ebf329cbe9a9a5bde41c06e978fda062225447114f9ae736920e7bbce8587a9390613

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

MD5 7d8f5afb77c3ada97a83f3fc253d6392
SHA1 e5424d020c6de84ccf72253834c545024161f682
SHA256 3a07c2436d3fd2473e15518a53262d4f0fb7f2a05589437cc5668f929063e782
SHA512 52f4bd961febfe6f691d7dd1e826f689319656393756e0c5c9e3d9729ad47e072071b204f63a3b37b67204fcdffd4539db08cbf190605dd9652ace51627e8845

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dcsx_42.dll

MD5 b337306dfb508a1bcef1974bfbb8d924
SHA1 203c32d73f99e1097bc306c9225307a18c617f4d
SHA256 e462eb3d41db54988ce3be46ced60b0073f8d939a9946cda67fb1df3c8afe0a1
SHA512 5c7a101e403aa2eab57e2972427a67ae6cd1598a35f983af784ca3a7446f7c60ad3cff7e52510f14647645a49c387020a06242663433db89e6454188b93813e0

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\D3DCompiler_42.dll

MD5 b33b21db610116262d906305ce65c354
SHA1 38eef8d8917351ee9bdff2cc4fbfaefaa16b8231
SHA256 6c976311406c23aa71018d274da0ecdef43b6e3a3b0b01e941a5e8e4e974386c
SHA512 7049726ccbba90d06b3a56e1dbde8196935d4681b5548248cd3e6a8e38183c268152ba2b07eb90823bbe327c02ec946c59abe3562b59e29d9bcff8fe90e0adcc

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\xactengine3_5.dll

MD5 db3c93e87452b8dab4f58ed1fd2b1998
SHA1 fbcc3c80c74e98e8554260b8a08e14dd1670075a
SHA256 1d37ab9b90372eaaafb5055401449dc3184428fed559baaf36fbcccd2479611a
SHA512 af693d7d326dd7874e0eba5b4163c21aad86270f8e54058c637f1cd200e45eafb75f79a2d579c477c06082ace44f3318bcef71698089808690ff88443ddf348b

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\XAPOFX1_3.dll

MD5 30686ece80545e06d78d156eb9f7d463
SHA1 b257ba4ffad8003fb7d12e9babd3cf4e88bd52f9
SHA256 b05ad9417028b9777f69422caa01ae9fd22c7bfe542bc6e7de2649e28a4ea643
SHA512 ca03bb01d8e2608517462597076bfa96f4b2595c33b2635d80e4348ac3926e17c93e5db30d7e43c30277cf8ac07f982a0c729f83a00df8965993d4f0758eca13

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\XAudio2_5.dll

MD5 8b01fb723f3b30ab3debddbf97cfe577
SHA1 e379c3b7d0a66da06b6a381deea19bc541ee0689
SHA256 c596de2ab8394fb62538fef0b4657317f4ead50a6d798c5d066e25e334576c27
SHA512 ba8c5bf7eb657bce6e2c937e082b97bd6169d1cf3daa5800e5112d62596bdea47e5c1f23146f3f696cd68e8def4df92e3fb24a9aa8b9a08320738b66fa6dfe2e

C:\Windows\Temp\OLD553D.tmp

MD5 db6c0400a5e2e4f68c7eb75912443296
SHA1 f8c937c62774502960df9321ad1f1d7d0999cddd
SHA256 5f03017d3b51c1dc413952d21bf35ac660693c6f7539e8f8930ddd41d197a495
SHA512 2f950f06ac7806eb1e5e2d0de9b91efe938b0e7cdb85c5838de1bb98ca693be2046c94f7824b084b4bd31e956bd9ba90f891145fcb26cbf47911c925fd07f3db

C:\Windows\System32\XAPOFX1_3.dll

MD5 37b348a79c4c9b8ab925b18ffd241e96
SHA1 a0b030e5652eafca2cc5d741dbbaac203781ed1d
SHA256 787e10d48d90db50dc155fca53fe8c5c1a383ca24d468733d4b8fe3acf2d0a34
SHA512 20ad359ed0a1fbfacbbba2749eaac9be4e9f416e24cb7ac9dda55c6d2d372fd290781607e5f806b4da3a9d01abef58b979153bc144a8cc8c6d7115166178fe85

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\X3DAudio1_7.dll

MD5 c811e70c8804cfff719038250a43b464
SHA1 ec48da45888ccea388da1425d5322f5ee9285282
SHA256 288c701bdedf1d45c63dd0b7d424a752f8819f90feb5088c582f76bc98970ba3
SHA512 09f2f4d412485ef69aceacc90637c90fad25874f534433811c5ed88225285559db1d981a3ab7bc3a20336e96fb43b4801b4b48a3668c64c21436ee3ea3c32f45

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\xactengine3_6.dll

MD5 f81c4678a55ffee585ac75825faf5582
SHA1 8fb2e6cf2a022eaed2ff5e3e225b3ca1e453d1cc
SHA256 8a7e7c5ac2e6230f0249d46751522e7ecf85e7490cf7491ab73bf2e7e59e4c0f
SHA512 8c8071bc2640d5c0fcf140ad68d4788cbb0706d17313c3cb74e25624a748b282acbf77eda678cf0d5fecf2ec3d583508c6f4eaf5c84073909b616f59b4f4e5fe

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\XAPOFX1_4.dll

MD5 e4ce2af32f501a7f7dddd908704a0ee6
SHA1 9dc2976efb15b6fba08bebdeb98929b6961063a5
SHA256 0aee44b12913a95840ee6431d90518b0d72c54a27392e21ee6995e2151554a06
SHA512 ec14a58414d595a36c6b575cdae690f11481cd3f0b35fd2f4c6a6d162a6272882cfe03da865e09a34972775790529f51c80b69056a2fcb909f25b549ed2f7f01

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\XAudio2_6.dll

MD5 4976243bd70fae3d1d24e49739ab2710
SHA1 6ef27b10bcf4e697fe77c3e964b326be11e4444f
SHA256 61b57170f7c6365714396072d22cb98746718c0f44c9f0d5c62fdb1b218639c7
SHA512 af2d6aaad44bed880a1a2ee947618b142c76a5eca42d4608196b74df9108a9649059d8207e84a58b76ad43aefe9b66ffcc519f8126667177011cf4199f163e83

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

MD5 730e5493910e5693499485e352381c6a
SHA1 2871488c24d069e677868e0a590e7e74f1f19b12
SHA256 d808bb408a4bd695a9793e70b1c61637e008ac11174dbe1373481e2bdb0c9299
SHA512 62fb2a2ddfd62d48ca8a709426c07e1cda0e66df5b977c3bfdc3b191d15c3a139a5c6180ed7a66b2418a5436273d713f2af1cb21f7dc77df78e0743d6a18e176

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx9_43.dll

MD5 86e39e9161c3d930d93822f1563c280d
SHA1 f5944df4142983714a6d9955e6e393d9876c1e11
SHA256 0b28546be22c71834501f7d7185ede5d79742457331c7ee09efc14490dd64f5f
SHA512 0a3e311c4fd5c2194a8807469e47156af35502e10aeb8a3f64a01ff802cd8669c7e668cc87b593b182fd830a126d002b5d5d7b6c77991158bffdb0b5b997f6b3

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx10_43.dll

MD5 20c835843fcec4dedfcd7bffa3b91641
SHA1 5dd1d5b42a0b58d708d112694394a9a23691c283
SHA256 56fcd13650fd1f075743154e8c48465dd68a236ab8960667d75373139d2631bf
SHA512 561eb2bb3a7e562bab0de6372e824f65b310d96d840cdaa3c391969018af6afba225665d07139fc938dcff03f4f8dae7f19de61c9a0eae7c658a32800dc9d123

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dx11_43.dll

MD5 8e0bb968ff41d80e5f2c747c04db79ae
SHA1 69b332d78020177a9b3f60cb672ec47578003c0d
SHA256 492e960cb3ccfc8c25fc83f7c464ba77c86a20411347a1a9b3e5d3e8c9180a8d
SHA512 7d71cb5411f239696e77fe57a272c675fe15d32456ce7befb0c2cf3fc567dce5d38a45f4b004577e3dec283904f42ae17a290105d8ab8ef6b70bad4e15c9d506

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\infinst.exe

MD5 a7ba8b723b327985ded1152113970819
SHA1 50be557a29f3d2d7300b71ab0ed4831669edd848
SHA256 8c62fe8466d9a24a0f1924de37b05d672a826454804086cddc7ed87c020e67ff
SHA512 60702f08fb621bf256b1032e572a842a141cf4219b22f98b27cb1da058b19b44cc37fb8386019463a7469961ca71f48a3347aaf1c74c3636e38d2aea3bca9967

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\d3dcsx_43.dll

MD5 83eba442f07aab8d6375d2eec945c46c
SHA1 c29c20da6bb30be7d9dda40241ca48f069123bd9
SHA256 b46a44b6fce8f141c9e02798645db2ee0da5c69ea71195e29f83a91a355fa2ca
SHA512 288906c8aa8eb4d62440fe84deaa25e7f362dc3644dafc1227e45a71f6d915acf885314531db4757a9bf2e6cb12eaf43b54e9ff0f6a7e3239cabb697b07c25ea

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\D3DCompiler_43.dll

MD5 1c9b45e87528b8bb8cfa884ea0099a85
SHA1 98be17e1d324790a5b206e1ea1cc4e64fbe21240
SHA256 2f23182ec6f4889397ac4bf03d62536136c5bdba825c7d2c4ef08c827f3a8a1c
SHA512 b76d780810e8617b80331b4ad56e9c753652af2e55b66795f7a7d67d6afcec5ef00d120d9b2c64126309076d8169239a721ae8b34784b639b3a3e2bf50d6ee34

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\xactengine3_7.dll

MD5 4fd7bcb9d8af6a165e9ba0c2eb702e7c
SHA1 a90863632c2d54dd06e01537744a7b65bb3d0db2
SHA256 d7b1cf58898046c430d49cf8f778e4898280f4709340c3938d3139894166fe8d
SHA512 7fcc435d07c434ec392bb9bfa98aee20b0b1cd2ad6a31f073af80f6f37639336349728c9b0fcd967c4c395fc40c0efad1e36142fe7632512b0f26aca1b1c4bea

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\XAPOFX1_5.dll

MD5 8a4cebf34370d689e198e6673c1f2c40
SHA1 b7e3d60f62d8655a68e2faf26c0c04394c214f20
SHA256 becfdcd6b16523573cb52df87aa7d993f1b345ba903d0618c3b36535c3800197
SHA512 d612e2d8a164408ab2d6b962f1b6d3531aed8a0b1aba73291fa5155a6022d078b353512fb3f6fff97ee369918b1802a6103b31316b03db4fa3010b1bf31f35fb

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\XAudio2_7.dll

MD5 81dfddfb401d663ba7e6ad1c80364216
SHA1 c32d682767df128cd8e819cb5571ed89ab734961
SHA256 d1690b602cb317f7f1e1e13e3fc5819ad8b5b38a92d812078afb1b408ccc4b69
SHA512 7267db764f23ad67e9f171cf07ff919c70681f3bf365331ae29d979164392c6bc6723441b04b98ab99c7724274b270557e75b814fb12c421188fb164b8ca837c

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\dxdllreg_x86.inf

MD5 8272579b6d88f2ee435aeea19ec7603d
SHA1 6d141721b4b3a50612b4068670d9d10c1a08b4ac
SHA256 54e098294ef0ad3b14b9c77642838b5992fe4573099d8397a1ef566d9e36da40
SHA512 9f1311803db1607e079b037f49d8643daa43b59ce6eafb173b18d5a40239a5515091c92b244ffe9cfef2da20530fb15deb6cf5937633b434c3262e765d5a3b21

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\oct2005_xinput_x86.inf

MD5 be6e213583854cdfd305b207f4aee0d5
SHA1 4ac378fd06aa6dec48171fd1b4045d1bfe4bc04f
SHA256 a14d5947c0ad4a864f95e3f35344e93f4845094d660eb37b77b1fdae9f7995e2
SHA512 e331c30330b87ad1fc57502bca5cef45afc0a0b6ae1f8746fe8dc47fdcd12cc080062142bb01ed0248c2dba144fb7722564fe780a129e43680b1a73d19b507e0

C:\Users\Admin\AppData\Local\Temp\DX15F2.tmp\oct2005_xinput_x64.inf

MD5 dbe238ed3a0d3805a1a57c23fb28b721
SHA1 076284d2fd60ea7c29acc3233ad41f2bc1e2f73d
SHA256 534d55cae9f43193f49d74c9303fa3d32cc309d0b23597a97c315f207f2a358d
SHA512 af8a605cec38385dc24bea7b4520ac924961bf8b4b7317430394dec3863f52b2a3cc2d86dfada3a9feec9906ca2f0f48c4e22c10a87fed0c9f70cedefd9ab32b

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 870b9817a47b481aaeaa5ebdcd0e97d2
SHA1 aca86ce955d062da071a033f69b2c2740f79e4c4
SHA256 a1d40953c09887982754dd764c6d4bf802f1b7d886a608f1c7925f8214844a95
SHA512 e19b9f356915f8da27fe222f4a3c07c85cddea35de50b1f3885f2697489aaf669ed01799431598ff5c2accf01601c3794ffc02bd5c5162e6a7f41a922e9f3a53

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 62d5261076a1dc7412c6873e09807ded
SHA1 9665e5888a05b78f8d32e6002f9620e4d015384c
SHA256 35d59df103a9546a7da93f83ace52b46ac4cefe82f65449c401740e6f11b3f0f
SHA512 e5d3619ac6b549294893946f8374d58f0dc393d9ec718639eb6cfb4d40c88f3b8f5649fd25027ba8bbb38bd9a88ae00475df60d61d9b56bdcca32b7ec7f42b26

C:\Program Files (x86)\Steam\steamapps\appmanifest_2021910.acf

MD5 3114d1398a3a60920f9fb7d9616c8a6f
SHA1 61bdf1cb3d6193664d07e3b516e1ef60e0d4bafa
SHA256 41d9da7188797cd0b94d1d0f72d12d4c4309a2ba9487834f53606e59efde1247
SHA512 582fb6ad67ae80284153414389c82794dea1817aebf94f927c7d9436b8222e18c10f1765f9372acf77b1c627d2c39a25f9ab096d6c2b2146795d2887425b8bd8

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 a48d5731e77ae7c7291d7d4856c6147f
SHA1 14eaad32031532cdde57f98003d01a17bef14ad9
SHA256 4c37053953b3dfa397e452aea10fea3f8a35fd17cc1a318f7078fb925c78ca1d
SHA512 e83519406c4c7f8e6a8fe438a9447cee7986b88347acf9635146a02d67d8b11dbaaabb18c42df74de0e29c4138b06a9594ff3947ea1bb4d84d3a572b57a4c519

C:\Program Files (x86)\Steam\userdata\1456296740\7\remote\serverbrowser_hist.vdf

MD5 38f989f72e2a4962e5da62e7f27418b8
SHA1 103571787e5f696b472e990b3f1e1b126aa9c28d
SHA256 c005174996568f87030c54f63b00b3e37443398c3c4e0e48badd034c7eb00ac3
SHA512 c64b47003e806444a25b66319195f6ea1e533ad47289b70d0857becb8967a4a41d053020ac85ef80e99b7f43b3181cd947d94e0e0e8845ab1e1cf27a9ca35678

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 39808a8989456404082d136e654585c3
SHA1 ccef17707038885df312b079ea13cdd521a3111b
SHA256 21f6274078270d4a8a98ca55493c162b0d5b4f9e17cd9c12e887510708b55457
SHA512 af4d13dc682f6b902b5baa537679c23e16ba4c05b58faae1a10f9421328d4a48d3c34ce592ecc8f54e8e4106093b08bacdc3b0b3b9299d83a927a63f9246fd6a

C:\Program Files (x86)\Steam\dumps\reports\4ef77e4a-5a06-4774-bd20-3ff99eed62c8.dmp

MD5 5f9bc06a856cae013983c243206ec3e2
SHA1 f93e7ccde01ab30b0f4e5d1e36da7fe965aa8c9f
SHA256 1414b9c1f481e280bea77afa98ed4ec4709796ff47ca8da489e231c53e5d3d54
SHA512 291af4909b79e7a1440a6e64c7cf3bccc4f644c218307f25eb906fd5cb5a856b25d467db701e656970ac1c8b8f810c1fedb7ca0682706e37fa045fc53a806134

C:\Program Files (x86)\Steam\resource\filter_profanity_english_cached.txt

MD5 0b8f38d6f219adb6af9a46e34c8b55c5
SHA1 abfb7eea3e2073ef536ef4c020b79dce54028174
SHA256 c6cced2a542c64817209699a48ba5c17f32ad47a5bb799d395d707f665378de8
SHA512 4a4dcd5efb3433f23848b7bcc18a430f05107985e48f280874f0058eac863b3ddac9f849ab55271f619c026a6282387f553f1ec25e16eba7cb68c850f314beea

C:\Program Files (x86)\Steam\resource\filter_profanity_english_cached_timestamp.txt

MD5 74aca5bed867008aafb9109287d5dd06
SHA1 6ccf3264c4c5fee731aac34bd0d5142619440be5
SHA256 b013c1827d99e172e6ee7a86cc26a8d6e403a467a26f1fdfb19de9b79882df78
SHA512 d725d3e1492f656abad11d12ed3ca2ed5eb167ca510ebf050fd89a2643f35bc7de3b105144b9e14e963f0ad22fbc49017491db08116110e28fb9b5700245aa49

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00000f

MD5 0fdedbefc7596c8ce68ac3874eed522d
SHA1 173e6b4cec02ede316b2468e8f0aca9c2bb4dcf9
SHA256 c13390712aaa91c85def7b7f01c534e7f3c808b8b64925b3cd8e0879de422a10
SHA512 d73c0e6b3945efeaed13ee12c8e327b3d62acb0d9b3eaa8aec18e03eb425828d198e4e758f2c8b99b25ecaf568dbb06aac41145ebd15f690a8b4a04f5e4545dd

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 cf4f606cc5a6fba92ea05e1090b33eca
SHA1 8874cdc5e5800562c7af766d2c66d313d04d4663
SHA256 0aa6bd33712cf6164c7698230a7f43273364af197ac69cfc2e5b44700946f475
SHA512 dfaab4bbbc9a6d89766e4a15237d5bebb3fefa50d378afba35696afef168ff2dc16a8d65517f2ad0c6a67c819f8354e337a1f155cf7e1ddc0056a33dd2276fd7

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 4c05f47c12e17dbdbb6ec5a5fe6fe78b
SHA1 13ee9aeed141341ac062aeaba7f1bd87a42ceedd
SHA256 8505753723d8cbe4f3f70ba99f3f71f6056c408d7dacb7b3e04e1577898dfb95
SHA512 2a47b3bca5c2d9abed1517b4c5ef0aa761f83ee9d1c85da57a70147e3ef5448cbc409d14cd55640889bcbdccd6a6042533bb40b2162fe97be8ddc23a5a6f2b6c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 b66628569e84554257a33efb49527dd5
SHA1 9663f9829399132db9ebc31d46b987a00dae89cb
SHA256 7d2c5fe6fd92e2a89e2b7e05c3cad656d5eb2f0724c11bd81164f43b2d54c51d
SHA512 b7befd858b611a662a614aa66d47ae94cda63b2c0c0215f7c278e8ea404bca087dfb76425e64df068ec74e513ffb70770b2e993ae531cb5ef3fd864d305ed392

C:\Program Files (x86)\Steam\resource\filter_banned_english_cached_timestamp.txt

MD5 ff050d2631ba302fa68494aa6ad3ed62
SHA1 33dca1fd655ee2d9fb15befd8e0e82df57980020
SHA256 0ab0c9578f4cb2f46264c1f52a2c08ee6065f37f13fd9f39aec3105f2123fedf
SHA512 02ac409a44f46640e00c7f1982ca12876890675c96169119f86f258f74bf762e169f593ba26b12a41e1c7187624e528cdc17970b14b7695784857023b43d0968

C:\Program Files (x86)\Steam\resource\filter_banned_english_cached.txt

MD5 009ca439b8e68dbdb83850d51b07c736
SHA1 b8dd1986d15aef3dcba09c954577c780b549c582
SHA256 4bfbbfd0114ee78d7795835c64aae6dc6b525547748c5dd1150d7d1ff8757c43
SHA512 25e90b8b737b30879ec9073457cc7b30bdc46ed71b8885ce14f9c1946476d65c6bbdd0ddc19bb09c406cd9439837aec5c8ad007dbb5a4378842e1634429b093e

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 66e39155d716b3b60fb302180922885b
SHA1 b72d84a5b2dedd6f384e7d838b4ad0dd62fceff2
SHA256 43dbd50b11cdf6efe52bc56884aa89259980e6789e71f7a273c9f9c6a83f7587
SHA512 2a009f338d2cb758cd3c4bbe3757a4c7efcdb0423da5f3b0c5ed6d36d038a22cc345d591eca593bc7772daccb21c02096809446a502f3cc4c8d2c17561e6a5c2

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 6876dc91b5eb8aee2430096372fc6711
SHA1 a4c1a1d602d8256ac5e5684741c6a9dbbf0a2e67
SHA256 6bf6deb919984817c6c814148b1b8c95f6bd05284a308267f7e9408536003be0
SHA512 1bc9fe528dab2bc476a7f38323887c058322fe8437cd45ff70618532090f6729dfd21fd205a1d511d9a5cf44b76f20f32cafb1ab204624d82f06d7bf2c137258

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 7492bf4e90cd3bfd5ea67b644f36d952
SHA1 ccbb76822a24efe56cee94994c59c30ccab6ad94
SHA256 7d80daa904d177101d3fae19291bd8c54cdcfd87d29bd82970e6efa174c83a17
SHA512 b32c2c70d68e0cefe113a52b72250f456f9ceefe27e0f40e0c1d4083b1217f1274da11074490c2ec988c9885c27c8204a06bff9503341833675e191894b384e7

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000015

MD5 adeb7b3fca1a167d6b93c6695ac0d152
SHA1 aa1ff582a0033c5c86dc2226662511f8041597e9
SHA256 3ccd5bec0c1a503e2dc928146655fc3a4ad47d7ecb3cf4b5ec9e2b03d27ee6f9
SHA512 5ee897864e63d51998cd7c7c124ae7ab34fad921168545a29994d42c4b552622da5139fb85ae539c00878d02fba9bddcec621e21b3f7856ebeadba0000ded982

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000017

MD5 01c77e9159c431639c9b7d0f0f5a70d1
SHA1 0a83c781b26049e4acc8a399aecffb4b0915b6a3
SHA256 7732ed8be7d615811cc9d7678d76addfb31c472893a9a409d671d66f04f0a4de
SHA512 9a380945143bc0ca087ae42a13eb3a300f78ce318c3d78a78b7fb4e4502ab03fcadded773526e8e0df5def7b119f02eb9104c21504f7c43015e04eb2d4a6eb28

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000016

MD5 e0b66abd08331c9af1034ce915a5e1c7
SHA1 3010e55c0566a30cb0c71d6a182e09af7df3cbc1
SHA256 15442d410e832f6d63c620956d87b7c50346fa6b6e6ba233052d2785ecb5212b
SHA512 25f553bda1bd5ddfa028b708260c4b98675fd6f199495374051e74c955c56c80fbfbf2ed40d11e8a136e4aa6c1a3f25895712c03065b539f742c5a031efe54c3

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 f21c0a440e34191b383890a34cd50f60
SHA1 78ed88210375d8dbcc30555ee9b0210ccc97f043
SHA256 a1c489b87f9a4d7eb4c2a167802e3d9602d721ca6d81fb1ec986a8d4fd2b63d7
SHA512 f412b62682b6572f318ad236e868ab5be62d7e4969bd5e05bb954c11ec09866808d072e6065f03f0ad5f3b945eb0dd4eb86b089981335334f7e188d11434ba0f

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 90e1739c1e33e703b0798624bc0d6419
SHA1 6d9e30b03a50a06b07a4d9d0c18929e81859e832
SHA256 2682d27232e0f3e012df7088c1d13caaf55173c6d5653e72bc695646c73d4386
SHA512 4504c68e44cfc2b826a42b8b1d5aa99505c7f7ac12188cd67b1a056f50a53abea42f5f9747d07f6c70fb060c9296c2231ee73c1eba4bd98400e3d7705447810c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000019

MD5 8bdafd347c458b9e94212da404dddaa7
SHA1 27813cf5bd61a1fb49f92cabeaa39b15965b537b
SHA256 7aa8a34d0bd52a33445a1fadaf9bbc80594c7cde46ab0bba8320ef3df0062c46
SHA512 51321e1632405e1ce19e4de4c87cd4410b0e04a345d6181b7d04dfbba01abffa84203e3b8fcf0cd7ae40cb42257ab1352fd084a5bd307160b8c46a4f506efe6e

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00001a

MD5 c0636f86f0d19c040e106a160bd039fe
SHA1 3c54daea110ddac63719d5636353405e2b1208ab
SHA256 1551fbb613b73b61bfcd7a9a4ff53cb60f2814bd53a073d000e6f0ed2b87b009
SHA512 2b8f1e4f053fa07db13ca8e3107aa2944c11bc566f70e29aa329c4c444b2be76e3e4c6418d84f6de5643ffb1cbe6682fe1fb12b765f7db01844cf510a2512e13

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 4d23a8fcafb4c3679dd517677e684a61
SHA1 36b065cbc33a770081e82b4a0090a5f0eb368eb1
SHA256 8aefb793898a1adcf8fee2b0ea7019b9c5ae46a5a35ef2562846954c42e9ba98
SHA512 ff93cc821ebec1206e0d5fac245ed10a373740faed105555589473ff35bfc8c82864a8ab4ee2a08714754571adce797b2680f7de8b751dd0ba680c6ed8ace265

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 8d2c25b7f51279bc10987b140e85c187
SHA1 7feba6d238ba8e0dc2e34c16fa823a1ae6239023
SHA256 b3b77826fb407807a05f61bf2f1674b932f445b82611b837a72bea00ae1417c7
SHA512 08fc11cf9384330d5d243ee72dff06cc5b55d03b3c3dee776649f32cd656b248785fc2ec37cf4aa6b09138b61307f0e6a4139308fcc91447513635595c48fd7f

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 c06d664bdf2a617ea94e29a5fb946459
SHA1 9452f4880062bba88fff565b63abadf4ba49f55d
SHA256 7c07a9b14adbe23cca54c01431b0d51e42be2008188a38b4893a3ffe63070dc5
SHA512 00de9c69a125a97db8813daee6fd03c13ab2f3d3a22475d69bcbb1720dcc53793d9c4127883668cda77d85c47ff6660b10b84db690865d58f11db4534f5c5523

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000021

MD5 c89b315d4fa55f2e55c652838a79243f
SHA1 94e5b05fb2fdfe18475e7a8f2508964ed3e6b777
SHA256 e59dfcb63e2e92b7fe42220afc46a0ab8a393b35e72d5b82fd460a23b88a65cb
SHA512 abdff8d829dea3359f3a735f0e9daceb3b2c04ed040dd8d77d3f784ef855cadbbb1d7661c6bda287bf8091bfc1265006dab0ac5725cff1ad251a1e947b035b77

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_0000a6

MD5 523dccc064fa002932f4e54dfb72dcea
SHA1 bbcfd30856a0e9abf80b192aec2b6d4bc409ab0a
SHA256 5a363116b4e59441991dc06cb9aac7412d142047134fc5afe2a7c1623cab37bf
SHA512 1509aa19f3df7d5d0be640262d8e8d252297a56ef48fc2afe8e1e81931e0780524caf694c7c4419620b7dad63e32aa09906438931ed4ba79bee4881f278e4ba3

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00003a

MD5 25081476466948e2df11adc8c9937804
SHA1 a8bb6209d8264de390513e4e44df781260ce6c32
SHA256 40d8df14959a05ab2648d03121318a336d5b346b997619dc4c76423317b04476
SHA512 9b274130212f0c07c1befbe3702febe0457faa5455a64455cb8f1372cd7108a6ab7d9192ca2f8fbf4cb121d826a345df7049cccbba28b848abc9fb9e3bf228d3

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000039

MD5 d07fe0483acbc3805f1e48cb971c606d
SHA1 a8d9fcde781b5045cf6572297dab853097a2178d
SHA256 1b8a56da98c2552790865d9295586b5116c9f2f08cdf69bb4479432f249c6380
SHA512 03cf0c25ea172525572ce45687207854a3a5d9c7a69d44b2de295529da7205322846d611baf9f2dcaa48235796eeee4568439cc201ea9fdfd53cfb19f2001232

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000029

MD5 103e0e222f3ab57d0aefdaaff57a2c57
SHA1 3f4235403305d98027f957a802caf869fd3a5eac
SHA256 c33f5885d673f3a47020dfffaf5996be4c7cbc32ce533808fe4c85c390208907
SHA512 a6239841386fcf5f4dd4f27a78c25d5026abd0c18b7469bf4a06a784c9b4d324ff8bdf618e7a5f4c7c49ee50821da02e1fc8480eac36a2293b60edf9013d8752

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000028

MD5 59a2699310bfd7ff2525fefe2ceafb4a
SHA1 8f51c0558cc7705625ebc080212832133495af9b
SHA256 5f59d67314617f1131a1b20b454638bb75afff437c4e6690b7510edff7dd91ac
SHA512 56d8d58452850260c84f13d3793ba4d277be4f03f5373a2b7e0119c7d0d322927de80484685dce1fb300ef172e03cd2b657fd75392a910f6d1d8b0bc50f37f6d

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00002b

MD5 355368c09ae89434b648d473ec54f5f4
SHA1 36ffe749e3c296d6e57da59f463cd2aa8f69b0d3
SHA256 af611344e2754103acef3e836d8cdfd1970391514324a3495cc04128cae9b672
SHA512 390540adb50f913669816189b8b215f76d005489e87d073132d4f958fed52c5d0a49590499a14fea6b2a1863efe7dfd4046a087e61661b9edf8805423021b22f

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00002a

MD5 02a0adb8033eacfb33fba9bb1b771b71
SHA1 be35a2af2aec81b8d1c7b091713446c841964948
SHA256 0fd28202e936544c1119cfcb0696ecc75576d64d7a12ac04912b9c9a1ad4612f
SHA512 37f93baafd7502d1143f98298d5e94225c4cfc4ec8347c23d3bacf11ba3817e3883dff5dc502ac25be0dcea2e534a29e2814e718540cbff2be38a5b9867fed67

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 a2defc7177b58051314342af8adc7233
SHA1 34c4325ad315b56658ae68fb06889b11961ed193
SHA256 0c63e3c50b3e46a742d07813cd33969d37264c8e39b999a217f70d8188798649
SHA512 75b76d0a70f20981dcb5ec0a63eedf0c95bf70321a8a61436da8633181c571d4f46fec1b40e953dbdbbab0a550a0564cbd0763bf97b0382d5e402f8b6efd232a

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000038

MD5 6694e57e3863bbf7bcdea40a4577f0cf
SHA1 892000455a026311f81834597beacb7517e7ed8d
SHA256 902d1997d7367d1e680cb21ba806f5be3364aa6972320a5ed56d28fb8d4e34d4
SHA512 ce64c4b718ca379fcd93a4d9addf06db2cbdff8ce9b417432d82b08c34c56068fe9e0b7e5dca75a7c99837b90df854c412a76d2e4723863013664039aa2fd03e

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 b860b9d8d7f51e4898f62d1952cc8b74
SHA1 935975fe625ddde8bd72f0ebdf84de25b442e6b6
SHA256 957dbc0de75756db770809902c589b5a4d655a4b9bf417466acac8265fe11fd2
SHA512 0bd7076c0da0197ab684358857f87e200e573f1bc9a0731218f26b8c9de29ebc2c2242d875858586d8b180dcbc8b47dfd5e9e369a2d9908e17b5364265e01634

C:\Program Files (x86)\Steam\dumps\metadata

MD5 6ef60d86913ee330a3b7257274864365
SHA1 a72e21b894fce393f7b4c44af713f9727eb67817
SHA256 034ae91b88fbcca07e8e4e04841dd1730cdf5b18731fa208a6a3db2525f92a8f
SHA512 a17fbff50a70a93f1ff9448e88f2a09f895d25ca6408de4da3dbb550fbbf3eaac01d3520b4e6ee3036d445cffcf31c26baa59a0aef55ee78a0ca30eb915744bb

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00003b

MD5 6f957c7842c2e34c457f80ff8efaad67
SHA1 80bf8cbe6cc314dbdfdd18e32f59cfce5b6310a5
SHA256 fbeb0026420e413d80f5804edf34efadb6ea15a139dd26b2dfd09b899c5434c8
SHA512 d253573d1ea824381c065fe9741da2abad49d0e193be037004b19feb40fbecdc24c85a650feb01c394cbf9ce59cb8e59d4daaf1a58673debcfea3dfc5dcd8699

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000035

MD5 07247cbd12d4e4160efd413823d0def8
SHA1 517a80968aa295d0a700a338c22ba41e3a8b78a7
SHA256 41464efd9a32a5967b30addc21fe16cd0a35870fda56658b531a9a2434b4d829
SHA512 27e0e7505d41891e70bd06733f96e82e45061d621a1d20bbc524fc89c5406a799cf53d98c0fa256cb4ebfc19750c9a05531a8d273cebc260d48948edffdf6244

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00002f

MD5 57613e143ff3dae10f282e84a066de28
SHA1 88756cc8c6db645b5f20aa17b14feefb4411c25f
SHA256 19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14
SHA512 94f045e71b9276944609ca69fc4b8704e4447f9b0fc2b80789cc012235895c50ef9ecb781a3ed901a0c989bed26caa37d4d4a9baffcce2cb19606dbb16a17176

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000036

MD5 6168553bef8c73ba623d6fe16b25e3e9
SHA1 4a31273b6f37f1f39b855edd0b764ec1b7b051e0
SHA256 d5692b785e18340807d75f1a969595bc8b1c408fb6fd63947775705e6d6baa66
SHA512 0246cee85a88068ca348694d38e63d46c753b03afadf8be76eca18d21e3de77b495215ed2384d62658a391104f9e00df8605edb77339366df332c75691928efb

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000034

MD5 d45f521dba72b19a4096691a165b1990
SHA1 2a08728fbb9229acccbf907efdf4091f9b9a232f
SHA256 6b7a3177485c193a2e80be6269b6b12880e695a8b4349f49fccf87f9205badcc
SHA512 9262847972a50f0cf8fc4225c6e9a72dbf2c55ccbcc2a098b7f1a5bd9ea87502f3c495a0431373a3c20961439d2dae4af1b1da5b9fade670d7fcaed486831d8c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000031

MD5 2d64caa5ecbf5e42cbb766ca4d85e90e
SHA1 147420abceb4a7fd7e486dddcfe68cda7ebb3a18
SHA256 045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f
SHA512 c96556ec57dac504919e806c7df536c4f86892b8525739289b2f2dbbf475de883a4824069dbdd4bb1770dd484f321563a00892e6c79d48818a4b95406bf1af96

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000041

MD5 ce6bda6643b662a41b9fb570bdf72f83
SHA1 87bcf1d2820b476aaeaea91dc7f6dbedd73c1cb8
SHA256 0adf4d5edbc82d28879fdfaaf7274ba05162ff8cbbda816d69ed52f1dae547f6
SHA512 8023da9f9619d34d4e5f7c819a96356485f73fddcb8adb452f3ceefa8c969c16ca78a8c8d02d8e7a213eb9c5bbe5c50745ba7602e0ee2fe36d2742fb3e979c86

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00001d

MD5 1d7363064d454b57f9c84df28f566ce7
SHA1 773b8a0f0c6cbda10b0c2ba62fb53d323946e311
SHA256 f2f4d59a808653e110b074ab0dc600b249e7451cc609eeeff3efda1e32ccf7d8
SHA512 f8a9e4c39d6c3e12ad9d01db9c0318fcb82b5dbe97b57ca6576a482ce157f456786752825e397122ea45fbce77e6c3cf62a2671c1973e40dcbf3cf26852cd49c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00002c

MD5 ed96af112ae58cc87d257e3a15a15058
SHA1 2fb2963ca13d8e2dff6bc71e9ead9b0fdc686cd0
SHA256 fc76b07c4a37f312ff1883efefc994e48bfc407942abbe823d665d46c2a883d2
SHA512 16adb69862af3c24cbf37be97c366d441112222fb4f39938295e89cee92344914c346f5672d146a1edf0008eed491eb66cd91615318374a4a9e12598ee48224e

C:\Users\Admin\AppData\Local\FPSChess\Saved\Config\WindowsNoEditor\Hardware.ini

MD5 81051bcc2cf1bedf378224b0a93e2877
SHA1 ba8ab5a0280b953aa97435ff8946cbcbb2755a27
SHA256 7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
SHA512 1b302a2f1e624a5fb5ad94ddc4e5f8bfd74d26fa37512d0e5face303d8c40eee0d0ffa3649f5da43f439914d128166cb6c4774a7caa3b174d7535451eb697b5d

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000043

MD5 61b0512c482604a93846256c5b66b9b3
SHA1 da3503ee8723e700bc35707fbc378c22468ab1e9
SHA256 b69ce852327fc9f6d707fc05cafe0c8a80b8009a60a59b1d797082c103c89330
SHA512 b42a0ba9d51cddda5027dcf5aafbfdf4fdf567dfe3fd0920bac84e8b70112e50948dd81e3ab694ce572ececdff2d47ff84f6f404ff25e5db4ea503b36c851418

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000040

MD5 e0bea977a89f862c8bcad15144b67367
SHA1 556b1b676b7f103eca4b0fd1497c7953372d05d5
SHA256 4811191051be2541e8fe46b4a74e3eab27a08223d4a83cab6735033160eb7e76
SHA512 e7d772f7fcbe3e2d154f11b654259ad6da28c73b296773de8380905468e4cd9e00b5ce8a2c285274fb42c7496642446ccbc56d497d59dbe38e807a9ced9cc0cb

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000057

MD5 161d59e98ca5f23d6f05b05316cae04e
SHA1 572f98faf675f4b1ef6e3a442f5f933dc06a7c44
SHA256 59319a8971f3c7cefdd97a529514dade454d108e8dc167357105a1c016dd3109
SHA512 74f91d835d9b3e2dbdf5cb60b143fdcd0509e5a9c871d458430b01c4b869f0d1a72c714349c8342652343ce8eb4f67bd8038f4371d73c3a5b6c997152d4aa833

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00003c

MD5 5d7a78433dc73c344aff8c76f74ad293
SHA1 19a34d454dcd7f55bfa34315e69820b94ba33111
SHA256 0095c8375e11a7c23ca29406afd8f816a05b1f2b95dd81ef21c9e888d5b9d01d
SHA512 9eec2a9bc1aa3f08c71512c729bd111cb1e1a673efec1dccae04161bf0811ee03d18612a3ea0515210aa4a026c06f7c58712d6ae09983cd11650f60d9d1a5665

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 c855f0ceab5e1cc91f18e5cc831f6eed
SHA1 5b68e7576aff22a4d537a895ed7def89bfc00068
SHA256 180344e62deffacc6e801e09baa70ceee7f9fb6a6da5dc06c6888e19a72e80ad
SHA512 44e6def3d616bcfa7a31ade2df6646aa291089a28b6e76c27ff37b189e7c4b575a3ec523a8f5f047e3be3f58c6eb173e4d708ce2bcc094ed2b75876e3a6fb26b

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 d543cdf49f117e6d68ba0c1ed36a325d
SHA1 12915d53664ba7155e48ac7e46ea5eab704357ee
SHA256 7de053efec0e3ad950316af82ed144b9713c883fb5d89b2fb6f1c8d4f0c6cc81
SHA512 68aaf9d544124679faa2606abe6d05e0f710233adc308981b0b2b105c92dbb1d910fd42ef1e5d24eed38091d69c00bddac227b008eaab8d5cd8d9459b115fa17

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 3ef9e539c05c7a96db3123221c455aa7
SHA1 4f1a805ce1b1713d08f94c8cb5c3d958a885e662
SHA256 c941702232d11f08023859e8b8500145b8c9e568adcfa54acd15e66069f6c61b
SHA512 f033cac06da429a7e8fb8df3719e134c85c874a1eada1f89b253235f767119eb52d36d574b16ff1626f06246476f57711dbda74bf6290e36d2cdd1178c6c3677

C:\Program Files (x86)\Steam\steamapps\appmanifest_2021910.acf

MD5 9a75127f747d0b69b03c4dccbc3adf27
SHA1 37da7ee3a75cdd1d1f1b0059727f7da2d212a6a6
SHA256 e76653673aba0e83f834693ede5528fd040e75aa10bd6818d71d8f49c7f93e9a
SHA512 93332d8721a4f70f243b690ba009c12babf7c05c341fc3fa1cfc03964f4046c26049aa33be724cb4d2d5d9dc49d4705c3c073946fecf67aafe3e28dbecf99087

C:\Program Files (x86)\Steam\userdata\1456296740\gamerecordings\gamerecording.pb~RFe645739.TMP

MD5 42954ba8dc56d19b6e2780881f8c339a
SHA1 cf7bc947141e3a09a82a54d56594b5f57bef6f9b
SHA256 ae2e2c53b9f09deead5f8ae2295113181b105f748dc876d69f32ecc1d0b76dd3
SHA512 eb11a145631b8542cd0636bdec66b13fd2602cdd35e4d084faa8649379555b164c0ef0ee945d091bfcd275fbf2e62ef9e0232b456d00f7b2f70649e8d858e985

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 bfe2d66fd909c4b7a3390526c9d71ef9
SHA1 2a4b0198682519ca28e4b438337ee6693da97d8e
SHA256 b1b3bca6e482606e84767d69fb062b8d41350a2cd0cae5e557ff8064e5967109
SHA512 ecc5b3bd075f9b2310e87ccb9edce7c589bf7f3dbc57494e7d44e973cb285f4b8113d1b750f4b76287ea838dad9353df6168c4f3e41853fe98b04a0cae9c6c1d

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 4a06c0f3c7e140ce9d0ae8323145eaa8
SHA1 9bad0249be14a895a3c08a8c9d03a21c71579b53
SHA256 f7c72540f2b491e57acd77d720939e174397968b0be1dc21d21d7e12e4fca565
SHA512 9654cd2e437521f5064f46bb893098958a791ab907de352aef5776402b1754f94008bdbe4eb6af8470dacc30f5b1157808cf50e680521c6523dcee39ebbdad10

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 8a6fb8b3c5df22aa5614b5fe2ca4f9aa
SHA1 9ed49f421b7f7ccd25a9ac9d6d43cf10b9833134
SHA256 9f432272fb6a8c408c818f3cc7d6dc44ffe44b19d925863b63ad854fb301974e
SHA512 515ae35765aff37aee4cb0085c8a5f154e055d627306e68587bf46fb8533744b0cc726b484bc2de43428bbaaba66db87bedde37b8bf7021cb11fac982ab0498a

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 c5b5269c388a301728e0a6cb21031310
SHA1 9928f1f0d6a6cf8fb51d50e12e323c3635a28b58
SHA256 eef237d0bf6cb98d6d0e59303a29f81368995fc8e8d31b9bb27885f788221218
SHA512 62a583bf1699f349756f4364cf6303ac7ac40e69cbf578c792020a87b3bf4bbd6d3cc51268508c72017b1064ce59d2ba9aca618d724d83149ec1f74fbd1ea975

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 ca0e0f6e747fff6cccda75a4767dbf22
SHA1 f68f1494667f4bc0c7601537ab92d405dd5fdc18
SHA256 e5ffe0967cd20eb7c5c1d3a963d74d635cae44b3d9b70b3bc8e6691f70b0e3fd
SHA512 64bf1373f2425f2b0fe014826de24b318752661257e26647db8831adeb92063d8ab66dbec5847828a01c225b55ee25b2dfeeeabdaf47ad5d4d64cd853cbe28f7

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 71ce9a4039c84f4385e80b02fb89449e
SHA1 15360ed0ac80ea61aabb6c9a862fc42add0167d5
SHA256 4bc295bc7d4e897641355f501215a8f24805b3f08b377077b605d3fe42f2f998
SHA512 d9ed78f39a24a91a8628c2ad70416e1517656c3d2b4c54be6b26eed6f3df824c40594105696875b290918c2ddc805d0ffb2d9e50ab7f6355e8b370244cadadc8

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00009c

MD5 9c3bc34cde9520e5a0e3f16514a9a9ec
SHA1 715bdc3beea8f2021e69dd09db4252db05ae590a
SHA256 6c337d237b3e65c291e120ede7a9b5b3d37723f969835e1f6fc1f922e9134fbf
SHA512 83c110babf6633ed09d44a191b3f4b2e9aedd5bb1afa24d3b0ae7bae308f7b031097be0624a6ad7352b68da801b3aea2499a712a08bb13e8e012944535bcee28

C:\Users\Admin\AppData\Local\Steam\htmlcache\UserPrefs.json

MD5 602c49f9246967bdcff45b4f43cf2fb0
SHA1 4c5796e0c724bbd7a9244cc8a0fc9e8f40181f2d
SHA256 a3ad9649c1038078038be1abd591cdba73b4b4f5cf30e11bb6cb7a432b746114
SHA512 2f273c0dd0127071f4c768cfe7277c6efff84c1ef4f4271c1326db3658c84261794b106af3198717f349fbaaaf276163700bbb50ae20fe52ed0a88a192d46f77

C:\Users\Admin\AppData\Local\Steam\htmlcache\UserPrefs.json~RFe674652.TMP

MD5 68b20851ccb9834d21fb32615e42bd43
SHA1 88fab935f0b9484994097c08f785e9ecb7d68127
SHA256 a954b528dd65ad6c4c2091fa32f17abdb7a49454ce88e10bb6c377734c70c26f
SHA512 dcb0771120c8fe35213d60e9abf4b242af807324759e3c99e9b2569c00a941d885d53ef6fadfe69e6b740e0b52a6008602605d643801190a2d29175a7d065e15

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 91a07c184b0bf7f84cdda1874a5c73e1
SHA1 1d31d2fd47b37396395e06905138d86ac1676c7c
SHA256 e69d8517d7f5d389d6246a175825d208ae5a91a24fb5e984cedb26bf60318fe1
SHA512 cee5a8d528b55ff73441f3e56d05a3b7c5d0630e25d460ccb7a1aa19c5f8dd06da550c9e04ac8649f0a8de6673b8b7eac978a54449063c6181da714dccaf0e5f

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 a439cd1fd05e3077c6f98fa7991339f0
SHA1 0dd7ea9ff976fc1891c60ee9526cc154ad2174e3
SHA256 b2bd0dccdd81039ed93d8db206fb3dfa64454f87c1abf5a71923175cf8b6da40
SHA512 528e768bc8f951cdf9c1b70fd1b9ca240ea83968b5a4fbda8bb32ac4f5c4e68d10968f50ecc1bc9cb8e231ccfda539a10b164927e344f63ecaf8a242aae436ec

C:\Program Files (x86)\Steam\userdata\1456296740\config\librarycache\2021910.json

MD5 064e7c6464e5a2671164fcdecf992a89
SHA1 4f6c27731a4b42cbdefdc00c0e726e7edb6d1b0f
SHA256 952829b9a93b208c4bb27c1f4f71eb9b0fd6e1c864cd892f073251e517f6cb6c
SHA512 6fecc5b5832ad6416b5e8ffd4a3b4116d02c73a323229365a7182b4b1f654249ae65ac8495f2f9af21c266c31321507ea8e2d66e4dcf0ce4728164473b22526b

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 912dba039001a0e35c19fca4bb3a5565
SHA1 f449ac9cc397a843682bab6a6356a6330b1551e2
SHA256 133aabdf0576ab52ad34ee32d8dfbf3b754c480153b0861b0fbe5e6ca8384ae5
SHA512 e4da98fb7360df57c1d073c50bd2de73e1889b1043bb767b1bea358a2d0556207e1c948fea22823fd046448526e50e92ff1cfbaad78137c378d03a62c932b1d0

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 7df828b7cfa9a0cb56ed7f5e5b841b64
SHA1 5314c44d0eb0c42d6864daf97d73948970c10b1b
SHA256 20e095516512fea61e1cc8f6ee9747602a8e29d95b0302352deaf1b7dd1006c5
SHA512 71397455133bcbee14e0fb27356166026f20d92b09b8fe2770ce02e58cfc2583574853b57c845fc46d4d00e893db9759175e925a731c0f1bd37ac74ba873b19c

C:\Program Files (x86)\Steam\logs\cef_log.txt

MD5 15ec829b11ad41221f5720300e7ff243
SHA1 0bd0439da6db4d18808b31cb5304aead17bcb367
SHA256 eccdb22f6215f774d8723db7872e131e6c21af1e3214cc1965d1d653a6df8672
SHA512 6f3195a6fe78ca8594a167c2f9f0f71232c47225571f1f53b42ba08925a6387c4c8851453de3029f87ed8c3fb5796514bc46a44b99c9ec2e6105a91641f27aca

C:\Program Files (x86)\Steam\userdata\1456296740\config\librarycache\688420.json

MD5 d9473f809641fc70222b2665f45d9e73
SHA1 db268c895bda2d4c89fdc54b606dfc5ab1684b92
SHA256 dcce5d06ffad0d920b60cd1cb81f76c9713a3f866121e9093c23cd03a6496637
SHA512 947183f211ec0eabaac7db127ebf234dd2aab5745f923ce547e52a278c88918af569df4f9284ec57bd97f6168167de86a06ff481744d98fe94b59f4878d1fde5

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 685bc9951059b2c4a0e5f3d77c33e03c
SHA1 f42b6b1214388de32e96d9648132edaf21f494ba
SHA256 2a0aa2290567c0abd9be532bdbdc80a5b636ceda85e55f2849d0c3aa549eeed6
SHA512 8486a78c4f8ad938074dfbcbf38b2078abab27efec30dd3ad1070b7d958d38e949dd05e4ed40feae881eb7bc723349e75ba3147cf0327d380322dd30e6327c8f

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 0f4891bfeaf13d3e3b762a369f3ef03c
SHA1 466579b8c5a5923a7669275ee4f04b2c810488bf
SHA256 d773aebda93552a02fe56efb32277b98aa418db409f8ce82108e13d635d6a0a9
SHA512 3a2239e2bc092813d1b85f9f5e0d1beae893522c9676a569078a79d0c25ea7ed5f25106c985e8a519a47bbd34651253f9ea4e44a3eb647935686468f2fcc48be

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Bad North.url

MD5 1b42847d25b84f129d856eff6393a936
SHA1 d0de07ed021ed652135f3ef0808a4a62fc0920b3
SHA256 dac69de2df80f4d7220f75c395144da6142c70d1a6dffc1ee87decc9807fac54
SHA512 1bcd116de487ad710929734555dc663fde0a0374eabaf276e23a2496cf21d5874704beaf8173a3fcb13ace281670817d26b0ce42d037b0d5015f88279200608c

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 21afa6fbcb6afc631a37c9d5e1953f6e
SHA1 0c2bd965811cda9d45cb51b364e9baabfd339e04
SHA256 45b2d4d75cda4e2301cf6377aabf23f5af9628327b0d193e39b510bc9b287ea1
SHA512 b695297d4b2a9c86ef2f52f654b66b417b3d6985ad2515170212287af32ff9f5541bff74e67a2c094f033abe434c031adf6d4d7af5de98f96e15fead787c47da

C:\Program Files (x86)\Steam\steamapps\appmanifest_688420.acf

MD5 a4a6ad02fbe2e952c61c9b6d71cbc330
SHA1 a018d34d27aeb2a65c6aaac2722a8971b3d5bf8e
SHA256 ac9917514ac4a66be10b87f72a719244b79db908d944ca3384935e2feed5624b
SHA512 19b9b084950492b5b2b0f4a9de93b81883067741594870c0bd41f79a4e3da2f7e4b7f8b0f9d4926864b5280a2d5d4f2be7c706f1da8f10139108b7e4ec9b897e

C:\Program Files (x86)\Steam\steamapps\appmanifest_688420.acf~RFe6883d3.TMP

MD5 4ee00b92a988689d068a9de027aa940a
SHA1 f335a4ee12b19fbfb1f0eb4bc3bd83f608c0a761
SHA256 6a732ab1d000a493d38d0af08d2c94d5e29ba6e233981554716723241f235dc5
SHA512 c514ea7c6f61bc78f11e5c0c157e4fca74307f54869f5fb9e73822a24f505b9d4c5256abbb350f2206becb7f33fe3c8f19a4a43cf12ec8199bf5be54110fa8ff

C:\Program Files (x86)\Steam\appcache\appinfo.vdf

MD5 e4b91f41ac2506a67f386f32c171cc45
SHA1 de8713820753d47f46d77c4832b7cb7f87e12d55
SHA256 9c80fafda3f8de43ddd85232a905d746c920250dcdc8404274e846f0aa694c5f
SHA512 aba53ad3c57db23434d8b63473b50f993cf07109555177b26a3f5f17b8f6ea1abf49ec42481b216ab9f3e4e32a99b5730b4e40be11370961737d73e9d4743357

C:\Program Files (x86)\Steam\appcache\appinfo.vdf~RFe68b94b.TMP

MD5 83d7b031ca9dc18a756873c59a7e58a5
SHA1 db2f186c2f15a3c2e84bf737f92d5cf517cf834f
SHA256 cf894c2089b8f587f13a62c0a7bc75056e2675f88adef7f2d0b3524488525edf
SHA512 79b425573fca6108f4b62b93d49ac796c413722fc14eafcf3f25e010e983eb7e5fa204fd2e09c559b8fc1999e74fbcac42410918004ed9c4325604611b6ba861

C:\Program Files (x86)\Steam\steamapps\downloading\688420\BadNorth_Data\Managed\Rewired_Core.dll

MD5 6ab92abf28ce005047f11bd4b7f1a6e9
SHA1 bc4bb9c673457af8271e1c6b5c63098866b529b0
SHA256 61330043ee81cf6acbb578859dd0d90a50868a2148b249cdaaba68f5a7e7e14c
SHA512 3dbfe4b70a862572885c7efc1a7d292bab3cf11b4b18f450b0ec7b39d2c6473b730302c30848d2aa053dbea50a7d3be0b987f2b90470fe6a7ca54f171e62f429

C:\Program Files (x86)\Steam\steamapps\common\BadNorth\BadNorth_Data\data.unity3d

MD5 7281ef3cdc47ffa976d516ce70c951a7
SHA1 bc938e85aac4cc62aa692bd97f64f4c49e7ad9a7
SHA256 7481bda003dcc62ac41f2710d056af58ad13ac82d15451039aad28e123951c3a
SHA512 2aa5f0308ba383052e7eb0e09dac5ded6ac700c8a11760951671b7056f2fd94951ef40525404c288d3e29ef79e211c5898882fe7e1a0230116f34de2e1e2c27b

C:\Program Files (x86)\Steam\steamapps\libraryfolders.vdf

MD5 5606e66d135037bd57e435035bbc6a62
SHA1 3222c940805da81a8a769a845f57b6e887e0e946
SHA256 6f738cf83d062cbacf68623a9832d900097742f1a772d9f259405a6293edbb3a
SHA512 faef3c4ea7ee553973151579e98c199b8db03078d53d84d1cb57f7102c7b4d83cb975519c9b78b283e221bb0bdf6b7154f7d316f22205bdecfa69b79cf759bc6

C:\Program Files (x86)\Steam\steamapps\common\BadNorth\BadNorth_Data\Plugins\GalaxyCSharpGlue.dll

MD5 d577c1453ffbf9100c1b2e747186ae7f
SHA1 2587d82fdbb4e6a11daf3931eafa890b6b5ce496
SHA256 d867af5a02c48973db76948a07a7c31f5ee3248da878dcc6b248b5ff5b0b62c4
SHA512 00981527fd4aa33fe2a25c21568d7182965257b80c30fef16a454f4adf74da62ad26706b515a9731e2ae8fe8145fc03e269394cabbedae5d467008c6a9736c7f

C:\Program Files (x86)\Steam\steamapps\common\BadNorth\BadNorth_Data\Plugins\discord_game_sdk.dll

MD5 2dacb1b350cbcba43dc7e2e2a42db595
SHA1 a90c3d4a3beda7796c2d529afea2fc2cd48d7dcc
SHA256 a9ac798d1ac4fd370bfa37d3732983da302d4f102cda4f854c017e6e4cc10dcc
SHA512 741270e2326d6c20bfb029faca6a7d6edde8f936f77c7c666c5d08dc15f88a10601cf5b0a651dd27ea054b776c917dd109c256e13fa7021d5ce0322f25aa0693

C:\Program Files (x86)\Steam\steamapps\appmanifest_688420.acf

MD5 e529d479f1f1edd53a013e9dedc24c39
SHA1 ce663aa8152e8342c8aa46db78f303a2c26eb31b
SHA256 cc8ee6e8bb379e8bd9711fa583ff8c71af4b3b9abe2737f5b1c5930b5fd242b9
SHA512 6948ee0dc96a7bcc5d330e42056abe718d6648c38dc7a264f07e9fc1980a411e330464d8d412552357e3d2acc7941c27ed07a71cecb16ace1899798fc0afe2c3

C:\Program Files (x86)\Steam\steamapps\common\BadNorth\BadNorth.exe

MD5 da66e56b44086d618b1ae2116dba6c31
SHA1 d33b1ad42606783d520d334240e3fd0dcb48883e
SHA256 65f364d3851411cf15d158141ec3feb890abd9cb605e4d1bd364be9f5fafc8a7
SHA512 7e7e814a07b6183527d893e09b0d40f9fe299ca57dcd80f0ebd43adf95620f69e0cff8afd915d10e35370da904cb685f0f55d3aeef3b7b3019920b923c90e1cb

C:\Program Files (x86)\Steam\steamapps\common\BadNorth\UnityCrashHandler32.exe

MD5 d62afb263e4ca1f52d54493f383555b8
SHA1 c7b5ee97ce731431585fa9f57eeb3b4fa9e2b8e9
SHA256 a5a5cbfeb70c9496df6c5858215a79c2700f4d5abdf07a0be0423683f20ddce2
SHA512 45a2bb1eca870034a030254e914e0a7fc73539de9d667c1aae240aea8d09669085740f86a55f62ad0e857259322cb20945b015cb10df2cf99b5aeb8c2e022a0f

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 51e03b0eb8a022cc96a4f29e14ffec5c
SHA1 238d03d21003f6fdbc391354ce28daa5f0634ef9
SHA256 9e5036eb911c3ded85af45af17dd96b82e37feb633d2a38c0526c7e333ed67e9
SHA512 f9beea81a1855785d82468cd25f82cfd4ff1f7a837b5e63061338c1bf0de7394272b8ab901fc0c14d7a3825ac36d900ca7cdbf8e09c07e32b4560feaeaa87c31

C:\Program Files (x86)\Steam\steamapps\appmanifest_688420.acf

MD5 3b60bdcfb38c5a173cb0245c8be787a8
SHA1 d19e2b973c02a3c2dad2d81c37c027fd072cd6d9
SHA256 bc87088f5042cb7155f5be8a08ff64cb82992cbe7b0fe1b5cbc407f370c20bb5
SHA512 3ed9ebd6d4b6da4ade1774331426b3ea03cab492b8ac458189fda9a7a8839a7041921931b1431105622dc41b043176f6867a0e794b6f2648c3126d00dd413dcb

C:\Program Files (x86)\Steam\userdata\1456296740\gamerecordings\gamerecording.pb

MD5 794b0faa9afac4cd61e8c9656095e5c7
SHA1 385955aca9b1691a69892a131f14e4b8a5c5f3c4
SHA256 8c6b902717d245151f4c8c59519ba33e9b4e9110cf67cb63dee51d4d9197e49d
SHA512 f529f7791139745480510b58c3af06ccf293f12686a00ebbcd54aead6db841a49217920f887c5d1f3404804681a614d9573e6130717e411605018f36b2089470

C:\Users\Admin\Videos\Captures\desktop.ini

MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

C:\Program Files (x86)\Steam\steamapps\appmanifest_688420.acf

MD5 590a2c0ee35ab602b2a92fe121f26734
SHA1 a2d5433ee82c4617c12355dd969e92081f064eba
SHA256 92b645d94ee62ffca5e936afa1cd8f0a442b2c9457351f6c0b53902bd5f85c58
SHA512 594ba23652db507dc155ad696dc2c00c6aebc96d983e31a44d8a63dd7307e65b66096ceb5978462080e2088fc97f71ff07cf9b50e492599ff1b73374dbb92a2f

C:\Program Files (x86)\Steam\userdata\1456296740\688420\remote\campaign - 0.meta

MD5 570c115f624673bd0b25e747cdf4a3e3
SHA1 3448690b445af130bca4acb0025826f42500ecc9
SHA256 2508cce6ddb0f26f31f6499aba8a3a24e1cd2abb0cd653f1fc276a299defb016
SHA512 dbcf3259399050ca958171bd8ed664c2108e383abd9fe65bc47e99ebb6ed0ae2e277a6da87442c4b1b02e58b4029d917d51fe164db4ab4f79cdc7864df7f2595

C:\Program Files (x86)\Steam\userdata\1456296740\688420\remote\user

MD5 15ade915f0a67873d8686c37fc7375cf
SHA1 fb6e7c4478fa7654ba003f926d10886f62c30cac
SHA256 ddaef90e0db7237b07e39e02342669d031f47fc2cae8564c68617129bbac9a38
SHA512 ff642bd4824441bbd91e07110c69d2ba9c55c0aea76b1dccd65e81f716802f82564ec1d5a7b43bba9a64bf588fa12aad076dc58cbb70bd93e22221ee0ad6a2c1

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 0a65fca5462723f7cdd53fcd107eb890
SHA1 86098ebd2092ce57e5cc9dc1a8d3aeaf76ed56b4
SHA256 a4a48d5820792fe51210185700135e37b826fadbcc721c2bee1baaa48b5593a3
SHA512 6a98fe1cddf0dfdf46e88f7fb65b57ed92565a3e81e4161f0bc1238ffb0038142ec3dcd44ec736318f9f3a850b06b1b52aff8c9f957e1457c6278e081a0db3e8

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 6874848203865d4201f7980a97c29d8c
SHA1 3e3a7f3bab9b9ea77b538d6dd81f82059967271a
SHA256 544ffa920966413c0bdb25c7a0aa93fc97b1de34646716d70aacea8274843105
SHA512 ef1b9b83520949dc886e28f35d79e70c46b8079235f6c5f20f6149fd056b29ac9a69d4c0124c02161a14fe91bcad29bc2df991be604a53de4f6ca7b136561c77

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 963040e03ef44f49a599b47d242ec7c8
SHA1 e9986d272f02e9dc0e977f74e98b8ad79c3d3894
SHA256 d62c00ac7561775c05eed8d15dc30ec7865745ed164c5ce1bec2d8f3a03bde3e
SHA512 80865c1e69644f19664141a84c2b6d2be09c74d2e274502a556c432ce94d9a9868b7f62f326905aac7bc305307c316805ede966e9659b56a7054f131f9b88551

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 4a2f72efa61c93cf91653608db1667cd
SHA1 5b49f444f31bc0b6d154bc1809cb09515cd56727
SHA256 6f6149d09b219202a57fdb6c7df05507eb66dcb9b3af719266320456fb7445fc
SHA512 0d84523ac0584e5edd5827a51b34a145d26e48f61ce5dcd947f75e95e8dc1b53a0533510665b2dc58e3e42363ce74adb33f24db0fc82765af850314be6ed6e6c

C:\Users\Admin\AppData\LocalLow\Plausible Concept\Bad North\Unity\local.36cf57ce5dd8e0846b0c782a42957d05\Analytics\ArchivedEvents\173100337400003.efae4064\s

MD5 37d376ec318b1bfc1db4c779af2dc57f
SHA1 b6425e98f93832f1369b16c691cca9d6bf013e2f
SHA256 98eb003708e0501cc3f90341f50bb53b40dfc36ba1c7a3a0dd7eba47094f7737
SHA512 eff3bccac004e1715e601193e249b11d004fe9f490830389491d5cde5fd3759a1abcb3323a927e9f77c61650d116fb3ddbc6a21648cdd5e48e55da63f56be856

C:\Users\Admin\AppData\LocalLow\Plausible Concept\Bad North\Unity\local.36cf57ce5dd8e0846b0c782a42957d05\Analytics\ArchivedEvents\173100337400003.efae4064\g

MD5 c81e728d9d4c2f636f067f89cc14862c
SHA1 da4b9237bacccdf19c0760cab7aec4a8359010b0
SHA256 d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35
SHA512 40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114

C:\Users\Admin\AppData\LocalLow\Plausible Concept\Bad North\Unity\local.36cf57ce5dd8e0846b0c782a42957d05\Analytics\ArchivedEvents\173100367400004.efae4064\c

MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

C:\Program Files (x86)\Steam\dumps\settings.dat

MD5 4bc0fe2d4be2f872fe98999260a9388b
SHA1 6651e0d9afc7e3e5ad50922fed79f6ed36ae9c4d
SHA256 4cd1555361ff761093f5e1e5b8f3bfe1940fb499a52caca3c0d8956ad3815b00
SHA512 9d152c06bf7a462d48391207a859ab0442fb21ff04ff164b2cf471e15c77cbaa522ec3bbfedd7c62629877973ca8209f8aea9cd315662d0b47b03ccf9a0aae54