Malware Analysis Report

2025-01-19 00:02

Sample ID 241109-1ahjrssfqn
Target .
SHA256 a1cb4008d59935c3dee671ea24ae1bd00c0aa981c1e64ce1b69e0a3eb180905f
Tags
steam defense_evasion discovery persistence phishing privilege_escalation
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

a1cb4008d59935c3dee671ea24ae1bd00c0aa981c1e64ce1b69e0a3eb180905f

Threat Level: Likely malicious

The file . was found to be: Likely malicious.

Malicious Activity Summary

steam defense_evasion discovery persistence phishing privilege_escalation

Downloads MZ/PE file

Loads dropped DLL

Executes dropped EXE

Checks installed software on the system

Enumerates connected drives

Adds Run key to start application

Detected potential entity reuse from brand STEAM.

Drops file in Windows directory

Subvert Trust Controls: Mark-of-the-Web Bypass

Drops file in Program Files directory

Access Token Manipulation: Create Process with Token

Enumerates physical storage devices

System Location Discovery: System Language Discovery

Browser Information Discovery

Event Triggered Execution: Installer Packages

Suspicious behavior: GetForegroundWindowSpam

Modifies data under HKEY_USERS

Suspicious behavior: EnumeratesProcesses

Suspicious behavior: AddClipboardFormatListener

Uses Task Scheduler COM API

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Modifies system certificate store

Checks SCSI registry key(s)

Suspicious use of FindShellTrayWindow

Uses Volume Shadow Copy service COM API

Modifies registry class

Uses Volume Shadow Copy WMI provider

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of AdjustPrivilegeToken

Suspicious use of SendNotifyMessage

NTFS ADS

Checks processor information in registry

Enumerates system info in registry

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-09 21:26

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-09 21:26

Reported

2024-11-09 21:56

Platform

win11-20241007-en

Max time kernel

1799s

Max time network

997s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\.html

Signatures

Downloads MZ/PE file

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\gldriverquery64.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\gldriverquery.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\vulkandriverquery64.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\vulkandriverquery.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\Steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Common Files\Steam\steamservice.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steamapps\common\Darksiders\vcredist_x86_sp1_atl_4053.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\VCREDI~3.EXE N/A
N/A N/A C:\Program Files (x86)\Steam\steamapps\common\Darksiders\DSInstaller.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000\Software\Microsoft\Windows\CurrentVersion\Run\Steam = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -silent" C:\Users\Admin\Downloads\SteamSetup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup0 = "rundll32.exe C:\\Windows\\system32\\advpack.dll,DelNodeRunDLL32 \"C:\\Users\\Admin\\AppData\\Local\\Temp\\IXP000.TMP\\\"" C:\Program Files (x86)\Steam\steamapps\common\Darksiders\vcredist_x86_sp1_atl_4053.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup1 = "rundll32.exe C:\\Windows\\system32\\advpack.dll,DelNodeRunDLL32 \"C:\\Users\\Admin\\AppData\\Local\\Temp\\IXP001.TMP\\\"" C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\VCREDI~3.EXE N/A

Checks installed software on the system

discovery

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\R: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\N: C:\Windows\SysWOW64\MSIEXEC.EXE N/A
File opened (read-only) \??\P: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\N: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\SysWOW64\MSIEXEC.EXE N/A
File opened (read-only) \??\P: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\SysWOW64\MSIEXEC.EXE N/A
File opened (read-only) \??\Z: C:\Windows\SysWOW64\MSIEXEC.EXE N/A
File opened (read-only) \??\G: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\SysWOW64\MSIEXEC.EXE N/A
File opened (read-only) \??\H: C:\Windows\SysWOW64\MSIEXEC.EXE N/A
File opened (read-only) \??\I: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\SysWOW64\MSIEXEC.EXE N/A
File opened (read-only) \??\U: C:\Windows\SysWOW64\MSIEXEC.EXE N/A
File opened (read-only) \??\K: C:\Windows\SysWOW64\MSIEXEC.EXE N/A
File opened (read-only) \??\Y: C:\Windows\SysWOW64\MSIEXEC.EXE N/A
File opened (read-only) \??\H: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\SysWOW64\MSIEXEC.EXE N/A
File opened (read-only) \??\N: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\SysWOW64\MSIEXEC.EXE N/A
File opened (read-only) \??\V: C:\Windows\SysWOW64\MSIEXEC.EXE N/A
File opened (read-only) \??\K: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\SysWOW64\MSIEXEC.EXE N/A
File opened (read-only) \??\U: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\SysWOW64\MSIEXEC.EXE N/A
File opened (read-only) \??\R: C:\Windows\SysWOW64\MSIEXEC.EXE N/A
File opened (read-only) \??\T: C:\Windows\SysWOW64\MSIEXEC.EXE N/A
File opened (read-only) \??\W: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\SysWOW64\MSIEXEC.EXE N/A
File opened (read-only) \??\B: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\SysWOW64\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\SysWOW64\MSIEXEC.EXE N/A
File opened (read-only) \??\Q: C:\Windows\SysWOW64\MSIEXEC.EXE N/A

Detected potential entity reuse from brand STEAM.

phishing steam

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps4_l2_soft_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps4_trackpad_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\lighting_SH_CI_02.oppc C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_080_input_0030.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\joyconpair_left_sl.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sc_dpad_up_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sc_dpad_swipe_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\shared_outlined_button_x.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\videos\Scene_TGate3b.wmv C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\sw_tns_00.oppc C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_010_wpn_0401.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\friends\loop_4.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\ui_startmenu.oppc C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\ui_buttons_xbox.oppc C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sc_lt_soft.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\lighting_Ch_Cat_Rm09.oppc C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\templates\controller_ps5_gamepad_fps.vdf_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\videos\Scene_42.wmv C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\localization\steampops_dutch-json.js_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sd_r2_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_110_social_0040.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\shared_dpad_up.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\shared_button_x_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sc_dpad_click_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sd_button_menu_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steam\cached\gameproperties_localfiles.res_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\icon_status_mobile.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sc_button_l_arrow_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps5_trackpad_l_touch.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\switchpro_dpad_right_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps4_trackpad_swipe_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sc_touchpad_click_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steam\cached\movelibrarydialog.res_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\bin\cef\cef.win7x64\openvr_api.dll_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\localization\steam_controller_russian.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps4_l2.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\friends\broadcastuploaderrornotification.res_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\lighting_SH_C2_OT.oppc C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\shared_mouse_mid_click_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sc_lg.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps4_button_share_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sd_ltrackpad_right_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\appcache\librarycache\250820_icon.jpg C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\lighting_SW_Tns_07.oppc C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\public\steamclean_portuguese.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\hp_l4.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\shared_dpad_down.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\shared_gyro_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps_dpad_down.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps_dpad_right_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\bin\cef\cef.win7x64\msvcp140.dll_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\appmanifest_50620.acf.3935949786.tmp C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steam\cached\turn_icon_large.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps4_trackpad_up_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\shrike_lava.oppc C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\resource\filter_banned_swedish.txt.gz_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\ci_eg_bldgs.oppc C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\lighting_OT_Int_Rm04.oppc C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\switchpro_lstick_click_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\xbox_rt.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\shared_gyro_roll_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_040_act_0325.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\sd_ltrackpad_left_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sc_touchpad_edge_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\WinSxS\InstallTemp\20241109215523692.0\mfc80ITA.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523739.0\8.0.50727.4053.policy C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e71ac01.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\e71ac01.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\SourceHash{837b34e3-7c30-493c-8f6a-2b0f04e2912c} C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\inprogressinstallinfo.ipi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523645.0\mfcm80.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523645.0\mfcm80u.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523770.1\8.0.50727.4053.cat C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523692.0\mfc80CHS.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523692.0\mfc80JPN.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523692.0\mfc80DEU.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523755.0\8.0.50727.4053.cat C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\WinSxS\InstallTemp\20241109215523598.0 C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\ C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523614.0\msvcr80.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523723.0\vcomp.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping10760_1927997332\manifest.json C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523598.0\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_473666fd.cat C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523645.0\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e.cat C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523755.1\8.0.50727.4053.cat C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\WinSxS\InstallTemp\20241109215523645.0 C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\WinSxS\InstallTemp\20241109215523770.1 C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SystemTemp\~DF563386C33AC96EB7.TMP C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e71ac05.msi C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\WinSxS\InstallTemp\20241109215523614.0 C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\WinSxS\InstallTemp\20241109215523770.0 C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SystemTemp\~DFEE9D328A1DF2993B.TMP C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523645.0\mfc80u.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523692.0\mfc80FRA.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping10760_1927997332\_platform_specific\win_x64\widevinecdm.dll.sig C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523692.0\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c.manifest C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523770.0\8.0.50727.4053.cat C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\WinSxS\InstallTemp\20241109215523723.0 C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\WinSxS\InstallTemp\20241109215523755.0 C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523645.0\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e.manifest C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523723.0\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e79c4723.manifest C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\WinSxS\InstallTemp\20241109215523755.1 C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SystemTemp\~DFCB7ADAF8B97B75C1.TMP C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523598.0\ATL80.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523614.0\msvcm80.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523770.1\8.0.50727.4053.policy C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\WinSxS\InstallTemp\20241109215523739.0 C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIAD97.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523614.0\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989.cat C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523692.0\mfc80ESP.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523692.0\mfc80KOR.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping10760_1927997332\_platform_specific\win_x64\widevinecdm.dll C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping10760_1927997332\LICENSE C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523614.0\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989.manifest C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523692.0\mfc80ENU.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523598.0\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_473666fd.manifest C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523723.0\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e79c4723.cat C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523755.0\8.0.50727.4053.policy C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523755.1\8.0.50727.4053.policy C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523770.0\8.0.50727.4053.policy C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523614.0\msvcp80.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523645.0\mfc80.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523692.0\mfc80CHT.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20241109215523739.0\8.0.50727.4053.cat C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping10760_1927997332\_metadata\verified_contents.json C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A

Subvert Trust Controls: Mark-of-the-Web Bypass

defense_evasion
Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\SteamSetup.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Access Token Manipulation: Create Process with Token

defense_evasion privilege_escalation
Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Common Files\Steam\steamservice.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

Event Triggered Execution: Installer Packages

persistence privilege_escalation
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\msiexec.exe N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\bin\vulkandriverquery.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\msiexec.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\MSIEXEC.EXE N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\bin\gldriverquery.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steamapps\common\Darksiders\vcredist_x86_sp1_atl_4053.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\SteamSetup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\Steam.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Common Files\Steam\steamservice.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\VCREDI~3.EXE N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\syswow64\MsiExec.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steamapps\common\Darksiders\DSInstaller.exe N/A

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters C:\Windows\system32\vssvc.exe N/A
Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters C:\Windows\system32\vssvc.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr C:\Windows\system32\vssvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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 C:\Windows\system32\vssvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 C:\Windows\system32\vssvc.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steam.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steam.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steam.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\26\52C64B7E C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\26 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133756622139154647" C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steam\URL Protocol C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steamlink C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Win32Assemblies\Global\policy.8.0.Microsoft.VC80.CRT,type="win32-policy",version="8.0.50727.4053",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86" = 3f004f007700390052005a004800670055003f005d004a004b0073002700780077005a0043003200560043005f005200650064006900730074003e0061005a004f002c0048002a004b00320060004500650038004d006b0062004900640046007700550000000000 C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\3e43b73803c7c394f8a6b2f0402e19c2\SourceList\PackageName = "vcredist.msi" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\3e43b73803c7c394f8a6b2f0402e19c2\SourceList\Media\9 = ";Microsoft Visual C++ 2005 Redistributable [Disk 1]" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steam\DefaultIcon\ = "steam.exe" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\steam\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\"" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\steam\URL Protocol C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\steamlink\ = "URL:steamlink protocol" C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Win32Assemblies\Global\policy.8.0.Microsoft.VC80.ATL,type="win32-policy",version="8.0.50727.4053",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86" = 3f004f007700390052005a004800670055003f005d004a004b0073002700780077005a0043003200560043005f005200650064006900730074003e0036006b007d00700048004c004800240053004400650038004d006b0062004900640046007700550000000000 C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\3e43b73803c7c394f8a6b2f0402e19c2\SourceList\LastUsedSource = "n;1;C:\\Users\\Admin\\AppData\\Local\\Temp\\IXP001.TMP\\" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\steam C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\steam\Shell\Open C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\3e43b73803c7c394f8a6b2f0402e19c2\DeploymentFlags = "3" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Installer\Products\3e43b73803c7c394f8a6b2f0402e19c2 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell\Open\Command C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\3e43b73803c7c394f8a6b2f0402e19c2\SourceList\Media\2 = ";Microsoft Visual C++ 2005 Redistributable [Disk 1]" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steam\DefaultIcon C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\DefaultIcon\ = "steam.exe" C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Installer\Products\3e43b73803c7c394f8a6b2f0402e19c2\SourceList C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\steam\DefaultIcon\ = "steam.exe" C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Installer\Win32Assemblies\Global C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\steamlink\URL Protocol C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\"" C:\Program Files (x86)\Steam\steam.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\3e43b73803c7c394f8a6b2f0402e19c2\Language = "0" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\3e43b73803c7c394f8a6b2f0402e19c2\SourceList\Media\10 = ";Microsoft Visual C++ 2005 Redistributable [Disk 1]" C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\3e43b73803c7c394f8a6b2f0402e19c2\SourceList C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\ = "URL:steamlink protocol" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\steam\DefaultIcon\ = "steam.exe" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\3e43b73803c7c394f8a6b2f0402e19c2\VC_Redist C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\3e43b73803c7c394f8a6b2f0402e19c2 C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\3e43b73803c7c394f8a6b2f0402e19c2\SourceList\Media\8 = ";Microsoft Visual C++ 2005 Redistributable [Disk 1]" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\steamlink\DefaultIcon C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\steamlink\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\"" C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Win32Assemblies\Global\policy.8.0.Microsoft.VC80.MFCLOC,type="win32-policy",version="8.0.50727.4053",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86" = 3f004f007700390052005a004800670055003f005d004a004b0073002700780077005a0043003200560043005f005200650064006900730074003e006600720038005f006c0028006d0032004e004400650038004d006b0062004900640046007700550000000000 C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\3e43b73803c7c394f8a6b2f0402e19c2\Assignment = "1" C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\3e43b73803c7c394f8a6b2f0402e19c2 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Installer\Features\3e43b73803c7c394f8a6b2f0402e19c2 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steamlink\Shell\Open\Command C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\steamlink\URL Protocol C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steam\Shell\Open\Command C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Win32Assemblies\Global C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\3e43b73803c7c394f8a6b2f0402e19c2 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\3e43b73803c7c394f8a6b2f0402e19c2\SourceList\Net C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Installer\Products\3e43b73803c7c394f8a6b2f0402e19c2\SourceList\Media C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\3e43b73803c7c394f8a6b2f0402e19c2\SourceList\Media\1 = ";Microsoft Visual C++ 2005 Redistributable [Disk 1]" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell\Open C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steamlink C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\steam\Shell C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\3e43b73803c7c394f8a6b2f0402e19c2\SourceList\Media\5 = ";Microsoft Visual C++ 2005 Redistributable [Disk 1]" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell\Open C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\3e43b73803c7c394f8a6b2f0402e19c2\AdvertiseFlags = "388" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steamlink\DefaultIcon C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\DefaultIcon\ = "steam.exe" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\"" C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Win32Assemblies\Global\Microsoft.VC80.MFC,type="win32",version="8.0.50727.4053",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86" = 3f004f007700390052005a004800670055003f005d004a004b0073002700780077005a0043003200560043005f005200650064006900730074003e0021004d00210026005a005a006300300025006e00650038004d006b0062004900640046007700550000000000 C:\Windows\system32\msiexec.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Win32Assemblies\Global\Microsoft.VC80.MFCLOC,type="win32",version="8.0.50727.4053",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86" = 3f004f007700390052005a004800670055003f005d004a004b0073002700780077005a0043003200560043005f005200650064006900730074003e006900450024005b004d00310025002e0064002700650038004d006b0062004900640046007700550000000000 C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\3e43b73803c7c394f8a6b2f0402e19c2\PackageCode = "89402836B2F60B04F9803CF6D2C84E21" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\AA5D9C68C00F12943B2F6CA09FE28244\3e43b73803c7c394f8a6b2f0402e19c2 C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\3e43b73803c7c394f8a6b2f0402e19c2\SourceList\Media C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\3e43b73803c7c394f8a6b2f0402e19c2 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell C:\Program Files (x86)\Steam\bin\steamservice.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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 C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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 C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C C:\Program Files (x86)\Steam\steam.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 783465.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\SteamSetup.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files\VideoLAN\VLC\vlc.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeSecurityPrivilege N/A C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3068 wrote to memory of 564 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 564 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 1480 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 2140 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 2140 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 4372 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 4372 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 4372 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 4372 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 4372 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 4372 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 4372 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 4372 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 4372 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 4372 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 4372 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 4372 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 4372 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 4372 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 4372 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 4372 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 4372 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 4372 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 4372 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3068 wrote to memory of 4372 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Uses Task Scheduler COM API

persistence

Uses Volume Shadow Copy WMI provider

ransomware

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\.html

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffc976d3cb8,0x7ffc976d3cc8,0x7ffc976d3cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1984 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2788 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3176 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3184 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4140 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4300 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5032 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3828 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5404 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5432 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3896 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5624 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3444 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4988 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3444 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5888 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4132 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3364 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3568 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4208 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5168 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004D8 0x00000000000004DC

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4216 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5712 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6672 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2508 /prefetch:8

C:\Users\Admin\Downloads\SteamSetup.exe

"C:\Users\Admin\Downloads\SteamSetup.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1976,6498162794334936667,11387002936813138984,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=6716 /prefetch:2

C:\Program Files (x86)\Steam\bin\steamservice.exe

"C:\Program Files (x86)\Steam\bin\steamservice.exe" /Install

C:\Program Files (x86)\Steam\steam.exe

"C:\Program Files (x86)\Steam\steam.exe"

C:\Program Files (x86)\Steam\steam.exe

"C:\Program Files (x86)\Steam\steam.exe"

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" "-lang=en_US" "-cachedir=C:\Users\Admin\AppData\Local\Steam\htmlcache" "-steampid=10544" "-buildid=1730853027" "-steamid=0" "-logdir=C:\Program Files (x86)\Steam\logs" "-uimode=7" "-startcount=0" "-steamuniverse=Public" "-realm=Global" "-clientui=C:\Program Files (x86)\Steam\clientui" "-steampath=C:\Program Files (x86)\Steam\steam.exe" "-launcher=0" --valve-enable-site-isolation --enable-smooth-scrolling --enable-direct-write "--log-file=C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-quick-menu "--enable-features=PlatformHEVCDecoderSupport" "--disable-features=SpareRendererForSitePerProcess,DcheckIsFatal,ValveFFmpegAllowLowDelayHEVC"

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=crashpad-handler /prefetch:4 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files (x86)\Steam\dumps" "--metrics-dir=C:\Users\Admin\AppData\Local\CEF\User Data" --url=https://crash.steampowered.com/submit --annotation=platform=win64 --annotation=product=cefwebhelper --annotation=version=1730853027 --initial-client-data=0x29c,0x2a0,0x2a4,0x298,0x2a8,0x7ffc96e2af00,0x7ffc96e2af0c,0x7ffc96e2af18

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1568,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=1572 --mojo-platform-channel-handle=1560 /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --field-trial-handle=2172,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=2176 --mojo-platform-channel-handle=2168 /prefetch:11

C:\Program Files (x86)\Steam\bin\gldriverquery64.exe

.\bin\gldriverquery64.exe

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --field-trial-handle=2700,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=2708 --mojo-platform-channel-handle=2696 /prefetch:13

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3148,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3136 --mojo-platform-channel-handle=3144 /prefetch:1

C:\Program Files (x86)\Steam\bin\gldriverquery.exe

.\bin\gldriverquery.exe

C:\Program Files (x86)\Steam\bin\vulkandriverquery64.exe

.\bin\vulkandriverquery64.exe

C:\Program Files (x86)\Steam\bin\vulkandriverquery.exe

.\bin\vulkandriverquery.exe

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3648,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3644 --mojo-platform-channel-handle=3636 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3804,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3936 --mojo-platform-channel-handle=3652 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --field-trial-handle=4192,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4212 --mojo-platform-channel-handle=4208 /prefetch:14

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4240,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4224 --mojo-platform-channel-handle=4236 /prefetch:10

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=3824,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3112 --mojo-platform-channel-handle=4044 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=3632,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4372 --mojo-platform-channel-handle=3912 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=3928,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4052 --mojo-platform-channel-handle=3900 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --field-trial-handle=4508,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4340 --mojo-platform-channel-handle=3832 /prefetch:12

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004D8 0x00000000000004DC

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=4584,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4588 --mojo-platform-channel-handle=4068 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=4556,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3840 --mojo-platform-channel-handle=4560 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=4664,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4676 --mojo-platform-channel-handle=4372 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=4388,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4392 --mojo-platform-channel-handle=4404 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=4492,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4052 --mojo-platform-channel-handle=4604 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=3880,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4564 --mojo-platform-channel-handle=3936 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=4444,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4520 --mojo-platform-channel-handle=3896 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=4324,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3940 --mojo-platform-channel-handle=3112 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=5060,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=5064 --mojo-platform-channel-handle=5076 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=4884,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=5084 --mojo-platform-channel-handle=4876 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=4736,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3940 --mojo-platform-channel-handle=4928 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=4680,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4976 --mojo-platform-channel-handle=4984 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=3836,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=5108 --mojo-platform-channel-handle=4592 /prefetch:1

C:\Program Files (x86)\Steam\Steam.exe

"C:\Program Files (x86)\Steam\Steam.exe"

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=4512,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4372 --mojo-platform-channel-handle=4732 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=4560,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4744 --mojo-platform-channel-handle=4676 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=4956,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4932 --mojo-platform-channel-handle=5088 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --field-trial-handle=4612,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4992 --mojo-platform-channel-handle=4916 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=5092,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=5000 --mojo-platform-channel-handle=4708 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=5080,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=5108 --mojo-platform-channel-handle=4908 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=3852,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4688 --mojo-platform-channel-handle=4000 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --field-trial-handle=3868,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=5016 --mojo-platform-channel-handle=4720 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --field-trial-handle=5012,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=1916 --mojo-platform-channel-handle=4712 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=4616,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4888 --mojo-platform-channel-handle=4780 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=5040,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=5112 --mojo-platform-channel-handle=5076 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=4688,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3988 --mojo-platform-channel-handle=4592 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --field-trial-handle=4764,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4436 --mojo-platform-channel-handle=4888 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --field-trial-handle=4468,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4408 --mojo-platform-channel-handle=3988 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --field-trial-handle=3112,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4436 --mojo-platform-channel-handle=4464 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --field-trial-handle=4604,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3812 --mojo-platform-channel-handle=4648 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --field-trial-handle=4768,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4248 --mojo-platform-channel-handle=4916 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --field-trial-handle=4252,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4776 --mojo-platform-channel-handle=4772 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --field-trial-handle=4448,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4352 --mojo-platform-channel-handle=4592 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --field-trial-handle=4624,i,246794558073190269,10969682616225369595,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4348 --mojo-platform-channel-handle=3792 /prefetch:1

C:\Program Files (x86)\Steam\steam.exe

"C:\Program Files (x86)\Steam\steam.exe" -- "steam://rungameid/50620"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc92a7cc40,0x7ffc92a7cc4c,0x7ffc92a7cc58

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1740,i,5968575764510959574,9550102515202928553,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1732 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2096,i,5968575764510959574,9550102515202928553,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2108 /prefetch:3

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2100,i,5968575764510959574,9550102515202928553,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2184 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3068,i,5968575764510959574,9550102515202928553,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3096 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3120,i,5968575764510959574,9550102515202928553,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3352 /prefetch:1

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3540,i,5968575764510959574,9550102515202928553,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4428 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4592,i,5968575764510959574,9550102515202928553,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4612 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4604,i,5968575764510959574,9550102515202928553,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3524 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4900,i,5968575764510959574,9550102515202928553,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4792 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4932,i,5968575764510959574,9550102515202928553,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4908 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5048,i,5968575764510959574,9550102515202928553,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4688 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4800,i,5968575764510959574,9550102515202928553,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5064 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4548,i,5968575764510959574,9550102515202928553,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4700 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4648,i,5968575764510959574,9550102515202928553,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4784 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=4688,i,5968575764510959574,9550102515202928553,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5140 /prefetch:2

C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE

"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\Desktop\UseBlock.docm" /o ""

C:\Program Files\VideoLAN\VLC\vlc.exe

"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\UseExit.mp4"

C:\Program Files (x86)\Common Files\Steam\steamservice.exe

"C:\Program Files (x86)\Common Files\Steam\steamservice.exe" /installscript "C:\Program Files (x86)\Steam\steamapps\common\Darksiders\runasadmin.vdf" 50620

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\vcredist_x86_sp1_atl_4053.exe

"C:\Program Files (x86)\Steam\steamapps\common\Darksiders\vcredist_x86_sp1_atl_4053.exe" /q:a

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\VCREDI~3.EXE

C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\VCREDI~3.EXE

C:\Windows\SysWOW64\msiexec.exe

msiexec /i vcredist.msi

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004D8 0x00000000000004DC

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\srtasks.exe

C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2

C:\Windows\syswow64\MsiExec.exe

C:\Windows\syswow64\MsiExec.exe -Embedding 4CCB93349F7715062417F4C8CFF34124

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\DSInstaller.exe

"C:\Program Files (x86)\Steam\steamapps\common\Darksiders\DSInstaller.exe"

C:\Windows\SysWOW64\MSIEXEC.EXE

MSIEXEC.EXE /i "C:\Users\Admin\AppData\Local\Temp\{A51157B0-1C97-497E-9758-758806217642}\DarksidersInstaller.msi" TRANSFORMS="C:\Users\Admin\AppData\Local\Temp\{A51157B0-1C97-497E-9758-758806217642}\1033.MST" SETUPEXEDIR="C:\Program Files (x86)\Steam\steamapps\common\Darksiders" SETUPEXENAME="DSInstaller.exe"

Network

Country Destination Domain Proto
US 103.224.212.242:80 youareaidiot.org tcp
US 103.224.212.242:80 youareaidiot.org tcp
US 103.224.212.242:80 youareaidiot.org tcp
GB 92.123.128.135:443 www.bing.com tcp
N/A 224.0.0.251:5353 udp
GB 92.123.128.178:443 th.bing.com tcp
GB 92.123.128.186:443 th.bing.com tcp
GB 92.123.128.186:443 th.bing.com tcp
GB 92.123.128.178:443 th.bing.com tcp
NL 20.190.160.14:443 login.microsoftonline.com tcp
US 13.107.5.80:443 services.bingapis.com tcp
US 23.192.21.216:443 store.steampowered.com tcp
US 23.192.21.216:443 store.steampowered.com tcp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
US 104.18.42.105:443 cdn.cloudflare.steamstatic.com tcp
US 8.8.8.8:53 105.42.18.104.in-addr.arpa udp
US 104.18.42.105:443 shared.cloudflare.steamstatic.com tcp
US 23.192.21.216:443 checkout.steampowered.com tcp
US 23.192.21.216:443 checkout.steampowered.com tcp
GB 23.214.143.155:443 api.steampowered.com tcp
GB 23.214.143.155:443 api.steampowered.com tcp
US 8.8.8.8:53 steam.tv udp
GB 23.214.143.155:443 api.steampowered.com tcp
GB 23.214.143.155:443 api.steampowered.com tcp
GB 23.62.192.121:443 steam.tv tcp
US 23.192.21.216:443 store.steampowered.com tcp
GB 2.19.117.148:443 aefd.nelreports.net tcp
US 151.101.195.52:443 cdn.fastly.steamstatic.com tcp
US 151.101.131.52:443 cdn.fastly.steamstatic.com tcp
GB 2.23.210.82:80 r11.o.lencr.org tcp
US 151.101.131.52:443 cdn.fastly.steamstatic.com tcp
US 151.101.131.52:443 cdn.fastly.steamstatic.com tcp
GB 2.19.117.148:443 aefd.nelreports.net udp
GB 2.19.117.21:80 test.steampowered.com tcp
GB 104.123.95.227:443 api.steampowered.com tcp
N/A 127.0.0.1:63167 tcp
N/A 127.0.0.1:63146 tcp
US 8.8.8.8:53 cmp1-hkg1.steamserver.net udp
HK 103.28.54.100:27018 cmp1-hkg1.steamserver.net tcp
US 8.8.8.8:53 cmp2-hkg1.steamserver.net udp
HK 103.28.54.101:27018 cmp2-hkg1.steamserver.net tcp
US 8.8.8.8:53 cmp3-hkg1.steamserver.net udp
HK 103.28.54.102:443 cmp3-hkg1.steamserver.net tcp
US 8.8.8.8:53 cmp2-sgp1.steamserver.net udp
US 8.8.8.8:53 227.95.123.104.in-addr.arpa udp
SG 103.10.124.5:27018 cmp2-sgp1.steamserver.net tcp
US 8.8.8.8:53 e6.o.lencr.org udp
GB 2.23.210.82:80 e6.o.lencr.org tcp
US 8.8.8.8:53 e5.o.lencr.org udp
GB 2.23.210.75:80 e5.o.lencr.org tcp
US 8.8.8.8:53 cmp1-sgp1.steamserver.net udp
SG 103.10.124.4:27018 cmp1-sgp1.steamserver.net tcp
SG 103.10.124.5:443 cmp2-sgp1.steamserver.net tcp
US 8.8.8.8:53 ext2-tyo3.steamserver.net udp
US 8.8.8.8:53 100.54.28.103.in-addr.arpa udp
US 8.8.8.8:53 101.54.28.103.in-addr.arpa udp
US 8.8.8.8:53 102.54.28.103.in-addr.arpa udp
US 8.8.8.8:53 5.124.10.103.in-addr.arpa udp
US 8.8.8.8:53 75.210.23.2.in-addr.arpa udp
JP 45.121.184.21:27033 ext2-tyo3.steamserver.net tcp
US 8.8.8.8:53 ext3-tyo3.steamserver.net udp
JP 45.121.184.22:27024 ext3-tyo3.steamserver.net tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
JP 45.121.184.23:443 ext4-tyo3.steamserver.net tcp
US 162.254.195.69:443 cmp1-lax1.steamserver.net tcp
US 8.8.8.8:53 4.4.8.8.in-addr.arpa udp
US 8.8.8.8:53 ext1-syd1.steamserver.net udp
AU 103.10.125.148:27019 ext1-syd1.steamserver.net tcp
US 8.8.8.8:53 cmp2-iad1.steamserver.net udp
US 162.254.192.99:27018 cmp2-iad1.steamserver.net tcp
US 8.8.8.8:53 69.195.254.162.in-addr.arpa udp
US 8.8.8.8:53 23.184.121.45.in-addr.arpa udp
US 8.8.8.8:53 99.192.254.162.in-addr.arpa udp
US 8.8.8.8:53 148.125.10.103.in-addr.arpa udp
US 8.8.8.8:53 p2p-iad1.discovery.steamserver.net udp
US 8.8.4.4:443 dns.google udp
GB 142.250.200.14:443 tcp
GB 74.125.105.39:443 udp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 39.105.125.74.in-addr.arpa udp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
GB 104.123.95.227:443 api.steampowered.com tcp
US 8.8.8.8:53 ext2-eze1.steamserver.net udp
AR 155.133.255.164:27025 ext2-eze1.steamserver.net tcp
AR 155.133.255.164:27036 ext2-eze1.steamserver.net tcp
US 8.8.8.8:53 ext1-scl1.steamserver.net udp
CL 155.133.249.180:27038 ext1-scl1.steamserver.net tcp
CL 155.133.249.180:27025 ext1-scl1.steamserver.net tcp
US 8.8.8.8:53 ext2-gru1.steamserver.net udp
BR 155.133.227.50:27030 ext2-gru1.steamserver.net tcp
US 8.8.8.8:53 ext1-gru1.steamserver.net udp
BR 155.133.227.34:27036 ext1-gru1.steamserver.net tcp
AR 155.133.255.164:443 ext2-eze1.steamserver.net tcp
US 8.8.8.8:53 ext1-lim1.steamserver.net udp
PE 155.133.244.34:27025 ext1-lim1.steamserver.net tcp
US 8.8.8.8:53 164.255.133.155.in-addr.arpa udp
US 8.8.8.8:53 180.249.133.155.in-addr.arpa udp
US 8.8.8.8:53 ext2-lim1.steamserver.net udp
PE 155.133.244.50:27020 ext2-lim1.steamserver.net tcp
US 8.8.8.8:53 ext2-scl1.steamserver.net udp
CL 155.133.249.164:443 ext2-scl1.steamserver.net tcp
US 8.8.8.8:53 cmp1-ord1.steamserver.net udp
US 162.254.193.103:27018 cmp1-ord1.steamserver.net tcp
US 162.254.195.69:443 cmp1-lax1.steamserver.net tcp
US 8.8.8.8:53 50.227.133.155.in-addr.arpa udp
US 8.8.8.8:53 34.227.133.155.in-addr.arpa udp
US 8.8.8.8:53 34.244.133.155.in-addr.arpa udp
US 8.8.8.8:53 103.193.254.162.in-addr.arpa udp
US 8.8.8.8:53 50.244.133.155.in-addr.arpa udp
US 8.8.8.8:53 164.249.133.155.in-addr.arpa udp
US 8.8.8.8:53 p2p-ord1.discovery.steamserver.net udp
US 8.8.8.8:443 dns.google udp
GB 216.58.201.99:443 tcp
US 8.8.8.8:53 99.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 123.35.104.34.in-addr.arpa udp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 ipv6check-udp.steamserver.net udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
GB 23.214.143.155:443 api.steampowered.com tcp
PE 155.133.244.50:27034 ext2-lim1.steamserver.net tcp
PE 155.133.244.50:27032 ext2-lim1.steamserver.net tcp
CL 155.133.249.164:27025 ext2-scl1.steamserver.net tcp
CL 155.133.249.180:27021 ext1-scl1.steamserver.net tcp
PE 155.133.244.50:443 ext2-lim1.steamserver.net tcp
US 8.8.8.8:53 ext1-eze1.steamserver.net udp
AR 155.133.255.100:27020 ext1-eze1.steamserver.net tcp
AR 155.133.255.164:27025 ext2-eze1.steamserver.net tcp
BR 155.133.227.34:27029 ext1-gru1.steamserver.net tcp
CL 155.133.249.164:443 ext2-scl1.steamserver.net tcp
BR 155.133.227.50:27035 ext2-gru1.steamserver.net tcp
US 8.8.8.8:53 cmp2-ord1.steamserver.net udp
US 162.254.193.75:443 cmp2-ord1.steamserver.net tcp
US 8.8.8.8:53 cmp2-lhr1.steamserver.net udp
GB 162.254.196.80:27020 cmp2-lhr1.steamserver.net tcp
US 8.8.8.8:53 e5.o.lencr.org udp
GB 2.23.210.82:80 e5.o.lencr.org tcp
US 8.8.8.8:53 p2p-lhr1.discovery.steamserver.net udp
US 8.8.8.8:53 100.255.133.155.in-addr.arpa udp
US 8.8.8.8:53 80.196.254.162.in-addr.arpa udp
US 8.8.8.8:53 75.193.254.162.in-addr.arpa udp
US 8.8.8.8:53 cmp2-dfw1.steamserver.net udp
US 155.133.253.52:27018 cmp2-dfw1.steamserver.net tcp
US 8.8.8.8:53 cmp1-dfw1.steamserver.net udp
US 155.133.253.36:27018 cmp1-dfw1.steamserver.net tcp
US 155.133.253.36:443 cmp1-dfw1.steamserver.net tcp
US 162.254.199.184:443 cmp2-atl3.steamserver.net tcp
US 8.8.8.8:53 184.199.254.162.in-addr.arpa udp
US 8.8.8.8:53 52.253.133.155.in-addr.arpa udp
US 8.8.8.8:53 36.253.133.155.in-addr.arpa udp
US 8.8.8.8:53 cmp2-lax1.steamserver.net udp
US 162.254.195.75:443 cmp2-lax1.steamserver.net tcp
US 162.254.199.184:27018 cmp2-atl3.steamserver.net tcp
US 8.8.8.8:53 cmp1-atl3.steamserver.net udp
US 162.254.199.165:27018 cmp1-atl3.steamserver.net tcp
US 162.254.195.69:27018 cmp1-lax1.steamserver.net tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google udp
US 23.192.21.216:443 store.steampowered.com tcp
US 162.254.193.103:443 cmp1-ord1.steamserver.net tcp
US 162.254.195.75:27018 cmp2-lax1.steamserver.net tcp
US 8.8.8.8:53 cmp1-iad1.steamserver.net udp
US 162.254.192.98:27019 cmp1-iad1.steamserver.net tcp
US 8.8.8.8:53 ext3-sto1.steamserver.net udp
SE 162.254.198.46:27030 ext3-sto1.steamserver.net tcp
US 8.8.8.8:53 75.195.254.162.in-addr.arpa udp
US 8.8.8.8:53 165.199.254.162.in-addr.arpa udp
US 172.64.145.151:443 video.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 video.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 video.cloudflare.steamstatic.com tcp
US 8.8.8.8:53 p2p-sto1.discovery.steamserver.net udp
US 104.19.230.21:443 udp
US 8.8.8.8:53 98.192.254.162.in-addr.arpa udp
US 8.8.8.8:53 46.198.254.162.in-addr.arpa udp
US 8.8.8.8:53 151.145.64.172.in-addr.arpa udp
US 8.8.8.8:53 21.230.19.104.in-addr.arpa udp
US 172.64.145.151:443 video.cloudflare.steamstatic.com tcp
GB 216.58.201.99:443 udp
US 8.8.8.8:53 154.141.79.40.in-addr.arpa udp
US 8.8.8.8:443 dns.google udp
US 104.19.230.21:443 udp
US 104.19.230.21:443 udp
US 8.8.8.8:53 client-update.steamstatic.com udp
US 151.101.195.52:443 client-update.steamstatic.com tcp
US 8.8.8.8:53 r10.o.lencr.org udp
GB 2.23.210.82:80 r10.o.lencr.org tcp
US 8.8.8.8:53 p2p-sto1.discovery.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 ipv6check-udp.steamserver.net udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
GB 23.204.228.93:443 api.steampowered.com tcp
US 8.8.8.8:53 cmp1-fra1.steamserver.net udp
DE 155.133.250.4:27024 cmp1-fra1.steamserver.net tcp
US 8.8.8.8:53 cmp2-fra1.steamserver.net udp
DE 155.133.250.20:27023 cmp2-fra1.steamserver.net tcp
US 8.8.8.8:53 cmp1-vie1.steamserver.net udp
AT 146.66.155.84:443 cmp1-vie1.steamserver.net tcp
US 8.8.8.8:53 cmp1-fra2.steamserver.net udp
US 155.133.229.4:27019 cmp1-fra2.steamserver.net tcp
US 8.8.8.8:53 e6.o.lencr.org udp
GB 2.23.210.75:80 e6.o.lencr.org tcp
US 8.8.8.8:53 e5.o.lencr.org udp
GB 2.23.210.75:80 e5.o.lencr.org tcp
US 8.8.8.8:53 93.228.204.23.in-addr.arpa udp
US 8.8.8.8:53 20.250.133.155.in-addr.arpa udp
US 8.8.8.8:53 4.250.133.155.in-addr.arpa udp
US 8.8.8.8:53 84.155.66.146.in-addr.arpa udp
US 8.8.8.8:53 4.229.133.155.in-addr.arpa udp
US 8.8.8.8:53 p2p-fra1.discovery.steamserver.net udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 ipv6check-udp.steamserver.net udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
GB 104.82.234.109:443 api.steampowered.com tcp
BR 155.133.227.34:27031 ext1-gru1.steamserver.net tcp
BR 155.133.227.50:27025 ext2-gru1.steamserver.net tcp
AR 155.133.255.100:27020 ext1-eze1.steamserver.net tcp
AR 155.133.255.100:27029 ext1-eze1.steamserver.net tcp
CL 155.133.249.180:27019 ext1-scl1.steamserver.net tcp
CL 155.133.249.180:27021 ext1-scl1.steamserver.net tcp
PE 155.133.244.34:27022 ext1-lim1.steamserver.net tcp
PE 155.133.244.50:27022 ext2-lim1.steamserver.net tcp
US 8.8.8.8:53 109.234.82.104.in-addr.arpa udp
CL 155.133.249.164:443 ext2-scl1.steamserver.net tcp
US 162.254.195.75:443 cmp2-lax1.steamserver.net tcp
GB 162.254.196.80:27019 cmp2-lhr1.steamserver.net tcp
US 162.254.193.103:27018 cmp1-ord1.steamserver.net tcp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 ipv6check-udp.steamserver.net udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
GB 104.123.95.227:443 api.steampowered.com tcp
US 162.254.193.75:443 cmp2-ord1.steamserver.net tcp
US 162.254.193.103:27018 cmp1-ord1.steamserver.net tcp
US 162.254.192.98:27018 cmp1-iad1.steamserver.net tcp
US 162.254.192.99:27019 cmp2-iad1.steamserver.net tcp
US 162.254.195.69:443 cmp1-lax1.steamserver.net tcp
US 162.254.192.98:443 cmp1-iad1.steamserver.net tcp
US 162.254.193.75:27018 cmp2-ord1.steamserver.net tcp
US 155.133.253.52:27018 cmp2-dfw1.steamserver.net tcp
US 8.8.8.8:53 cmp1-sea1.steamserver.net udp
US 205.196.6.132:443 cmp1-sea1.steamserver.net tcp
US 155.133.253.36:443 cmp1-dfw1.steamserver.net tcp
US 155.133.229.4:27024 cmp1-fra2.steamserver.net tcp
GB 162.254.196.80:443 cmp2-lhr1.steamserver.net tcp
US 8.8.8.8:53 e6.o.lencr.org udp
GB 2.23.210.82:80 e6.o.lencr.org tcp
US 8.8.8.8:53 132.6.196.205.in-addr.arpa udp
N/A 10.127.255.255:27036 udp
US 8.8.8.8:53 clientconfig.akamai.steamstatic.com udp
GB 2.19.117.14:80 clientconfig.akamai.steamstatic.com tcp
US 8.8.8.8:53 14.117.19.2.in-addr.arpa udp
GB 2.19.117.14:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.117.14:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.117.14:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.117.14:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.117.14:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.117.14:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.117.14:80 clientconfig.akamai.steamstatic.com tcp
US 8.8.8.8:53 shared.steamstatic.com udp
US 8.8.8.8:53 steamstore-a.akamaihd.net udp
US 151.101.3.52:443 shared.steamstatic.com tcp
US 8.8.8.8:53 cdn.steamstatic.com udp
GB 2.19.117.27:443 steamstore-a.akamaihd.net tcp
US 151.101.3.52:443 cdn.steamstatic.com tcp
US 151.101.3.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
GB 2.19.117.27:443 steamstore-a.akamaihd.net tcp
GB 2.19.117.27:443 steamstore-a.akamaihd.net tcp
GB 2.23.210.75:80 r11.o.lencr.org tcp
US 8.8.8.8:53 steamcommunity.com udp
GB 104.123.95.227:443 steamcommunity.com tcp
GB 104.123.95.227:443 steamcommunity.com tcp
US 8.8.8.8:53 27.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 52.67.101.151.in-addr.arpa udp
US 8.8.4.4:443 dns.google udp
US 151.101.3.52:80 shared.steamstatic.com tcp
US 151.101.3.52:80 shared.steamstatic.com tcp
US 151.101.3.52:80 shared.steamstatic.com tcp
GB 2.19.117.23:443 tcp
US 23.192.21.216:443 store.steampowered.com tcp
US 151.101.67.52:443 shared.steamstatic.com tcp
GB 104.123.95.227:443 steamcommunity.com tcp
US 151.101.131.52:443 shared.steamstatic.com tcp
US 151.101.131.52:443 shared.steamstatic.com tcp
US 151.101.131.52:443 shared.steamstatic.com tcp
US 23.192.21.216:443 store.steampowered.com tcp
US 23.192.21.216:443 store.steampowered.com tcp
US 23.192.21.216:443 store.steampowered.com tcp
US 23.192.21.216:443 store.steampowered.com tcp
US 23.192.21.216:443 store.steampowered.com tcp
US 151.101.3.52:443 shared.steamstatic.com tcp
US 151.101.195.52:443 shared.steamstatic.com tcp
US 151.101.195.52:443 shared.steamstatic.com tcp
US 151.101.195.52:443 shared.steamstatic.com tcp
US 151.101.195.52:443 shared.steamstatic.com tcp
US 151.101.195.52:443 shared.steamstatic.com tcp
US 151.101.67.52:443 shared.steamstatic.com tcp
US 151.101.67.52:443 shared.steamstatic.com tcp
US 151.101.67.52:443 shared.steamstatic.com tcp
US 8.8.8.8:53 cdn.steamstatic.com udp
US 151.101.3.52:443 cdn.steamstatic.com tcp
US 151.101.3.52:443 cdn.steamstatic.com tcp
US 151.101.3.52:443 cdn.steamstatic.com tcp
US 151.101.195.52:443 cdn.steamstatic.com tcp
GB 104.123.95.227:443 steamcommunity.com tcp
US 8.8.8.8:53 clientconfig.akamai.steamstatic.com udp
GB 2.19.117.41:80 clientconfig.akamai.steamstatic.com tcp
US 8.8.8.8:53 41.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 steamcloud-eu-ams.storage.googleapis.com udp
GB 216.58.201.123:443 steamcloud-eu-ams.storage.googleapis.com tcp
US 8.8.8.8:53 c.pki.goog udp
GB 172.217.16.227:80 c.pki.goog tcp
US 8.8.8.8:53 o.pki.goog udp
GB 142.250.187.227:80 o.pki.goog tcp
US 8.8.8.8:53 227.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 123.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 227.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 steamcloud-london.storage.googleapis.com udp
GB 142.250.200.27:443 steamcloud-london.storage.googleapis.com tcp
US 8.8.8.8:53 27.200.250.142.in-addr.arpa udp
GB 104.123.95.227:443 steamcommunity.com tcp
GB 2.19.117.6:443 tcp
GB 2.19.117.6:443 tcp
GB 2.19.117.6:443 tcp
GB 2.19.117.6:443 tcp
GB 2.19.117.6:443 tcp
GB 2.19.117.6:443 tcp
US 151.101.3.52:443 cdn.steamstatic.com tcp
GB 216.58.204.78:443 tcp
GB 216.58.204.78:443 tcp
US 8.8.8.8:53 78.204.58.216.in-addr.arpa udp
GB 104.123.95.227:443 api.steampowered.com tcp
US 8.8.4.4:443 dns.google udp
US 8.8.8.8:53 p2p-lhr1.discovery.steamserver.net udp
GB 216.58.201.123:443 steamcloud-london.storage.googleapis.com tcp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 ipv6check-udp.steamserver.net udp
US 8.8.8.8:53 ipv6check-udp.steamserver.net udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 p2p-lhr1.discovery.steamserver.net udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 api.steampowered.com udp
GB 104.123.95.227:443 api.steampowered.com tcp
US 8.8.8.8:53 shared.steamstatic.com udp
US 8.8.8.8:53 shared.steamstatic.com udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 steamcommunity.com udp
US 8.8.8.8:53 steamcommunity.com udp
US 8.8.4.4:443 dns.google udp
US 23.192.21.216:443 store.steampowered.com tcp
US 23.192.21.216:443 store.steampowered.com tcp
US 8.8.4.4:443 dns.google udp
US 8.8.4.4:443 dns.google udp
US 8.8.8.8:53 cdn.steamstatic.com udp
US 151.101.195.52:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 clientconfig.akamai.steamstatic.com udp
US 8.8.8.8:53 lancache.steamcontent.com udp
GB 2.19.117.41:80 clientconfig.akamai.steamstatic.com tcp
US 8.8.8.8:53 cache13-lhr1.steamcontent.com udp
GB 162.254.196.23:443 cache13-lhr1.steamcontent.com tcp
US 8.8.8.8:53 e5.o.lencr.org udp
GB 2.23.210.75:80 e5.o.lencr.org tcp
US 8.8.8.8:53 cache1-lhr1.steamcontent.com udp
US 8.8.8.8:53 23.196.254.162.in-addr.arpa udp
GB 162.254.196.8:443 cache1-lhr1.steamcontent.com tcp
US 8.8.8.8:53 8.196.254.162.in-addr.arpa udp
US 8.8.8.8:53 cache16-lhr1.steamcontent.com udp
GB 162.254.196.26:443 cache16-lhr1.steamcontent.com tcp
US 8.8.8.8:53 e6.o.lencr.org udp
GB 2.23.210.75:80 e6.o.lencr.org tcp
US 8.8.8.8:53 26.196.254.162.in-addr.arpa udp
US 8.8.8.8:53 cache11-lhr1.steamcontent.com udp
GB 162.254.196.18:443 cache11-lhr1.steamcontent.com tcp
US 8.8.8.8:53 18.196.254.162.in-addr.arpa udp
US 8.8.8.8:53 cache14-lhr1.steamcontent.com udp
GB 162.254.196.24:443 cache14-lhr1.steamcontent.com tcp
US 8.8.8.8:53 24.196.254.162.in-addr.arpa udp
GB 162.254.196.6:443 cache7-lhr1.steamcontent.com tcp
US 8.8.8.8:53 6.196.254.162.in-addr.arpa udp
US 8.8.8.8:53 lancache.steamcontent.com udp
US 8.8.8.8:53 cache5-lhr1.steamcontent.com udp
GB 162.254.196.5:443 cache5-lhr1.steamcontent.com tcp
US 8.8.8.8:53 5.196.254.162.in-addr.arpa udp
GB 162.254.196.24:443 cache14-lhr1.steamcontent.com tcp
US 8.8.8.8:53 p2p-lhr1.discovery.steamserver.net udp
GB 162.254.196.26:443 cache16-lhr1.steamcontent.com tcp
US 8.8.8.8:53 lancache.steamcontent.com udp
GB 162.254.196.8:443 cache1-lhr1.steamcontent.com tcp
US 8.8.8.8:53 p2p-lhr1.discovery.steamserver.net udp
US 8.8.4.4:443 dns.google udp
US 8.8.8.8:53 store.steampowered.com udp
US 8.8.8.8:53 store.steampowered.com udp
US 8.8.4.4:443 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 23.192.21.216:443 store.steampowered.com tcp
US 23.192.21.216:443 store.steampowered.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 lancache.steamcontent.com udp
US 8.8.8.8:53 api.steampowered.com udp
GB 104.123.95.227:443 api.steampowered.com tcp
US 8.8.8.8:53 p2p-lhr1.discovery.steamserver.net udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 steam-chat.com udp
US 8.8.8.8:53 steam-chat.com udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 avatars.steamstatic.com udp
US 8.8.8.8:53 avatars.steamstatic.com udp
US 8.8.8.8:53 steam-chat.com udp
US 8.8.8.8:53 steam-chat.com udp
US 8.8.8.8:53 cdn.cloudflare.steamstatic.com udp
US 8.8.8.8:53 cdn.cloudflare.steamstatic.com udp
US 8.8.8.8:53 avatars.cloudflare.steamstatic.com udp
US 8.8.8.8:53 avatars.cloudflare.steamstatic.com udp
US 8.8.8.8:53 shared.cloudflare.steamstatic.com udp
US 8.8.8.8:53 shared.cloudflare.steamstatic.com udp
US 8.8.8.8:53 dns.google udp
GB 104.78.167.13:443 steam-chat.com tcp
US 8.8.8.8:53 community.akamai.steamstatic.com udp
US 8.8.8.8:53 community.akamai.steamstatic.com udp
GB 104.78.167.13:443 steam-chat.com tcp
US 8.8.4.4:443 dns.google udp
GB 2.19.117.4:443 community.akamai.steamstatic.com tcp
US 8.8.8.8:53 4.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 13.167.78.104.in-addr.arpa udp
US 8.8.8.8:53 lancache.steamcontent.com udp
GB 162.254.196.5:443 cache5-lhr1.steamcontent.com tcp
US 8.8.8.8:53 p2p-lhr1.discovery.steamserver.net udp
GB 104.123.95.227:443 api.steampowered.com tcp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
N/A 142.250.180.3:443 tcp
N/A 172.217.169.10:443 tcp
N/A 142.250.180.4:443 tcp
N/A 142.250.180.3:443 tcp
N/A 172.217.169.10:443 tcp
GB 142.250.187.227:443 tcp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
N/A 172.217.169.42:443 tcp
N/A 216.58.201.110:443 tcp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
N/A 172.217.16.238:443 tcp
US 8.8.8.8:53 udp
N/A 142.250.178.14:443 tcp
N/A 172.217.16.238:443 tcp
N/A 142.250.178.14:443 tcp
N/A 172.217.169.42:443 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
N/A 216.58.213.1:443 tcp
N/A 216.58.213.1:443 tcp
US 8.8.8.8:53 udp
GB 162.254.196.5:443 tcp
GB 162.254.196.5:443 tcp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
N/A 52.109.76.240:443 tcp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
N/A 52.109.76.243:443 tcp
SE 192.229.221.95:80 tcp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
GB 162.254.196.5:443 tcp
GB 162.254.196.24:443 tcp
US 8.8.8.8:53 udp
GB 162.254.196.23:443 tcp
GB 162.254.196.6:443 tcp
GB 162.254.196.26:443 tcp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
GB 162.254.196.23:443 tcp
US 8.8.8.8:53 udp
GB 162.254.196.26:443 tcp
US 8.8.8.8:53 udp
GB 162.254.196.24:443 tcp
US 8.8.8.8:53 udp
N/A 162.254.196.15:443 tcp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
GB 2.23.210.75:80 tcp
GB 162.254.196.6:443 tcp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
GB 162.254.196.6:443 tcp
US 8.8.8.8:53 udp
GB 162.254.196.24:443 tcp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
GB 2.19.117.41:80 tcp
US 8.8.8.8:53 udp
US 151.101.131.52:443 tcp
US 151.101.131.52:443 tcp
US 151.101.131.52:443 tcp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
GB 162.254.196.18:443 tcp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
N/A 162.254.196.25:443 tcp
N/A 162.254.196.20:443 tcp
N/A 162.254.196.9:443 tcp
US 8.8.8.8:53 udp
N/A 162.254.196.14:443 tcp
N/A 162.254.196.13:443 tcp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
GB 2.23.210.82:80 tcp
GB 2.23.210.75:80 tcp
GB 2.23.210.82:80 tcp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
N/A 162.254.196.13:443 tcp
N/A 162.254.196.25:443 tcp
N/A 162.254.196.14:443 tcp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.8.8:53 udp
US 8.8.4.4:443 udp
US 151.101.195.52:443 tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 cb557349d7af9d6754aed39b4ace5bee
SHA1 04de2ac30defbb36508a41872ddb475effe2d793
SHA256 cfc24ed7d1c2e2c6585f53db7b39aa2447bf9212487b0a3c8c2a7d8e7e5572ee
SHA512 f0cf51f42d975d720d613d09f201435bf98c6283ae5bc033207f4ada93b15e49743a235a1cfb1b761bde268e2f7f8561aa57619b99bff67a36820bc1a4d0ec4a

\??\pipe\LOCAL\crashpad_3068_NKPOHOOTPSIGTYJU

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 aad1d98ca9748cc4c31aa3b5abfe0fed
SHA1 32e8d4d9447b13bc00ec3eb15a88c55c29489495
SHA256 2a07cac05ffcf140a9ad32e58ef51b32ecccf1e3ab5ef4e656770df813a8944e
SHA512 150ebf7e37d20f88b21ab7ea0793afe1d40b00611ed36f0cf1ac1371b656d26f11b08a84dbb958891c79776fae04c9c616e45e2e211d292988a5709857a3bf72

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1c706d97fe6bf526c5a0fb0ebec8bd57
SHA1 2076067a853a1879eeccaa80999a3ab3cf00c777
SHA256 6572be0f7ac8f229fcb26c5bc29c36b6287f95bc9162724814de0e6b722ebd8d
SHA512 af20948414ae6187cab63e114f3f020e552ced13e7718ce17a477e01c237248699a633836bc37dfebfb21f0824e6296e9562e34e20b20baea4993c94038f8f37

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 39a079096ca8cdc44723b1f08473fee2
SHA1 4cfd6565d6a1848be5ae366489fe2fbf2e2acb90
SHA256 bbe8be68dfd8f815039cd15caffd6129a828605fda077f358fcde396c58917b3
SHA512 5a0593b5a692c8d40d6e4c9adf5de2af30d12ca2b29e4acef5f5c41dd360e1c6cfd5b80402e8998eaadd5f24c3e96da3a913eec3d94dbdf541d92941ef995ab0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b172a213310ea283075e6ad4d6e00c74
SHA1 037f2cfd108fcdc3860f0187ab727f320608d8d0
SHA256 e58632a77d48d97a7da153731963f78755b316917bcab1d121109f8aacf854a2
SHA512 6ea51127d5d5a1cbd8615aa3b6e86f73935705f76a7d6a303da5a68422c9be22771860d9732c2b725cc5568a966e36aecf36379c2cd33a2162296047bb859f87

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 7143b9a31db335dd9bac4eb0ecda9d88
SHA1 af5d7efe59129ae92c727b0cfd43f0bdc8e80e4a
SHA256 f05337a4c64b226aabc257bec8b356fc44e16263ce4818b8d2f162098284c6c5
SHA512 cf0cd8de57bdcd27a07cf2025fa8142193a345ff6f739b40b4cd8924a5d3fdd7b21211cccacfd7c2d9141b126364d315fa71dcd8dba777f3ca54b1d260b1e6fb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 714267548f499df703dda21a4916f278
SHA1 f0c7dc7b827f9b300baa2db3af2994f160d74722
SHA256 3396b78fd3e0c522e6bb6f195d52c06f650fcc474657884bf3eb66f9e8b06f62
SHA512 b31654a2f076b76e235379eb4d77873a5e6b3fb7e1ee4056588ae604de8cd6034105c53a2f991529dd6828ba5e25181be3c73a10d4d039af45c208ad31f29cf7

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 b0402324bbf08f2b5743be93492a1177
SHA1 d81a02abddd9d174f5e8cbcf34e7d203efc6e9f9
SHA256 522cd3d5f0fbe3825353c0d0d78457e1608339887cf338fd58b08f238d94bba5
SHA512 83e8941e76d7fc36887cf26087ed0bdd65211ee2249d2598cc710387c8fe7617ecaea9d9312a69ff003c732bfc6a9a078e81f3ab12b4f29dc196278b5840c0f3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

MD5 9fa060a599b0ee1912f2073ed59df3c8
SHA1 eaaeef616747d09506c6ed1d96901d2c8d1ad4e0
SHA256 7924474a8f327264982347dc932997ed49890ea4114925024ba678fba2d4e90c
SHA512 93837c0d1bf848ff603073bce6ac252f770a35fad094b294609682e11b04b463292c74c8440891e89741f28fa67a888ed6fdc1575fda99a3c2b6065ccc4e7b47

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

MD5 45886a6a9aace3fad669a79bc3191ce5
SHA1 c24b4a569c0fee533ca9db199feea061ccda03f9
SHA256 99d8caa7d664ce601c1e90e2b94cd63c6c5ff70f3d9871223f356f89341a43a5
SHA512 2dfc402d0c3f39bac280ea49bcbf9edcf7d849c23ab97422ddc0c46d2a18250e90bc66a6a407e437defa1eff3ea745ea657fc2a21f6211525e35a560a31c59ff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b

MD5 544a6e4b1b34c5132739a0d2ba39b18d
SHA1 683d474bf1ef4998ae5e37bdd219f34f15a12eb5
SHA256 369ca10d1b319a8fb94a6cd6143f4a524833faec18688d733508dd2c4f6db7e1
SHA512 efa73011d5933b27c23282e0e3caaaec3485d6db3b92212106fa6636b18365704904e7cc444a8b51d0e32d3a29c13e1bc2dc296214c492675b912de85824d4c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000033

MD5 af5256dcf1ad35a9c186d180372e992d
SHA1 d3f93c5db0aa41589e9d525624ff518c9343b459
SHA256 035328de83fba90fccf87a4c8ba797fd4f841b08a7b5cdd8cda582a396daeb86
SHA512 2934d2de8cd9fbe94b0b179d7a460c2e671f726c1f93e3a04cef15c52ee437f6c3810c2402caace0fba2225f1d727dd3178630ddde83c51b55a3fae8b49d3637

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000034

MD5 d285b525b70a051564f76ca71504e368
SHA1 333744cde9de37b4936c98e90f5a38b1d90af845
SHA256 bce39f57831630e2ac08ef2cc9bcb6cf6395149ebe4c487bd136cf8881591637
SHA512 5739f18afd9c2f07723e4e1ed9526d90ac2e541284a57efc51b464e0eb3f9ac7ebb58304d453d300e98110efb881ef0d3f8673847f01162bca0b02290c1cdfdb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000035

MD5 daf4bc548bc47e46ac4221c35e57b3e6
SHA1 232e6919b20457c5564cfb4d5510582a15073b27
SHA256 d2efa5f3652a92740b4f9349f4fdcfa550c0564f99c8eec357518b6ae8c9ebae
SHA512 45125729ef6cc2fe403545f096872b0470be4d932da283aa708ff9323fa0da18157b586efe7243aaa30480c0d7d2bd0606ce78644beae976ca81c350e134ff36

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 adbb580c9ce5ce403379c4883951d7f8
SHA1 16574334fab79e84193656ca2d1030a0fdce232f
SHA256 e83ffd2bd6c360276d8c83f758b9ab19e621261e5a98fa2cc1fda02251b7f64b
SHA512 3069159300889d11a4a92e2b2cb193e713a7d9a4e1dee1142ddda33fc10d34374689a7c249ec544fe4f0675c39ab03ccdd0750f734ae2b68d568b701b93f19d1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b322fc4456de1ead24e0e6dab1e8b7e4
SHA1 7a0ea0a22b55cedd52a41b0c207f21e8ebf61b7e
SHA256 72556a5aa2253e9a3e381b2f232f57cbaec56e6e339eb011916ade00c7cf2ee8
SHA512 72d27c5565b0222e285786db4d01dfc3c368fce4735545fc59a266f5ef733d704f3bcd85e5b852287b1db11ae2ec98fba6c5e8b8d43105f71329028414044f06

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58c3e7.TMP

MD5 d2dce7c5b1e8463d54c3b742e0d97fd8
SHA1 55ac5ef8590e8efc706c3b8d60e724f0476ef033
SHA256 968aef62946b689765e3c8a1b7e9693fb721394cb045546298797eefd93b29b2
SHA512 6ca9137bb433b7549534b9c6aab506b1c9312b802e74ba9d683d5e58bc8dd1e1f066acc1f19aedabd607709ba658c97ba3863f53d6b49b65bc6bdb819c1b7965

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9ebc794a3fd28c43c7294488807527cf
SHA1 aa504bd8a220977503ac09776bc1ddea1a8fc3d7
SHA256 40f2b3ea0bd5e5e8da6b06336d90d9a4ed2c2439b80a5e2916e9a83caebe35c1
SHA512 9d64a7c14b80f04d4598adc90dc4010e49fca2820c9778d77a7a28abc9e4d93ebd3f4c04f0f0fd82bb78c6bb25f7096881b741a71b8a90fee27c518c611272b2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8b6b166ad2ed4923129a4daf45799045
SHA1 b2730a8155433a7e30174e2cb0e547ce2019b988
SHA256 454be586828388bf92baf06636ca8e91fef7a059bb099418cb7633f4fcd27050
SHA512 5c9d9b30e66a44c45a62cdf823879aa1917d309d95c5c9deb8f6cf6239e62bf3c292fd47b0152c49c1dabfe5eb57fd5e24743d55abf39299479634f7583bd745

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 bfce598d61a1fef1b71d0dfe7b8eeb55
SHA1 7ec9a899670c688b6f10832343e5573a3a653c7e
SHA256 a6732766b8708d075b5251e807dbdb20664481cf4be422f2b4b6fbf6f427ab1d
SHA512 3cd400c9b309487f4b1665ee61366f6740201bb33d23d139b6394b1857ddf757e53fbb74b834e49c9079368fec250c0a3993c9907b7948032bd1421b4e99f1ea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a3f9d42bfb029959_0

MD5 9f125d580a305bd9081f919bf96eb296
SHA1 8115ebe9489efc709ee51b674a028a58a3f023bf
SHA256 501219090218a42d5a69a25fad99121eb8289615a80d1b0cae77b4d921999e48
SHA512 583ea921caf985d32a3f2175b2beeafe9ad69e7b6832bc36f2720ac228333e670f6bd615068a584770afdd7eba463f683d8c2780287d099c8c1b8407b3a1a715

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0980529bc9b55b51_0

MD5 2173b1609226833237bb950fd54d2c5d
SHA1 ad6c981cf551317d83a8dca65bc98309ecd05022
SHA256 629b6e1579e17f8cd7948fcd2c2ae6632faa8036e4b7b38bc79cda1c41628b93
SHA512 72e0bb15db4333a9482c3ae48f95f45d1d837fc26049fd77859849373e76b02fc1be83e8adfb943e22002f68e7de7536ec607ac8ba892d406bfd6f0be598d2bc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ad33e59cae2a6af3_0

MD5 ae6cda8c23f9d1bc02db4a2afe4923f8
SHA1 c793f439abbfe01059e3191c29308e935899d3dc
SHA256 0fb923e9ad5e0d88c876da17b2f968ba461d63f7278f355efb129ee6f3ddfe56
SHA512 f31077340b268fc2c5ac4df4eb0407aaedd861e28e120d74a0cefe3ed8173d33900f99f2fefee624d8417a2c8c8d59dbc2b3428ce59670c5c3fb76a15dfa33a8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b0ceff4e3937ef46_0

MD5 bb4bc0da24303165b5af000ea161ee9c
SHA1 cee96971024fd3383bb85a5275c0e1bfb52f46c3
SHA256 af6c70e3b7fd6be484d7eb49602fafe7868df6dcedd41e72a63183999877d612
SHA512 efe9d96eea7070359822e1ac9171361db03f6aaea0906ca5d05b6c5a96576a510f79a9197a82515d81a382c9b6c7086bcb51706b44b181c41b3e4239d9352705

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45026e981a5c53be_0

MD5 0a82522b88a37b620779d0189e1d98c9
SHA1 c19687d1fde466404760a275448a2876e22fa5bf
SHA256 22fa15bc4f66b5fdb8d1c123e4fec263a97e29f973d9cbdccfca1be47aa7162a
SHA512 d0c52ed0d40ce1e7b249433f01b3d7152aeff6f209ea43c40a985efb5a1d09f705c2178e87d545c580206c36f7d6f85a7539c3bf288bde189d09ab6103dcdc22

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6f0a1e3d7d473e64_0

MD5 f2aa61d905ecc5bdc1386ee44ab850a6
SHA1 6415c4071734cd050d33bad9e91958347c5f9f3c
SHA256 4775228543c1ce6e765898fed09426063527dff682baa73907ed0612b29b4dc8
SHA512 77d3a56b7ecabad3cd1ba4bcca57776c20cf46de26e44ba4afeddc9b874e1e7e86cd72037d279908fdd9581f0b50c359a6c688395a94a20657c61ff49aed9941

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d23775e9c2d0a9dc_0

MD5 7441c8b35c7b88b4d9fa62763b82b4b8
SHA1 13393878adcfa947b46a36e027c2f8a40586516c
SHA256 4b7cf5104e5e1166d3064a9715aeec04fd568b658de3df4db3afb7ea414f104d
SHA512 0370ca62461e5a906fcc11d49bdd6ca7d0d1a6418684d4da0620bf856172ec83a9a257aa8a0c3a28496b604baf5d4df45f263c9e8c268845d1748573b7f52319

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\830187ff629d89a2_0

MD5 0ff63ad7d36ddd45b77bb2534869c9cb
SHA1 ca11c253a33724b259d0f4b1b96c61e2e6cccb8a
SHA256 7a7d57f9c515a04232307704bc8d8830d0e0ad76c570052eca3027c7f40f5a3c
SHA512 c9c23e643e504e7cc72bc3355ae377ab75483a95b887d21e72bb49f5de703e12d2877b8897c6bbd7c91d1dd6ec227511d52cf55aaee502871da5193b2f9d0ad9

C:\Users\Admin\Downloads\Unconfirmed 783465.crdownload

MD5 1b54b70beef8eb240db31718e8f7eb5d
SHA1 da5995070737ec655824c92622333c489eb6bce4
SHA256 7d3654531c32d941b8cae81c4137fc542172bfa9635f169cb392f245a0a12bcb
SHA512 fda935694d0652dab3f1017faaf95781a300b420739e0f9d46b53ce07d592a4cfa536524989e2fc9f83602d315259817638a89c4e27da709aada5d1360b717eb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fe50b2c11966c8619af25f5a56e2e2e4
SHA1 780bb4177e3de9b7fe12eb172b4c2ec84b08fca8
SHA256 469d73735c1bee813553dfa6bce3903536188b5c0ce6bf98c4f102e8a73f0dff
SHA512 d582b7df4f8bbd8218185a11fa524e11bfeb5561058113af85609539b387db63c85eb1618bd9161fad7dccb71c361366b50145b1120aa8e10103633cbe65ff93

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1c6cd29269ef3d326dc3909cf989987c
SHA1 24e73aecb9e3df211f9e8fb711b358bae0e2de59
SHA256 697436eb7fc1a035b2ab4c50bc8d59621a4c8285601894a49736569a7977cf5d
SHA512 a604ef1e88f7d2518494f960283dbe072476e28d8b88fa66ae5565f4c6ee004b999dacbfcc07ca16739f8298057866bd87a29fb26d47f3ee4cea489a70775a1c

C:\Users\Admin\Downloads\SteamSetup.exe:Zone.Identifier

MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512 aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ddce42afa253f825d55aadf433ea1184
SHA1 f8c5192b9faeb7c0a35e7b272a9a470ccd908eb2
SHA256 21b85d7d094beebb0a2bcac3646112f40fc03eb9b7356b5b3361ea39d2fe8691
SHA512 2756e34817cd819797dd909ecc7c95fb0e4c58f08d721705ccca066aaebca7f949de945a34efffdb1ca98fd64ea5463379bd6ca08c86337a3724912a4c12b63b

C:\Users\Admin\AppData\Local\Temp\nsx552D.tmp\System.dll

MD5 a36fbe922ffac9cd85a845d7a813f391
SHA1 f656a613a723cc1b449034d73551b4fcdf0dcf1a
SHA256 fa367ae36bfbe7c989c24c7abbb13482fc20bc35e7812dc377aa1c281ee14cc0
SHA512 1d1b95a285536ddc2a89a9b3be4bb5151b1d4c018ea8e521de838498f62e8f29bb7b3b0250df73e327e8e65e2c80b4a2d9a781276bf2a51d10e7099bacb2e50b

C:\Users\Admin\AppData\Local\Temp\nsx552D.tmp\nsDialogs.dll

MD5 4e5bc4458afa770636f2806ee0a1e999
SHA1 76dcc64af867526f776ab9225e7f4fe076487765
SHA256 91a484dc79be64dd11bf5acb62c893e57505fcd8809483aa92b04f10d81f9de0
SHA512 b6f529073a943bddbcb30a57d62216c78fcc9a09424b51ac0824ebfb9cac6cae4211bda26522d6923bd228f244ed8c41656c38284c71867f65d425727dd70162

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 f1997202f8b6a5fbe9d3a3b9e46d55c0
SHA1 fb89e175824bf0a1a04872abda52689fb3574e48
SHA256 300fba48bf7b1ecb6230d2ea803d70dbfcec8f42836ddc304c37fe1f0d74427e
SHA512 ac4956717a375b9e86b306001bc53a6b65e8aad6f1c4890f56ae101f299a4288f3addf48b039da9e1754a30d52451afc3d716c100cff14c4dea14e716255ad60

C:\Users\Admin\AppData\Local\Temp\nsx552D.tmp\nsProcess.dll

MD5 08072dc900ca0626e8c079b2c5bcfcf3
SHA1 35f2bfa0b1b2a65b9475fb91af31f7b02aee4e37
SHA256 bb6ce83ddaad4f530a66a1048fac868dfc3b86f5e7b8e240d84d1633e385aee8
SHA512 8981da7f225eb78c414e9fb3c63af0c4daae4a78b4f3033df11cce43c3a22fdbf3853425fe3024f68c73d57ffb128cba4d0db63eda1402212d1c7e0ac022353c

C:\Program Files (x86)\Steam\Steam.exe

MD5 33bcb1c8975a4063a134a72803e0ca16
SHA1 ed7a4e6e66511bb8b3e32cbfb5557ebcb4082b65
SHA256 12222b0908eb69581985f7e04aa6240e928fb08aa5a3ec36acae3440633c9eb1
SHA512 13f3a7d6215bb4837ea0a1a9c5ba06a985e0c80979c25cfb526a390d71a15d1737c0290a899f4705c2749982c9f6c9007c1751fef1a97b12db529b2f33c97b49

C:\Users\Admin\AppData\Local\Temp\nsx552D.tmp\nsExec.dll

MD5 2095af18c696968208315d4328a2b7fe
SHA1 b1b0e70c03724b2941e92c5098cc1fc0f2b51568
SHA256 3e2399ae5ce16dd69f7e2c71d928cf54a1024afced8155f1fd663a3e123d9226
SHA512 60105dfb1cd60b4048bd7b367969f36ed6bd29f92488ba8cfa862e31942fd529cbc58e8b0c738d91d8bef07c5902ce334e36c66eae1bfe104b44a159b5615ae5

C:\Program Files (x86)\Steam\bin\SteamService.exe

MD5 ba0ea9249da4ab8f62432617489ae5a6
SHA1 d8873c5dcb6e128c39cf0c423b502821343659a7
SHA256 ce177dc8cf42513ff819c7b8597c7be290f9e98632a34ecd868dc76003421f0d
SHA512 52958d55b03e1ddc69afc2f1a02f7813199e4b3bf114514c438ab4d10d5ca83b865ba6090550951c0a43b666c6728304009572212444a27a3f5184663f4b0b8b

C:\Program Files (x86)\Steam\public\steambootstrapper_swedish.txt

MD5 b2248784049e1af0c690be2af13a4ef3
SHA1 aec7461fa46b7f6d00ff308aa9d19c39b934c595
SHA256 4bf6b25bf5b18e13b04db6ed2e5ed635eb844fc52baa892f530194d9471f5690
SHA512 f5cee6bba20a4d05473971f7f87a36990e88a44b2855c7655b77f48f223219978d91bcd02d320c7e6c2ec368234e1d0201be85b5626ef4909e047e416e1a066c

C:\Program Files (x86)\Steam\public\steambootstrapper_spanish.txt

MD5 66456d2b1085446a9f2dbd9e4632754b
SHA1 8da6248b57e5c2970d853b8d21373772a34b1c28
SHA256 c4f821a4903c4e7faea2931c7fb1cf261eba06a9840c78fdca689f5c784c06c4
SHA512 196c2282ba13715709ece706c9219fe70c05dd295840082e7d901b9e5592e74b1bb556782181cdbe35bd1ab0d6197fef67258b09491fabc6f27606dbed667d49

C:\Program Files (x86)\Steam\public\steambootstrapper_schinese.txt

MD5 56dcf7b68f70826262a6ffaffe6b1c49
SHA1 12e4272ba0e4eabc610670cdc6941f942da1eb6a
SHA256 948cad1bb27109e008f2457248880c759d3fa98b92c5b4033b94f455cb8ac43f
SHA512 c3fd9caf0bd4c303a7cc300faada9cfe6dd752e82d67625b31f4c0c2c091596508bb477fe19f758fdf79b25b8ac3f5320a8785d2b6705b9bcc28a054a59454e2

C:\Program Files (x86)\Steam\public\steambootstrapper_russian.txt

MD5 e04ad6c236b6c61fc53e2cb57ced87e8
SHA1 e9d4846b7e6cc755ee14a5d3fa45ee7d3bf425a4
SHA256 08c775efa77c2a92d369f794882e467b6e2526e61bc7aa7724f48e174524502e
SHA512 0dfb7e6d811d649103499018f3d115c542fcaba420ceb69124a4d837fe162ce514e7be2040860c5ef5f9c01c961fa6eea8730606b73ec107d87597989b6fd331

C:\Program Files (x86)\Steam\public\steambootstrapper_romanian.txt

MD5 6367f43ea3780c4ee166454f5936b1a8
SHA1 027a2c24c8320458c49cd78053f586cb4d94ee6f
SHA256 f8d1972e75a320344e3c834ba0a3a6a86edb39e20ef706bda9b7965d440d1998
SHA512 31aab33e0d272cb43a8c160b3d37256716a683e5052192fd0e4d3cdaf30a10a9afa9d26d5d14ad216ee455627c32892a711d2bc137ee7a7df9a297f001a19e32

C:\Program Files (x86)\Steam\public\steambootstrapper_portuguese.txt

MD5 eb8926608c5933f05a3f0090e551b15d
SHA1 a1012904d440c0e74dad336eac8793ac110f78f8
SHA256 2ed2b0d654d60e0a82b0968a91d568b775144e9d92f2b077b6da75f85ad12d04
SHA512 9113c42c38836f71ff0cc7019aff8c873845f47fbf1ab97e981cb038f4d8495b6df784402b1ee9666e8e567ae866b0284c81e6a16efb47131d5ef88569c4843a

C:\Program Files (x86)\Steam\public\steambootstrapper_dutch.txt

MD5 31a29061e51e245f74bb26d103c666ad
SHA1 271e26240db3ba0dcffc10866ccfcfa1c33cf1cc
SHA256 56c8a86fa95eab0d8f34f498e079b5516b96d2a2f1ad9c2a888555e50e47f192
SHA512 f85865c1e9ab45e5586d3dd2b45d15265193e8a3c34b6bb1ac7e415a1ea878cfb044e8e01012e917e4f00bb9e0a422f56253f328df1bac99a145e19433354cf8

C:\Program Files (x86)\Steam\public\steambootstrapper_japanese.txt

MD5 7e1d15fc9ba66a868c5c6cb1c2822f83
SHA1 bfe9a25fdc8721d7b76cecb9527a9ba7823dc3d7
SHA256 fc74e26a8baabbe4851109512d85173b75dbf7293d41eb3b92a1957a773c8265
SHA512 0892be14a858cc860766afb1c996b2c355108a7e50971ea3ec00d15069e919a6eb05a61fa839bea3938492c391e274144c5e248f4c204a602bf36adf27e5b406

C:\Program Files (x86)\Steam\public\steambootstrapper_polish.txt

MD5 9b0b0e82f753cc115d87c7199885ad1b
SHA1 5743a4ab58684c1f154f84895d87f000b4e98021
SHA256 0bdeee9fa28d54d384e06ea646fbcfe3f06698a31dfdc1a50703ffe83ad78d32
SHA512 b7780b82fbe705bc8e5a527c011eb685c99ef0b2eb810617b9f82b891341af95ef1c2f46dce9e458c0c4dcc3e7a0d21db6c77f03419cd1c4b521a9b72f9017df

C:\Program Files (x86)\Steam\public\steambootstrapper_norwegian.txt

MD5 58e0fcbee3cca4ef61b97928cfe89535
SHA1 1297e3af3ca9e4fe3cc5db78ebbfa642e8a2c57b
SHA256 c084a68b65d507eb831831aa2ab9afb9536cb99a840d248cc155ff87fad18425
SHA512 99aff0c481e34cd0e4fcbb2af471afb56d91aa11be664462b08e17ae169ca03ef77e7063b4ecd0f38ca7b2f6dc0bf2e316c7b31dffbbcfc763cd8fae27dc78d2

C:\Program Files (x86)\Steam\public\steambootstrapper_latam.txt

MD5 7913f3f33839e3af9e10455df69866c2
SHA1 15fa957d0a6a2717027f5b35f4dbe5e0ab8ece25
SHA256 05bc1f4973c6d36002ac1b37ce46b1f941fcb4338282e0ec1ec83fb558d1a88c
SHA512 534e541757d19ee157a268bf7ea358b48015f400542fcfa49cdb547cd652926160f015fe2cf026d9c4996e56ab90ca3899dfd457997d915bf6bc9d7bb00ba804

C:\Program Files (x86)\Steam\public\steambootstrapper_koreana.txt

MD5 202b825d0ef72096b82db255c4e747fa
SHA1 3a3265e5bbaa1d1b774195a3858f29cea75c9e75
SHA256 3d1399f5323a3ece1b1a8b3b31f8fd7f50c3bd319ab3f1c38c6e347452c95314
SHA512 e8fc7cc09f431301d22a07b238179ee053505090e3c4db30ead061513fe7159f1fe8b80efc93f4597fe00f01087bbe0bb2231e13693d72c8def138657cb91566

C:\Program Files (x86)\Steam\public\steambootstrapper_italian.txt

MD5 8958371646901eac40807eeb2f346382
SHA1 55fb07b48a3e354f7556d7edb75144635a850903
SHA256 b01ec64d75fd1fbd00fbeb45a3fb39244911a8b22bb43de4e0c03f205184f585
SHA512 14c5dbb017822336f22bf6779ccd4a66604ddc5f2c3caa24271e96f739fef007754d96844efa422d6682cbcd2d3bc902c36f0f6acb3eb87ed8d7b3f885973554

C:\Program Files (x86)\Steam\public\steambootstrapper_indonesian.txt

MD5 1514d082b672b372cdfb8dd85c3437f1
SHA1 336a01192edb76ae6501d6974b3b6f0c05ea223a
SHA256 3b3c5c615fd82070cc951ab482d3de8cb12df0b3df59fbd11f9d3271fa2fbca4
SHA512 4d41c945ce7c94746875b0dbceb14811d4966de4e97fe047406a304162fde7e1e2a16367fc2e43978e2e5aa66749f036b4444aa2312673c2cc3af296e8b77f55

C:\Program Files (x86)\Steam\public\steambootstrapper_hungarian.txt

MD5 18aaaf5ffcdd21b1b34291e812d83063
SHA1 aa9c7ae8d51e947582db493f0fd1d9941880429f
SHA256 1f45bb7bdfa01424f9237eec60eba35dc7f0dc4e8c2e193fe768fe96d3ff76d5
SHA512 4f3e56d1abe26b56d3f805dc85baaca450c0c7bec57ebcf8a6bb6ebb8588307dad130c83bf792bac76694909a14fd6a4d7d1e9b31e32fba11256343b9fc18154

C:\Program Files (x86)\Steam\public\steambootstrapper_greek.txt

MD5 189ba063d1481528cbd6e0c4afc3abaa
SHA1 40bdd169fcc59928c69eea74fd7e057096b33092
SHA256 c0a7a1df442ac080668762df795c72aa322e9d415c41bd0a4c676a4dc0551695
SHA512 ce59ad9b17bab4de1254e92ce4fe7d8c8242832f62ab382e8f54199a9932cd11b5800cc33895441426373d5210cc74104e0271b721a7e26ed400b716ae4d5903

C:\Program Files (x86)\Steam\public\steambootstrapper_german.txt

MD5 5c026fd6072a7c5cf31c75818cddedec
SHA1 341aa1df1d034e6f0a7dff88d37c9f11a716cae6
SHA256 0828572e4fa00c186dbf1d9072a6154d65cb499c6a37e338f3305f77a2fee382
SHA512 f9d28714b2a05f8d9025f1692e4d7e8baa6daf6176353f65646a38814a242ef2adededa44419edd69f10cf96ffba506dab7cb6e52111457bf69cffef12174b12

C:\Program Files (x86)\Steam\public\steambootstrapper_finnish.txt

MD5 9e62fc923c65bfc3f40aaf6ec4fd1010
SHA1 8f76faff18bd64696683c2a7a04d16aac1ef7e61
SHA256 8ff0f3cbdf28102ff037b9cda90590e4b66e1e654b90f9aea2cd5364494d02b7
SHA512 c8ff15373b37e848e6239a82424569e77c82a5fc557d17e7d2ed1d0d2b2f7d026cc1e2bc98cb5ee945c02cfefb82803c23fa6a26f48ff0adcf762f94cd5dd035

C:\Program Files (x86)\Steam\public\steambootstrapper_french.txt

MD5 10c429eb58b4274af6b6ef08f376d46c
SHA1 af1e049ddb9f875c609b0f9a38651fc1867b50d3
SHA256 a1f6ba57ee41e009d904905c0ce5e75a59ee6790e08542561303109e1faafa13
SHA512 d8760f61760bffd8671b727d386ae220e7e6e68829a01553cfd5eb60ef8bd1d7c1b25e7b17a6db5bd17ba6712ef44999726764459318e784843c73bc4facaf46

C:\Program Files (x86)\Steam\public\steambootstrapper_english.txt

MD5 da6cd2483ad8a21e8356e63d036df55b
SHA1 0e808a400facec559e6fbab960a7bdfaab4c6b04
SHA256 ebececd3f691ac20e5b73e5c81861a01531203df3cf2baa9e1b6d004733a42a6
SHA512 06145861eb4803c9813a88cd715769a4baa0bab0e87b28f59aa242d4369817789f4c85114e8d0ceb502e080ec3ec03400385924ec7537e7b04f724ba7f17b925

C:\Program Files (x86)\Steam\public\steambootstrapper_danish.txt

MD5 03b664bd98485425c21cdf83bc358703
SHA1 0a31dcfeb1957e0b00b87c2305400d004a9a5bdb
SHA256 fdf7b42b3b027a12e1b79cb10ab9e6e34c668b04eb9e8a907d8611ba46473115
SHA512 4a8cdd4b98432ba9d9b36bc64aab9a2eab31a074d1cbdfab3d35a14216c60752b5580c41bbb70104993420043685d3bd47eb6637b8fcbb3f42f76a15e4be041d

C:\Program Files (x86)\Steam\public\steambootstrapper_czech.txt

MD5 2158881817b9163bf0fd4724d549aed4
SHA1 c500f2e8f47a11129114ee4f19524aee8fecc502
SHA256 650a265dffdc5dc50200bb82d56f416a3a423eecc08c962cfd1ba2d40a1ff3f7
SHA512 f3594aad9d6c50254f690c903f078a5b7a58c33bd418abdad711ebb74cfbdb5564679593e08fb2d4378faaf4160d45e3d276ba1aa8a174ed77a5791bcac46f28

C:\Program Files (x86)\Steam\public\steambootstrapper_bulgarian.txt

MD5 4c81277a127e3d65fb5065f518ffe9c2
SHA1 253264b9b56e5bac0714d5be6cade09ae74c2a3a
SHA256 76a6bd74194efd819d33802decdfddaae893069d7000e44944dda05022cfa6d9
SHA512 be077b61f3b6d56a1f4d24957deaf18d2dff699bda6569604aac4f1edb57c3cfd0abc5e2a67809f72e31a90b4aed0813536c153886da2099376964c60e56001a

C:\Program Files (x86)\Steam\public\steambootstrapper_brazilian.txt

MD5 0340d1a0bbdb8f3017d2326f4e351e0a
SHA1 90d078e9f732794db5b0ffeb781a1f2ed2966139
SHA256 0fcd7ae491b467858f2a8745c5ecdd55451399778c2119517ee686d1f264b544
SHA512 9d23e020875ed35825169a6542512ec2ffdb349472a12eb1e59ddc635e57c8fd65fa919873821e35c755aa7d027c9a62d3d0fa617340449d7b2c4cf8dd707e93

C:\Users\Admin\AppData\Local\Temp\nsx552D.tmp\modern-wizard.bmp

MD5 3614a4be6b610f1daf6c801574f161fe
SHA1 6edee98c0084a94caa1fe0124b4c19f42b4e7de6
SHA256 16e0edc9f47e6e95a9bcad15adbdc46be774fbcd045dd526fc16fc38fdc8d49b
SHA512 06e0eff28dfd9a428b31147b242f989ce3e92474a3f391ba62ac8d0d05f1a48f4cf82fd27171658acbd667eaffb94cb4e1baf17040dc3b6e8b27f39b843ca281

C:\Users\Admin\AppData\Local\Temp\nsx552D.tmp\StdUtils.dll

MD5 db11ab4828b429a987e7682e495c1810
SHA1 29c2c2069c4975c90789dc6d3677b4b650196561
SHA256 c602c44a4d4088dbf5a659f36ba1c3a9d81f8367577de0cb940c0b8afee5c376
SHA512 460d1ccfc0d7180eae4e6f1a326d175fec78a7d6014447a9a79b6df501fa05cd4bd90f8f7a85b7b6a4610e2fa7059e30ae6e17bc828d370e5750de9b40b9ae88

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 fed7d8cbe03416925c9ccd09e5acafe2
SHA1 097ab1969e21abc08ac62938b777873af8c5aa43
SHA256 3aed011a24805a6a19cfd7b20666f55ed754a0d33db0c47761fff1927224ac86
SHA512 6bc8a65f3e3e30c70e5a8deffbb5fceab56a5135de5c74587c58b3297269e96bb66e4dfeb636dc2b9b7c72a8a7fa52ca2cb345a07108c0e4478ca38da52b1922

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 50771e432ea725f79cfd113e8aca48fd
SHA1 5ee0a5ee18f0f39addb1ce9f991e237ea7887840
SHA256 74c868460264f6334b50f1a185bfdb91822a7045f19368eed4731af4dce4df1c
SHA512 67c8588a465492a5d7eea0682b4fe8288e265ab3b0ac74797f8df24d06a5636bc9c6a4ea9e82888d0c8a445578d1509e6f8f8169477a1c532ce307068e369bd1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 dd28bb0e9f9e8c8ceed02827405e4073
SHA1 6ca3749a2843f2421cece6ba23571ed6f408fd3d
SHA256 0eb798a4434eacf3b51dd10141c76062f22cf9189ba5840829deeac7984e2b60
SHA512 d0d810727de8fc989be22c62c29c1eb6118e8f23d32bbb6468cd6540760c28b9ccf627690c402cbd22954409afc2cd579e4c2f467806c999294b077848bb68ce

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 a6f761f2c690b9688b561796656947b4
SHA1 cc9cbd9370108944b45d22e2b0196eb56819de78
SHA256 285673092ba817cffcec7bf3f5891b2b302e557f4251bd86527863b62fc650c2
SHA512 2bdbece063628bfd5f83a03e96d9b4e964ffc12d775fa9a4d93792c93ea2fbef8c3895a88ecbe1bb4a866d360a988aa9db37995d2ae4ac977ba090f40ee43202

C:\Program Files (x86)\Steam\package\tmp\graphics\[email protected]_

MD5 577b7286c7b05cecde9bea0a0d39740e
SHA1 144d97afe83738177a2dbe43994f14ec11e44b53
SHA256 983aa3928f15f5154266be7063a75e1fce87238bbe81a910219dea01d5376824
SHA512 8cd55264a6e973bb6683c6f376672b74a263b48b087240df8296735fd7ae6274ee688fdb16d7febad14288a866ea47e78b114c357a9b03471b1e72df053ebcb0

C:\Program Files (x86)\Steam\package\tmp\resource\filter_clean_bulgarian.txt.gz_

MD5 836dd6b25a8902af48cd52738b675e4b
SHA1 449347c06a872bedf311046bca8d316bfba3830b
SHA256 6feb83ca306745d634903cf09274b7baf0ac38e43c6b3fab1a608be344c3ef64
SHA512 6ab1e4a7fa9da6d33cee104344ba2ccb3e85cd2d013ba3e4c6790fd7fd482c85f5f76e9ae38c5190cdbbe246a48dae775501f7414bec4f6682a05685994e6b80

C:\Program Files (x86)\Steam\package\tmp\graphics\icon_button_news_mousedown.tga_

MD5 00bf35778a90f9dfa68ce0d1a032d9b5
SHA1 de6a3d102de9a186e1585be14b49390dcb9605d6
SHA256 cab3a68b64d8bf22c44080f12d7eab5b281102a8761f804224074ab1f6130fe2
SHA512 342c9732ef4185dee691c9c8657a56f577f9c90fc43a4330bdc173536750cee1c40af4adac4f47ac5aca6b80ab347ebe2d31d38ea540245b38ab72ee8718a041

memory/5012-13330-0x0000000000F10000-0x00000000013C2000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\ShaderCache\data_1

MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\wasm\index-dir\temp-index

MD5 1744ff3bccdc8b26f9d330ccad6bc052
SHA1 d086f74597992084b10526951853d549cf8aae6d
SHA256 062b2a78b380f096bc0b47efbae0ca23b93d3e8fa1f350700986dc9130fff6a4
SHA512 9b044b308556c9299f5947ea7a7b45ba167d254daec718f6191b694aa2f7c09ba2c201cef4da55c5b96077fd5057dcbdaaf81f1cdb50e5c80f78c52d54ca61fd

C:\Users\Admin\AppData\Local\Steam\htmlcache\DawnWebGPUCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Local\Steam\htmlcache\DawnWebGPUCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Local\Steam\htmlcache\Session Storage\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Steam\htmlcache\Session Storage\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Steam\htmlcache\DawnWebGPUCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

memory/12728-13372-0x00007FFCA4D90000-0x00007FFCA4D91000-memory.dmp

memory/12728-13371-0x00007FFCA5D90000-0x00007FFCA5D91000-memory.dmp

C:\Program Files (x86)\Steam\config\config.vdf

MD5 6e6a2b18264504cc084caa3ad0bfc6ae
SHA1 b177d719bd3c1bc547d5c97937a584b8b7d57196
SHA256 f3847b5e4a40d9cf76df35398bb555117dfe3626c00a91f2babdedb619d6ad53
SHA512 74199ff275400b451642cde0a13b56709735676959d65da11ac76dd645ab11dac5de048ff7ede0cb8adb3a3056b3ecbeb3dc7481bac3768d02051e564c74b679

C:\Program Files (x86)\Steam\config\config.vdf~RFe5a958a.TMP

MD5 3cdebc58a05cdd75f14e64fb0d971370
SHA1 edf2d4a8a5fc017e29bf9fb218db7dd8b2be84fe
SHA256 661f122934bbc692266940a1fe2e5e51d4d460efb29d75695b8d5241c6e11da7
SHA512 289c40fae5ec1d3dd8b5b00dd93cf9cada2cb5c12bcfefea8c862ddf0a16dced15d6814dad771af9103b3a5d3016d301ee40058edde3fdea30d9767146d11cd6

C:\Program Files (x86)\Steam\config\config.vdf

MD5 a2ec2e91c3ef8c42e22c4887d032b333
SHA1 e2c738a2e9400535b74e2263c7e7d1ecefe575f2
SHA256 8f9f970835f133258a7f740126012439385bbaa5a1d6a9d0d967a390977441c3
SHA512 b069d241efb19e09ec8b5e60ef6c43e00d5cc0f774b9340127c2180356dd1964ac625c1afdfaee5f99e72b26f56046fc329aadbbc365b403af765a55e9c9aab3

C:\Program Files (x86)\Steam\config\config.vdf

MD5 4353603711d4424ade44937bad6ba06b
SHA1 5b84d6ea33a8d0d0ba9905408e92dd4155508588
SHA256 97e90ff4c3e9e6e3a186edd4b65709fbde4d98fa6fd88daddb17e67441f57443
SHA512 b15dbedad3bd6ac99e8c06b40a1fd6321c7bf428f36e16631f0787ccbce729ec62dc3292ae9a4f0c13116452dc3b756b2bae7aa41317fbbcc203838495ee429e

memory/10544-13485-0x000000006E360000-0x000000006F6A1000-memory.dmp

memory/12728-13492-0x0000028EAB270000-0x0000028EAB35A000-memory.dmp

memory/12840-13493-0x000001A3667E0000-0x000001A3668CA000-memory.dmp

memory/10544-13499-0x000000006E360000-0x000000006F6A1000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 d90168425d45bd87614a4316d4fc46e0
SHA1 838525556be39ca885198b48b90653235a9a6ce4
SHA256 f56aad4517c6b0ae16515300e0708badcd9d47712522763dbaca60f63f51f5ae
SHA512 428e8ebb88ead6eed94e7e1f4ba6683a68df8921407ce935c5c5c7b4a846a34f1ea8b822c93ad271354606816173a9e002a2d6ca237c99d1f6c97abd6bdeb1aa

C:\Users\Admin\AppData\Local\Steam\htmlcache\UserPrefs.json

MD5 602c49f9246967bdcff45b4f43cf2fb0
SHA1 4c5796e0c724bbd7a9244cc8a0fc9e8f40181f2d
SHA256 a3ad9649c1038078038be1abd591cdba73b4b4f5cf30e11bb6cb7a432b746114
SHA512 2f273c0dd0127071f4c768cfe7277c6efff84c1ef4f4271c1326db3658c84261794b106af3198717f349fbaaaf276163700bbb50ae20fe52ed0a88a192d46f77

C:\Users\Admin\AppData\Local\Steam\htmlcache\UserPrefs.json~RFe5aed4f.TMP

MD5 68b20851ccb9834d21fb32615e42bd43
SHA1 88fab935f0b9484994097c08f785e9ecb7d68127
SHA256 a954b528dd65ad6c4c2091fa32f17abdb7a49454ce88e10bb6c377734c70c26f
SHA512 dcb0771120c8fe35213d60e9abf4b242af807324759e3c99e9b2569c00a941d885d53ef6fadfe69e6b740e0b52a6008602605d643801190a2d29175a7d065e15

memory/10544-13520-0x000000006E360000-0x000000006F6A1000-memory.dmp

memory/10544-13523-0x000000006E360000-0x000000006F6A1000-memory.dmp

C:\Program Files (x86)\Steam\config\config.vdf

MD5 63425b617279ddc91d7ce964eb1e5d48
SHA1 af9881131c9d2a72b9cf1e78efc520a0c79bcbec
SHA256 7dac11087a0f20d7ed0bed65c90b9c1fb247d842a55ef2a9857aa7c6dbf5ee4b
SHA512 09f7be78a726963691afb8a8107f48d10129600b277963504da37fb0c2d6c656de1c43c844cf99efa576a5c5d07601e8b7176144139ed738bd30fae7239d2983

memory/10544-13540-0x000000006E360000-0x000000006F6A1000-memory.dmp

memory/10544-13543-0x000000006E360000-0x000000006F6A1000-memory.dmp

memory/10544-13547-0x000000006E360000-0x000000006F6A1000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\LocalPrefs.json

MD5 736aafe52464c0bff6578bd2020860fc
SHA1 e7c2a39d318c2f097de0cc3fc886c5b185e2c4da
SHA256 199df49fca6add253991c71dfb2dea884c29540bcc455dcb7197849e905e34de
SHA512 39aad3063cda3176021b93431eb8b6658fa7c6475172dcdbcac4c2902296a6be071f9ab9e41d296377032dcc72cce13d63f2d7819c4bad9ef36fc09389fea2a1

C:\Users\Admin\AppData\Local\Steam\htmlcache\LocalPrefs.json~RFe5ba40c.TMP

MD5 29e3400db2b83b22ad26120bb1adc10e
SHA1 100e1e998076aa4a2494443b22c9729374bf1b50
SHA256 8e9dd1c2bb1b56ede90eb0db5c3c566fbdda1486a751f4eeb407fb5d21af3ff3
SHA512 65bb09ab7f501b2bddb37a4f1a7ba2ea65a53fbe52549a802ee04f70732c809af7058d772dc352f9284b324ce802a68f6738a8ad6552d2cb0750be7f897bd154

C:\Program Files (x86)\Steam\config\config.vdf

MD5 cc02c90d869b4cfe0a7232ab40ee1acd
SHA1 3614b253d5bd85c689f9001870651965817b578d
SHA256 8291443160bfb3dbb5c4b3bbb1f7d8e0105c29b24be920d25bd203874bb811ea
SHA512 e4f8ccfd7f8bea6fbfc6e8d836151ddd7f52620737f241f96fe64c4bb216ab09832ea22ae0c858efbb1bbe5e42bd8e302d9f439a21ca788dc7519311e78c6a70

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 07bb404e9b3a4ad16d7383b2b2be5ef9
SHA1 af57292b2c73773820ee1bc73651a3075fb6e8e8
SHA256 8f9aa491e89a39969d46cc9020f70dafd8ec202849d5ec064ecfaec76785dde4
SHA512 1497689ff043a5afd354ffaf1d03e195756ba7d4dc57d0c1702e490b423b473ddc3e6de7d40858e886dc5ff15bf0487032d6114510e3e9370108f10ad90971f8

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State~RFe5bb766.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00000a

MD5 47d88f0e30322831ac51429e321af624
SHA1 0a3a50ae8c9d61a6d96b872f91b4694187be0bcb
SHA256 ff066f3e1ab3028b7bf326825772da1a50d4c9bfe92ec0abcb52f17ed996482c
SHA512 416fa132223c396c6ec4ba581383ff0859ee02a7e73acca4836df0e8154600cc9cfa4249832d0370fc7c45232e0114994e7da36d094cd459a6f3c77be539cece

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00000b

MD5 1cd9f819fae888ce4860b7f6093347f1
SHA1 04f78da120741f1198d595af811b2c42ca9d5406
SHA256 d90bde2cee49d26d93cc149da64ebfe3b57b6f391c1fe84c696a2d5e3f33b3ad
SHA512 2f7e22a0b36ed64c6be176f48f91663bbaca60d7a4ea862a6a81678fadc1d8df31c59a3266d1097654fb52345e0d2e292b8bf48e9497be9c3e3be89cf43bf90b

C:\Program Files (x86)\Steam\config\config.vdf

MD5 42677190434792e44f0983a2377d2f8a
SHA1 59c86c5ca3389cd55c81aff2b342753cb21bf137
SHA256 dba98eeda8e37c445eababdaa9214157e34f6394c795e165706b9c22d810bed2
SHA512 0b462beebacaa022ee077d0473d74cf72d7cc0a7aabd982e53503b9989d5dca1a61f5076973a5a54ed5b2a13ffbcff7936f79e776ef099b2057a347e94389afe

memory/10544-13673-0x000000006E360000-0x000000006F6A1000-memory.dmp

memory/11780-13719-0x000001D107F70000-0x000001D107F71000-memory.dmp

memory/11780-13720-0x000001D107F70000-0x000001D107F71000-memory.dmp

memory/11780-13721-0x000001D107F70000-0x000001D107F71000-memory.dmp

memory/11780-13728-0x000001D107F70000-0x000001D107F71000-memory.dmp

memory/11780-13727-0x000001D107F70000-0x000001D107F71000-memory.dmp

memory/11780-13725-0x000001D107F70000-0x000001D107F71000-memory.dmp

memory/11780-13724-0x000001D107F70000-0x000001D107F71000-memory.dmp

memory/11780-13723-0x000001D107F70000-0x000001D107F71000-memory.dmp

memory/11780-13722-0x000001D107F70000-0x000001D107F71000-memory.dmp

memory/11780-13726-0x000001D107F70000-0x000001D107F71000-memory.dmp

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping10760_1927997332\LICENSE

MD5 f6719687bed7403612eaed0b191eb4a9
SHA1 dd03919750e45507743bd089a659e8efcefa7af1
SHA256 afb514e4269594234b32c873ba2cd3cc8892e836861137b531a40a1232820c59
SHA512 dd14a7eae05d90f35a055a5098d09cd2233d784f6ac228b5927925241689bff828e573b7a90a5196bfdd7aaeecf00f5c94486ad9e3910cfb07475fcfbb7f0d56

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping10760_1927997332\manifest.json

MD5 2ff237adbc218a4934a8b361bcd3428e
SHA1 efad279269d9372dcf9c65b8527792e2e9e6ca7d
SHA256 25a702dd5389cc7b077c6b4e06c1fad9bdea74a9c37453388986d093c277d827
SHA512 bafd91699019ab756adf13633b825d9d9bae374ca146e8c05abc70c931d491d421268a6e6549a8d284782898bc6eb99e3017fbe3a98e09cd3dfecad19f95e542

memory/8012-13750-0x00000192B9F20000-0x00000192BA00A000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 1aef9d26b24283e50fc19e00ec160861
SHA1 74658da4c09f3f78eae8f7941acb8c14533edc94
SHA256 5eb65d4d23cbb4d1e26582104db87af192c132dac009976d5e7b6b268f9c2f37
SHA512 8e1415aa3b940459d4927b830165c69420a8eaa632fdba84d9118afbc0672acab587a6b9ad1b9e737e962bf00a2117bf730b1c602980014c2ce9ccfd9f89ffb7

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity~RFe5be8e5.TMP

MD5 34f1d6f18a02a97ee29f84103e60db85
SHA1 fd7f7ce5dc2aef9e18e68a18418a0ce8b0dcffc6
SHA256 87cee257390e52c0c2fd2bce927c38f727d6ca7ac0a261f84563b24264232145
SHA512 e899ffc86a3104a78efe0ac8699b45df1e4471b3076fd0b03a8dfb8e0c718a4cf7349e4dc5e0bd15e4f50997e7f5dded45b156aa5c06ed46bb22a3dac1065d6a

memory/5640-13776-0x0000019B396C0000-0x0000019B397AA000-memory.dmp

memory/6488-13778-0x0000020C50CF0000-0x0000020C50DDA000-memory.dmp

memory/10544-13777-0x000000006E360000-0x000000006F6A1000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\LocalPrefs.json

MD5 70d356a2abc03dd2a91e130ca846732f
SHA1 6196b0af68714836e0d8ffd94c49766801dc7806
SHA256 9033321e1a36da0a57584dddfe94cb010a0c2ff1a1500567f8491e31d609fbc0
SHA512 22e784a01d61569571e5d7bd71d70718f9ba945e1be1978fee1dd12aad6c7efded5e81ba01ad49a08086a164d33cd71a8e1e2a49e8df331732b1368393576220

memory/10544-13791-0x000000006E360000-0x000000006F6A1000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 dca04c03d0d8354afb9bec0ff0ddeaee
SHA1 9c464de59027feae52970934eb1f6e2cd29db4d9
SHA256 ea253dc91a2053788b57d8aa077d76ceb81aa902282791cb98404eacc23cc89f
SHA512 83a94f77e64ec525b492a0df138e420c780c1340d11602373e3c7dd841a2740cec195987a67a7d954f299055cef26953b819d7821ac2a1157be02b5d5c13812b

memory/10544-13805-0x000000006E360000-0x000000006F6A1000-memory.dmp

memory/10544-13821-0x000000006E360000-0x000000006F6A1000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 eb6cc3e837cc68a2e0eefa954e773db1
SHA1 6515f321321c29c559f32cbae2e2d073f52c6f58
SHA256 d380e7bd5727e8b9f5b56b2aef9334c0b46a17834cdb21bb21e036504054e89f
SHA512 1154195589bb47f7d78a2795a56b97957521587ccee0d3b20f57c1706731976a047c275269efd8f2c25f6707aa88b3353027c7f85839cb3340f04ed48ac87df9

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 b2cba3e44fdccac6ae0f79ca404b1854
SHA1 764d2ac0d2d2d752780a505fc11837e83fcb7db1
SHA256 9e7fbd1d0ad5b8768f651e869332d486f12db042f4915f65be5c9828096070cc
SHA512 a0331bac4f0644189bd760028b4b925188152ee223361ca89437b0e7397185d70b5df2c93f0d24ecf68b78f6d30d90d8c2f8758bca2136ba4498ebeb5954f5d5

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 e995852b94319ed2f9c6bfb5d78ea488
SHA1 974bcd5201c75442685d472492913bf0e65d6ca4
SHA256 6fe75c743903307de4c38858831e7720c67f685d083d8e332e873bf528be64ba
SHA512 e710760e62294061c6910e7d4b2a92c892b4cfa7180c8311af2446abfd8e1e91b1dfb9821987b3047bed312fffa6775ce53784342395ae934a30cc8f7b2b3987

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 d8837139113652ca64df79ec54a0bfde
SHA1 593e6879a5b104860265d2dc174a7d86e2b4f168
SHA256 4f853f07aaac6ddd6966ac5d751bd539f17132386ef1bde96f9397fafd28a717
SHA512 1628f92c9c0ec5c8029cd3b60ee221c80f588da16f50382af620f39bd520d3fe0ecb168fffe71bb7de64b6a678b23bcb577b8582c4542a841a88dd7bbd166ab7

C:\Program Files (x86)\Steam\config\config.vdf

MD5 8dfe2e4071f15635ed8795da90745442
SHA1 3b23def4e3d1bca2b3036459a6feb43db1e4d7df
SHA256 d1b5845521b214cb1a85601ae11305a2f78c3f5b8abd67cdd7d7304e88817e97
SHA512 c7ec1dceee82842fbff73084a8e680a833d3032f0f5fb36f5ce173b38d34e42824d709377a863a29a57dc258104bed6d0b55563ecdcabcb549dd8df82ed92b7b

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 7b91f309673bdf8a66b178f89da01e1a
SHA1 047c6c9cb54c7aaf783c472192e0d912ddce4022
SHA256 b894e675fa7f58f8875b443ca9887d9ed0cf991aa0610613e1a69451d984d73b
SHA512 f57179898af91f43045672fb179ab536a86b39ae7e20dee8004e307a61c78c37f98a547e0fcc3968bb5f165eab1987b12f444475b95a948b0356504e4051292a

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 81424b2358b51e851980827995221ba8
SHA1 eb0e3b2b5c09643394d27f89959451eb43e1f697
SHA256 68d21838758e95d16fc11234ff9449488c573f21cdea91665144efe3951c80e5
SHA512 aebcfdc2be9635c77a5119a4eb3a2b0ff64194b3baa9a4baafda72e2dba04974e38f120e40c39739512a2787d56a13e5b07943cd77921ba3e80e0dc9b5d7a457

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 308e72ca52c378f1954381fba1c436ee
SHA1 61aab67cb0be11a32dba8c96fcaf4ab591569ce2
SHA256 77a818455460d528e9e03759f1ed265261713f5a823f80aa7faf3edd8c2e4d87
SHA512 50ef41537bec27c244a17e51ef76f4acd5f93fecfcee4238b9ff8852b755e4d1592626cc579b6eafc01e87be03726a8670b3aadf7e24d30a79478b3a735008c4

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000014

MD5 3037c0077b941dc351df78fd549ac9fc
SHA1 7aa416ed095359fc1140b5fab3c55754650961bf
SHA256 72994185cb2873448f157cbf8cf0b6230abee6886060fdbf6d814be95e1e92a3
SHA512 27ed138b8cad4f3e1b768714a72c833dad25475ac5619fd74dfbee779683a6500e0b726d53c703d08a13983347a5dd472eafdd674c12857df058c0b775b6f61c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 878e6ae123024695d7940f17164d5940
SHA1 6181423b069d180a7b4a4991abcdf783aebbac8f
SHA256 200e47c243a2e91dc492269048db41c8ea6f65acf18ed24b4054c7996692b3c3
SHA512 d85cded761013162b23f48642438b16e95ce494734e27b493299a9aa00349c19d6a6266ebe83fc2d3517fa9bb124bf8dae460eef5759348b1b7be05d7cdb13a9

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 33783e7e4053b97532fbf7677007434f
SHA1 9fe29523f4204f61847b6e316243b4f6b466adf0
SHA256 6198b5ae8c6177412c9fe053b7b41d8c6b02cb6384860aa42baf7149b4e80030
SHA512 db5c95ddfb34fa851c97ac485df4d31fad562d45c28fc336fe823ce27d7f4ec71820e95a9f0122aecc82cc172c20d76f88177e22ffe58c1277c4213b6cc4451d

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 688fb0950abb160ef11eada50c602c44
SHA1 1dfdc296cfa98104a66c72c246cf0a0f6be8ee67
SHA256 1dbedc7c10c823c5cd2d74ef5ae0516b69b1a2be83d678bf03a4d693552615eb
SHA512 466eeee8deb4f711f28726d67faa213c15d166321b27e6966abd88c4df1ecd67600e84931dc61945b4a209ba37905583373eaa0a9e47d0060f09ef747eb88afe

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000020

MD5 d28454d999a04b8dfc2a92b38a2ca276
SHA1 63966239418d1ab393a5c1cf4a37abd099ad26d1
SHA256 f72418c91fc2e3492bdb3366de7cdad44c6537f1fc31364a42b40f27827e7a6f
SHA512 68e9e9a3c4ec630f023817c5cd092600e4cddc44b39d38cb1bf8993f52bf4f7211268139aed14e2142f75682439c5b1c5cc6692e0db89307d268c35ad569c42e

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 ae5810f95149f09d90aec04b8655a615
SHA1 99abd35168310f5fe718739083df31056229fbdf
SHA256 8591d96d11948c05cb748cd803f4a08346f5d44e572c905f816ab7875c8cb32c
SHA512 59ee26951e5e3495ae350ffaf95f07341b39ae12371cf09064c43cdbe631541734dff4ca6266d7c737982827723e4b2098f36243d6db68f9a40bc451079547c0

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 d488b65c531359806fc1f337b6fc74a9
SHA1 5930040c8b5bf3ba0a68805e77657de252db4efd
SHA256 176eaf2daa7331a144a2978318cdd4bb590bf9b2916df95eed37f9559848bc33
SHA512 759a855882c31064ae834581d23159d75e5d814d2ddef6a488c90c53cf51ed025c23eab2c37394d3e6b3e3a7fcdeb22c1796577f8b7800b6e3f9b848d06b4558

C:\Program Files (x86)\Steam\config\config.vdf

MD5 6dead13c2ef76c23c007327b8eeb5f5f
SHA1 29011d50d29db4d90ab49b72864a3e06be198c43
SHA256 af52788eb3de13267b2aba2cf5d70975ccfff9b9141637cbd2bc952e13d2e538
SHA512 7e71ef9405bd83bd8ef4172d9b1c6a1aec9ba712323bf69c48dcf1fdd252244a19cf2c6bf4f5b40cf60f7b329a8902382d0e6eaf5019d9766bd78e99626be5eb

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 fd55c7b0a3bbda9841904cdc6161a97c
SHA1 36321708e5e3f372859624f5eb80c0c23bc93bd7
SHA256 5094042dfcc637694d1b10bf3b00688c742021b6f0abe50809c06025001d75d6
SHA512 7bedbbffb82dc8a666dc6424fde4b3d06c2c138117f709de51e1692dd721a1216cf3ac9cb03187a4a9bf5a0fbe08433cf7ba38a7d5fe0891211c14a9e567a981

C:\Program Files (x86)\Steam\config\config.vdf

MD5 ac535ccbc73bdffc258eeb72b244e821
SHA1 ee632c6e1f3deee46768866a89734df69cdabc27
SHA256 95e64f50234baf8e96ef1e41dcd16c4da46ffe51a9b5c5357f97d88f1e39fa53
SHA512 6f15724f0ae61c3c0d13ea80516a68d2e8a0a2f97a84b875c7cea17644067b53b38bbb34596eed86efe96d36fc0050e24057193684a4a9c9dff6146df7d1d17a

C:\Program Files (x86)\Steam\userdata\908713792\config\localconfig.vdf

MD5 2c41ebd9ac4184f3030a6c831ebecc47
SHA1 8cf9f6e0797cddd653eea194f059874afadf7797
SHA256 46e5938438f1d1a2d33c7b185ec2e1551c253ce6fda5986aab12840d115f2a9d
SHA512 f87b7cec8a184f6e84d0682353cb12aea70dcb6b87d0b57156ac00e487503425706716684480fde7edc409c701289ad83a561b2b8422167eeefa348d6887d431

C:\Program Files (x86)\Steam\userdata\908713792\config\localconfig.vdf~RFe5f03a3.TMP

MD5 6781d502a67365c03548d20813f1e529
SHA1 fa1ac5fe79e84a6ca5f5df4a3358f20d351dc7dc
SHA256 29ecc8724e664d0f8379b13fc83284ad55fdd45f8c92d31f181e36c7bef94bb2
SHA512 19c74d33235636202bf59557a35d84e96d6c100370b4250b825c777f3111049fe2ec9540574e14daf9bf79c4587c6c08a6a8400dbf885512ab4feed0658e6743

C:\Program Files (x86)\Steam\userdata\908713792\config\localconfig.vdf

MD5 50da04e9c6877df1b693d9167c8646e2
SHA1 742cd9668c55169fbcd90b87b6151121fcd708c4
SHA256 8236b024589b6ac4f5061c0c852791432a9c6fa431f1415db97c80ffd11244c7
SHA512 b29f76917d44295150ce5063556b837db9ec4dadbf3d32decc09ea6d8ad6dd4b2bcb47b0b9fc432fefef912b7f63e87dfd69766b8e98ec3442e535da2f5a0ec6

C:\Program Files (x86)\Steam\userdata\908713792\7\remote\sharedconfig.vdf

MD5 50cee8a67396844ba350975b341713c9
SHA1 d544eed35779d8c68513564515af29f5b0c80bfb
SHA256 048344df6309a1fe0180c6dd49d69bb5ae6c83aeb818fbe2c84179d724d7ebbe
SHA512 f32f5fb49f237673ba4f2636d41d7911e29061838c0e6f6e00991bf558e0aa2cea8ef63163c2db5def68c97549980ff44f8738c3e063981b7c0119221453e7c7

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 e1ba4a7ddb25473e5ef2f4693c95b2d1
SHA1 923c358f942281c6938cf3cd8fb19f3e7c8d84c6
SHA256 3bd7c696bf1b9f3b69dbcf8cda98e3bea8da2ab2b41ed73c69b626ae0ff6bdb5
SHA512 c110e959625d0702db916c7f858e71573fa272929c64df7469f6abb6c64ad6b993485ad72e6cb48ff0a10cf0859c9b2d5aaa5cc94b261452c293b1707c4cb3a3

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 37bee453a6f45f166c825d7cf657b1b1
SHA1 f6ce47bf82dded26db8bd4676af1f5787ed33140
SHA256 c9e918df7d309cbffad73888f8cc03ea4dcec1f145bda91fa628f8d9001e537c
SHA512 05604743b41251d5d0ed94feb64fbc9580a4cb668a3f02f0e9e900f8539e54994b8a8fc8c17bdca0f9f0d8c09cf207f7def73c9cbe090687ca6620b78379d19c

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 ccb6d8bf8b8c5b595bc58eef47455c21
SHA1 a8179af2e07abe5d332eda730b3b40848d1c99c6
SHA256 52fcb95f66841a5285609b93d595282877a7183d70eeb42cccb2f00077c57c2e
SHA512 f854b4939b344f3d04ca9e69c5db8fa633edff7641d25066f9fa2a01d8b3c3ecfe9366baa577d2a6b91264741258c7431f18eab3c501651ba8e1abe110fba644

C:\Program Files (x86)\Steam\userdata\908713792\config\localconfig.vdf

MD5 a51e7191a33f13360e4350e09a662f47
SHA1 1e956420d805be955e4ef80d13b071239df0bb2b
SHA256 d8bef24c0f752e700373c9c48ac14f189b2df53fca8e843db2fa97e4bae1ca71
SHA512 25dd3b54996e4a35cee79e8e634fd0ec0e57769dfe7c20516d187f0de79cbe2875d6bd83d171767ba8dd30d8a88bd7939c7a8e2509043795f88c639878979a9a

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 2b92d903896ff00e3acdb1eda2d792a8
SHA1 69341966183926392235e965bd33d4e7ced7f398
SHA256 c3bfd18550787212497eafa3bc1a189293d9d2e9a50792d91272bd73f7c3f198
SHA512 93d74b8bddf6407f44043cc4d7afe1d88bcb6526141270cbe653a4978b2a3fb81f6484a6114bdebcc2b95004ba94a73ac53075fb2cc28e4a82974f45fe89522f

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 f27ac612cd7713aacfa377d5fbb74cfd
SHA1 f28d0608297e95b882b7f059a16c21f1b215ae07
SHA256 190e6cf85b95917de456a5519d6b7dedf9fb6145e5e9aaf9437ebe6c3a44f0b6
SHA512 ed80e55651d22df75487e9e39ed519d36c8326fc8b5b6ee581cdb30583b5e4937ef0d738c0af5826832800cdd2691127f48a3892ccfcdf9c14ff798dc27c67e2

C:\Program Files (x86)\Steam\userdata\908713792\config\localconfig.vdf

MD5 b38033128cec58723fdc5f1f2ad900ac
SHA1 9cf89ef8635bb068a6b767843069c4bb8979dae6
SHA256 447d91f6ff5107833e9fc77cf05b60e92be2181efdc9f5488b0ce5ee33eb0911
SHA512 2693193b6e607019fa76081456bb9fb797b77f83371066cbd0d13a0425199a334964644a26d11ded64bb8e6d442891492dbc568a87ecb67ec741fed812fd23ea

C:\Program Files (x86)\Steam\userdata\908713792\config\localconfig.vdf

MD5 b7d296a7362aef91594c9127827a2c85
SHA1 ce00f02e61e2f0242a4ed230289b2ebf4688739f
SHA256 be4a9e1773c08c23bf27056a3064997d79ba9556467a3a0951690ec620077aaf
SHA512 3d87fca51bcab819968034f16ac8c58803f4a7ded64b30eb2797d1192bdc4f54d17dfa315113784732e34cac992b053678c0148fff211de6897b67f45b061714

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00000c

MD5 b507567f09861406425726176430b282
SHA1 ef31ff9a5a918797c76752018a667e29e415e580
SHA256 4390634070a440bead4ea3dc609984097da973983ac140b094149b4bbed1349f
SHA512 23e8a4e14a2a8608c817b88080fabce226ef7c280f5c87baa27780dc1307d60f75d215a91c3de6651f17e6df71219b3e51f2665ce9553c71f427a38e7c81d65b

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000007

MD5 ef94e26e09fd6962f86f29c1c30f7447
SHA1 c574353d60b5973522a96fe726b0d26092167386
SHA256 2c3a7f1d3f5524c76c35942871974ee222eb012c65ec7f19d83c392f87b50847
SHA512 77abdad3b1f76fdd8eaa4cb3b2dcb9e5e0c00f46f25b52420e24129c4b178b34103329de52c15b130c3dec214c77e25eecbd2294855c1b3ca39936c8c94a5b26

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000006

MD5 e13edde4a25e96e573f37bdd11e020aa
SHA1 84a0c3cc6cd74b149cc27de2b0fe48bc2acb70d2
SHA256 45b526e6aa5356b278aa37e67593a25d09c9653e8a0e71fb8e155111d3b7a515
SHA512 9ba4cce47994f949731e594538f56f423ee46a8e602fe922ab6e1d173b87831ae5a80d967d695fc45a08b25aef5c494518b43cde6b4709db690e904b2cc1c053

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000009

MD5 fb8a686df2e4d5987c9e43e10b480df7
SHA1 bf85d7c64d6c23fb859989f0229c083aa857197c
SHA256 b6b6c978ff263141e66d878ec683c0092f651fb874a21556d921e62e6c7ad887
SHA512 e21e7287672434bfdeb7de3cc63bf98ebf923fc709941364f68a8fe4ff19259c7518ebef4aa1ae5218ae845450deff5d10dfcc114f562bceeb24b0244900ee57

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000008

MD5 c9e90bc8ec6a09d8a69f4a4dc6fe8b6a
SHA1 f099ace175891bb8b81eea2595bf8de8027bec6b
SHA256 8fa6b37e750ce1df8e880691ea6dcd4aa922b55a722aa0b1df8ed6302aaf723e
SHA512 c4bda62806935165c94191234b8782408876f1336279a26d58ab3a75f41c51433ad24516c0354a8a047c1e743c4fbb8989938b6a1ff29ae0585b3fd08230a497

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00000d

MD5 cc039445c6c92d32fb74a942a2876d71
SHA1 71cc9c01cf705b61ba163bceaa62651865ef5ee6
SHA256 1a71cffdaadd8f15a6268dfd76f3524409eb5fbad791ce30def403ea13a373a9
SHA512 1834c2c6d6529e69746be6ef8b441997a7e05b00303b10cd2dbc16b0d18cf89a6ead9fb943732f56f7f9b74e347b1bb889a71f08baee17b6b69afbc7350311ba

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000022

MD5 01c77e9159c431639c9b7d0f0f5a70d1
SHA1 0a83c781b26049e4acc8a399aecffb4b0915b6a3
SHA256 7732ed8be7d615811cc9d7678d76addfb31c472893a9a409d671d66f04f0a4de
SHA512 9a380945143bc0ca087ae42a13eb3a300f78ce318c3d78a78b7fb4e4502ab03fcadded773526e8e0df5def7b119f02eb9104c21504f7c43015e04eb2d4a6eb28

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000023

MD5 e0b66abd08331c9af1034ce915a5e1c7
SHA1 3010e55c0566a30cb0c71d6a182e09af7df3cbc1
SHA256 15442d410e832f6d63c620956d87b7c50346fa6b6e6ba233052d2785ecb5212b
SHA512 25f553bda1bd5ddfa028b708260c4b98675fd6f199495374051e74c955c56c80fbfbf2ed40d11e8a136e4aa6c1a3f25895712c03065b539f742c5a031efe54c3

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000021

MD5 adeb7b3fca1a167d6b93c6695ac0d152
SHA1 aa1ff582a0033c5c86dc2226662511f8041597e9
SHA256 3ccd5bec0c1a503e2dc928146655fc3a4ad47d7ecb3cf4b5ec9e2b03d27ee6f9
SHA512 5ee897864e63d51998cd7c7c124ae7ab34fad921168545a29994d42c4b552622da5139fb85ae539c00878d02fba9bddcec621e21b3f7856ebeadba0000ded982

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00002a

MD5 cfde6e8e3c7fc9d0d2d485a1d3c10b74
SHA1 3d4791e27847ec1a7d8e9c7ee3a90033af429fab
SHA256 8b4583091bfc491fb7326c7459d7fc272fd2c0421e25f073e549a47a76bc399d
SHA512 7bb6597a4818763341c3f67b045b3b7950a95f010b293ee74e690bb2070a6bf4f199263f7ae0f02db6d3492ea680c091a5170ef230b5dc26dcfc740e2c12bc55

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00002c

MD5 1d7363064d454b57f9c84df28f566ce7
SHA1 773b8a0f0c6cbda10b0c2ba62fb53d323946e311
SHA256 f2f4d59a808653e110b074ab0dc600b249e7451cc609eeeff3efda1e32ccf7d8
SHA512 f8a9e4c39d6c3e12ad9d01db9c0318fcb82b5dbe97b57ca6576a482ce157f456786752825e397122ea45fbce77e6c3cf62a2671c1973e40dcbf3cf26852cd49c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00002b

MD5 b9789ec5a995ac5b468c1460b44b496e
SHA1 97fe97fd7c640075f53a32331c938925ca8b733a
SHA256 9eef3d0096151e7d772b6c08617a58487ddf7702795b39bdbd5d8d6c664f65ee
SHA512 f73184de17b23b3b3025749bb63ef6142324be18840918b6076f5d33a835c36089840f982cbc0fcbf520992637011ad02a63aa316446339b98f3202ae466b23c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000013

MD5 57613e143ff3dae10f282e84a066de28
SHA1 88756cc8c6db645b5f20aa17b14feefb4411c25f
SHA256 19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14
SHA512 94f045e71b9276944609ca69fc4b8704e4447f9b0fc2b80789cc012235895c50ef9ecb781a3ed901a0c989bed26caa37d4d4a9baffcce2cb19606dbb16a17176

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00002e

MD5 ed96af112ae58cc87d257e3a15a15058
SHA1 2fb2963ca13d8e2dff6bc71e9ead9b0fdc686cd0
SHA256 fc76b07c4a37f312ff1883efefc994e48bfc407942abbe823d665d46c2a883d2
SHA512 16adb69862af3c24cbf37be97c366d441112222fb4f39938295e89cee92344914c346f5672d146a1edf0008eed491eb66cd91615318374a4a9e12598ee48224e

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000033

MD5 e3f293b6e1c4eea4b329777e0f26bd61
SHA1 f4025fe4da4393243c6137b1b628c68ec5fdc24f
SHA256 69ab09b101882dd62e40360cf1dc540b07fef3965a15d27d1d0461e0f1a2e858
SHA512 ff995bcc0c1191c55d95fd67d1f1ce1ca45960b34db75c5e0b6f83dec4de392e8f5f34561069adb0f65ec0fa466d33ec7f1ae600a58d5af064e59178acf5c3be

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000034

MD5 81106ad2a8e425db984e2e4174967ac4
SHA1 d87ab3291f6c27f843b47a6a860b3d06cc693d10
SHA256 a874f9a100e58ce0256d71f68b1c901e91dfa772a0c0c3413be45b04c27bb1e8
SHA512 076075589da1fdcd6874587c8be201440afd0ed39180acff9a92c6381bd4bf19249e626aa087fb15793954807880f7e1b6fe88ad44663352dd5543465cd35b99

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000035

MD5 005c44c3895ba5f5a2c09bca6944ce4e
SHA1 e7ab853cf8d09d8c9f4c11f66f5921c0571c40e9
SHA256 cdcbbdffd1ad968eba778dab890ee15611d3db6619a496e81301a89e42e4bc4b
SHA512 84e7b277c9e30ad8f61908a14be9a3cc000e8af6bf3461f9509adf7c0f9cc7dd94dd513d9c83578911b0c9d1aff70791d118766a92bd6f063d22627868b65b9f

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000032

MD5 671916453ab949980b138759527ffe64
SHA1 5fcf8426cd880f00a09b33792e67a9b1ca4c0c16
SHA256 b4b977a7c4da152221ec00ffe16d1753f31d6cea3a5edeee77dc98e5ab95dbf2
SHA512 9806addd783f743ef7c5e0628b52dc4225448a6d34e3bc8f844f0694888a08c5d0d7519273ec7dcead7c38df1a7dcedd0e905cb786135945a250e033ee38391c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000031

MD5 c26ca0d11e530ee88c374c2b70c82a2f
SHA1 38e12424ac700f49b6751176b0d4f3269f048dd3
SHA256 21f67f03d77a1e19fc7b17051415d27c238880f5a92ae07b182855f6e47de5bc
SHA512 254519652200d1671d992d116e373f4471f37a0eb1eb38cd90250cb3dbb99ae73618a9c1bd0ec39fe599704fef380d6460f67b8900eebd4b492a3ea804863fe7

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000030

MD5 481ae6cb8c0d357a35facbc79645a34d
SHA1 942ab50f69215068386e38f95b85af093b9c35fd
SHA256 106ec5c23c6d9052e253884e39251a820044d838632816c535822147c425fc7d
SHA512 2f775773d7c21f73e83fc35ae7e785999ffb8b25cd1857f9ed92dcd19d366eb1d09de7cfbe70c72327d64c043d2bdfbcb7898313ed44f0668b57976be68c9107

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00002f

MD5 713f499ea5f19b5166ed139e2e21e8a6
SHA1 bbf149acfb6d9b018bcc18081fe0827e1fc2df63
SHA256 c625d27b44468eb07ab99870a3f566979fcafba918577521baa1cff5679d22ed
SHA512 c38080b5c6cfde1f56a969ace5e2bbe47e25274bf35cc7d038605d447365ccac180ea9e10efca1d2ae12611e4acf2619984a74186a470212546881c3c20bad80

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00002d

MD5 5ad546ad9c2ac076d63b1c532ac648f1
SHA1 b0ccfde1733205a7a0f6ea680b5a0e89a878e7b0
SHA256 b6b304ddde0736c47fe893bb42478e9b71874268bfc6b7efc53e8335c66c3bb8
SHA512 9de99aaef4e433f6eab2f72f58a635bc757fd9fee2cb208f671174ab0ccc295874abf6b1632a5aa968bfae50d799bc67b64e5993882809a490d5f03ab18a453a

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000012

MD5 ce6bda6643b662a41b9fb570bdf72f83
SHA1 87bcf1d2820b476aaeaea91dc7f6dbedd73c1cb8
SHA256 0adf4d5edbc82d28879fdfaaf7274ba05162ff8cbbda816d69ed52f1dae547f6
SHA512 8023da9f9619d34d4e5f7c819a96356485f73fddcb8adb452f3ceefa8c969c16ca78a8c8d02d8e7a213eb9c5bbe5c50745ba7602e0ee2fe36d2742fb3e979c86

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000060

MD5 6713cd1d20e10d8efbb4c0ad35831eab
SHA1 d0707eca8a6e15dd5cd408f881a6aa26ca923471
SHA256 9015530243b9f2649084e234f76a0c6b124a73c2f0e7941ddba7a183a103a13b
SHA512 63775d7fac1187f55e4776f66eaf225f9db872c5b77769e2d1fedb2200459d0c982e9974e8cde6cbe420f91c029272ad9b75df1ba40d91e12e972db0abe568ba

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 9054b5d18d637cd2ca3811d096e625ba
SHA1 066fa2b74546563723b22d3821e21f90f9b3db86
SHA256 5fd05691dbee26c75018acebabe09c5a654613204d9295038c012cf1284e1afa
SHA512 27ab02facabdc88ae970f0b3af5ffaf3f0ba9bc60d8d5fec2c259373050456037f4e9618bab6ab1feb9bf1482d527ae587a4efbc2ad10692a5b5506115c01186

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 8486ace175be7b7d4ccc7e9b29a6f46c
SHA1 c793b2231c532b250de4d2e897995af2f9910d57
SHA256 92756b6f77f5e348f4fe097387f979a64b886cdb8d26482c3adaa68ad29af543
SHA512 fd7b3aad638e2ce860891de7be6cbd562e8fbd725563dad70f39e504961f78391ef61985c7f8d6832d5f0990c2e52efcda41e2d96ca416e9a7ccac235d2c5209

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 7038111a6e8193b5c1e3bd52157fa0f9
SHA1 3505ed7f5b9330fc03f6735740b075789a35814a
SHA256 8073fee71b7eb6ca88bd6cf1a3a72d19e0033391664f8e247777149eb56cdded
SHA512 507cee9c50e60c7961ec26f142fd4b3aa43102460c7a31d24bf52b1fd435d6a8b53440d8ae68527d8139853714a63e9c00fcea89230633ecc957efbace63e6f8

C:\Program Files (x86)\Steam\appcache\librarycache\1245040_icon.jpg

MD5 7ecdaf8a54ec52b20640a88527512903
SHA1 3133a4d748ad3be61fe9db759339cd5de73339b5
SHA256 7bd8b75aec0a4d4a377f3ca3a023fd8b7c5fc7dc6a2a66d17f8cdfe5b731ab0c
SHA512 60ae2031eed0c38264f0d8db22a9b6efeb3f80c791e916e15a1730853162d56e0da014dbd93a5479bae4f3bdd5705ca89be70c90574a524abd1c276ed5c55a2d

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 53ab7972fe2f1a3b1e5c5cc9fc864d11
SHA1 a68ee2c5c34e4343550ef266d6d9fab2951a09da
SHA256 b0e6f61e80d93c00a6cca3e09c19bb70656b258f98b28d3e06d8a4ff69090ffa
SHA512 bd67c305989f8ddfc863b3cad0ce0e93c884b5064d8f46a29f614e96bd34d85b75d1e905bb3174237bba875ca508c39b937c7ab533c00661adfd2f5cf0d56912

C:\Program Files (x86)\Steam\logs\cef_log.txt

MD5 3f66de77053c56ae1fd6fa780b9f8840
SHA1 4cfc3bbdd6b7a2cb087d34c1f8486c49242789d5
SHA256 4c8edf1c942c3d2dd10551dceca8b9bb038a6f0c386ad89e0799b8d9625df492
SHA512 81237e091b78576c5b244f45f46d6eaa769ee615c262fd4d5181258ea0981ca82b3c34ee95ae574c25a77aab5115ae496c830ae6e62e2451840e666f8f162a28

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 da66fd35589e551e895833913b5ee414
SHA1 32585c0bdb264edc8b6723dc76771f730c3db224
SHA256 528b58da3ee24e2b34953b7d638f8f6c785e7decd4874ba0e55a347a43acec43
SHA512 ca8638746d1f8413c1102587038b57a5849e340c156816644cad21c98dd9e8fff249c0b21219cb22f758448b2a0e5315bac560a2988b54c8b51b0e13311a45ea

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 7abb2513c729826699cedca4cac9dddf
SHA1 fb0918919e1707723138abf792b4d04867ee62ad
SHA256 f525d1aa3e79c73e9c92604fd6f297c78cc3ed63c67a4742d359e6cc1bcc0c2c
SHA512 9209e0fb93cd9314440863cd719c58c71349c63347a2fe2ea32904c333e6d215b5bc25939662a941cba17b435022b276a79e36d8a38aab502a2ea96a6e25700d

C:\Program Files (x86)\Steam\appcache\appinfo.vdf

MD5 36d6de37576e93e4f18e56a80da88b02
SHA1 e7ce02f2959ba8010efbdd6f0300d34b358f7f38
SHA256 2e5f55d504b348202e1bebb039db7eda9ce2bb19707837bf346c66171aa16128
SHA512 2b15c95c10aa874d525e839578a3d510c3891df87d92a26e312407d0213dcc3bc693f3d5275f9af54daffa5cb7f9cc7396a38d2d9f308fc910084854d0a78046

C:\Program Files (x86)\Steam\appcache\appinfo.vdf~RFe5fe306.TMP

MD5 528f4db75c147b2a2f0b0762ce398ebd
SHA1 baa6574691009280fbd7d31bb801401d249904b8
SHA256 d3536249f3299749e1dffacaa23399280d0b9043e460f702093344479df1a956
SHA512 5b621b141ab71a293b73bc9487bdde5369897410fec9d00ab380bc4e2a4000aa43ee05cf357bf8351f0fe25d7325c5242b87623df4c0a6b9754073425c3ebe83

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 4cbe888af0e07e78a8d4029cb5d6eeff
SHA1 b1c9af8d0a0d395e3f0a126686cffb8a31966ea2
SHA256 576b0e4222b588815b553209a3eb002fe2d3b6ce64da3d6d74b1ce454ee79b7d
SHA512 9d364b3a7ed86ec6ac9a9f02f2c6b093976983216a12ccf4cd0e74fab28a33c52080f849444e584cc1f49bb1b84e18eaea50e9fe39a08be00a91806a0f2c88ed

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_0000c9

MD5 d45f521dba72b19a4096691a165b1990
SHA1 2a08728fbb9229acccbf907efdf4091f9b9a232f
SHA256 6b7a3177485c193a2e80be6269b6b12880e695a8b4349f49fccf87f9205badcc
SHA512 9262847972a50f0cf8fc4225c6e9a72dbf2c55ccbcc2a098b7f1a5bd9ea87502f3c495a0431373a3c20961439d2dae4af1b1da5b9fade670d7fcaed486831d8c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 2e5820ccfb98021af23d9eb6abb3777e
SHA1 b0339a9009d849087c418ada7d7a8b08b150fd5b
SHA256 d0af177064fe72daf76e8098cb97510711e1a6d70cd89715117c42a0d979b312
SHA512 4c22439742c79cb90f86b35579b0db3bf8f3a67d0c29b6d6bafb9f0dea96dcb7ecea08798c50b0381b2abef08d4e99e63cade65b6f5c2efda3bb2bee178b6ec8

C:\Users\Admin\AppData\Local\Steam\htmlcache\Dictionaries\en-US-10-1.bdic

MD5 4604e676a0a7d18770853919e24ec465
SHA1 415ef3b2ca0851e00ebaf0d6c9f6213c561ac98f
SHA256 a075b01d9b015c616511a9e87da77da3d9881621db32f584e4606ddabf1c1100
SHA512 3d89c21f20772a8bebdb70b29c42fca2f6bffcda49dff9d5644f3f3910b7c710a5c20154a7af5134c9c7a8624a1251b5e56ced9351d87463f31bed8188eb0774

C:\Program Files (x86)\Steam\userdata\908713792\config\librarycache\311210.json

MD5 83e3cc1ebd907f9e0776bfca4f76d91d
SHA1 c284c2d1d16eca9732f7887f7e21f368bf6be0b5
SHA256 743bfe8ce351357400643ba2d33a6d2240a99323225db2410665a79fc6856c7e
SHA512 739c90b57a570e029aaaa7ee43525d34085acdc9dd0d3ac3df6277e58e617d5cf558f844de82815c0a49c72c7585651b888a3465179a66e36978045cd6afe67d

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 82474fd92dc488f15ed9244afd7318b2
SHA1 825766f215b5184f1921dc3812552716d75c462b
SHA256 0bdbf4935a0fe0a48da2eb2aa0059f0d3f2ca7bafc705c0d5e5adc4d28f5db40
SHA512 c59c54cf5a7df3ac40df109f2657ada060e9659683217a83724c8dc40543b0a2e32e1efea860b0d3365c5f22827149016dcc37a9584463fc623fe6e3cbd60c4d

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\temp-index

MD5 a3a6f31bfb16f8243d16ad644aa49b3e
SHA1 7614d32ccf7a96b23ad17a1bff00ccb2a315bbba
SHA256 01e567dd4f90a11503f8675265179628d48bbdeaf7bd5a473384c440e434e589
SHA512 4d7a15087a7e8f551fb067e7441e1edddf65a6df2f55a9dc13bbae978f8ff641dd39cf223c90eaffd797e810dea09db7393b991d61c7a1843414fd271e51aa0f

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 86013974a621ed48cdd3556f1fe09824
SHA1 e8cbc08b5956748efba3a21b95e5b1f865318a7e
SHA256 8f61d972f7daceb791d76e6fe8d5b12742a0848795f1b65eac972f6142694b44
SHA512 6645e1d9e003fc3734dd624eeb4dd3c2fb16a401b6a79a4ae8567e7b5b3b65baebc06e9f5b91fa8c852e30963f1542e50b0bb4505697fc8ee6791b5e50244d4c

C:\Program Files (x86)\Steam\userdata\908713792\7\remote\sharedconfig.vdf

MD5 7a6d87e4b20241dc0a88d6699d51630b
SHA1 9bb26c7381bdf2ed39f268b12895e1bf27d85d74
SHA256 48501fe1d0cd68ed2bd2d027536e76b579dc3f846076c0d10d60eca1870ca4f5
SHA512 32e727ecbc1c7b6cf97cece7fc29cc0340102baa0f0ce06dea6112d1c91ebdd9e41bb6ca47f0888ea9ecf6cc7b646c2f25b1a3f2ee43c617905d94e38c752a33

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000038

MD5 6168553bef8c73ba623d6fe16b25e3e9
SHA1 4a31273b6f37f1f39b855edd0b764ec1b7b051e0
SHA256 d5692b785e18340807d75f1a969595bc8b1c408fb6fd63947775705e6d6baa66
SHA512 0246cee85a88068ca348694d38e63d46c753b03afadf8be76eca18d21e3de77b495215ed2384d62658a391104f9e00df8605edb77339366df332c75691928efb

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_0000ae

MD5 1d77b06372591a6849d311d9a53cd6d5
SHA1 580b2198a6ccdfe830d5c457e3f57207cb2fc8c1
SHA256 d585a26d7b62885dae372e6138faec414d52e9ab41c5696ac3511be2268a3687
SHA512 1fb189e2a91bc9e0b65fdf3a9a0c6a3cd354d5110983598f7ded796f325b11bffe8cc1b63d34712e3cb2cae6e1f1378a749faa96227d5ad64cc180e690eb33db

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_0000b3

MD5 800f4694b0878fa266216e3397c394e9
SHA1 4df66edf5efb2ef771e5dcb524d512a00fcb8961
SHA256 73060a8164bc752a2282024bd1401e0aae474717447c6e31b14a385cd96dcc1c
SHA512 28dbdc12feb83c271b6235c8c0176f1fe946f567c991be65e1313630c3da0b3e0ea58d21d0fd1be909fc04fd7dd20aef9a9b3c2ba3d6b569ceb6d00a8dd10926

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_0000b2

MD5 353828eeaa73fb34998817ccd8fd9135
SHA1 058eae9cb7bc7939af5abb933c1521ee399340c1
SHA256 a329f468f80f8685bdbd323c02317a1985c6b176192d587d104b07e4404ba56d
SHA512 b05cbc3bada00c2b779285dd643a5fa0285e8844d6601cea23ad3500d8fabee2fc6c028f985b0f494e046e3363eaae857fda6ffad39d5ed7c696f9d986efb64e

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_0000af

MD5 747adfd7bc9cec7d37c67d426759cb14
SHA1 0e870da083aa9fee52e4be2fb51c1c9788bd1e62
SHA256 17e94fd29a69151e655a9e02512208f00f3a8ad3e3813cb55f01ea96b505fe9b
SHA512 7c27b61ce3d51afc10345d10e6493011726e6524067969e83c1a9dca0a214d3c2065b9b73b4c96fcb5aa0b6ce3df44db5836743b59146b7af4c34cfd13e08c81

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_0000b4

MD5 d6b1527f6419bd2e74ec2d71604d84d2
SHA1 95ff30102baa2a70f9259e21179d48f0c7ec951b
SHA256 37aca6764d5bf1fc67ec762f42c6e2195b2fcb6e7f80f654e74543e437344aa2
SHA512 288ea5fca3566edf29300b207467cfe12808ea596f6c1f4c91d1ff3c8967a956d6517e2afdd6032f58a60268f3aa3108cdc468984cffbea0ac9356fa324a4ea7

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_0000ad

MD5 2f2eeb9b306a37e8efed0cd7a1528fe1
SHA1 c2a1c98f5a19a02d9204daca0c2b64dc2ac813f7
SHA256 d9187c514699e42f0faf3e512fce763600173624befd6f787688a42b91b35903
SHA512 d43ed01bb50e303ab598aa71096904dae5ca53ccecdc449f0d82ebbd1f1899d5885e53552447e6934aa7aa4d804e08418872d2da95a0e0bc6278d4f69a587102

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_0000b5

MD5 63b11a5d1a6f6fc52f90c50bca0eb427
SHA1 382a8ebb7d927f43b29d838fb7132523b6f21e24
SHA256 eade80fc386575f091d01a04c401ecd530529a35efc4d23c37a587daabadf926
SHA512 4a66abc24afb1d6ab6f4eaef1f5885bb7d29b40214ac3312b3c55195b592cd11d51183c881111033b43045d77b4770459dfad4b45d2b11dda81f972d0031be46

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_0000b7

MD5 af848941d02da72037a50f6a9661827d
SHA1 9a0e0c4285fa9a2268bef5c75e7ef58e457017c6
SHA256 db0c6018c203cb527e842124c3ee9dc9eedefdf6d3e9b5e57f7767b89dafa211
SHA512 87d07c886603bb9d9aac7376e962787500f9e016a8d082d447844891245cce9b30b47fc8f80db524db2536f836923b88f49d3baac6bcbfcca6cd096bf33d1188

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_0000b6

MD5 da3c7b254516e84002071746dffc6b0e
SHA1 6ebd8d3fd67508c5be1c66bed2daceb58acfb5fd
SHA256 12719736d93a67915ebb3c38c39b5034e2f7a1327e29bcc0282a6debbff1fa26
SHA512 076d9dc9325a22dd227f832ba0c2a20fbd7970fd00ad2616c87529fd7ca45ede6c878b898e2786d83564f46a5cf24667dc55582af46303390efe5fae587ae7da

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_0000ba

MD5 131d06731c3d240f5985b12e67d6f374
SHA1 297eedc5a98687ac1413c397a68ef2acb80d1137
SHA256 7ee0714a0ffa443dfaf8a6f680d8218d02d89a5855f90b04ae20647387810319
SHA512 df9968395e43d1a632ad91ce2ab7299fc35ae84e15e7fc44d38b3fbcefdae910e89a26a67289459430bab9b6d2aa32e03edc599c6bce7a71899cd8907bc5e9eb

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_0000bd

MD5 bf10ce4ff388ace3b33037acb1e040da
SHA1 c119500813622b284afb267029d1b90260f4642e
SHA256 0139b0631b421b286092555b33332a7429a6503670c0902b3c96f6717dc8bd0a
SHA512 9085222f029d0dfb024252732a27a1a63c26f98fcb374416258277b06ddbc17fdf19da98fe94ba717f8dde81d3842c989bbe02347b2aaff0af9e410073fe1677

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_0000bb

MD5 27f3bb5b4983c0a589ffe4e1a75003c2
SHA1 91eb07d73395bc132fcd94b7d4c2d49bbeea3deb
SHA256 37ee2d7f371557131a9f050d5911eec127388af125517fd9e21075895ce0b3c2
SHA512 008d943ced81bf0ba5bf427adcdec3b96440abf7c4bbe8a60ae0e62d68ffcfa9a6e9c9d2f644b3b17bef6eaa518e469cb98b274ae9265b774adb201d0dbf46da

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_0000bc

MD5 5b135aa3679d08a41567a562c25bb420
SHA1 82dc1848f15ba180761de62ce43291392b0a4757
SHA256 bdbf3181992cf778d8d092096d3eb04739ebdc2f07fcffcc1e5b8a6524a75afa
SHA512 d15d5fc9de4d50bb157c3cd58e2cd22ea2a7f113b033524bd0100502787c0ac1afcdeb2f8652cd90a9df05d4b2b8858ca1c612ae407118dde37bc86fe53b650c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_0000be

MD5 8e919db8127998be7cd18273cc070ad4
SHA1 0a2c61a34a80d3ae1b7f22cbc338591f57dc60b6
SHA256 f4bec475d1bd40c1719cef2e73c595418338ac34da7abb71a370bf8c349d1b93
SHA512 176b78220784654f4f88f1354f369602b51010b05581baa5d78b8ea0b662875ef338e40615e91646a10387965cab19fec2c232ecc3cd69d647ce9b58c71a3e7e

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_0000bf

MD5 85f9917c15d19161f1e3774156d9e2e2
SHA1 451e14d5ea19da50ae7a2a8ced5266f19df20eaf
SHA256 038d92ea323d907e2b5ff0befb50ef41a52dc8ff63535688255c1abe65bb2a8a
SHA512 bc8866c2b9c519106e370129d33e2f7321cc8bc9591c30dce1335a52cc497d2ec14a9873f3360303f6a053693ba073476a54637a0d3796a98fb59ab0494757bd

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_0000c0

MD5 c72d28dc2b383355c69343b354078844
SHA1 0cba09a00e6d0d183bc153e79a369f0fb4f8d746
SHA256 13f59c1ae24abeeeee05fa594422cbb3deb8a1484dfaf0a4d69ab1c6bf789a65
SHA512 230ae251af29d35dc3725b9c21fef7406098baa85de9347595eed91f87003115eaa122cf531853d8c5b1cd34cd55ae4763ff6be750c617297a38d846cdb2094a

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_0000c1

MD5 e87ee3e7af715002739d4f7c909fedb7
SHA1 783862aa0a0f74d26a475d4bf2c46917eb33bbdf
SHA256 275962c10b33d0971e850462a8c991fef7d59c5815e09925ad4fad9e4add368a
SHA512 066b551d261897e1368d022049a0f3dece950633942f6bb79f9b7220da485cc50fc0ab30741631fce891f54a7fa86e094e4e9d5bab214dce4c5bd1cd34530b00

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_0000c4

MD5 6c430133e26b57c22a333ec52e5f0445
SHA1 977c5b685751ab64fe38ba43dff1c10443fb3001
SHA256 f3c9f773f5f047915c5e7cb85fb23b8e55ae23d08363a0408134f0de50c0980a
SHA512 7f34a81e2ae1d81c071838a83d6ca12a34076c42144ba7a31d86128e7df6c39698c34f64e9d9eac869cfe90d610367c377ed057d3a67b227f3b51af4d1a20fc8

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_0000c2

MD5 9df2e8ba30c38c986f3a5c0e5a8d5712
SHA1 05632b6b5b6502bed8b28e403a9f49fd4be4fae9
SHA256 fd46f6e0935ddc84983faf84284fbc2219d4f716ccc2e105b9f5a84fd3ae4a06
SHA512 d171241c6b781eac8e356cb2e7dbea9adbeaa5e436d8b12b1cbd623b866d871ca3c0618e49563eacf9e4f5a30f3ee1edc40c0c001873aa32e876e86bd448cc51

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_0000c3

MD5 0ab709b3272aff0975e0aad85928b1fa
SHA1 e36dfd8ae480cb6d7cbb35ed84e0c7d3e2084a0c
SHA256 6c905fb8e33a34b01ed23188aac806ef5c6f3a26b7ec3ffd04db40019d9d86f6
SHA512 1cea3a27c37fcf1fc2e5760152b1a0e22ccf94302de6beef9b0f927356c55ef1e9d1cb769b8b81a12d39590a4cffd76ce710f3abaad6d91966d78448f769faee

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 69a98606032be7c0e738869b01a05ae6
SHA1 f9fc27b72041c610eac5c860b22548959282baea
SHA256 3b2ac9ba392f362b7b999014004786e9c316e6a384fea8642a5ea8bbd82b88ce
SHA512 f936686141f55b5482119fb3264c448b8c6d6485166b8bf1bfb48a38e8830aa8f54e08698c6a2ecbfaee80739c8e9b79374b19bdb3dd389385781a039a993ed1

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 82d676c606d2be0449d137a7332b00a8
SHA1 f463f2bfd85a2314c4e53701e6f3d0e3c4d00910
SHA256 2253f921465210bed046fba4df4a2f5d7e87cf3e6cc3e493bc6872a266f51126
SHA512 67d7bf0e99f889e099c0f6bb415a365c8e90bcfff30782c25a4af6a4f50db63f4937fc83abb63ff6078f3e955b1444cca5864892fd31cc8705ca63ecf5926269

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 8c5da815085eebd42e6fe43013c9360b
SHA1 f5e3b64fc352f6bd9b5469fe0a7da93963f4804b
SHA256 0dd92eda64667cdcab90c7823f95b0bb992101db214b4f751b872c46247d8568
SHA512 6e5adcbf389258c9a63be211ecb72d316d691569880c2b3da4c845f3cb89b7f064c4a6f204e07c26cda334a2381d7092ed1fd1c670a9e3d1c5b72bfe48a0bf58

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 e7995b80028b82aaea1ec724a749fd8c
SHA1 69606e415e560d15bf1fcde738e69d7fe16bf9ff
SHA256 36a3177824f1534a222859f6a092022f56554cc34ae5fdd8db147c22f8dc9bd2
SHA512 1bf1b2afb1d4e2ee70a42550b180f129391352e27358267393872fdce7d4fd4f022fb6a49a28c46b14fc227b99455a13a7f7d9af692d84ddbe4eb1d208c0bc52

C:\Program Files (x86)\Steam\userdata\908713792\config\librarycache\730.json

MD5 86010e7c3b1c8a441e1c8cd1af946c22
SHA1 e7706c3b195c2319eb174f449bb5eed0c872716d
SHA256 46af1f9f97b97e3ef244ce22664a6a6339391458e3644d58d6179f4df99b717d
SHA512 247ebdfc56b090ca12165dbccbf42c93112100d6b205ac39f1a372fdb1af639f31cb137ba6f3e2274233402bbdbed4bdb72244bbb22186194809b66950a6c9b3

C:\Program Files (x86)\Steam\userdata\908713792\config\localconfig.vdf

MD5 592bbd1a787a579c661203d623bf9df5
SHA1 b8a91f87f58aa213c0791ee2e1d8ebd4f353288a
SHA256 8ec1caf6db8bc7d2ac15bcafd738eb38b0ca843ade72dae58117c0b8582565ea
SHA512 00c2aa66b883af7c16a913187a70308646398216fd8c9ce4e434cd4d2f90364ddffda40a9fb4bf49d50272dbd0c57171d649a71738ccd34a727ef0bf3f8748cc

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 6b9d4a7a0d70431a0a253ad1bea821a4
SHA1 f836ef57acde63ab6fbff5b97c3d80ae2141e9a9
SHA256 698831dd4fc4062b5dd3a8f9b1c3b9eee66fa6e66cc799b0adf706fa68e7811b
SHA512 1f7c8250eeb749c94b495fc9905cd24037a5c79823771a07b9edfeabff9305a008fea0d6e63b237647acbc2d22b04a9f7ac9077a9dbe804155c3877cc11106ea

C:\Program Files (x86)\Steam\userdata\908713792\config\librarycache\50620.json

MD5 5216ef382c2d09e344ae46f2c073acab
SHA1 91040770b2b51d00e6b7c32a37315eef249a55bd
SHA256 2200afe5bd5dccc0cfe9d34b29eedc49014dd673e5b9b2d1797e3f52a14b5617
SHA512 0a5bc2a98fec77d33e0aca0934d547746883d5ce2b6cfe23e36dc9afe5fbd51dfe12d955213cd0123b4ca004e225182bea6722d0870ea65ba5a808756e893f7a

C:\Program Files (x86)\Steam\userdata\908713792\config\librarycache\50620.json

MD5 c73f9b11f5cdbe58763d12a8a930641e
SHA1 38f057c684a45f73a17cb9a6c54dc85597d1258a
SHA256 11c3ae7c33e546c6192e99ef40fcd4363ad3a1f303f058a4b6c0e8899c8b24a5
SHA512 9532b2b828992b7d6350dd88d242fcd435ae965efed795dd56470f9a8fa37782d19487c7ef6a2951e67a96e219f5e8d1987837f952fa499ae9fcd06074e4f088

C:\Program Files (x86)\Steam\userdata\908713792\7\remote\sharedconfig.vdf

MD5 bd27e0ad0186e4b10ef8d4f67be816bb
SHA1 ff679f731edfdc9f792a87be23f75d2919514ac1
SHA256 ac39ec060c0c65080374efbdbba2ef8eca5accb4c6cb973be9d17d49a92f8285
SHA512 e314800cb0a33381e5cd30112deae377c88f253631b1bcd621736b6851803909747018f2a39f67f03687a75957f3658200c09a2a446c55105a01482cbb67c6b8

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 0bc2983e0feb91b73453865801dad7e2
SHA1 277b3e90c80654edda39eb2090a7d0ab48d9a6da
SHA256 a2a625c044819cf32ac1bb09c67ae6d905026fabb8a889dc16b13baf0d44ca28
SHA512 68ad8ee75657bbe132c266014d1fd99918166d11fe5a518b50039c53d255ee87db7f0ba2a306389a2d2a0ba9861a510120556d3d5bc011e96ed3f0df1b324bc3

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Darksiders.url

MD5 f1bb468feaff2e05f9fc8e3ec6904c9b
SHA1 2dcfd035f5e3f44948ae9d62895272908e5f84a7
SHA256 509f7418ec9fac804f9469a5b251ca43bf259a7d10e6409a407c823fd9a81f34
SHA512 ec99114e35e6913025715554603e1f83472d5e44cae26701e7e5a39b2d1977a0c423e4cc7e2828d606aa8f404aac1132ec226514a67076d0f955337d828e0e28

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 4455d0a4b9fa2b555cc70afb687bcb5f
SHA1 80abf84783cc58e3a81dba4cfdab2b7a25802820
SHA256 9fade1db05fce3146ded1f5b6c6c014fb27d438bc86ebcf654f7f521c54cc390
SHA512 a610f05101d3420f001550836f2b5a1dd7191395f1cd050da55d819bc43bb9cfc37fdfb557f44d87a030be4554404ae4f2ac212c265ab8f4753a6e4199b75dea

C:\Program Files (x86)\Steam\steamapps\appmanifest_50620.acf

MD5 788d8a73fb24a759ead74374a2387d84
SHA1 29254f29e08367cdf76e0dfb5a97865fdc8d8150
SHA256 ca4cb037a00e42089a18657adf69fe5a63c560fcab13d5a8d01d7af61846fdd5
SHA512 30a03158bc628e9156841beb61a4bc25944a05d08ece568e180602427d275ab06dc1ef4f386bca437d33c404c122e59a681e3471c3f8ec04fd26be6dbade4959

C:\Program Files (x86)\Steam\steamapps\appmanifest_50620.acf~RFe624b3c.TMP

MD5 5330e64d8f03d4f2b0d3d8f5f6924d55
SHA1 85f343f53881f79cf5f0974e6eadd81ac415d725
SHA256 226cda99c7aba6f2b04978a857a5d4534ceaa83888e9108e562d591d39230d65
SHA512 a3d80667af15bc6853855963de0f50e1d2088249d8af49a2721cbe03baf6eed70485fed3419010138933aecdb1e505872f5b79a488bc80cbac82cc00128a224b

C:\Program Files (x86)\Steam\appcache\appinfo.vdf

MD5 fc3de013364a82afa6419811f0e95e7c
SHA1 00c6e6ed08f133ae3e608dc083b5a0b9fc6d6d8a
SHA256 f530e9d4a8f5d0a2402e58c1a653905f9b58b504afd856ca699ee0c9f99b0952
SHA512 ab54b836947b27feaa15ee59c36fa5141162d59ba1e57f0a83e3cb1ababc8d281afbf819ba276c161eca75318d0f0b97a3987dcde3a4cca3982be42168170549

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\ch_cat_rm09.oppc

MD5 fec770283f2465a0e5a00243dde1df03
SHA1 04111f86d7534ac3ba10ceebe43677326b99a633
SHA256 d2105236426c62d6ad25bd2e306151b2414865e17c043f368b89de3a25f520d5
SHA512 5967086dcbd4f13be9b52653d2988848a273356a0269142e5a1cacf2fe750cd94a7007c2a4dd4313fafaa22fde9af193923621be79fc56b121e12ac3f1e7f4db

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 ba7fa1a566539c3003cf98a63c48f0b9
SHA1 10a847bc4024e193108039dd46313592af6db029
SHA256 e8ba5d93b17eb3a2daa4e6bf51b1e6ec44f10a9a0077c03d9da93b2fd4527e24
SHA512 9ee315e74cfeae7677a1dae8a9431ae3d2b18e21381dafdb3f0ea4e04843c5e48342acc092defdd125e8a8361ba6e01f5c60752b2b0510a4b35460465dd1dffd

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\ashlands_props.oppc

MD5 85bb8b2c879853d1ce3556100ee4a47c
SHA1 ca964e08a353523e47d50515f62ef3aa57a1c9b9
SHA256 200a37d3e3e2a2b4287b1ed92f89c21cc0d3e5615aada7d002a84c04b93e14c7
SHA512 82ea5e939b241ec70f7c4dcf7a5e2e22067761782d30cfe135530e4be98e530801e04a901c18344385c0cf19783384b41b3bb15cc42d19246ada81dcd9ed0cac

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\cutscene_042.oppc

MD5 bcb56d839aebeae850e9f2a98dc8cfd8
SHA1 3d4ea03c64bc11a7aeecbb7ecb306930c54df50a
SHA256 6607db918ef7154b15ce14c74ab7f1d760a19d27754b13729df2c598a94bf8fe
SHA512 566fe3dfee80324ee96b147d4a404c6ca7574d2503d5865178e2649d66a207a8d0ea48d7798b028309bdc6923752a6e373522dd38edd71acbf453a4b145a723b

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\830187ff629d89a2_0

MD5 88b23e558877ef8560102613612ae57c
SHA1 96409b3b21f01aae4987a79c28510ab2b6d7946b
SHA256 17974d92380d350df60013b671aa07ef74a73a3e3b50320bd25cb6091cabf6ee
SHA512 f7133389c1ec3ec560aa0f23cb16755d4bdef1ba1af8e1b806cb32a1877bed73a474bc3deee2b080ba5f591ecc434ae133cc2c293fb32c2490af867610823eb6

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\d23775e9c2d0a9dc_0

MD5 6144f28e29b40fc89119b72c4557d358
SHA1 950d1d9d70af7c32199bc1e39c9f476bb55b41ec
SHA256 fd43cde9c1b6f7e567302fb631692dad959f2ecbd6270278b2e63ba187250738
SHA512 66536dd51ca5232da7e9276d1ed8472450a45f6b95cd6bf4347ef64c4be26310e5116a0fb37cf7aca516a38a3764f473582fe5a27ca05b487eebc2fb4ea4aa0c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\45026e981a5c53be_0

MD5 21fa9d00bc91b556603e8f42572edc44
SHA1 8fff350266d59f185fdbe926e3f5315e86855c03
SHA256 6bb7f76b71f44761ba6c2e3a9d35ae615cb4eaea07f08f95ca77e71a9fb93794
SHA512 d3f6757239a5aaea3f6959367507324f31c249d61f6744e0db85575ac36bffafec109b02bb8513e3e14dad7abf05d9f41089532be7c79c6186777eacf041da16

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\0980529bc9b55b51_0

MD5 5ec8177bcaddfe60dc862e730e148803
SHA1 a317dbeefb3a31484fcdacf240696c2a2959135d
SHA256 f2aefb5851211a9a1ecb6573ca25f924752fbd23263b9ea9ad1ad939950e698c
SHA512 6e6ac547339fd4d258c77f90d24cc6d1aa264c9266a7684322c2af1a1fe46a6ae78d528013876727efc0063b30fce70ed88aa5ce18e323d89936c0343c508b7f

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 f973e57f00ac4bdefc67a0652ba5ac60
SHA1 a3dcdc4fd05c7ffb92ecc6868efd7541212e0543
SHA256 5a43f1a43986dcb150ea2eaa5f6d01bfce8850d0be24dbf3eb59c8968ec2777e
SHA512 69d638689055cf020cba4a789cf36dee464f5f0e7ab2123e1a2b1c90c569b77b39778aa0a5cc62bf002535add32da45be4f3a4818b126ce948c5fe6ecc546191

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 f6ef2580399717508fb9dafb1f8d723d
SHA1 6dcd19c60397b1d7b493f0dd107d917991cdfb78
SHA256 fc538676082197220954a5b4bb2be6c8d39db43a2e325d22e277f37c2abcb3aa
SHA512 d2bb28690b19ec75aca6951200412029d4731dd94a1edaeda1bea6e4ee11e8632d6452260c28db0a3e98062c87aa072202d112dd24f869a571ed4ffa1005e147

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\cutscene_035.oppc

MD5 56c7810accc777504316977ca5088e38
SHA1 0c55bcff5d21e1334d40eca613e691e3fa940fc3
SHA256 8384fc5652450964751469b48aeec92f7fe1ef9a45e87aec2cadbe2613ff9269
SHA512 590a42381a15929bfbbd0ff0d004941328470c390abeccdefab3dfa4e450164d9a229a8755e1e8ba475f9f7b41e542c9f250ad95e2e8ad3628d3340a27035734

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 0d688fe1ff428ab3579714f1fde64665
SHA1 6d295c87355dce32ffa2bc04ffd0791861e5c4b0
SHA256 c09d2cd3843eaa31c5852e4220e9ab35a6dcc1c0e7721eded7ece19f90c5a593
SHA512 233ac827c877bff29ac81907e352f99d90e0f777c7bfbee226b5e41a066f58fc8419ad845e7c5e3b181fd8e25be2b3e10f4c18ad6a2cf5ec654a20df49665651

C:\Program Files (x86)\Steam\userdata\908713792\config\librarycache\462780.json

MD5 676f284d7d74c7facef72b089902ed0e
SHA1 19bf22c9ad87514016f0d3604c8f1bc5d0f2fc2c
SHA256 e4662df1c58e18468fa36b58f7784040af9369679408a9261c02ef4e8eb4e16c
SHA512 34f10b83e9ce08c6df3b0327c630be47e586a1ed39da3bf86bdc7971671a446fc16ccbf8f78957d86d90ffef00237ff649257729056633bc99ff1f4995290d39

C:\Program Files (x86)\Steam\userdata\908713792\config\librarycache\396900.json

MD5 ede776671c09426cc0ef6db4e6554f70
SHA1 f24b8b4ed3f207238950218e8c457921d90ba3b6
SHA256 2ab86796c0c0980a369ea2ea2d9e1f735af9093f3ef348043500504b77d5c5a0
SHA512 d99df8ca9e45b57fc18e87ba90cd04ccd0579d1bed11ad8b7a6e67e649b2a8dcb2eff9a77555da25bb9fb16fce729877b0aa95b59f966e62b8b6347c8a4dca6a

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 145968b7398e335f91a31ecc3bb30993
SHA1 fa22e58ec367620e41201cd87d313395288cbace
SHA256 4c46c8dce8110810565dde1a8c5503f21aef4b4cf403aacab0725ac3762a33fd
SHA512 1fea670a63259272240e17f932dd6b16fbe47ccb7a1a3b4f78c7ab6858bcce02eb96f664aa9888cb57eb664eb73492e4cb3e23636e103a93ded7d18718f93671

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 0ea3a8c6c06abed89cf5436789be7100
SHA1 e48106900a8f2aee6665f30f13eca317fdbca8ee
SHA256 3d1cd697906caaa335d4498c0891c93ca1d7d61f6c866c6b5c27f9885029608f
SHA512 1b8be8cb2660fddfc9ee63c4cc76e4b831818ad4329ac021d9870bcdec2377f3e0944ac0736d993f83ba913a49ae3c63bed6a4f9f44431503626c448bdef4320

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 e3688e28f170c87d5fe415deebc5858c
SHA1 d4e8ccde721e2336ab2577fe7abd9f8357d0df3b
SHA256 cd79a3f28b87163d67f3c95392b5327324206c8ddbde06dce92aef8cd101bdfd
SHA512 13d287571f207b340a5978c3bc76f9369e2aae853d62b92f7559c5f09bf8fece22bd2341fa8a1544532f3dfb6361d8e92092dc3e3242d7d44b7d0c65e0d2d646

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 ba35e8c462220998fcf265fd4d646fa9
SHA1 04b0ab91837df8dd6f99b528370b5ad7df6acc58
SHA256 94e016a21d1860e2d1d88f298df85063a736935e52b73bfbaa006eec172ae1af
SHA512 15f2417728aebfb0745847d8b7096b521fcf28e20515e5fe63beda7e2803f57300fd0e68ba79bfec2f6eebfdf0a67988c18be4dbebe7b2da92c280dfeb8aed62

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 d95ea87937ce28795f7276dd3bd2ef1c
SHA1 cf277f73bcb109258a6cd87e050163a0b60bb026
SHA256 25f284e881b9d8d72306bff8bff13d7112b07782304b2ca2b7be997f19d04987
SHA512 2efd386e377de51b1e27354eee9372b930bfec51f6d53309e3d49974844bf2fb804e76f0098da6379b4577c629f0c3ed24930b935af5c9ffbd77109c6ef212c4

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 014df30c715c7419ee1824ae694825c1
SHA1 2c94042cf5ae61bdb1b737fc30333bb3dce60198
SHA256 1ee286e88b4d2ba1e57f48ae907014fce6d49de446822512cff811be90d311a0
SHA512 2263adaa58c6bc4675552d78e9996e4f5fd188fb9284ec7a7d232183084d2233cdfed957da8c1a61a545532c3cceb8960be5fa69035e1b76f0909693e705b362

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 44f8c8bdf76f609ae45769a07768cbd4
SHA1 8ae89bd67a4d0c352a90732740c055a3c1145882
SHA256 d859f4fedfafa64e3e95802a0cc91c88a5b9456c411c627e4f361f9c9400f5c8
SHA512 5a68331680c14f533ddf74155348fbdfd3c107a420c49450b0a5a19d55f1680243afbbe6d57cec0120a12e939317b54c768284cb74002fe996b7ac3345d358ff

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 6af3b5233f33f34f30b9be3f2fa0f829
SHA1 11a4989d2a96d1d0d0a5c54cede03bf9db241d0b
SHA256 01ea0e5b3d99a3c07981a6cabb5dd528de1eacedf35b6ffebdf73c8d4667912c
SHA512 a2da110a01017f17432850e6ee962fbbc501895ec12edb1a0218bd18ace389d4dc52b5a10f40ecdda67ca40708ab63a09299ff927d3499aa69a64ec8eb9313dd

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 a459f2d6a429935b9df50ba7e30aa664
SHA1 5ac0d510e8aaf603ddef2260d9a0c7693f0b7cdc
SHA256 a344ec502132e2ddb2908925c96ab7ad2d67fcfb0d35a2e59946706226f87739
SHA512 3b11517f9d7ba56475ec0657b7a78b56598b5b81c6c062d0a0ed6fb39c1093997f1450cd4ab06f48094155e8e008282e0c438d399f58274274df614ebaf11ab3

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\exterior.oppc

MD5 2a57e5894a89ae3db6bcfc9f5c9e8c75
SHA1 e65eccb3d9f0a01c6b5a432a16e8440cab988112
SHA256 99df12eb2869b8098918b31225da725edd5b9252074bd209f037f89222d08fef
SHA512 2425d6499f6e509a76b24703c3e335b7130f7a5701a6961d63e74433d9b8aba836ed6f9a1afe253e12d23c5c99e93601875590fced4dd9d46d0ecbb9150b201c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\d441c54c-6994-4634-9897-51bf4a9dd753.tmp

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

MD5 5db1effeb63c9b3a382c0ac111b9b7a8
SHA1 9fa59b9c680b970cfed28d8e5c32c0e40960eded
SHA256 84f6017dab7db5f943facf02527750cef7737430ed5f8f95b9e12ceddbf035ea
SHA512 a50cabb3d9feb47dcf282381423b88c983c18e99df6a2dd36de8cb4c9be346e76b584c8281081d9d957922c21764457352b984823f81dd89a093e86a15305374

C:\Users\Admin\AppData\Local\Temp\cdd74fdd-9d6d-404d-a17f-3807054bccd4.tmp

MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

C:\Users\Admin\AppData\Local\Temp\scoped_dir5480_797195963\c893bcc9-366e-43b5-af8d-94ae8c8ce314.tmp

MD5 da75bb05d10acc967eecaac040d3d733
SHA1 95c08e067df713af8992db113f7e9aec84f17181
SHA256 33ae9b8f06dc777bb1a65a6ba6c3f2a01b25cd1afc291426b46d1df27ea6e7e2
SHA512 56533de53872f023809a20d1ea8532cdc2260d40b05c5a7012c8e61576ff092f006a197f759c92c6b8c429eeec4bb542073b491ddcfd5b22cd4ecbe1a8a7c6ef

C:\Users\Admin\AppData\Local\Temp\scoped_dir5480_797195963\CRX_INSTALL\_locales\en_CA\messages.json

MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.83.1_0\_locales\en_CA\messages.json

MD5 07ffbe5f24ca348723ff8c6c488abfb8
SHA1 6dc2851e39b2ee38f88cf5c35a90171dbea5b690
SHA256 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
SHA512 7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.83.1_0\dasherSettingSchema.json

MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 4128369809b60dc240cd54177ab8d587
SHA1 19f7219bb160c14bc0bab4b607101a172ea0c00a
SHA256 8f68b037bd4e06524263abb62871d76a76a38da55fa75a98014451c02e6f5a69
SHA512 884e8aedee66563c1d148891466ed64d7ef952c17967bfd8fb65411f14a79f28ec485a54ccfc4238b88ac9af9a1e41b42623e502ee167b62836823516f1d3a1a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 89c6b432c7715625a8a88bd989193dd4
SHA1 8cb9d6934d17dfe4371875c42181832cdba253be
SHA256 7e7c321698fa272adb34c3ec82e0c4731e162fc1858d5218ecae8be79188155f
SHA512 7a3c638aacb928aa7383a8c0134aa8953f2ace97c92995d025a7a59c18d880f9195895416b5f1ef56a9bde524279578225f221e1db5c670c176151d94cbf260f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 09c1a7937ef3e1ae54555ee6464f799b
SHA1 7c6126fd2293a9b475c313ab949c8c4f910b25fc
SHA256 2644ccb9e38c25a5b80271ecb4a78e0cda969621acffe41000d610554679b385
SHA512 e542d5b8684b09d1ea6cfdfc1b963cb13c3358147b6757f1237818e83453969c1c9ff8789f60520e3d274beb1b7eec7c6a3a60a022c1b7c97c7b0910f73fd275

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b63a94e95cdcee57908cf11229f8fa5c
SHA1 fcfdcde1f396e3b22aa4e67313a9ee32ba12cea4
SHA256 86be9b8857d3eb15859c13bbf4ae4f42db6d619630117ad930b45e08995e6b05
SHA512 733f30795774b18d3bd7d325c48711e12c6ae0d27ec47ad96e408e96720a3689492f206b63fb3a00a343d7b1da34d21432e5ebe5912b20fc4f06005e2b567e03

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 d4af4306dd88dd3712b8e76378f9dbed
SHA1 13e4e73869ecb6855ae58f7a820b12358e1303b0
SHA256 63f975fe292a281c1dca91df2e0c404ce9f1f1c476709a3ed736afcf3fa20578
SHA512 0945cd54f922ce646cf95f592888092c0d982f8f0b57a79631a4f286f6655544d191b0abd4796b4bd4175b9ab17b70431123a7deb75cb794b1058f257d260c01

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 13f9cc103155ef15ea00b43687143856
SHA1 cd16ab82c7b6e57f2ca751491fbb92e31a93661b
SHA256 b001c33bed93a7d94746b83e3551e63a89dc01b950f12aacacbdde32b5035e8d
SHA512 7e9ef49e064aa03a59015dca10edeadeddea5369649b571a87b01f623d9fd8062d4385eddf57db1a48a88aec9b8787362b943a9ec22a1d1d57ef5b9f10ea33ff

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\greaver.oppc

MD5 f3d1461f1c4138a3aea09f620961a9fa
SHA1 705a31759448ef1a98cd42943441ba9762688036
SHA256 3249ea2ea1763a40708be174b0629f919125826928cde76a2e281e1456e6c78e
SHA512 5478f9f77e405c37222845046ae24ee3f29805006f0f2bcf16e9cc1f642c10ac0a4b6aa66af8c1cf4a307e1c96c711d1ddfd5ba1ecefc0a84daed7f224cdeaa6

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\guardian.oppc

MD5 e4cd206b2acc0605c1c52f949d9bfbfd
SHA1 24194fb3279e7b4b48e613d66c773f635cd337b5
SHA256 4aa7ca287f7a14d3d188615ca4b28bf03b795083a1044b614850bb722b8b0e04
SHA512 474c949124e15eb79eeea092e444ad7aebb1713da0dfae4fedbd061432f771c0112df4da9ba11872cdd55259851e91e36ee7780d53ee87d38d735e6579287ec0

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\IC_Tns01b.oppc

MD5 b287db0064aa666cbbcaf45e5f924c45
SHA1 419b1053a142ddc93fb3a152351477d9ed1048fc
SHA256 30a076adf79fff577229d6eb46e6a9d812d1a2aa250abf72a8be2b058e96e17a
SHA512 904975195fd10766e67c8ae50b3be5c8e5aa5e5834a90a56089372177f07802d7a4b6e0d3a5e1067505cf05d51789f8386959b573561a8d755d134c1a1afe712

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\ic_rm07.oppc

MD5 eb29904d159625aeab9ef259474f5ce8
SHA1 f534e3af07bc15ef59e977dbd585ce56dd5fe610
SHA256 222ddc75032f9827e1a52b2240a51506be4e9f46eac93348961437402dc85978
SHA512 48159ec24a4fdc7a02cf16a11bda8b699db74acd0b9abe4c06399afe5aedcab6446d3cf5221b771d4acb8f4e20bdd25d4a9833377f3a7f2efe843442ed933c5e

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\ic_rm08.oppc

MD5 c666de7e4e1a34a036ad819915175e9c
SHA1 9055fbe85d439f52ba60eac93abd5c0e946e51eb
SHA256 84a25bfb4702598754a5d6485713bbc64428aaf11081f7971d1490701ec7bd54
SHA512 55651e051f27f26ec5bb2aaaad76704012b0fc994e53a07d0df4097237e18feafe2ad38f4d58c9337305ee90e1495c3f3d373cffdb9d4f2d95b68f595c85b120

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\Mayhem_cars.oppc

MD5 f1dc850ecd29b457b3c9f5b70bde90e4
SHA1 c55372b5730bbe3da48df4296d826724677a9d15
SHA256 82fdd551720e4de72e83ed668d634d87e6ea1ae49a6a4518d53f3e0f542ffb58
SHA512 806283e3c68c7da968497d1ba35d8852c2db49104cbc9f6fca5b36071c679cbc0940792ce411d1da2f0a45c85fcabfbf6dc758747603aab13e169c4d55820d01

C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini

MD5 d36844a1cc6970ba09b42be4eb08506e
SHA1 b4dccfceb627707e3b24b56dd16594e9d9528da6
SHA256 4bae23c1545733c3493d9fafaf13dfe53e9ecddf72f2bc0bb397fa0ea7597e23
SHA512 b99b1195d22ea0d94d393b543ae32b8d8591f5966e8a8d83a2dbd7c96c19401af196dfd65262843761c54d685e86576a25049f286cc23967e862728ef66e207b

C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini.lock

MD5 e2c68268a9bdb7cde0b36c988cd6107d
SHA1 2093e96586a91f5e4de6a8f2b63b98ab1689f916
SHA256 021a7f6924fd6326ec9fbb0ee57375175db8b84d211d05b172cde8ae833c7140
SHA512 2f5c542265e92ade1bcf72fb13431767a925f1cfe229288bb05a22e1dd4d4ca2c3b3b225a276ce8c1d02b0d27cd4cc68546552c91041dcc4dfe3bdb8a8174806

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\sw_rm01.oppc

MD5 c72600290be748fe3df22354c389a7b6
SHA1 ee8560a28f3ee37b3cfc296514f124fbdda7fdaa
SHA256 8d52652b84989ffa565ea697153ec193b223c5d150b81622e88c8db0711ed4d3
SHA512 67eed92ad844522eaa51dc849f14bad6fc962dc087567ecd708985fdd5db7564fd2c24c02e3c1dd44d204638a21b87802f4915d9afdabc85ff0fe205d3d96d7d

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\sw_rm14.oppc

MD5 795258e289a359c04e6ee2e8a08a56f0
SHA1 dde2582ccd13f1e7ec07bef803463b630af11631
SHA256 7dd715a561ef58ee137b651fc85893b5fd60c3fcb8065958251b2c0cf2bc69a4
SHA512 a99047618e7ad42d477912d760a3d75c21ffddf7640218056b3dd86048dcbb35ff2746738786c2b34111338d59de1b05d309b5b77bab92e326a197863b8aec1c

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\lighting_Eden_01.oppc

MD5 2c421abc4b1f1089a44ddade411206d4
SHA1 c6bf8776dbba0b947066a837b7dc72b33e138701
SHA256 821b417bc9c0a823d8ba0dae4ef88f9a42f883b49bf195d6dadcafb52e34af47
SHA512 af2a367cf6bfefebccd4da0c39ccf0d27fdd4196f9982fda950c5ac307e51c6e05e55ecf69569881b5126b0ce5aef37c363923ac8a27702d6628744bf6fc4b0e

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\lighting_SW_Rm07.oppc

MD5 1b7b4d4046aac8d84106cfdb66826f1b
SHA1 8681dc4789e4740976789f44f7fd27bcfdd961ee
SHA256 0914c47e2902d2e8f7404ac65bc2d92a819ec014689a0635aea5a5afd7cf88c3
SHA512 e7cd20c9a3e42cedfac6793d31e77d9c2fff3ac50cb90b58a30573bbbd624fe0e5bce52ebadd1644e94b0b4d6d281a2a4fce517a07196a88ea65d572923c8261

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\OT_LastBoss.oppc

MD5 8a70b9d6d1dece9476f19a3729719e89
SHA1 4113ddc79c25732a1f69f77e38a1c64f7521ca94
SHA256 805cddbc3d174f6f9b134679b61238a73fe0e39f91188f485e0a939c960f8f2a
SHA512 84131f5498717a900454e7f751352d26a1b5fcdc349191b492ffd5a6f64d2c252290df07817b66db65255187f8e8226f3124ea73a1bfff83ccf77bd60911a933

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\ot_ext_rm02.oppc

MD5 d80d63b301132f869715bcc74161ff4a
SHA1 82fadcd9e051086b1756f122d96cb638db18969b
SHA256 7fbbfcf864a19cc12f1d96a5cdb33468466a8571afe02e6a77d2ddef21703923
SHA512 8aea1a3fabde35eb7d025b952306d402ebeb5e1cfeef1954f12ab4430c07c3d01c0d5b33d4e6b57c56651789c5752761213e15bb97f4ce1f0e2cf409e6ad5205

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\OT_Ext_Rm04.oppc

MD5 b113b585aa1d89e98867475c14758cc5
SHA1 7f9e638bcca5e408c4173f975e9495f517e9c0b6
SHA256 ed9c25208bf7abe971a28cdd24842a9929d63096aaa522b303dc586c41110e79
SHA512 3d315362095762bcc03e69453f40dd7be9f1dca199b00bca0541ca8b0c4b36afe6da11bdb70918b0ee634d1f0f5d1f6bd4f4a6f323a7daa8c53827ede966cdf1

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\ot_props.oppc

MD5 28c787360a049a0728a6341768f06455
SHA1 6ab4a9b3c09745a7c74bedbea107394ed32e76d4
SHA256 cb9907d6a360e8c0a3d653c9f07fc8efa8df290fc1de0bf05b0190f2364d1359
SHA512 33fd18b3018af61253a3db96edadb17070a0afdb54c099404f1bc13223b650130b7bef78e9de31a06d53836a87879e48537fd94009a4a51d78892e4af7cdb5a0

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\Smith.oppc

MD5 7c218def093f6baba62671ae93337632
SHA1 24cf830990a2e5aec83d3e778b6d6c158a08d452
SHA256 f7694160287843b8f8023a34858919c577d49a75cfcf1a5f301dc09d21e73012
SHA512 d9cfd6db573d057aa62fc36e29c89ce4f8e3e16c53be0256c0b2a6ef5f1ee6980513d7ec13195ddb58945dffd237c9c18061e4960b06e58ee0e9a46270839e04

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\lighting_SW_Rm10.oppc

MD5 669fd13d3aa26c8fbe377b30d7ec52a5
SHA1 5f582451bf84653ab5e189afa50c2773e204cf1f
SHA256 84e3a181b3cd178f30e0c3c1a8fa28bc03451fb7b297ced71d57a7bc37c65f20
SHA512 c81a699fd7f1428a6a65407d1e327d85a5eed2bd1692dab156b29402bc27060459d3269b2032b58a94e2727f16166402cf22f0dcc12624c7e961333b197caa80

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\ot_ext_rm07.oppc

MD5 48df87decc249cdaa6350ffdd92f5a3f
SHA1 99f14f15b3d98837d040ad12c8d77c907a7517f0
SHA256 bef546e6fe2eb5670d346816e621468b2e0b14e3139e70075dfe1e7e85f67496
SHA512 59404ae4800f38137478113e4725c5e08aa59b164b6c1a3e8de74ac2bf1d3ff7d52a271800b709a2ba24d98e02160c6b11f850970a3e78fc392dbf772f802b9f

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\sw_rm09.oppc

MD5 6670c0631bb58f01e257342baa537537
SHA1 799789f49f178aee14bfc5d971286c9ed303bcf5
SHA256 13bc878941cbd1df1676a7a043204749bf00315da39649b94485aad3e0215805
SHA512 8d25573a1398c347182d378118581828451576d41441cd5d8f27a4bc3081a9b5518241c569c424b9cb3b8aeeaa0305b2aab65ad0f74d8219dd0f5c4efe580e86

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\Shadow_Arena.oppc

MD5 0cc873ef98452ebce99daf70d700907d
SHA1 29ead5505b0f4f91ed711a1c0eb1e6c151ac124d
SHA256 219f11fa30f00ed5bbb79b65e3a0452a18d534d5e99f524f118d027db272313a
SHA512 6d87d45ac5c8ce0ab5283a70df8eafdaf04d2b67fec779ab446733283b0fe003017f62bd557154ce727375137ceccabed0540d4d229c62a5d91460f2b60041c1

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\sw_rm12.oppc

MD5 4729b6936504ea428cc1249949f776ad
SHA1 9d1b9474acf2b51021a4004a840ef830c8eef1c9
SHA256 fbd0cc86ee1876c92782214d8e42e2407f1d3aef02948742c0bc994e33feee1a
SHA512 747e8e6342b4c7f6f1b02c69fa147c282c6c6af1e8842e704605ae126d1b65494c1470ac9614a4ad4975670603b784e9c0cef5bd16934ca1467b93430d75cf3a

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\lighting_Ch_Int_Rm01.oppc

MD5 f9a39c3448d55f7411ed171553a4260e
SHA1 6d1afd6e912ab46b6ec42d8a0d47794fa800d0cf
SHA256 6cb70695ab317c3c778795a5269d1bc69e0fe5f0f4758340bc100bfa85622ee6
SHA512 9c87c6458250dce74a188dc665aac82b52fffed5a65240ece93bef6aab34001ddb454ec53eafa7b2ed4af92ea804677d8dcdb1776cceae17a9d9d93af6b3aaba

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\cutscene_008.oppc

MD5 626a51a5285f71e7de637ba5c41c03e5
SHA1 f7f247bd86b5bea5e875e8e715c51094eca18c31
SHA256 e26d49010f9768e72532d3328c95e6409b7ff30ec7494ac7d27b3d561dcd8466
SHA512 907507c59f96b76f3eef20f7301132f134cc03e2db53573b3c0bcaa96213c6537d4373998aaa29e9b7c466a436a950816472e8da18fabc1b69ceddbb84aa2260

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\videos\Scene_26b.wmv

MD5 78b9c615a5342a4e62b12fd7369fcd7e
SHA1 222a397dd16f68e89784ded247e1f0bb6eed2f52
SHA256 4d9d04bdfd7f8f290b52c908b5ce0650f1cd37ab416c3276204d1055cb548e59
SHA512 aeaa254869f81aa407befd5465e9b065e890c29f2ad6538ef7e2ed182c83d3e557aabc4cb8fedbb96cc632fccf3d628044da123101fc67c0d4c34e8b5506b1e5

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\lighting_CI_06.oppc

MD5 34828c73c058520f96356ce96e208880
SHA1 90c0e08595b8881c36c05fd7ceff85a54a09e618
SHA256 73ccc3b92ef29a0d6953b902675f191963f4e57122a19e650e568cd0260059bc
SHA512 cc3d03db54039916f95b61beda7deb3d8f4515ec8eaef24c3e2807ae775fc922acf713ddafdc6fd352585168c774c90fd1d2f01f67adf503291ae917301bbbc1

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\lighting_CI_StartBld.oppc

MD5 e7463cf1361cd78c6658d056c5797a74
SHA1 c7d0922daee5f8ebc12167812e6c700e570062da
SHA256 0f8e27fccfe900118156a6d8c178487b4eaa25f0df068ad8d112601d53765cd8
SHA512 3118690084a4e07b5224cb44c15f4c30cc8f43d69e57d6a421fce396d01d0dca82903f7e88343ba717f5f8cc9d00dbd09f83161624e21ad817ec06768b154cf7

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\lighting_CI_T_02-03.oppc

MD5 de86f8eb87c1de6d98e89987bc361c4d
SHA1 f4bdf311d2c147344e28d3507a599f895ed9da95
SHA256 6387effa8b95314c88bfc6a580462ac7f6a545e4a1a1381482a9b5a5029fbb20
SHA512 626c55241fa83646ce2314ace77d6fc1135aa0b28364797ef08087735c72509d5d9ddf131ef4faf7440b8ae41656d00498f37e0a38e1e98ab8fd79efff3a0f96

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\lighting_AL_02.oppc

MD5 4ef427b86a86a57d4c5bec173755f6ff
SHA1 33f6a1aeb4a0023f464a139e758a6f79e878f153
SHA256 0742f7f957cc62cbf20a57d5aa9a8504d17d76f5c945b0cbf3313746cf8b377a
SHA512 36034ef9b6d522fcc969e434d2550dd4aeba1883b62259ffd9401282621f56a3f305c4598ab55d6b0c7067facf0281ee436f0e823290a828242f65b94fd86627

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\sb_exit.oppc

MD5 c800ecb4ab5877d14373640a14f0f096
SHA1 985bdfd92fcd2a1c4808872b4bd1e1586d8888fd
SHA256 5c4876d65d8342122ed9a639f67ce67f59067115e931ae57779ebb4c37d8b304
SHA512 5915d0cce7f2871fef5601ec276c22e3c1a8af42da813a4816c54ba62f580e175dcb32b2bd2d7c9e5c4a8ce9b2e6cf46a405f1140172da2e87a4d22ed5007501

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\lighting_OT_Ext_Rm02.oppc

MD5 3927bb9a16cb5e77b21a777b27b462de
SHA1 5e63a15503035e47a4e62b47c51068ee9e48ebd5
SHA256 8990d2666efa47dd2145808a8bbb1832f8be0dd3409b4d6aa85a4f2dbdbcd3eb
SHA512 d8cdf838ebd21b1a5877e950ff0f4f03481a1b47f8328c91b59857c6682fd169b5cc75f7ff1d50214e840ec4dac6b999a84e381655241f2711d9911a757a84ca

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\Mayhem_06.oppc

MD5 18ee97f8562fb3a8f17c61fe15e24948
SHA1 da3522711ae23456a6c8dd3fa19d2192d4ecc1ea
SHA256 b46ea1ebd81fb43e775dd54892cc0d85069660ca283d5e01047da4e5e6034f5a
SHA512 89423d4b7f5fa2f2cc443d510f967de7407ea87342da6ad7d673a5f9cd8e61c86b89de087e7637f9dcbbd36edbe8a56b7304cee058c506a4c2854588e825c896

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\trans_02-05.oppc

MD5 05206dfc80bc3330170d06f3b5ad07dd
SHA1 cfc0898f48c119e654fcab9353c0a3dcbaa4d1a5
SHA256 60b680ee1937305091020a15ada613831917b82d92697e7195dd59194dda35f3
SHA512 263b4cdfab554a14eff07813a12aec5264d5804dc52db233081533a18097d1e795bfea2f057a85e184949f87ea22a53272e864483a0ba2bc840761491b1f01a9

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\IC_Rm01.oppc

MD5 e1da787d4f564cf385509488d07df093
SHA1 4e5cc83e0f4901663339ffce489cd1433e9dcf1b
SHA256 ef5d1beb2ff73adae88948f5cba3f31d1008040dcd893fd22b9c28cd682a1bef
SHA512 c32e5500d238c12e10843ad8f69cd260a59983ada45385a36914b3a52741ffa7a988f686063cc261e370636f7d362843a071eeb1f2512c796614d5052113be48

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\ot_com.oppc

MD5 5aef7cbb54abfdaf4e3d34a96778b080
SHA1 0feec3e9c03be6f80277890ac2f17419f4c9e5d7
SHA256 5cdbf948d1af18244b6764b6a0f7d3b287a4c626d705c37939ffa7183238c380
SHA512 976580a8580ad016b2ce77769a125533138e2d905644603f03de215fe0cc382f81d9713ebfdf885408b2268c98b9a8d726b1eac9b556d295bad30f9aa81796fa

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\ruin.oppc

MD5 67cbf83fbe78ab9699f3e3f8b68b0cd1
SHA1 7b1bc52082c1231d4e3b0dd513e1e5cd67c2718a
SHA256 3d511c697bf9217ba33315d6de41492e3252280e378195eca61c4dc88b8e5abe
SHA512 4c7a836719b7cd13b572c90cadd7d402de1f659994bb53e008f35944f27a5ca744ed07eee774782658d132bdbe0c3b163acf19f4d8fa1532148eac6d9e794cfc

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\SB_Ballroom.oppc

MD5 a5c2feed86be9d43a9b74bd8924d6e07
SHA1 08e065cc6dc071002a177c9b24a9cf89598524c4
SHA256 78ba280b2f592404cd620afa397282caa30af5bb48329e9914a238aea93ddcd3
SHA512 912964ec89a3fe7f1b6711b1ffc7dd6fc31f1838aecaa9dbdcd4a2923e4d419553d520d2665761c4f7214bd14e18a3f727ac7ff3fd034e2828315605bf9b301f

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\scripts.obsp

MD5 fdce28164fb5a1a22e9d2a644a2b5979
SHA1 937643e88a272e40ce30bbd2e970ed9854ee10b4
SHA256 d28ecc7548a965c887437c97b2dc7df09bbdbfd404e29bf9c6615c614290651e
SHA512 76b45a097a4d42b6417ef742153af88f2a95f1ece790c61b2c7f2a5383aa82ab28113d78866237145e32a135e2b8522ef0a5be8f8e3e3d26d83b1b599fe2fe5a

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\spawner.oppc

MD5 e80ab9c648cf9cf0b4704a598d205fe5
SHA1 782cc87953b9586ca049cb270b10f02416f52db8
SHA256 c9bcac5a02fd777cd7bc04285e8fe0628876ec033e0aaee5dd98d81cd0ceaf18
SHA512 fc5436960e21750ceb43fa4c5e4c656f091dc0bfdf38bc0ebf5c6c734c332a5e781a28ba757dc8e223e8ed5c40efe293c1a41613fa39f0f19a5d480e495abe5c

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\sw_rm04.oppc

MD5 24ca030f2019683048f8cc53120b721f
SHA1 ee27636fa2cf4e07db4accb66c0cb86c1cfb6796
SHA256 f6fe117c75543055bbd5b699427dc6e64ed28989fd3f695070368ee771ea7093
SHA512 555e1ea16407af6043a7146272ac47188263dd7393c80d7adf8041a8fa6cc9d219307d4dd2a0d9939fe2132f9cff070936be9aa191408ef9d30b1975c81ef0d0

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\sw_rm08.oppc

MD5 720b59c4adaf2ab60db658942dfc5563
SHA1 83518048c62470a3a1c7764d3f726bdd93129aee
SHA256 219027ef3a411f404ef783bc088bdea7dc70661a11b539fd32ff0d80da92c939
SHA512 ee757a6cd5c74d8f92918e772df8584ad038c25766fc0ae40847a31d9e9c13bc3e89dfada380e352079e42a6fd6b78f8fcdea4480c94a527bcd7bfd7fc5d06bc

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\TorturedGate.oppc

MD5 a62330e31937774e558ceb3e6a13733a
SHA1 0a4900167461b4b88842a8dc20f5b1c5b3b76bd9
SHA256 3f91db7112bac7d3889887ad7bca685b32015d3b2ca6bfa53198a234515d01bd
SHA512 1354ad3489c01a293545ffafe004ad3698f9305efaf8f981b9e37302ba18500175b5637f03805e36580ec7aed5fa6636744ac70890a9c09b9b143cf8b5ef5f00

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\ui_icons_tips.oppc

MD5 8d2e8752676a04cdd9283d64a71ad72e
SHA1 ece6764ea11b6f27ff45204257137259251e26ee
SHA256 8909d994033b210d07732991bb24db2812d8f40b207e7845b16557bae823e61f
SHA512 1f7b61a5c291224ba2948847a084c8e8dc6280cd1ac2b4abc37d161bacb86367d8d1e24e4221e9b502c5c22764a54f449bc5de87be6ec4f252bebfd293752e22

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\cutscene_TG02.oppc

MD5 6e56200d363305cb1b82f4407d1d94d3
SHA1 becc80e05522427196196d2d953fc4367a9ec24b
SHA256 2b7b0289cef98c4659d9dfcda795aa9f02a91ada95243e65b686a80105370011
SHA512 66e35dcfde11cd31ed2330b67c611d829b605e82fe640e2f211ee26da95d20adf47b0d39b3935270a53916e940241b643b1a47f2004fdc4a820d5c922915f41f

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\trans_06-fly.oppc

MD5 e42ec480326edbc892d78cbd08e0451a
SHA1 d84b6f94b439bd9b0bc9cf3b7731452f8b5c07cf
SHA256 53fad76c4c55c14510bc9ff871765c9ba3b0d1a77ebcdf8e42714b9bbe6262ed
SHA512 cc2be806ebf90f221ce06a8703a909a1509e5ccafdf39b647dd0805c2d51e41db087ec63dec27b76b187792c0faca31278328ce4a711487e61193c3987b3a8f3

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\shadowwar.oppc

MD5 1ed4d7b5298345836847be64bdb9da16
SHA1 025378f77a89e3b380c301a32ae0b4904fac5044
SHA256 c3139919e31a40e01299be151426d2ffea4910b4f3b7bcbf0704d56e3274f921
SHA512 507c0d0039ef9752853718d2f1788bcad4762116bb94276217b332daec69178807df70c0cc57c4e24bd85967545ed7ac8d2913502955844734c76ff1230cfd23

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\sw_rm13.oppc

MD5 3a44d94d552bbe6f298ebd9553c3a502
SHA1 7dcb5f1147701185b6236232c40c31d5a70881ca
SHA256 37e41b8606690d5c1eaa0411bf17501187d0d93bed107bb0450ef51b295b989b
SHA512 a1aa1fe714d6215ff173285fa85ce9f8fc6944fc00ee957b139c5300138a21242a16894d336c627eccbf1ddc33d5971e8fb433e6af4bc429b1c5feb9138aa90e

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\torturecoil.oppc

MD5 c2669870f4c6d4017f7beef1f0dc4b7f
SHA1 e82212f3a665c029187af4f6bf305edcde9164ea
SHA256 0f0d67dd310edc51ac875a258d1f7b60b0aed5aa759df1149ddbd24c21b4c457
SHA512 032b2115182edfb17575edebc95463f501cfe94fe7551d6438aa33f2c51ec976de85111e17fb867401fadbc6ed61f6f43c0a92e115615bae149e9e087d534e4c

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\cutscene_013.oppc

MD5 6a07bb785c01e4da844125fb18c32ea1
SHA1 ad0a2cb7db21296050bdafe1041ecbc1983a42f7
SHA256 d8541ae4075523dc84773cb3da2285c45587234dc5c5a8f851ebf0a0528d5f03
SHA512 c772d4f01ee2c1714839f31889d5c6ccf4829beeac44b4d799c007937ecf30ba0a983e2058750fb3c137dad5b51fa3e16cc9b2fcdbe5af622da4e9840fcf3033

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\cutscene_010.oppc

MD5 dfad8688cdb2e4ddf3a1c98f14f35281
SHA1 907c933ef1d115f8a12094bfd904e6bd9a0f1cd9
SHA256 c1c8ce7280493758942f4e03044da5dc1353213120dd9ef89a4e05935db926d1
SHA512 c6d9642d530d96f3a0b3563f880754ebc53729ba82cdfb59b60750401c29bac46e5c2d09cbffc09f1d359724fb4057d6360f027d27c29d688f48ba48afab4411

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\videos\Scene_10.wmv

MD5 a8fd7a73ffc6e60aac48e5063e3fbe2b
SHA1 575140067ac0a5c32b07aab1ee21c8a6fe9fa667
SHA256 6fe84423f78809c7e3f0803ba44b47f18ef0d63ee4cfbc82c2ef8b02eb7937e8
SHA512 48c262009e65dc1ca176d84417dc620c29f96df52154c88a381c68841e2636fbf96ed900bf34c49753c9eea75e628b06dec21b02a65484c84c49f9ae2a34e809

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\videos\Scene_31.wmv

MD5 6bb0a49a71a4f91cee38a03f46a6c71d
SHA1 80e843a26bf54d713a8b3a9e153a5ab75dafee89
SHA256 79e694d97e44e9ea435b550ce3d58b02d9570382d141a5ef457ff4475a854087
SHA512 27acd8490ee3609876008dc5e236ae42e1d53ee1e2bba5a62331ef6a00bfc71882c98a50b1bb9329448f76d3b4e59552a0d79318d94fec91335ccc9a5f7b6116

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\videos\Scene_28.wmv

MD5 84089aab96e137ab020e56f5b1309b21
SHA1 a2cdc0262707f023b3e3ac7034326fca1daf3aab
SHA256 5c896ddd25de7f8acbdb43b2420bb0d52094262d812da5ded46233b5f5decf91
SHA512 6218a4dc9f5b60f0423e9f07a0e58de87477bc7de409890072c531569bffc412141766a1d5f10c8938aff60ebcbdc22d3dce36ae8c322627c97a19560960c581

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\videos\Scene_43.wmv

MD5 4e8d62208921c168e7a3b20816a18c4a
SHA1 ba51281b1e67873392e8cc9a8c1933a688b3302e
SHA256 3e92cb119c5a53d607b54d4ac6484a5f0ee710ce1c968b67be9733ca00425b22
SHA512 f6072a20e036c0502b95181aec15866ff3734f3736ecdfc5ebe4c178ce895521829886f7763a32a0f50ffa855ca4f192d1ee93038147ea8afebba31dd06548e9

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\videos\Scene_45x.wmv

MD5 de8b3b49ea1a6b3728a5c043b71e34bb
SHA1 c5d4160e9938dc47550443d1d1f69f6b3c92616a
SHA256 9ebf6ac2d3b52285e7fa26f98917abb221fe25b3df11f4d3c1446ffb2d572d27
SHA512 8478ec6070d8c09e39239668c41d020db85b723bbdb15d2f133793f55d73fafa70fbc4b77c5b419da0062916750ceb100b2f0d90560c9d7837417d1e672be0b0

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\duskqueen.oppc

MD5 a90381aab1a1af3aeadfa1631c0c5327
SHA1 db13ea7e8ffebd40a41250d6d17637f41b1220db
SHA256 7edf007571a5714407108dc3828df1a0ec67521f2e1dd0b187447869d85ae004
SHA512 04e0a674060fac5d3c8a7d94ff5d3f09e31af0056a41cc2e36a118aa9463466b25dc7da43021506521ddb24bd15f8010d839092e2989df2afa9838ca0ff86f78

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\cutscene_vulgrim.oppc

MD5 c1e848e7f1fe560bfc0fe1d49bb18518
SHA1 38ecfb7ef9bfa45432bd93e26908f86c23bcf5df
SHA256 e0553bff8d803ae8a2ee3681b2b8050e11f1bf2ec8ea4076691e0eaf31037f39
SHA512 79e53ec3796b9baf33e45472390db4e18bf9f6eca4c6ed240cc148b9224cb52265d4d6f97f2ff7b378b1e2715edcf6fd73eaa904223b0e50d9549941c5d26c74

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\videos\Scene_08.wmv

MD5 9f8666cdeb035750fee8b7bb29eeca6b
SHA1 8f34c7984728d8988cc9016e2b5ea7a3c98191c7
SHA256 8954b8bdd7fa4d48ea7f1a5945dcee662b444ac5633569c978dfc217a94f6865
SHA512 b2f0c36a77b75a11746e30aae59b9efdf028b0f4706290617362876d45b17522f347963aec3089c8b9fb73854264bd39ac0f36807fe1004485644f43cbc20858

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\War_Abyssum.oppc

MD5 c13a4914dda5018ca3a5fc98de91b418
SHA1 92ef3cbc94aa70129b83e86d3d5b1d15b20bab05
SHA256 24e63afc2d63ffc9c5ee97d6d14500c0c35020040d75aa410258f1651b7d292c
SHA512 fb6ed891b15d7bcb56cbad4af4898051385d9a7c8bbaf39e305ba1364140841c323d808e2c40d945512bf765a02ef51ac1de3600a5fd61ef0ba1e18d1e865445

C:\Program Files (x86)\Steam\appcache\appinfo.vdf

MD5 cf7d99587abd440690a48899bfe40819
SHA1 4dcc7a6b5d2565b6959696aa0791a80f2fd4cbf6
SHA256 0901bd7ff769de9204e232b5392a8ba1e0517c460b05477551341bcbea169bc0
SHA512 bd4c91d816c79a9972306dcd3dafc39140fe2b4814b6c6d448fb96fbcf5f999e8618bc6242d01546d773ec0105102c1a764917bc2b804f6b80a9b62ecb378067

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\ic_props.oppc

MD5 e1b91371b03bf0d4a9c0ef76001ab3fd
SHA1 73c301319239186723cb81495a208c8bc6530ddd
SHA256 3335e2fad1fecb9dcb5d743db54dc433a1cfb37ce941c9ad5f094430a99203fc
SHA512 9ced6f2870e12a0fc7a69c257b0d6c8221803bb8f7c9c384484fc916fcb06a92f436df51937edb107bf912feca5525f5957bc88bffd308bc427b4cdcc277765a

C:\Program Files (x86)\Steam\appcache\librarycache\assets.vdf

MD5 67befcc861a6380ac0ba1ca42582fcc9
SHA1 310530691c048dd0a2299a413515e1d691ec639d
SHA256 0b0e49f9c1d0e0ed8ca12e07ebb5736ee235eb2ecf865a405d00483e8dfce830
SHA512 71848420a43028f4bd2cf4ae64225c176311fe21ca804e50661b35968475e814808d63b1aa4d6f55d8266d12958034a1e0329614a295680c6b123be9eed59890

C:\Program Files (x86)\Steam\appcache\librarycache\assets.vdf~RFe7004b9.TMP

MD5 f5e2f0daeaac9303b283269d826b5d08
SHA1 7de1ec0f744adccdf13ccd57b7eb338bfd806718
SHA256 d33006e18a53295c73362485c51ea7078ba72573065cf11d2971cb4662377534
SHA512 a8dd80190a87c5ea4912dbcbfd059e675b5abf5c8416b9de8e45d32110aafe9cf3c302b90081a381ee414c224b4a0dcbf428ab1eb9a2235040bea39f88fd26cb

C:\Program Files (x86)\Steam\steamapps\appmanifest_50620.acf

MD5 0377b72d48cd5ac2324fdc3e4313b965
SHA1 3c61fd96c6eaa1654d509218f3cfc67283aafac1
SHA256 89e990e5534f6365f0b27b2f0609a34c9a98e41a8d08e51d6af26a11c24ace5f
SHA512 538f366d04ae24b9c757937ffa3008c38c3d61cc0571f7c8c386469aab4ba23f4e73be41d9026bc21066580c1e69e26c9ece10a432b85cfb1c402b479574d820

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\cutscene_047.oppc

MD5 622e779557698a763808f86588f175e2
SHA1 7439eaf67a5ff3f283dd18465ae0a5903713f2d6
SHA256 b1bbd78306d30a756b380077a9be5a5b7eabf7c405fbf12ec3b8e6c8f75c2914
SHA512 d12faa0616dc77a80d8aaff1d1246923fcc6c16a98897fe9475ac549595c73bc22d51be3451f9ff0900ade3bc8118ef94feac0a450f9f80708b22c818836513e

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\OT_Boss_Tns.oppc

MD5 8194cc42049cde2575ae7363670d11e6
SHA1 c41a1c3e3cb8ce01de60796b792185069306a2db
SHA256 5ec98d5c8b5e46d5d067cea5705e376d8e3af95afa91e2fbb3fde2d954f1e5d6
SHA512 91b54eed8b7d6e002d9d22126e3acd293f188c5b201cf0dc062210b34d96396bdcad198fd84c7fb7eb12faba88172b97158367e24d337ff607fa2a4777bb91d6

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\lighting_CI_Fly_01.oppc

MD5 45149de75a0a74c273bd01e765cd7608
SHA1 f8aa7bf84766eb2a9a69594cdd45531dbeed27ed
SHA256 011a0e8edec8579ee47a7fe36a3f0336d9c12cab5ac72899e447d2c7f0efea6d
SHA512 76d580091734be6a39f45585acb21ebe761c93455763126239f7fc45a835ecc8115b5ca2fdb83bfcc88c1a96acbb9071dfdd8625fc389b5c1bb5c9403046ace4

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\cutscene_048.oppc

MD5 c8220e7e427cf8be476adeddcda7f6df
SHA1 6dd68a5a6a99f0b7a5c341ee50c312bba59cb6a4
SHA256 8bbd52d2df2555029ba06fa6f810b2e7bb1a9edf8c68e466e34bf0491cc1b91c
SHA512 1f56082900e57206e9aecf30fcc5caa24137b6abd6b301fb55f15f1547fb32e5bbfc7c3097ddc2b8ac7b71143d7b68c6cb0151cdbdb12ecdec3d3d18da2038cc

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\lighting_OT_Int_Rm05.oppc

MD5 ab02de01bfd4dc8d61e32baf6ac0e7fc
SHA1 92a8f18db971c7575337c2cdc09d55cb03a98d79
SHA256 2fd80ab89ca44caac57ad975c571feb053e76abe84e6b02d88677a12fe150e7e
SHA512 e79fd7f6bb880d3412fa3c098da84af52cd583e95d323664f2ae42c9ffe79d274a6b2f6b3aa1de83d2f8c86958d11d5ae51e469dea253949d8f4c21f190e15cb

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\lighting_Ch_Cat_Rm04.oppc

MD5 81cf25e4ff6aee166994cba5e1db7d8a
SHA1 99380ffb5c35b977a5eb8f132352c45199112485
SHA256 06f932d8fa1b49c3d80d84aa631e71ad579d142bb55ff1b6b523dd3184137a2b
SHA512 c4e9b9866992765dd7f762292069c58a82416f3ad56a10113e55499310d151d09c1f549b36ff6d632640b1f5e7ab11cc3bec13f5ff3c4f48e4845ff6244f621d

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\ot_ext_rm03.oppc

MD5 fa7ef832502f438cb02cd94d1ef558fc
SHA1 d52b43b21e746fed743ce7a7c6ce62ca0958885e
SHA256 5ce1e189b7fd258d820efed3007a209ca9e60b400a58205f1282e5369d1bd489
SHA512 00e29763e3f21772da98de584aa90762d64c9d36763bdb93fad52fb1029b69ac2956b05b5c8a04b4e2d4b86bdae6a44751050815222da810b633b14c720f4c30

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\sw_tns_00.oppc

MD5 bc4b46a8a4c2a822cd53d20974201d57
SHA1 52adb5a1eef2cb18ae80087535b9fb3ba5b986b4
SHA256 2af61b59c4efdd8a7fc7fa285895dd07c4cf5ed6521eb9d496d8d07dd91930d1
SHA512 0756f22b17cd3b2ab47233145ba3456ba30d9287f65dd444ffc25039215904d514fc9dc6e99dae679e6308d2500c8fca73e6a823937dee690998d19df104518d

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\ic_rm03.oppc

MD5 8a97fe44257c8fc1782ede02fd0af5e4
SHA1 597a6ed6650187beceb0288a98ff345a194424fe
SHA256 c1193087330c32ccc45e40e9abe7627ae267e7df83cc709e710879ed2d628245
SHA512 375fc128ce8544c636ccacf01c221caa6a75c729a4d29d73f9c8a80d1a2604787e8584f8e6135ebae7709cf136d814c37cc306d9554f0343914a361009af0106

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\lighting_CI_04.oppc

MD5 5486bfd9b251eccc32f0f52328fb783e
SHA1 4d3930bf1fbb3c0435b447c5b1a8c7d7718f2d59
SHA256 8cd47c0a036ebad1b5be18a773c48e14ccc86fffe7a4a404f557dfadfb8a2e68
SHA512 f255c958400eab21b965b865d7b0f6b6f68b36e341f76ab82babb03c06c27aa06a6b82fe4dd694c3f7ca964c81978605dbad3e6bf62c3358dae8dec903571a1e

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\sw_rm02.oppc

MD5 683ddce1585fb407e95f0f4dd6194206
SHA1 35ca728b2642694a74e2b34ce5a85bb92942387c
SHA256 90623603ece1d5d6492853c6960fe69e2e646c85bf4ec9e93d0b2279d5d6e5b7
SHA512 aa6a003ad2ac649b1ec20e96242154c835ae7f0726eda2daea19c83f95eb0cfd85b1710b45cef3193563f6177ea1c29b7d3dc10adb2d6bab4bcc85650a38415f

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\videos\AMD_Logo_movie.wmv

MD5 d2f6e7048034762a21ad6321530d1518
SHA1 5d85b6661983092c57c2f04cd91d928cb1c4b086
SHA256 4f70bc09bac13c865cbde5d92376d83b5750a303404f56a76075c216eaf334e8
SHA512 dbab0dcfb991c2aca30bd270b664b2f99956012f30c43ef2a89ab5b303d72956577176f0797fe6a029eddee36c5470d0a37dcfb5cc798cf57da4d841a08d2b06

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\sw_rm07.oppc

MD5 3bb3ac77918f7285faf6d67b90292775
SHA1 d8cc87576d0efb8de7c1d3c8135a61c5bce8feef
SHA256 35f6d6532e8f5d4a0ed1bd2809b3ea6b01f10da978bb359cd05db96672cca452
SHA512 d9cdd5d6213f295be5090a30751b6b264b2703ed5cdc636a67733d7398c24378a6e94fe9a21cc3a494e64d7001c2c346b606f465fd77a6e87e5476efe0c9e3ea

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\lighting_SW_Rm02.oppc

MD5 941c3100d2f7b58eef959cd95948ebbd
SHA1 3568f8702ed18bbd92bb6dc96371e0316726735d
SHA256 00ea11780d13b9ece9dad9e2ba68a01d4bd340c3ff58eb97c1e8a205768c3d61
SHA512 7d45e7dfd34a8695be069f17731a13686183729295df397562d1d0d73ff791abe7e2560d0b57f199e2e08f065e4867946665ddf23b76e893afd0b816336fd5b8

C:\Program Files (x86)\Steam\steamapps\downloading\50620\media\ot_boss.oppc

MD5 d8324d7ae8c2321343046f8a6d5753f6
SHA1 8024f58e6d972c4543ee9bbcacd6da84d2e4c8fa
SHA256 c3c8d5684e494e3cc94592b96bba4ee3309303df0248fbe15d69591e274356dd
SHA512 1c08e45ca6b14905a1f72cb9f543f89161a6a92ed939007e53a5df412e68a6010966ed27123e3a08289bb933b92d7bda0799dd33b6020bcbba7d04f3e710cbf3

C:\Program Files (x86)\Steam\steamapps\libraryfolders.vdf

MD5 6031c0e05f7cd8723a6f70130732b8a7
SHA1 d2768b736673c7e9156d669e39c72e3ee173f7d1
SHA256 75bb9f12523ed637fc0d5a0fb16a1a0093734b713a0730d33d36f1eace2d2ea7
SHA512 4055ad49ce381ad7ae84a32284c1b46d10a46bfeddd37cd5a16d6e3796822173da6241daa59dbc4cc2619bb6eb5eb439bcfd90c352661658c128b2dab1dc7f1d

C:\Program Files (x86)\Steam\steamapps\libraryfolders.vdf

MD5 bcc8ca19ba2114c0c72c2180c080dd9d
SHA1 d857676183e7d428197d1b1bd01188120e3319ff
SHA256 8b4aaaa8c51b117d64c126d4f393b8759aadc66a1774842e6ceca740182219b0
SHA512 ab837f17b41cbb379e5c3e510986e8717b6d3d0ed252e0b8868416c2b9c04892f090ecff8273405881d0b6c98178ed707c31eeefe94e024c5db77b6afff00cc8

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\City04_skydome.oppc

MD5 70ef78f239e96683a0bf50467798842e
SHA1 1675db6c0b6cc7cea9d0ec4141cdab9b8ef726cd
SHA256 dc969cf2f084a82320acf363fb51c687a0e05615ce67780d6ddc13c47f77147d
SHA512 12152c51a4d5f3ae58c792037d64f996e4e9d2a8a4ea93f8fadc6cbede943b900e01496f4161bd0fb973efb7a6e4ce5f7f132256f9af5e2d22f2366547d6a2f8

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\ci_buildings.oppc

MD5 8c895cfdf9eccab12e83e3f08a05dbad
SHA1 febba5793800a07f181cb5097760a1a89792d4fa
SHA256 e6411032a71f76b6bfe93d6280273393b02259ab3d6d5008087bdbaf50dfd2b0
SHA512 000b30d4eae8f64e2335cd5eab5bdeb0d25edacf0c2f30aff5afe15e87d70b915ce47e5b467c90ff8f9118b577e19a310d9824152bc41038029ffd2cdd195cc0

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\cutscene_004.oppc

MD5 6745fb0ad9d851eaa016ffc626730e60
SHA1 026c1230a4408fe9bde4aa6a312c23d69926b93d
SHA256 5df2698207fda1d2c532d372dbf8533d5bdd036cb6d3af8ab952488625a4eefd
SHA512 056d213042f9c837176b7b7cc9c7951fed872bcf57b8e8b952268ff8dfdaeb515804ea79dc33d9e8f56ed61ac8651c11a980f12d97cab60059fc8ca9ad392978

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\CI_SmithStone.oppc

MD5 bcc8ef9a67864929d3a0286dae201d8f
SHA1 207cacd4a9bd6baccac56ad6c5a68610ef62a981
SHA256 49c9a4a155e3f154b43a79a2e1bbdc8e4c000ff5ef4279475f75cf1cda1ac135
SHA512 44b46dc755f22e6a4fdd41483b59b40941766584e5413503225587b61a59d342b86fff13124225fa2a673308843572ffc960fd1a6c1edaff9d3aee7b75a8dc78

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\city_fly01.oppc

MD5 62f57878ca7240cda60627d272503643
SHA1 1517036150b341851da35f1cca0b5dea5135027d
SHA256 e99a5c979dc7f7ef4ed8b4780cf0ee422fa326815750cc0abea788337bdb2b8b
SHA512 ebac2223209226e8e1ec45246d8d8f8e8339ea4b3c87ff0da41101f81caa4e9f865e5e8a78512325f058bf49ef30fc11528ca0bba4b910e9c06d316f1cb558a6

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\cutscene_034.oppc

MD5 db1bee3f6ed049e79a7e34e83f1e4189
SHA1 81d80761fd6e298ff89a655a9bee7da7226df86a
SHA256 a5bbf45188ea01edceace7772d72d24a0b92e1bc239c5cdff85c35f59c49ea39
SHA512 2a4de40211473ced3284512de4f507a0481eb7e9f3efb2f077726f1f91caf8a691ca5aaa3f1c65f9d198cb2e2e06fe00a5829e7e1cbb8de8ce70ce25bab45681

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\Mayhem_TGate.oppc

MD5 753efcbe534478dc0f2b40684f3fd6e5
SHA1 5d4501357d2548a6dd394559cabf9cfacb8661e8
SHA256 511a4622cd740a61d5f53a70aadabc6f15ecba62ffb49be6d445efa01c9c0983
SHA512 0a2ce453d186536ca9818e7fe0a4bca9cadabd8af71ac80a61ef9cf4dff0bc042f868c4b201577c541541cdeb3d7df760ef2b1d62890e1b906e2f09b9a5ffa12

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\lighting_SW_Tns_02.oppc

MD5 76b9352803c780da92120bdd0f17dbcc
SHA1 0460bddeeae5b96d1199c7f7ea83b6ff28e0b8b9
SHA256 4c2f9899f9ffe3df6e5fe1043aef2932d565b1571bb911164fd948b328d17c5f
SHA512 3f610c62986684ef79e6326417dd1297e8b1c392309db3d2a7fa54ee9b5c9c68a09c8c9cfc1a11ed441685f4ffb5890cab3bdbc62a36680f7ebaf40a817db590

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\trans_03-06.oppc

MD5 b14f374cc0056850335ad2fbee85dd81
SHA1 b25efc10bac92de771ab326b6ca0a7a47c329324
SHA256 1ef7cb30f35ac147f93d6a790875fa0769f069fd9f3a1dcc13794dbdd719739a
SHA512 b1b9820cace91ae8c514db4cc47922a04e1ae5323c4ef3750bdcccc51aafb7c41f9c4ee197d76023a6e28d4a62da600d84935ebacfe9a50fb32b22c0e5c75dfb

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\videos\Scene_26.wmv

MD5 fc526dbc5e270a07130fa8329733db52
SHA1 6afa72ec722df1311818827438507c93e320f03a
SHA256 3a44c63df214b1fe58697b05278d790de6e83e521a93d3635d9a6eb6a8eb2645
SHA512 351a108230b3b2355e8c6dccf8f73b876fb00a90070a55c8e063550908583979af2cc8ba686dc072fd7fb54550d45daab2664b731089c401cdd1f7c126def7ed

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\DSInstallScript.vdf

MD5 28696d10af4b67280364f5f1237c9c25
SHA1 6ae7b7d5d8fb476843d45498a3cd04eca4a3fab9
SHA256 2bedff2ac0cb3b03d193bf3a5eb8f733b584078b1a910c2020fe568ac458536e
SHA512 99fb35f21c56912d468da48104f81fa072d96afff1a347adf19d2ec3a0a20d297f962a0eb826a832d4bc27a32d0ba9badad3001036e02bfc0bc9ab87960098a4

C:\Program Files (x86)\Steam\steamapps\appmanifest_50620.acf

MD5 67ab5c74ee93c3164f0aaff0d5216998
SHA1 28b027dbaecc88324f8042c7fead742ea5531843
SHA256 b16cb4efb1855205d5f1403c59530354cce36f5b23f7963bbdac4e3b34abd5ea
SHA512 b39d787b8fa1b3cdfbda3367248896c15221d7c628f36b312e06bb5de4ac2dafb5490640b20c7db37c6b10d6a66125d6b0bd59aa94bc16ce3ee854443c5830f6

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\videos\Vigil_Logo1280x720.wmv

MD5 818d40521a3cf4fd747dbb7090c90f70
SHA1 daa9cdf5413a74c2b44473d4443fe9bdd9dd586f
SHA256 43ed720b4a3d45045dbdbc0509aa59810595949191fe6cd374622ea0586135c8
SHA512 fa4c671d90f83812b4f9fc707fc1287e7f8986f30989e22be88aabe3d14846e91b5f5aa692b2ff78446af7f023a68106db16536707fa18b8ce44deba3bebf1a4

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\videos\Scene_31b.wmv

MD5 8d52f64707b667a81bd3025496d1adef
SHA1 76290e66769820a971b3466dc1a43d599745d5bc
SHA256 8a1bf65589dcd2a8c632d0cfebfc64939ae0d83d0712bbe9423ccaa414f91dc1
SHA512 8a7108fb6e1013e9459ae6959c5cc627a8026ac960343b731b01b22f98ac6893df4c9e598191f16ad20a1939de2471425f9f0531bbf0107dfaac649497663602

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\DarksidersPC.exe

MD5 1e5ea833c034b303d94e1dbba806a882
SHA1 7049351d7fea43d0996a94e2df8d4f7888011870
SHA256 e4fe9f1f7eab6eb131bcb4706a84c336d2edc3fb706a3df1df58f356a027da69
SHA512 c392c71e5d85b2987f9a191cee60eb25fae9709e2eef978d12be2204137ab0fb9a085e8e149209f6e2b8a9ec98971967c5ad5c60f3ca5f8e6b903dfc69b991bd

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\undead_champion.oppc

MD5 86b0e889287b35aa842da55c44db32c2
SHA1 0c680bc47322c08155aeb4973f18cdfadde4209a
SHA256 651637ff06bebd4342b96b692a290a5a3a23b5cbeb43a9d8c86d462dbccb946e
SHA512 848d446bd6665d4e1064360255333ff9e230695c17dddab2dcb2c21b9cb5041439c374d3ce14fd9ee436e4fdb1d07c84be7e7e0a505df5a7d83f8cea09d8d97e

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\ui_core.oppc

MD5 cd117902637ee0614a10b9a8145b704f
SHA1 cf156a5b76c0b7fabfd889e4022d49615d1aa7dc
SHA256 4d20b95c45debcb946a9d38b63a178bcb9b58e298366d47d119bed82ccc803d1
SHA512 c6be0ec1aac96ef150d4ee4b1af9fbe90595bae25cc964793d7c7fc6db7cfbeb53882cf034f2014999cc338a45d33d6df531caba479af90a6fa42b50cf112fa8

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\sw_tns_10.oppc

MD5 28f1ed11caec1bcb867b179e71e81cc6
SHA1 620a21ce42e1c1ae281ba2e12c271610f36c6950
SHA256 35639f931f9b2eb3f3b4fcc533bebd97e082ecf35259f9f0905bdc4bc8ec8cfd
SHA512 410dfdf183d12cd343af58eb3192c931db80cffef1b8b601cef6ca80b08cae316aaf836c7f3dac7dacbac3901ccf7890e01002133d5aaba8dc89078093b91f8d

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\sw_rm05.oppc

MD5 8448cbb494ac5ea69a611e111e5c8285
SHA1 b5f6e06a3f5b6da49fc9b780a394ec7b964266c2
SHA256 38878aaaf39841ce31c8df56b5ce7f2de61a12a2fbc9cd446dbfeac357be2e80
SHA512 65cb92435b71912814a41e9c9dfe8536dc5e140405f096aa579c68f81d0fb99488fdea9c2f642a1bc4bda672376806733783b4d4e771c24c06623b23b9423357

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\sw_doors.oppc

MD5 992659b139f7aa3e20e79b144ae9ba82
SHA1 89c52ed41d851366ae64aa51d005880304a8da3b
SHA256 eb28c68eb70cb50b0c5ff959960e66edd3105d1cf40b8e6960b9684bb023caaf
SHA512 e7712a4a400ca648b8b57fdd7dd322349be68d7e8009ea34ff4d986d6edb59a82b3f939fce04d2066699f42213cf255e183d33260edab19254ea053950ef3d32

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\soulbridge.oppc

MD5 dcb4f9e6cd8ca0e72f695fbf5289c7ca
SHA1 378fb4b322984748e2348bfc3aa2e340fca1acdc
SHA256 88f3d047a7b6a4c001b072fb1be0681de753acd71e7326d20569914cc83a9ae1
SHA512 55c64d6dfc9b1a1f6a8e2e07c1800c9e3742bf81e03477066e203c05d0979303f50a943efa9c7027aebaed9dd65da1fa86c19dc9b8d553c7c7004dbab860483c

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\videos\Scene_05.wmv

MD5 e6f98a1d4e21320f1aedb31abad86b46
SHA1 0d4b3bb9562607dc0ac82c8b266d4c862abbc1c7
SHA256 1ac8bde84bb37e4d910e2b2aea0014aa0d1bd23b0acab76918cc493ab4db4cb7
SHA512 b27a7c4a0cef866b763c8868d94a954799f3d26f5c80af2bcbaf394c4ca2ea0966a5be0cb93b80ff72d0ca5d74a093875ffda2de96d1f79b4408fc162a0e1c91

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\SW_Tns_02.oppc

MD5 ce527990db6532ffb626a697a99491a1
SHA1 da4b5051970afae05225675f0a8bc2a11bc86d55
SHA256 614f57de01bb133a1ffb34e420ba04af5e3d6c02b9b03c4481898561b9255476
SHA512 5910d49f61f2326720b161ce95e5e863c486c2d6b0cd528b9ab00ee37bf6817deeb4f2bab25f3aac90aab7faf366bf8e2becbe72e5895d8170f9a7213db8876d

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\sw_rm10.oppc

MD5 4f227a658780a6e1b701f0be841b774d
SHA1 9c464ffe4396012aa4dfcef7d01aa2ff7b6cf0c8
SHA256 d653e3af55df0f70a4212b4b68af2ece4c373cb2ef44c5b39d8e515851db7c3d
SHA512 57866820615f56365caac6457c108a6b4bc70fb5f32d8497857762f8f3be1961b84b4c6fe0c4ec6ee63a43ee0c1d1cfc3347397a5819a15696864c2a8cbe9224

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\sw_rm03.oppc

MD5 fa1d3be868d7cafc1aae7e76245a8ceb
SHA1 e2a749c30ff037eaa003d65dd74a38280fa8ac5a
SHA256 3a8be962205d289eed3c1a95295b0a2dd62fa917ca70d01e92afa5af0faffb4a
SHA512 6beae10430b89a0eb9c28ecb99ce442479be0728ec7bf8b7884fd7e577336105600ca9f075789a7c1aae2bcf7cbe5f64bbb2c2bbcb3ce688e57711283a655108

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\ot_int_rm05.oppc

MD5 c239bc2e6ed34084f984573dd4d8fd01
SHA1 b5867dd897ed45c81a07264aa9e4e41965155b8d
SHA256 399d006b0427894b549c21286feefcb1fcd8c98c0a739caccaaffbfa1761fc63
SHA512 7132abacfb048b087a77e8f604d58698d4906d87596239b84b854560e98c62a50307f302390fe93d63ff539c6d444570a87fac40ae501676983846a6c3393d5e

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\OT_Int_Rm01.oppc

MD5 8ffe4cb92059a4f6b33197f0499f67c2
SHA1 bdae66bba3b29b96a61e15cedc280a9d32c4cda8
SHA256 99bc9759f4c35bcdb61433d6c088daa3bdf5b238c0b37914a39915c4a50e47ac
SHA512 90d7248712df2f3312f27074279b78c47301bc8e2d87c1aea8d22c4a924da3d1cc6173b2a3bab35fe11783a2ab91bf3720c37d9e56c07227e72d56076f31e44f

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\subway_common.oppc

MD5 98bbfc3188362bf890c93a8848442192
SHA1 d5aa3b52d7af30f4db6ae5d461942b29ababe823
SHA256 b423556243a656e08f52d159c5081728635b4ea16a16a82d7e2f6391bd225709
SHA512 9e88f1d25fc9f9e7cb85de4c6e27b5b4346b76a721aebff0463b0673f7d5d0daadb2477c829b09923942ed14f7ed563e5b71556114028781723949bab9f6e290

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\Straga.oppc

MD5 9d0274e558bb6c0602f5027da114bc29
SHA1 9b0873fb79f97c197902cc35f13491fa549d4225
SHA256 19f75e51a6d8a1ebce272588863784daf8881eaa04e586b5ada0dc5500dc665a
SHA512 7099d88817ff35fbe5977e235145dab104ee1a46f618a992be542f6d6f3abd71ed06e97ddffc4517ea76921cc9ef0b1c1831c8aedc7e0dc0968883607103d515

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\lighting_OT_Int_Rm00.oppc

MD5 5275b8d92a4a5359d3216e8428415b13
SHA1 0b29a70930f1ce553fa58a17df1ffcf941e2eee9
SHA256 32580d8ebe92e0902d68ef8a118c44e0505595bdc4b264e89d147095059e5dad
SHA512 a6a939aca7124a5eb03f88d9e006bcb3f0151d976b397ee1d32acc0a13929379a416cf4358bd20b031b37affd33bdf6e184d32411eab4ff4a8806163a4440dfb

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\lighting_CI_Fly_Ch.oppc

MD5 cc5bb95076d65935331152833841423e
SHA1 1f06b5d85e1421eea8a12e474ae6ac72e7e70f40
SHA256 0a1f510625c4b5c080fe351156e343317a634c3983827ca6acf133885d5cf43a
SHA512 7128956c70fc7f7eacdca77872dc9e2335ee85011896a24431dafbcfaa5750af20d3e1433dd4351bdc93cf04252ecec4399d626c677ae40eb9aa2c8b2ed6bc75

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\lighting_Ch_Cat_Rm10.oppc

MD5 86e20b365c6556ed0ad27d93f1f14254
SHA1 ab7f35fff61c03155f57d57101346a2baee5d2be
SHA256 36b08ebeae63af645dd29ecdab06d0f1e88394bc6719e14831b04e07f27f5213
SHA512 0a874092f20dac18d5eb4ae9d3361bfecccc9ed8142b78035f509ae11cf3da2cc628453bc2d37c590b3fcb0854f448631cefab311c2500d92475e05e15d195fe

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\mayhem_props.oppc

MD5 16560b565deb02c4f6c619aa7800f225
SHA1 ae011b2d3f505320bf85d7b0ef13d89fe2d3d2e1
SHA256 7a8c1946d4836689e78a31f15a3a8da2929d1f0d0f94f50fd03be0c4ce516d4e
SHA512 e688191aed167cdf6a184e0e8a18e2a80619e7bd73590895866a373c55722a503244292e49602db40de22345e7e0fa08ca746dcdf887fc4021e7bbd68c00d3d2

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\Mayhem_Common.oppc

MD5 63fbdda6befdbdec1c434d12e23f2403
SHA1 44bae14de2dbf111f5111bb57194c52235ad3c13
SHA256 ca3934380e8a83eefe3570a70a9e5660c6e8ee651da628e2ec733c87d948f7da
SHA512 0f45df1677f83bd05c542776d5969575c81c07dcd9c1fdbe212a1bd929fbf9eab72f834944c7ffd8b45b73f117642ad41ea763ba15fdd4c1fd887082f9184718

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\Mayhem_05.oppc

MD5 ee192b8af4b7e03bf095299608ca112e
SHA1 6f6f79cf66bd9b577805fec0d0c60e411a7eea31
SHA256 c7ab10b5f01e54f0aa23cd7a6cf169599fecfbf68130c4685151d1faa457d61e
SHA512 c716803ecefe269688f771392c2b2427ce923ccca1fcedea2bdce14f7a844f588803fc1ed24107fe0f38820ac9d57082cd7fbca29b5003d31a1808af3fece50b

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\lighting_OT_Int_Rm07.oppc

MD5 6ccc2eeb56727f68bbbc2c68b0d8c60f
SHA1 015e487a1e3caf7b9b61023151c1ffe10dba6ebf
SHA256 6c484432526e13a20f5a802ebb3801f82ffc132bdc5d37080092d90ae3fd1bc3
SHA512 2a9f9ec2a4bd941b483df3363b9bc0d4baafa918be51c08b6a7ed338a282a2ced66832e1a2a77911c20864ccc9766ef71296f2bb095032204048b930744ee886

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\lighting_OT_Boss.oppc

MD5 79e6ed3b7466c7498a553e2f462c6b15
SHA1 4f631f7c33b26d4d1df3fdc03eee725b34b82714
SHA256 67f7e8e5fe492d5049f83e0e5e731251b523a288dcaa485983c9d2f2a496e763
SHA512 c3f1587edba2383c1ca93e17df89169b0185e0ef39e066f8aa23ecd83aa7b26f0174386e9fdb9a2b15573ce59a43eba8da3c5425de3c3e7215dae1e878a2b490

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\lighting_IC_Rm04.oppc

MD5 c0ba5406d16deb17e79a118b7aed03e7
SHA1 c7045f3a5b39a6cb02ed657860b1fe93b0c9661c
SHA256 85754dc0f8204c7e11c16466e40e86d8e9c256f93356a07315737d3357b43160
SHA512 ba8dc91db6262c4ab721b31094f632a76d744834ec020e17430016dfa6f7ec0c6ed4ca833ca788643366d51cc8c705818cdeb90f1060d313716875fbf76d3ffe

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\ic_rm09.oppc

MD5 b504517548bde60960d582eb22326797
SHA1 b4f7ca866ad044a5bf99c25ae7c18158b9f91d00
SHA256 eb2a4b9944a572d35bffbd0112b368a4a9aae964a440b8f4a4a02e22be161354
SHA512 1499b2c4b62069738adb30e5f09c2228b53c36fc1c4536704d963ee34b41ba78d02ac57e5dfdfd45b535d087b66b956a437037f388e54339559059055cc824bb

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\lighting_CI_FLY_03.oppc

MD5 44d26d92aa4a9027754fdb414df1522c
SHA1 033d1c4b24781ed82877703c860046a31287dbb5
SHA256 ca4c77e618171277133ec8a100d245cf085d19a7ca2c05e5ff3bcdc179e4f302
SHA512 82a49bce1da631231ffac69f263c7dd58897c11ef0de1bceb39f862553803887290c4bbbaabcdde00b59ef27cbb5b1e328a4f4b6c5dfd99c73593271a1fa6536

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\lighting_CI_Fly_02.oppc

MD5 9284b6bf791ccb4355e8e525655d11d9
SHA1 f001beaccf5fdc7b3ac0b7e72919b5f63f21d10c
SHA256 d266ac765a9f934e90b6b8f39fab153aba71bd79e7c1ae550945d69f89567222
SHA512 395542ff9d1b32cf635c5f895f72044b241876cec943752d4662d3acdd6756a83a6b6e161f2abd8f939d244c67678e8d58321f0771bbe932416608d1a548d069

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\ic_rm02.oppc

MD5 3147af27e96ca0716fffe2ef71686032
SHA1 9da97898da4d5d037822191f353d49385a67f2c1
SHA256 ee4aea3a7e3051d386e2ebee461de8f9d30d6cd88a78e20a087eaf6a788e8ccc
SHA512 773ddcfd85d594f968f5a32be269cef3dab37f4ac5f071b00293d3ee5b752f899e9009f3ecf4cc9ae146d717f6c70fd5909cf1cef6d3263b6fdcaca329533d78

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\lighting_Ch_Cat_Rm08.oppc

MD5 1e9080edeacddd1a3e0896becec4a03d
SHA1 814a7a67cc228cfbadfbedf58ad895909c543c5c
SHA256 ee39a2dfc5aa6b1e8df3bf1bd496ddcd9b35f448cced3cb8dffb41ccbd6f0699
SHA512 4e69c0974e36628b9600dc3ba52d0e0760706f7fc5a9fdd3c9309f42e5d16cc5e86d1325f330b6c1b584b80ea8251b453a34a4280219a159acafebdafe0fc729

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\cutscene_TG01.oppc

MD5 7f3b82303fc4d4470f4f1b1e02641de0
SHA1 e26cdd5d78b80ba14f33e244a990c562ef0c3255
SHA256 a73bfe75fddbfafd873a6cb74fd38c6100745e2059d1104c97e2f13dfdfb961e
SHA512 ed8e6637bb17a833633c006bf7611e45eac217be177548a677d7032e58c119bf9db1a5aee5a877054c68d8f9614c5806fa95ada46438872769e0e8fe6c4c313e

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\cutscene_043.oppc

MD5 9f6d933677fd1fad5bca64a60d30950c
SHA1 e86d6a399058e4afca2650c991731154e1b1c7e8
SHA256 36b803976c7c275976e754b30f64bc028f277cf9628aab93defaf97b47466145
SHA512 69bf194913c456f93f62cb5b318959176e2215b27463d0c245247194794742c002e8e68123e91570d8ff3f5087966db47cb7bd892e4a0714cc961b9d63677c49

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\cutscene_031b.oppc

MD5 c79111fc0e3e8bbdcf8dc692a335e6da
SHA1 0badc0ac6bc26280f7d5707248a32d4b076cac90
SHA256 6aca498535c47b087cbd9e32df5abadea1e03ed32de3376d35af788d87641d3d
SHA512 ba32018bbf3232d73bdda060126a5832681e0d3dc09af09a2dd12cea5330a7aed5ed882e9a3769496ca848ce57b0c12ece09a04b459e23a49059f0a20b605747

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\city06_streets.oppc

MD5 0da71a87d12dfb5d3e3c65df28b833d8
SHA1 db2e35dace41940747884fceb22be3051e2c3c0a
SHA256 c996c2d7988fe1cae2ab62f01281236c7b1ef90281ec89adef3c9d284d81fb91
SHA512 92d1fbbcebccfbc5d019161cff00509c3ca279c57fdf2f769659c7de797117c1bb116d41428fc07250be4eeb01c9da90bfd167a74fc87df081ef1a51409cbfc8

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\City03_Streets.oppc

MD5 59c8c7c2daefd2e82e04124aa93d0d65
SHA1 b804373c47c0f82c70c607a1b3901fb8dde48ea7
SHA256 5a8d47ba85e806372d234e55370ad6aabb910d6c6c6155984af2f1ed53f62104
SHA512 fbd21946fdb02c7bd773f0eaa93a9e7b4940300b8c07f82b5927c85eb8f76a89c8acade65e7e7f297e6a6cf42cc760f07857e3478c8570849048b160170e4957

C:\Program Files (x86)\Steam\steamapps\common\Darksiders\media\ashlands_transition_04.oppc

MD5 f4fb2d5ca70b13f2ac098a6deca74365
SHA1 58cf9e4b9379162e0b7fc9c6346d5f7dd096e850
SHA256 86abe2037b55a9899dccb21ab710ad0cd6bf76496edb67d68f2897f0bf9a3b5a
SHA512 abef9f299cd25f26afd92c29f683352ea5e71b1f7b2a3d838dd2b704a6dfaebcc47c112defecda0ea328162e4b4c5f4fa91ca017f8d7cdb47cdd5f7b8cc81792

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 7ee0dc59329ac981d76c55f529b63fb3
SHA1 ec777d748210e8d5a85b4883b7eaf2688c5680e8
SHA256 b8baa0ad26bbfcf3edda476e5a8a28b9d8b6468db10837171de5569907289f94
SHA512 6f26d0e44362b019d36764c66cc0608cd8ca57695546371d6eb643d721a50c217c112d13972897d08f087e4f6f370d8612325d51ef157115c3d42e416b369af6

C:\Windows\Installer\e71ac01.msi

MD5 f194e681c552647c95441877b5552415
SHA1 285c6b1dbbc2d1525c9b1c276a4901b98d49b202
SHA256 6d4f42d5856384c2566ed79bdc587993208013640b035b04540de9f05ee597d6
SHA512 8ed21ce7829a1cb6c2dd4eff2e3701171aeba5b7e4337eaf0ddff86ea3fda812198a2e3fb4f1873b129944bdc8ddb09ebbd78e5c2b9811900cb853ef2afdab8c

C:\Users\Admin\AppData\Local\Temp\{A51157B0-1C97-497E-9758-758806217642}\0x0409.ini

MD5 554aae16acc564b63af8549188334ccd
SHA1 9a3b99d2ab664ea07b0ab74a930c5ba6b4b60859
SHA256 6e780b5929ec3327b6b19aa77134b6e4544b4f0549857507a44093f9cd3fe48e
SHA512 61a1809fb0fb965761d5d37314f2d1d8e55986da0772b24b2b78d847adc1ce9c59a360ca50fd7d13e41cf64dd686b6d7256759b7825c5600aed8fca4a6da8b52

C:\Users\Admin\AppData\Local\Temp\~D8BF.tmp

MD5 ab0bbcf82a6c27d5b313395ab86ee099
SHA1 7e0bbbfc8aae46b783e582f6b2660795ea59d098
SHA256 3d28ac5ead9e61a2874d59ace440560c0e84abb153c88d11f606dee7cdc1668d
SHA512 1c11606cbab44a179deb5ac0d82fcda44a0ddbe2aac2ad9e7a4d66b1209783bf8118bf4025bff9364307ca234685a1e14b0ab4f2544049e6fb1da866993a15de

C:\Users\Admin\AppData\Local\Temp\issE4AA.tmp

MD5 c91f4ec5a591d45eda537411894b6dca
SHA1 7687cfa04ab1e4973f0d6c5bdaf3c72761d5f83f
SHA256 f470d2d8cb7d8117d7d754090bd7ae3a33b5cd9ba7355ef78c551f6792a4a4c1
SHA512 bf6329564844f15f76c0a9270efad7cbd5bf4d4a5b0010398dc4e3c984c3ef5f592f875083e97f05d3f44f23910a3c95263b7c4da365a3486567ad714129553a

C:\Users\Admin\AppData\Local\Temp\{A51157B0-1C97-497E-9758-758806217642}\_ISMSIDEL.INI

MD5 9aa3840ad1cfcc3f8a286903b51b06e3
SHA1 2ef928d607532795a30051853be124ea711d519d
SHA256 9e07ad2d05ca39743c1745a49cf7f545a1252aa062c7b86de9ab06664076010e
SHA512 e06c82147ff7a70db8d03fb70ae650b2b7a6d2529e5ee4a0b9c308a2d56aa7c543c28e6fb2a9bb8b4e1fe3480a211ed5c9f8a627da0368db805b7db3d2842481

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 c4fd77ed71ce7bae2d3ed76dd8747eb6
SHA1 02e48f2b08f5ebe8be5cdc1a1eb2908c59f6d406
SHA256 6597de16b40e4a6ef1d6174a7ab9d099c72d3ebc2f5ccda21517f2dd1aad0209
SHA512 c0d4a30b06107127b6450f4ebb1dfbc2a43a4a85621a9c1265aca1a36dc7e04b4e995a4d5851461002ffb2deeed6e257f6e2ea30cfae601bd0a03d6849306f9d