Malware Analysis Report

2025-01-18 23:56

Sample ID 241111-sejnmazhrr
Target VirtualBox-7.1.4-165100-OSX.dmg
SHA256 f8b2b649ac8b438843eeb4df017a8d2bdaed128232fedecc2c2c03789ad45a57
Tags
steam defense_evasion discovery persistence phishing privilege_escalation
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

f8b2b649ac8b438843eeb4df017a8d2bdaed128232fedecc2c2c03789ad45a57

Threat Level: Likely malicious

The file VirtualBox-7.1.4-165100-OSX.dmg was found to be: Likely malicious.

Malicious Activity Summary

steam defense_evasion discovery persistence phishing privilege_escalation

Downloads MZ/PE file

Loads dropped DLL

Executes dropped EXE

Event Triggered Execution: Component Object Model Hijacking

Checks computer location settings

Drops desktop.ini file(s)

Checks installed software on the system

Enumerates connected drives

Adds Run key to start application

Network Service Discovery

Detected potential entity reuse from brand STEAM.

Drops file in System32 directory

Suspicious use of SetThreadContext

Subvert Trust Controls: Mark-of-the-Web Bypass

Drops file in Program Files directory

Drops file in Windows directory

Access Token Manipulation: Create Process with Token

Program crash

System Location Discovery: System Language Discovery

Enumerates physical storage devices

System Network Configuration Discovery: Internet Connection Discovery

Suspicious use of WriteProcessMemory

Suspicious use of SetWindowsHookEx

Uses Task Scheduler COM API

Suspicious use of SendNotifyMessage

Suspicious use of FindShellTrayWindow

Suspicious behavior: EnumeratesProcesses

Checks SCSI registry key(s)

Uses Volume Shadow Copy service COM API

Suspicious behavior: GetForegroundWindowSpam

Modifies system certificate store

Modifies data under HKEY_USERS

Checks processor information in registry

Modifies registry class

NTFS ADS

Suspicious use of AdjustPrivilegeToken

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-11 15:02

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-11 15:02

Reported

2024-11-11 15:15

Platform

win10ltsc2021-20241023-en

Max time kernel

725s

Max time network

726s

Command Line

cmd /c C:\Users\Admin\AppData\Local\Temp\VirtualBox-7.1.4-165100-OSX.dmg

Signatures

Downloads MZ/PE file

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-870806430-2618236806-3023919190-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-870806430-2618236806-3023919190-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-870806430-2618236806-3023919190-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-870806430-2618236806-3023919190-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-870806430-2618236806-3023919190-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-870806430-2618236806-3023919190-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-870806430-2618236806-3023919190-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-870806430-2618236806-3023919190-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-870806430-2618236806-3023919190-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-870806430-2618236806-3023919190-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\steam.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-870806430-2618236806-3023919190-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-870806430-2618236806-3023919190-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-870806430-2618236806-3023919190-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-870806430-2618236806-3023919190-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-870806430-2618236806-3023919190-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-870806430-2618236806-3023919190-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-870806430-2618236806-3023919190-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-870806430-2618236806-3023919190-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A

Event Triggered Execution: Component Object Model Hijacking

persistence privilege_escalation

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\gldriverquery64.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\gldriverquery.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\vulkandriverquery64.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\vulkandriverquery.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Common Files\Steam\steamservice.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2010\vcredist_x86.exe N/A
N/A N/A \??\f:\10a2c23169599c1edc\Setup.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2010\vcredist_x64.exe N/A
N/A N/A \??\f:\d63d4bdc0d84b92b04e117ef17edd8\Setup.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-870806430-2618236806-3023919190-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Steam = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -silent" C:\Users\Admin\Downloads\SteamSetup.exe N/A

Checks installed software on the system

discovery

Drops desktop.ini file(s)

Description Indicator Process Target
File created C:\Windows\assembly\Desktop.ini C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\assembly\Desktop.ini C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\N: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\P: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\msiexec.exe N/A

Network Service Discovery

discovery
Description Indicator Process Target
N/A N/A C:\Windows\System32\GameBarPresenceWriter.exe N/A

Detected potential entity reuse from brand STEAM.

phishing steam

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\SysWOW64\SETA831.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\system32\xinput1_3.dll C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File created C:\Windows\SysWOW64\SETB96C.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\SysWOW64\d3dx10_41.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\system32\SETA056.tmp C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\SETA72D.tmp C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\x3daudio1_1.dll C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File created C:\Windows\system32\SETBDC1.tmp C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\mfcm100.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\system32\mfc100jpn.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\SysWOW64\xactengine2_6.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\SysWOW64\SETAA1C.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\system32\SETAB81.tmp C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\xactengine3_0.dll C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\d3dx9_29.dll C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File created C:\Windows\system32\SETA586.tmp C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File created C:\Windows\SysWOW64\SETAF5D.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\system32\SETB64F.tmp C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\x3daudio1_2.dll C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\xactengine2_9.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\SysWOW64\SETA89F.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\SysWOW64\SETA98E.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\SysWOW64\SETBF86.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\SysWOW64\d3dx9_26.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\SysWOW64\SETA49C.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\SysWOW64\SETB607.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\SysWOW64\xactengine3_7.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\SysWOW64\SET9DD5.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\system32\x3daudio1_0.dll C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\XAudio2_2.dll C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File created C:\Windows\SysWOW64\SETB6E6.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\system32\SETC207.tmp C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\SETAEBF.tmp C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\SETB3EF.tmp C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\SETA102.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\SysWOW64\SETA5F7.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\system32\SETB612.tmp C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\SETC0AF.tmp C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\msvcp100.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SysWOW64\SET9F7B.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\system32\D3DCompiler_38.dll C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\SETA095.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\system32\SETABF0.tmp C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\SETBF08.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\SysWOW64\d3dx9_28.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\SysWOW64\X3DAudio1_3.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\system32\SETB556.tmp C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\system32\SETC061.tmp C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File created C:\Windows\system32\SETC13C.tmp C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\mfc100fra.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SysWOW64\SETB1C4.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\SysWOW64\SETAB48.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\SysWOW64\SETAD64.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\system32\SETAD76.tmp C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\SETB529.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\SysWOW64\SETB598.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\system32\mfc100deu.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SysWOW64\SETAABB.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\system32\d3dx10_35.dll C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\SysWOW64\D3DX9_37.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\SysWOW64\D3DCompiler_37.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\SysWOW64\SETB175.tmp C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\SysWOW64\XAudio2_1.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\system32\SETB611.tmp C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sc_lt_click_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\appcache\librarycache\294420_header.jpg C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\public\steambootstrapper_german.txt C:\Users\Admin\Downloads\SteamSetup.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps5_trackpad_l_swipe_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sc_touchpad_right_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\resource\filter_banned_turkish.txt.gz_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\appcache\librarycache\570_logo.png C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Engine\EditorResources\wxRes\SubstanceAir_Import.bmp C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_090_media_0010.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sd_rtrackpad_left_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\public\steamvr_action_manifest.json_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\resource\menus\steam.menu_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\JUN2008_XAudio_x64.cab C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Engine\EditorResources\wxRes\Btn_CurvedStairs.png C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\sc_touchpad_edge_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps5_trackpad_left_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps_rb_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\bin\cef\cef.win7x64\locales\fil.pak_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\AnimTree_TickTree.bmp C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\CUR_ModeUser.bmp C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Engine\Shaders\Binaries\ShadowDepthVertexShader.bin C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\GoatGame\Localization\CHT\GfxUI.cht C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\Localization\POL\gfxuieditor.POL C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\resource\overlay_korean.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps4_button_share_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\shared_rstick_down.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Engine\Shaders\Binaries\DynamicLightingCommon.bin C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Engine\EditorResources\wxRes\Align_Top.bmp C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\graphics\tiny_x_default.tga_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\switchpro_button_plus_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps5_trackpad_right_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\appcache\librarycache\960090_header.jpg C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\KIS_Pause.bmp C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\PhAT_ConstraintMode.bmp C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steamui\localization\friendsui_tchinese-json.js_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sd_l5_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\UI_KIS_Sequence.bmp C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Engine\EditorResources\FaceFX\res\icons\togglenormals.ico C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Engine\EditorResources\wxRes\ASV_Speed_100.bmp C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\xbox_lt_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\switchpro_button_capture.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps4_trackpad_l_click_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps_color_button_x_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Engine\EditorResources\wxRes\Vbtn_ShowMeshEdges.tga C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\joyconpair_right_sl_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Engine\EditorResources\wxRes\AnimTree_LOD_Auto.bmp C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\userdata\1530346111\gamerecordings\gamerecording.pb~RFe62a737.TMP C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steam\cached\subvalidatecontactemailintro.res_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\TerrainEditor_ShiftLayerUp_Pressed.bmp C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Engine\EditorResources\wxRes\Landscape_Tool_Flatten_inactive.png C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\public\steambootstrapper_tchinese.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\xbox_rb_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps5_trackpad_ring_md.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\switchpro_lstick_left.svg_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Engine\EditorResources\wxRes\Prop_Delete.bmp C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\resource\steamscheme.res_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\steam\cached\offline_polish.html_ C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\Localization\INT\Core.int C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Engine\EditorResources\WPF\Controls\LightmapResRatioWindow.xaml C:\Program Files (x86)\Steam\steam.exe N/A
File opened for modification C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Engine\Stats\ChartStyle.css C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\resource\platform_greek.txt_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\hp_m2_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\sc_touchpad_click_lg.png_ C:\Program Files (x86)\Steam\steam.exe N/A
File created C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\switchpro_dpad_down_sm.png_ C:\Program Files (x86)\Steam\steam.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2906.0\Microsoft.DirectX.Direct3DX.xml C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\assembly\tmp\0A0WYWZS\__AssemblyInfo__.ini C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8856_1833103910\_platform_specific\win_x64\widevinecdm.dll.sig C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
File opened for modification C:\Windows\assembly\tmp\L7TSNWAX\__AssemblyInfo__.ini C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2905.0\Microsoft.DirectX.Direct3DX.xml C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3D.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectSound.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectSound.xml C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\assembly\tmp\5ZY4HSUI\__AssemblyInfo__.ini C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File created C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.AudioVideoPlayback.xml C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\assembly\tmp\CCTUQ3DB\__AssemblyInfo__.ini C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File created C:\Windows\assembly\tmp\0A0WYWZS\Microsoft.DirectX.Direct3DX.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\assembly\tmp\LOA6HOZZ\__AssemblyInfo__.ini C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\assembly\tmp\ARWSCTDE\Microsoft.DirectX.Diagnostics.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File created C:\Windows\Installer\e615f6f.msp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Diagnostics.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File created C:\Windows\assembly\tmp\L7TSNWAX\Microsoft.DirectX.Direct3DX.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\Installer\MSI63BB.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSI7179.tmp C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\assembly C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\assembly\GACLock.dat C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\assembly\tmp\2ZFS4R26\__AssemblyInfo__.ini C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\Installer\e615f68.msp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\assembly\pubpol24.dat C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2904.0\Microsoft.DirectX.Direct3DX.xml C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectPlay.xml C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\Installer\e615f6f.msp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\assembly\tmp\CCTUQ3DB\Microsoft.DirectX.DirectDraw.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\assembly\tmp\74J1DDUP\__AssemblyInfo__.ini C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File created C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.xml C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File created C:\Windows\INF\keyboard.PNF C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
File created C:\Windows\assembly\ngenlock.dat C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File created C:\Windows\assembly\tmp\9BVUOU92\Microsoft.DirectX.Direct3DX.dll C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File opened for modification C:\Windows\Logs\DirectX.log C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
File created C:\Windows\INF\msmouse.PNF C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe N/A
File opened for modification C:\Windows\assembly\tmp\QNBIBIX4\__AssemblyInfo__.ini C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A

Subvert Trust Controls: Mark-of-the-Web Bypass

defense_evasion
Description Indicator Process Target
File created C:\Users\Admin\Downloads\SteamSetup.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Access Token Manipulation: Create Process with Token

defense_evasion privilege_escalation
Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Common Files\Steam\steamservice.exe N/A

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language \??\f:\10a2c23169599c1edc\Setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DotNet\4.0\dotNetFx40_Full_x86_x64.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\GameOverlayUI.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\bin\gldriverquery.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Common Files\Steam\steamservice.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2010\vcredist_x64.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language \??\f:\d63d4bdc0d84b92b04e117ef17edd8\Setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\SteamSetup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\bin\vulkandriverquery.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2010\vcredist_x86.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\GameOverlayUI.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language F:\c4bf591529c85a3cbf3f6026b6\Setup.exe N/A

System Network Configuration Discovery: Internet Connection Discovery

discovery
Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe N/A

Checks SCSI registry key(s)

Description Indicator Process Target
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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 C:\Windows\system32\vssvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 C:\Windows\system32\vssvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters C:\Windows\system32\vssvc.exe N/A
Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters C:\Windows\system32\vssvc.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr C:\Windows\system32\vssvc.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 \??\f:\d63d4bdc0d84b92b04e117ef17edd8\Setup.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 F:\c4bf591529c85a3cbf3f6026b6\Setup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\GameOverlayUI.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\GameOverlayUI.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steam.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steam.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz \??\f:\10a2c23169599c1edc\Setup.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\GameOverlayUI.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz \??\f:\d63d4bdc0d84b92b04e117ef17edd8\Setup.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steam.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\steam.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz F:\c4bf591529c85a3cbf3f6026b6\Setup.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\steam.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Steam\GameOverlayUI.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 \??\f:\10a2c23169599c1edc\Setup.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "1" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\29 C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\25\52C64B7E C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\25 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\26 C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\26 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27 C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\28 C:\Windows\system32\msiexec.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8bb7778b-645b-4475-9a73-1de3170bd3af}\InProcServer32 C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{bcc782bc-6492-4c22-8c35-f5d72fe73c6e}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{cac1105f-619b-4d04-831a-44e1cbf12d57}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_7.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{e21a7345-eb21-468e-be50-804db97cf708}\ = "XAudio2" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{94c1affa-66e7-4961-9521-cfdef3128d4f}\ = "XACT Engine" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0977d092-2d95-4e43-8d42-9ddcc2545ed5}\InProcServer32\ = "C:\\Windows\\system32\\xactengine3_4.dll" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{c7338b95-52b8-4542-aa79-42eb016c8c1c} C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5a508685-a254-4fba-9b82-9a24b00306af}\InProcServer32\ = "C:\\Windows\\SysWow64\\XAudio2_7.dll" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f1b577e-5e5a-4e8a-ba73-c657ea8e8598}\InProcServer32\ = "C:\\Windows\\SysWow64\\xactengine2_1.dll" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{77c56bf4-18a1-42b0-88af-5072ce814949}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{fac23f48-31f5-45a8-b49b-5225d61401aa}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{343e68e6-8f82-4a8d-a2da-6e9a944b378c} C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3b80ee2a-b0f5-4780-9e30-90cb39685b03}\ = "XACT Engine" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{962f5027-99be-4692-a468-85802cf8de61}\InProcServer32 C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{962f5027-99be-4692-a468-85802cf8de61}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{d3332f02-3dd0-4de9-9aec-20d85c4111b6} C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-870806430-2618236806-3023919190-1000_Classes\steamlink\DefaultIcon\ = "steam.exe" C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steamlink C:\Program Files (x86)\Steam\steam.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{77c56bf4-18a1-42b0-88af-5072ce814949}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{e180344b-ac83-4483-959e-18a5c56a5e19}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0977d092-2d95-4e43-8d42-9ddcc2545ed5}\InProcServer32 C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1926E8D15D0BCE53481466615F760A7F\SourceList\Net C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3a2495ce-31d0-435b-8ccf-e9f0843fd960} C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3a2495ce-31d0-435b-8ccf-e9f0843fd960}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4c5e637a-16c7-4de3-9c46-5ed22181962d}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_3.dll" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1D5E3C0FEDA1E123187686FED06E995A C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{c60fae90-4183-4a3f-b2f7-ac1dc49b0e5c}\ = "XACT Engine" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1138472b-d187-44e9-81f2-ae1b0e7785f1}\InProcServer32\ = "C:\\Windows\\system32\\xactengine2_3.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4c5e637a-16c7-4de3-9c46-5ed22181962d}\InProcServer32\ = "C:\\Windows\\SysWow64\\XAudio2_3.dll" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{e48c5a3f-93ef-43bb-a092-2c7ceb946f27}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_6.dll" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\1D5E3C0FEDA1E123187686FED06E995A\KB2544655 = "Servicing_Key" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0aa000aa-f404-11d9-bd7a-0010dc4f8f81}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4c5e637a-16c7-4de3-9c46-5ed22181962d} C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Patches\2D0058F6F08A743309184BE1178C95B2\SourceList\Net C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{c7338b95-52b8-4542-aa79-42eb016c8c1c}\InProcServer32\ = "C:\\Windows\\system32\\XAudio2_4.dll" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{bcc782bc-6492-4c22-8c35-f5d72fe73c6e} C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-870806430-2618236806-3023919190-1000_Classes\steam\ = "URL:steam protocol" C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Patches\2D0058F6F08A743309184BE1178C95B2\SourceList C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8bb7778b-645b-4475-9a73-1de3170bd3af} C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3a2495ce-31d0-435b-8ccf-e9f0843fd960}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6f6ea3a9-2cf5-41cf-91c1-2170b1540063}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{d3332f02-3dd0-4de9-9aec-20d85c4111b6}\InProcServer32 C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{e180344b-ac83-4483-959e-18a5c56a5e19}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{03219e78-5bc3-44d1-b92e-f63d89cc6526} C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\steam\DefaultIcon C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1D5E3C0FEDA1E123187686FED06E995A\SourceList\Net C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{f4769300-b949-4df9-b333-00d33932e9a6}\InProcServer32 C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{bcc782bc-6492-4c22-8c35-f5d72fe73c6e}\InProcServer32 C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Key created \REGISTRY\USER\S-1-5-21-870806430-2618236806-3023919190-1000_Classes\steam\Shell C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\1D5E3C0FEDA1E123187686FED06E995A\ProductName = "Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3b80ee2a-b0f5-4780-9e30-90cb39685b03}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{77c56bf4-18a1-42b0-88af-5072ce814949}\InProcServer32\ = "C:\\Windows\\system32\\xactengine2_8.dll" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{c1e3f122-a2ea-442c-854f-20d98f8357a1} C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{629cf0de-3ecc-41e7-9926-f7e43eebec51}\ = "AudioReverb" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{c7338b95-52b8-4542-aa79-42eb016c8c1c}\InProcServer32\ = "C:\\Windows\\SysWow64\\XAudio2_4.dll" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{cac1105f-619b-4d04-831a-44e1cbf12d57}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\steamlink C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Key created \REGISTRY\USER\S-1-5-21-870806430-2618236806-3023919190-1000_Classes\steam\Shell\Open C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{c60fae90-4183-4a3f-b2f7-ac1dc49b0e5c}\InProcServer32\ = "C:\\Windows\\SysWow64\\xactengine2_2.dll" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{962f5027-99be-4692-a468-85802cf8de61}\ = "XACT Engine" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{d06df0d0-8518-441e-822f-5451d5c595b8}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248d8a3b-6256-44d3-a018-2ac96c459f47}\InProcServer32 C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{e48c5a3f-93ef-43bb-a092-2c7ceb946f27}\InProcServer32\ThreadingModel = "Both" C:\Windows\system32\regsvr32.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25 C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 5c000000010000000400000000080000190000000100000010000000ba4f3972e7aed9dccdc210db59da13c90300000001000000140000005fb7ee0633e259dbad0c4c9ae6d38f1a61c7dc251d00000001000000100000008f76b981d528ad4770088245e2031b630b0000000100000012000000440069006700690043006500720074000000140000000100000014000000b13ec36903f8bf4701d498261a0802ef63642bc36200000001000000200000007431e5f4c3c1ce4690774f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b06010505070308530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00f0000000100000014000000e35ef08d884f0a0ade2f75e96301ce6230f213a8040000000100000010000000d474de575c39b2d39c8583c5c065498a2000000001000000c9030000308203c5308202ada003020102021002ac5c266a0b409b8f0b79f2ae462577300d06092a864886f70d0101050500306c310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312b30290603550403132244696769436572742048696768204173737572616e636520455620526f6f74204341301e170d3036313131303030303030305a170d3331313131303030303030305a306c310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312b30290603550403132244696769436572742048696768204173737572616e636520455620526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100c6cce573e6fbd4bbe52d2d32a6dfe5813fc9cd2549b6712ac3d5943467a20a1cb05f69a640b1c4b7b28fd098a4a941593ad3dc94d63cdb7438a44acc4d2582f74aa5531238eef3496d71917e63b6aba65fc3a484f84f6251bef8c5ecdb3892e306e508910cc4284155fbcb5a89157e71e835bf4d72093dbe3a38505b77311b8db3c724459aa7ac6d00145a04b7ba13eb510a984141224e656187814150a6795c89de194a57d52ee65d1c532c7e98cd1a0616a46873d03404135ca171d35a7c55db5e64e13787305604e511b4298012f1793988a202117c2766b788b778f2ca0aa838ab0a64c2bf665d9584c1a1251e875d1a500b2012cc41bb6e0b5138b84bcb0203010001a3633061300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff301d0603551d0e04160414b13ec36903f8bf4701d498261a0802ef63642bc3301f0603551d23041830168014b13ec36903f8bf4701d498261a0802ef63642bc3300d06092a864886f70d010105050003820101001c1a0697dcd79c9f3c886606085721db2147f82a67aabf183276401057c18af37ad911658e35fa9efc45b59ed94c314bb891e8432c8eb378cedbe3537971d6e5219401da55879a2464f68a66ccde9c37cda834b1699b23c89e78222b7043e35547316119ef58c5852f4e30f6a0311623c8e7e2651633cbbf1a1ba03df8ca5e8b318b6008892d0c065c52b7c4f90a98d1155f9f12be7c366338bd44a47fe4262b0ac497690de98ce2c01057b8c876129155f24869d8bc2a025b0f44d42031dbf4ba70265d90609ebc4b17092fb4cb1e4368c90727c1d25cf7ea21b968129c3c9cbf9efc805c9b63cdec47aa252767a037f300827d54d7a9f8e92e13a377e81f4a C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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 C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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 C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 5c000000010000000400000000080000190000000100000010000000a823b4a20180beb460cab955c24d7e21030000000100000014000000b1bc968bd4f49d622aa89a81f2150152a41d829c7e00000001000000080000000000042beb77d5017a000000010000000c000000300a06082b060105050703097f000000010000000c000000300a06082b060105050703091d00000001000000100000006ee7f3b060d10e90a31ba3471b999236140000000100000014000000607b661a450d97ca89502f7d04cd34a8fffcfd4b620000000100000020000000ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c990b000000010000003000000047006c006f00620061006c005300690067006e00200052006f006f00740020004300410020002d002000520031000000530000000100000040000000303e301f06092b06010401a032010130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000068000000306606082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050508020206082b0601050507030606082b0601050507030706082b0601050507030906082b0601050507030106082b060105050703080f00000001000000140000005a6d07b6371d966a2fb6ba92828ce5512a49513d0400000001000000100000003e455215095192e1b75d379fb187298a200000000100000079030000308203753082025da003020102020b040000000001154b5ac394300d06092a864886f70d01010505003057310b300906035504061302424531193017060355040a1310476c6f62616c5369676e206e762d73613110300e060355040b1307526f6f74204341311b301906035504031312476c6f62616c5369676e20526f6f74204341301e170d3938303930313132303030305a170d3238303132383132303030305a3057310b300906035504061302424531193017060355040a1310476c6f62616c5369676e206e762d73613110300e060355040b1307526f6f74204341311b301906035504031312476c6f62616c5369676e20526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100da0ee6998dcea3e34f8a7efbf18b83256bea481ff12ab0b9951104bdf063d1e26766cf1cddcf1b482bee8d898e9aaf298065abe9c72d12cbab1c4c7007a13d0a30cd158d4ff8ddd48c50151cef50eec42ef7fce952f2917de06dd535308e5e4373f241e9d56ae3b2893a5639386f063c88695b2a4dc5a754b86c89cc9bf93ccae5fd89f5123c927896d6dc746e934461d18dc746b2750e86e8198ad56d6cd5781695a2e9c80a38ebf224134f73549313853a1bbc1e34b58b058cb9778bb1db1f2091ab09536e90ce7b3774b97047912251631679aeb1ae412608c8192bd146aa48d6642ad78334ff2c2ac16c19434a0785e7d37cf62168efeaf2529f7f9390cf0203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e04160414607b661a450d97ca89502f7d04cd34a8fffcfd4b300d06092a864886f70d01010505000382010100d673e77c4f76d08dbfecbaa2be34c52832b57cfc6c9c2c2bbd099e53bf6b5eaa1148b6e508a3b3ca3d614dd34609b33ec3a0e363551bf2baefad39e143b938a3e62f8a263befa05056f9c60afd38cdc40b705194979804dfc35f94d515c914419cc45d7564150dff5530ec868fff0def2cb96346f6aafcdfbc69fd2e1248649ae095f0a6ef298f01b115b50c1da5fe692c6924781eb3a71c7162eecac897ac175d8ac2f847866e2ac4563195d06789852bf96ca65d469d0caa82e49951dd70b7db563d61e46ae15cd6f6fe3dde41cc07ae6352bf5353f42be9c7fdb6f7825f85d24118db81b3041cc51fa4806f1520c9de0c880a1dd66655e2fc48c9292669e0 C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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 C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 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 C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 040000000100000010000000324a4bbbc863699bbe749ac6dd1d46240f00000001000000140000000f6aad4c3fe04619cdc8b2bd655aa1a26042e6500b000000010000005400000053007400610072006600690065006c006400200043006c00610073007300200032002000430065007200740069006600690063006100740069006f006e00200041007500740068006f007200690074007900000053000000010000004800000030463021060b6086480186fd6d0107170330123010060a2b0601040182373c0101030200c03021060b6086480186fd6e0107170330123010060a2b0601040182373c0101030200c009000000010000002a000000302806082b0601050507030206082b0601050507030306082b0601050507030406082b060105050703016200000001000000200000001465fa205397b876faa6f0a9958e5590e40fcc7faa4fb7c2c8677521fb5fb658140000000100000014000000bf5fb7d1cedd1f86f45b55acdcd710c20ea988e71d000000010000001000000090c4f4233b006b7bfaa6adcd8f577d77030000000100000014000000ad7e1c28b064ef8f6003402014c3d0e3370eb58a190000000100000010000000fd960962ac6938e0d4b0769aa1a64e262000000001000000130400003082040f308202f7a003020102020100300d06092a864886f70d01010505003068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479301e170d3034303632393137333931365a170d3334303632393137333931365a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f7269747930820120300d06092a864886f70d01010105000382010d00308201080282010100b732c8fee971a60485ad0c1164dfce4defc80318873fa1abfb3ca69ff0c3a1dad4d86e2b5390fb24a43e84f09ee85fece52744f528a63f7bdee02af0c8af532f9eca0501931e8f661c39a74dfa5ab673042566eb777fe759c64a99251454eb26c7f37f19d530708fafb0462affadeb29edd79faa0487a3d4f989a5345fdb43918236d9663cb1b8b982fd9c3a3e10c83bef0665667a9b19183dff71513c302e5fbe3d7773b25d066cc323569a2b8526921ca702b3e43f0daf087982b8363dea9cd335b3bc69caf5cc9de8fd648d1780336e5e4a5d99c91e87b49d1ac0d56e1335235edf9b5f3defd6f776c2ea3ebb780d1c42676b04d8f8d6da6f8bf244a001ab020103a381c53081c2301d0603551d0e04160414bf5fb7d1cedd1f86f45b55acdcd710c20ea988e73081920603551d2304818a3081878014bf5fb7d1cedd1f86f45b55acdcd710c20ea988e7a16ca46a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479820100300c0603551d13040530030101ff300d06092a864886f70d01010505000382010100059d3f889dd1c91a55a1ac69f3f359da9b01871a4f57a9a179092adbf72fb21eccc75e6ad88387a197ef49353e7706415862bf8e58b80a673fecb3dd21661fc954fa72cc3d4c40d881af779e837abba2c7f534178ed91140f4fc2c2a4d157fa7625d2e25d3000b201a1d68f917b8f4bd8bed2859dd4d168b1783c8b265c72d7aa5aabc53866ddd57a4caf820410b68f0f4fb74be565d7a79f5f91d85e32d95bef5719043cc8d1f9a000a8729e95522580023eae31243295b4708dd8c416a6506a8e521aa41b4952195b97dd134ab13d6adbcdce23d39cdbd3e7570a1185903c922b48f9cd55e2ad7a5b6d40a6df8b74011469a1f790e62bf0f97ece02f1f1794 C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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 C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8 C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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 C:\Program Files (x86)\Steam\steam.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C C:\Program Files (x86)\Steam\steam.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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 C:\Program Files (x86)\Steam\steam.exe N/A

NTFS ADS

Description Indicator Process Target
File created C:\Users\Admin\Downloads\SteamSetup.exe:Zone.Identifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Users\Admin\Downloads\SteamSetup.exe N/A
N/A N/A C:\Program Files (x86)\Steam\bin\steamservice.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steam.exe N/A
N/A N/A C:\Program Files (x86)\Common Files\Steam\steamservice.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2010\vcredist_x86.exe N/A
N/A N/A \??\f:\10a2c23169599c1edc\Setup.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2010\vcredist_x64.exe N/A
N/A N/A \??\f:\d63d4bdc0d84b92b04e117ef17edd8\Setup.exe N/A
N/A N/A C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4092 wrote to memory of 4552 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4092 wrote to memory of 4552 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4092 wrote to memory of 4552 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4092 wrote to memory of 4552 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4092 wrote to memory of 4552 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4092 wrote to memory of 4552 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4092 wrote to memory of 4552 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4092 wrote to memory of 4552 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4092 wrote to memory of 4552 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4092 wrote to memory of 4552 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4092 wrote to memory of 4552 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 3408 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 1272 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 1272 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 1272 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 1272 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 1272 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 1272 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 1272 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4552 wrote to memory of 1272 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe

Uses Task Scheduler COM API

persistence

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Windows\system32\cmd.exe

cmd /c C:\Users\Admin\AppData\Local\Temp\VirtualBox-7.1.4-165100-OSX.dmg

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1972 -parentBuildID 20240401114208 -prefsHandle 1888 -prefMapHandle 1880 -prefsLen 23681 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {58152622-97f9-4e2d-821a-c5a87043da69} 4552 "\\.\pipe\gecko-crash-server-pipe.4552" gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2380 -parentBuildID 20240401114208 -prefsHandle 2372 -prefMapHandle 2360 -prefsLen 23717 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e1576b36-1361-4a64-8736-5b180f9a0a18} 4552 "\\.\pipe\gecko-crash-server-pipe.4552" socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3076 -childID 1 -isForBrowser -prefsHandle 2992 -prefMapHandle 3236 -prefsLen 23858 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {87a99ba5-15df-40fa-981e-a349a60e1faf} 4552 "\\.\pipe\gecko-crash-server-pipe.4552" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4316 -childID 2 -isForBrowser -prefsHandle 4308 -prefMapHandle 4304 -prefsLen 29091 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4e09ec3a-f441-47ec-8a79-45b7833fb578} 4552 "\\.\pipe\gecko-crash-server-pipe.4552" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4828 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4824 -prefMapHandle 4820 -prefsLen 29091 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ab8d2a13-d9f3-4e4f-852c-3314fb3860b4} 4552 "\\.\pipe\gecko-crash-server-pipe.4552" utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5352 -childID 3 -isForBrowser -prefsHandle 5344 -prefMapHandle 5332 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0e743d13-b8e3-4a5c-b126-91dfb88f9049} 4552 "\\.\pipe\gecko-crash-server-pipe.4552" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5344 -childID 4 -isForBrowser -prefsHandle 5564 -prefMapHandle 5508 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {103d948f-f4bc-49e5-a955-6eb303f12ae1} 4552 "\\.\pipe\gecko-crash-server-pipe.4552" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5628 -childID 5 -isForBrowser -prefsHandle 5636 -prefMapHandle 5640 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {538b61e4-29ad-40ef-ae8a-895b7e878bb2} 4552 "\\.\pipe\gecko-crash-server-pipe.4552" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6200 -childID 6 -isForBrowser -prefsHandle 6192 -prefMapHandle 6188 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3719a257-0afc-492c-bd1e-5a84fe35a919} 4552 "\\.\pipe\gecko-crash-server-pipe.4552" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6444 -childID 7 -isForBrowser -prefsHandle 3692 -prefMapHandle 6200 -prefsLen 27919 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fa3591cd-f3e6-4daf-a09b-ec52439a6fc4} 4552 "\\.\pipe\gecko-crash-server-pipe.4552" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6604 -parentBuildID 20240401114208 -prefsHandle 6620 -prefMapHandle 6624 -prefsLen 30454 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {8b676415-3d62-40a2-ae75-f1dfaaae8264} 4552 "\\.\pipe\gecko-crash-server-pipe.4552" rdd

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6580 -parentBuildID 20240401114208 -sandboxingKind 1 -prefsHandle 6608 -prefMapHandle 6612 -prefsLen 30454 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8a326e15-7907-40e9-9d07-cb86e659e201} 4552 "\\.\pipe\gecko-crash-server-pipe.4552" utility

C:\Users\Admin\Downloads\SteamSetup.exe

"C:\Users\Admin\Downloads\SteamSetup.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=7900 -childID 8 -isForBrowser -prefsHandle 7472 -prefMapHandle 7452 -prefsLen 28125 -prefMapSize 244658 -jsInitHandle 1292 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {272db8ab-fa01-4fb7-842d-e683f628c6a2} 4552 "\\.\pipe\gecko-crash-server-pipe.4552" tab

C:\Program Files (x86)\Steam\bin\steamservice.exe

"C:\Program Files (x86)\Steam\bin\steamservice.exe" /Install

C:\Program Files (x86)\Steam\steam.exe

"C:\Program Files (x86)\Steam\steam.exe"

C:\Program Files (x86)\Steam\steam.exe

"C:\Program Files (x86)\Steam\steam.exe"

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" "-lang=en_US" "-cachedir=C:\Users\Admin\AppData\Local\Steam\htmlcache" "-steampid=8692" "-buildid=1730853027" "-steamid=0" "-logdir=C:\Program Files (x86)\Steam\logs" "-uimode=7" "-startcount=0" "-steamuniverse=Public" "-realm=Global" "-clientui=C:\Program Files (x86)\Steam\clientui" "-steampath=C:\Program Files (x86)\Steam\steam.exe" "-launcher=0" --valve-enable-site-isolation --enable-smooth-scrolling --enable-direct-write "--log-file=C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-quick-menu "--enable-features=PlatformHEVCDecoderSupport" "--disable-features=SpareRendererForSitePerProcess,DcheckIsFatal,ValveFFmpegAllowLowDelayHEVC"

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=crashpad-handler /prefetch:4 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files (x86)\Steam\dumps" "--metrics-dir=C:\Users\Admin\AppData\Local\CEF\User Data" --url=https://crash.steampowered.com/submit --annotation=platform=win64 --annotation=product=cefwebhelper --annotation=version=1730853027 --initial-client-data=0x27c,0x280,0x284,0x278,0x288,0x7ff97a09af00,0x7ff97a09af0c,0x7ff97a09af18

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1584,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=1588 --mojo-platform-channel-handle=1576 /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --field-trial-handle=2260,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=2264 --mojo-platform-channel-handle=2256 /prefetch:3

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x4b8 0x518

C:\Program Files (x86)\Steam\bin\gldriverquery64.exe

.\bin\gldriverquery64.exe

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --field-trial-handle=2812,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=2816 --mojo-platform-channel-handle=2740 /prefetch:8

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3148,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3152 --mojo-platform-channel-handle=3144 /prefetch:1

C:\Program Files (x86)\Steam\bin\gldriverquery.exe

.\bin\gldriverquery.exe

C:\Program Files (x86)\Steam\bin\vulkandriverquery64.exe

.\bin\vulkandriverquery64.exe

C:\Program Files (x86)\Steam\bin\vulkandriverquery.exe

.\bin\vulkandriverquery.exe

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --field-trial-handle=3872,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3876 --mojo-platform-channel-handle=3868 /prefetch:8

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4064,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4068 --mojo-platform-channel-handle=4060 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4296,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4300 --mojo-platform-channel-handle=4292 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=4136,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4448 --mojo-platform-channel-handle=4200 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4668,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4672 --mojo-platform-channel-handle=4664 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4316,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4320 --mojo-platform-channel-handle=4044 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=4304,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4396 --mojo-platform-channel-handle=4168 /prefetch:1

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --field-trial-handle=3852,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3668 --mojo-platform-channel-handle=3784 /prefetch:8

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4744,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4672 --mojo-platform-channel-handle=4652 /prefetch:8

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=4244,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4720 --mojo-platform-channel-handle=4748 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=4704,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3784 --mojo-platform-channel-handle=4572 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=1268,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=1272 --mojo-platform-channel-handle=64 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=4132,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4612 --mojo-platform-channel-handle=3444 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x4b8 0x518

C:\Program Files (x86)\Common Files\Steam\steamservice.exe

"C:\Program Files (x86)\Common Files\Steam\steamservice.exe" /installscript "C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\runasadmin.vdf" 265930

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2010\vcredist_x86.exe

"C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2010\vcredist_x86.exe" /quiet /norestart

\??\f:\10a2c23169599c1edc\Setup.exe

f:\10a2c23169599c1edc\Setup.exe /quiet /norestart

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2010\vcredist_x64.exe

"C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2010\vcredist_x64.exe" /quiet /norestart

\??\f:\d63d4bdc0d84b92b04e117ef17edd8\Setup.exe

f:\d63d4bdc0d84b92b04e117ef17edd8\Setup.exe /quiet /norestart

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe

"C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe" /silent

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\srtasks.exe

C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:4

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx9_24_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx9_25_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx9_26_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx9_27_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx9_28_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx9_29_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XACT_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_0.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx9_30_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XACT2_1_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_1.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe xinput1_1_x64.inf, Install_Driver

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XACT2_2_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_2.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe xinput1_2_x64.inf, Install_Driver

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XACT2_3_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_3.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx9_31_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XACT2_4_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_4.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx9_32_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx10_00_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XACT2_5_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_5.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XACT2_6_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_6.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx9_33_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx10_33_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XACT2_7_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_7.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe xinput1_3_x64.inf, Install_Driver

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx9_34_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx10_34_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XACT2_8_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_8.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx9_35_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx10_35_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XACT2_9_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_9.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx9_36_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx10_36_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe X3DAudio1_2_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XACT2_10_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine2_10.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe D3DX9_37_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx10_37_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe X3DAudio1_3_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XACT3_0_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_0.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XAudio2_0_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_0.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe D3DX9_38_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx10_38_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe X3DAudio1_4_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XACT3_1_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_1.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XAudio2_1_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_1.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe D3DX9_39_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx10_39_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XACT3_2_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_2.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XAudio2_2_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_2.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe X3DAudio1_5_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XACT3_3_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_3.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XAudio2_3_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_3.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe D3DX9_40_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx10_40_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe X3DAudio1_6_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XACT3_4_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_4.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XAudio2_4_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_4.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe D3DX9_41_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx10_41_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe D3DX9_42_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx10_42_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx11_42_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dcsx_42_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe D3DCompiler_42_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XACT3_5_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_5.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XAudio2_5_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_5.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe X3DAudio1_7_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XACT3_6_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_6.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XAudio2_6_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_6.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe D3DX9_43_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx10_43_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dx11_43_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe d3dcsx_43_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe D3DCompiler_43_x64.inf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XACT3_7_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\xactengine3_7.dll

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe XAudio2_7_x64.inf

C:\Windows\system32\regsvr32.exe

C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\XAudio2_7.dll

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DotNet\4.0\Microsoft .NET Framework 4.0.cmd" "

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DotNet\4.0\dotNetFx40_Full_x86_x64.exe

"C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DotNet\4.0\\dotNetFx40_Full_x86_x64.exe" /q /norestart

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=4868,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4412 --mojo-platform-channel-handle=4804 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=4164,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4352 --mojo-platform-channel-handle=1272 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=4864,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4168 --mojo-platform-channel-handle=4844 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=4748,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4676 --mojo-platform-channel-handle=3552 /prefetch:1

F:\c4bf591529c85a3cbf3f6026b6\Setup.exe

F:\c4bf591529c85a3cbf3f6026b6\\Setup.exe /q /norestart /x86 /x64

C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe

"C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe"

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files (x86)\Steam\GameOverlayUI.exe

"C:\Program Files (x86)\Steam\GameOverlayUI.exe" -pid 10152 -steampid 8692 -manuallyclearframes 0 -gameid 265930

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1588,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=1220 --mojo-platform-channel-handle=2140 /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1628,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=1620 --mojo-platform-channel-handle=1624 /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=0 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=angle --use-angle=swiftshader-webgl --field-trial-handle=4632,i,5666639739901500750,7326256002231948567,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4580 --mojo-platform-channel-handle=3460 /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" "-lang=en_US" "-cachedir=C:\Users\Admin\AppData\Local\Steam\htmlcache" "-steampid=8692" "-buildid=1730853027" "-steamid=76561199490611839" "-logdir=C:\Program Files (x86)\Steam\logs" "-uimode=7" "-startcount=1" "-steamuniverse=Public" "-realm=Global" "-clientui=C:\Program Files (x86)\Steam\clientui" "-steampath=C:\Program Files (x86)\Steam\steam.exe" "-launcher=0" --valve-enable-site-isolation --enable-smooth-scrolling --enable-direct-write "--log-file=C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-quick-menu "--enable-features=PlatformHEVCDecoderSupport" "--disable-features=SpareRendererForSitePerProcess,DcheckIsFatal,ValveFFmpegAllowLowDelayHEVC"

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=crashpad-handler /prefetch:4 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files (x86)\Steam\dumps" "--metrics-dir=C:\Users\Admin\AppData\Local\CEF\User Data" --url=https://crash.steampowered.com/submit --annotation=platform=win64 --annotation=product=cefwebhelper --annotation=version=1730853027 --initial-client-data=0x27c,0x280,0x284,0x278,0x288,0x7ff97a09af00,0x7ff97a09af0c,0x7ff97a09af18

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=76561199490611839 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1584,i,4516456705503307690,14134823958516160914,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=1588 --mojo-platform-channel-handle=1576 /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=76561199490611839 --field-trial-handle=2344,i,4516456705503307690,14134823958516160914,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=2348 --mojo-platform-channel-handle=2340 /prefetch:3

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=76561199490611839 --field-trial-handle=2844,i,4516456705503307690,14134823958516160914,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=2848 --mojo-platform-channel-handle=2840 /prefetch:8

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=76561199490611839 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3200,i,4516456705503307690,14134823958516160914,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3204 --mojo-platform-channel-handle=3196 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=76561199490611839 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3864,i,4516456705503307690,14134823958516160914,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3884 --mojo-platform-channel-handle=3900 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=76561199490611839 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4248,i,4516456705503307690,14134823958516160914,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4236 --mojo-platform-channel-handle=4072 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=76561199490611839 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=3400,i,4516456705503307690,14134823958516160914,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3408 --mojo-platform-channel-handle=1624 /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=76561199490611839 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1496,i,4516456705503307690,14134823958516160914,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=2220 --mojo-platform-channel-handle=4568 /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=76561199490611839 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=angle --use-angle=swiftshader-webgl --field-trial-handle=2252,i,4516456705503307690,14134823958516160914,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=2236 --mojo-platform-channel-handle=2256 /prefetch:2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=76561199490611839 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=1668,i,4516456705503307690,14134823958516160914,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=1704 --mojo-platform-channel-handle=3412 /prefetch:1

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 10152 -s 9936

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=76561199490611839 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=4528,i,4516456705503307690,14134823958516160914,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=4560 --mojo-platform-channel-handle=4548 /prefetch:1

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --buildid=1730853027 --steamid=76561199490611839 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3196,i,4516456705503307690,14134823958516160914,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,DocumentPictureInPictureAPI,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC --variations-seed-version --enable-logging=handle --log-file=3192 --mojo-platform-channel-handle=3172 /prefetch:1

C:\Program Files (x86)\Steam\GameOverlayUI.exe

"C:\Program Files (x86)\Steam\GameOverlayUI.exe" -pid 10152 -steampid 8692 -manuallyclearframes 0 -gameid 265930

C:\Program Files (x86)\Steam\steamerrorreporter.exe

C:\Program Files (x86)\Steam\steam

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 10152 -ip 10152

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 10152 -s 9104

Network

Country Destination Domain Proto
US 8.8.8.8:53 228.249.119.40.in-addr.arpa udp
US 8.8.8.8:53 105.209.201.84.in-addr.arpa udp
US 8.8.8.8:53 68.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 209.205.72.20.in-addr.arpa udp
US 8.8.8.8:53 checkappexec.microsoft.com udp
GB 51.140.242.104:443 checkappexec.microsoft.com tcp
US 8.8.8.8:53 104.242.140.51.in-addr.arpa udp
US 8.8.8.8:53 203.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 spocs.getpocket.com udp
US 8.8.8.8:53 firefox-api-proxy.cdn.mozilla.net udp
US 34.149.97.1:443 firefox-api-proxy.cdn.mozilla.net udp
US 8.8.8.8:53 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
N/A 127.0.0.1:49729 tcp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 firefox-settings-attachments.cdn.mozilla.net udp
US 34.117.121.53:443 firefox-settings-attachments.cdn.mozilla.net tcp
US 8.8.8.8:53 attachments.prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 attachments.prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 65.204.21.100.in-addr.arpa udp
N/A 127.0.0.1:49739 tcp
US 8.8.8.8:53 support.mozilla.org udp
US 34.149.128.2:443 support.mozilla.org tcp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 58.55.71.13.in-addr.arpa udp
US 8.8.8.8:53 2.128.149.34.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.180.4:443 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.180.4:443 www.google.com udp
US 8.8.8.8:53 4.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 227.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 195.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 212.20.149.52.in-addr.arpa udp
US 8.8.8.8:53 18.31.95.13.in-addr.arpa udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 location.services.mozilla.com udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.classify-client.prod.webservices.mozgcp.net udp
US 35.190.72.216:443 prod.classify-client.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.classify-client.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 201.181.244.35.in-addr.arpa udp
US 8.8.8.8:53 216.72.190.35.in-addr.arpa udp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 ciscobinary.openh264.org udp
GB 216.58.213.14:443 redirector.gvt1.com tcp
US 8.8.8.8:53 redirector.gvt1.com udp
DE 23.55.161.211:80 ciscobinary.openh264.org tcp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
US 8.8.8.8:53 redirector.gvt1.com udp
US 8.8.8.8:53 a19.dscg10.akamai.net udp
GB 216.58.213.14:443 redirector.gvt1.com udp
US 8.8.8.8:53 r5---sn-aigzrn7l.gvt1.com udp
GB 173.194.5.234:443 r5---sn-aigzrn7l.gvt1.com tcp
US 8.8.8.8:53 r5.sn-aigzrn7l.gvt1.com udp
US 8.8.8.8:53 r5.sn-aigzrn7l.gvt1.com udp
GB 173.194.5.234:443 r5.sn-aigzrn7l.gvt1.com udp
US 8.8.8.8:53 14.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 211.161.55.23.in-addr.arpa udp
US 8.8.8.8:53 234.5.194.173.in-addr.arpa udp
US 8.8.8.8:53 csp.withgoogle.com udp
GB 216.58.213.17:443 csp.withgoogle.com tcp
US 8.8.8.8:53 csp.withgoogle.com udp
US 8.8.8.8:53 csp.withgoogle.com udp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
GB 216.58.201.106:443 ogads-pa.googleapis.com tcp
GB 216.58.201.106:443 ogads-pa.googleapis.com tcp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
GB 216.58.213.17:443 csp.withgoogle.com udp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
GB 216.58.201.106:443 ogads-pa.googleapis.com udp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 17.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 106.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 142.250.187.206:443 play.google.com tcp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 play.google.com udp
GB 142.250.187.206:443 play.google.com udp
US 8.8.8.8:53 206.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 consent.google.com udp
GB 172.217.16.238:443 consent.google.com tcp
US 8.8.8.8:53 consent.google.com udp
US 8.8.8.8:53 consent.google.com udp
GB 172.217.16.238:443 consent.google.com udp
US 8.8.8.8:53 238.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 store.steampowered.com udp
US 8.8.8.8:53 gsght.com udp
US 100.21.192.180:443 gsght.com tcp
US 8.8.8.8:53 gsght.com udp
US 23.192.21.216:443 store.steampowered.com tcp
US 8.8.8.8:53 store.steampowered.com udp
US 8.8.8.8:53 gsght.com udp
US 100.21.192.180:443 gsght.com tcp
US 8.8.8.8:53 store.steampowered.com udp
US 8.8.8.8:53 216.21.192.23.in-addr.arpa udp
US 8.8.8.8:53 88.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 180.192.21.100.in-addr.arpa udp
US 23.192.21.216:443 store.steampowered.com tcp
US 8.8.8.8:53 store.cloudflare.steamstatic.com udp
US 172.64.145.151:443 store.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 store.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 store.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 store.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 store.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 store.cloudflare.steamstatic.com tcp
US 8.8.8.8:53 store.cloudflare.steamstatic.com udp
US 8.8.8.8:53 cdn.cloudflare.steamstatic.com udp
US 8.8.8.8:53 shared.cloudflare.steamstatic.com udp
US 8.8.8.8:53 store.cloudflare.steamstatic.com udp
US 8.8.8.8:53 shared.cloudflare.steamstatic.com udp
US 8.8.8.8:53 cdn.cloudflare.steamstatic.com udp
US 172.64.145.151:443 cdn.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 cdn.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 cdn.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 cdn.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 cdn.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 cdn.cloudflare.steamstatic.com tcp
US 8.8.8.8:53 cdn.cloudflare.steamstatic.com udp
US 8.8.8.8:53 shared.cloudflare.steamstatic.com udp
US 8.8.8.8:53 151.145.64.172.in-addr.arpa udp
US 8.8.8.8:53 clan.cloudflare.steamstatic.com udp
US 8.8.8.8:53 video.cloudflare.steamstatic.com udp
US 104.18.42.105:443 video.cloudflare.steamstatic.com tcp
US 8.8.8.8:53 clan.cloudflare.steamstatic.com udp
US 8.8.8.8:53 video.cloudflare.steamstatic.com udp
US 172.64.145.151:443 video.cloudflare.steamstatic.com tcp
US 8.8.8.8:53 video.cloudflare.steamstatic.com udp
US 8.8.8.8:53 clan.cloudflare.steamstatic.com udp
US 172.64.145.151:443 video.cloudflare.steamstatic.com tcp
US 8.8.8.8:53 105.42.18.104.in-addr.arpa udp
US 8.8.8.8:53 steamcommunity.com udp
US 23.192.21.216:443 store.steampowered.com tcp
US 8.8.8.8:53 api.steampowered.com udp
GB 104.82.234.109:443 api.steampowered.com tcp
US 8.8.8.8:53 steamcommunity.com udp
GB 104.82.234.109:443 steamcommunity.com tcp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 avatars.fastly.steamstatic.com udp
US 8.8.8.8:53 steamcommunity.com udp
US 8.8.8.8:53 api.steampowered.com udp
US 151.101.3.52:443 avatars.fastly.steamstatic.com tcp
US 8.8.8.8:53 t.sni.global.fastly.net udp
US 8.8.8.8:53 t.sni.global.fastly.net udp
US 8.8.8.8:53 clan.fastly.steamstatic.com udp
US 151.101.131.52:443 clan.fastly.steamstatic.com tcp
US 8.8.8.8:53 109.234.82.104.in-addr.arpa udp
US 8.8.8.8:53 52.3.101.151.in-addr.arpa udp
US 8.8.8.8:53 52.131.101.151.in-addr.arpa udp
N/A 127.0.0.1:27060 tcp
N/A 127.0.0.1:27060 tcp
US 8.8.8.8:53 store.steampowered.com udp
GB 104.82.234.109:443 api.steampowered.com tcp
US 8.8.8.8:53 steamcommunity.com udp
US 8.8.8.8:53 help.steampowered.com udp
GB 104.82.234.109:443 help.steampowered.com tcp
US 8.8.8.8:53 help.steampowered.com udp
US 8.8.8.8:53 help.steampowered.com udp
US 172.64.145.151:443 video.cloudflare.steamstatic.com tcp
US 8.8.8.8:53 store.cloudflare.steamstatic.com udp
US 172.64.145.151:443 video.cloudflare.steamstatic.com tcp
US 8.8.8.8:53 cdn.cloudflare.steamstatic.com udp
US 172.64.145.151:443 video.cloudflare.steamstatic.com tcp
US 8.8.8.8:53 shared.cloudflare.steamstatic.com udp
US 104.18.42.105:443 video.cloudflare.steamstatic.com tcp
US 8.8.8.8:53 clan.cloudflare.steamstatic.com udp
US 151.101.3.52:443 clan.fastly.steamstatic.com tcp
US 8.8.8.8:53 t.sni.global.fastly.net udp
US 8.8.8.8:53 clan.fastly.steamstatic.com udp
US 8.8.8.8:53 store.steampowered.com udp
US 8.8.8.8:53 t.sni.global.fastly.net udp
US 151.101.195.52:443 clan.fastly.steamstatic.com tcp
US 8.8.8.8:53 store.steampowered.com udp
US 8.8.8.8:53 52.195.101.151.in-addr.arpa udp
US 8.8.8.8:53 43.229.111.52.in-addr.arpa udp
US 8.8.8.8:53 us-west1.prod.sumo.prod.webservices.mozgcp.net udp
GB 142.250.179.228:443 www.google.com tcp
GB 142.250.179.228:443 www.google.com udp
US 8.8.8.8:53 228.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 id.google.com udp
GB 216.58.213.17:443 csp.withgoogle.com udp
GB 142.250.200.35:443 id.google.com tcp
US 8.8.8.8:53 id.google.com udp
US 8.8.8.8:53 id.google.com udp
GB 142.250.200.35:443 id.google.com udp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
GB 216.58.213.10:443 ogads-pa.googleapis.com udp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
US 8.8.8.8:53 locate.measurementlab.net udp
GB 142.250.200.19:443 locate.measurementlab.net tcp
US 8.8.8.8:53 ghs.googlehosted.com udp
US 8.8.8.8:53 ghs.googlehosted.com udp
US 8.8.8.8:53 35.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 10.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 19.200.250.142.in-addr.arpa udp
GB 142.250.187.206:443 play.google.com udp
US 8.8.8.8:53 ndt-mlab3-lhr07.mlab-oti.measurement-lab.org udp
US 8.8.8.8:53 ndt-mlab3-lhr07.mlab-oti.measurement-lab.org udp
GB 162.213.96.37:443 ndt-mlab3-lhr07.mlab-oti.measurement-lab.org tcp
US 8.8.8.8:53 ndt-mlab3-lhr07.mlab-oti.measurement-lab.org udp
GB 162.213.96.37:443 ndt-mlab3-lhr07.mlab-oti.measurement-lab.org tcp
US 8.8.8.8:53 37.96.213.162.in-addr.arpa udp
US 8.8.8.8:53 cdn.steamstatic.com udp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 52.67.101.151.in-addr.arpa udp
US 8.8.8.8:53 r11.o.lencr.org udp
GB 2.23.210.82:80 r11.o.lencr.org tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 32.169.19.2.in-addr.arpa udp
US 8.8.8.8:53 82.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 27.73.42.20.in-addr.arpa udp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 test.steampowered.com udp
US 8.8.8.8:53 ipv6check-udp.steamserver.net udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
GB 2.19.117.21:80 test.steampowered.com tcp
US 8.8.8.8:53 21.117.19.2.in-addr.arpa udp
GB 142.250.179.228:443 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 api.steampowered.com udp
GB 104.82.234.109:443 api.steampowered.com tcp
US 8.8.8.8:53 cmp1-fra1.steamserver.net udp
DE 155.133.250.4:27020 cmp1-fra1.steamserver.net tcp
US 8.8.8.8:53 cmp1-fra2.steamserver.net udp
US 155.133.229.4:27018 cmp1-fra2.steamserver.net tcp
DE 155.133.250.4:27023 cmp1-fra1.steamserver.net tcp
US 8.8.8.8:53 cmp2-fra1.steamserver.net udp
DE 155.133.250.20:27023 cmp2-fra1.steamserver.net tcp
US 8.8.8.8:53 e6.o.lencr.org udp
GB 2.23.210.75:80 e6.o.lencr.org tcp
US 8.8.8.8:53 e5.o.lencr.org udp
GB 2.23.210.75:80 e5.o.lencr.org tcp
US 8.8.8.8:53 cmp2-fra2.steamserver.net udp
US 155.133.229.20:443 cmp2-fra2.steamserver.net tcp
US 8.8.8.8:53 ext1-sto1.steamserver.net udp
SE 162.254.198.44:27025 ext1-sto1.steamserver.net tcp
US 8.8.8.8:53 cmp1-ams1.steamserver.net udp
NL 155.133.248.42:443 cmp1-ams1.steamserver.net tcp
US 8.8.8.8:53 4.250.133.155.in-addr.arpa udp
US 8.8.8.8:53 4.229.133.155.in-addr.arpa udp
US 8.8.8.8:53 20.250.133.155.in-addr.arpa udp
US 8.8.8.8:53 75.210.23.2.in-addr.arpa udp
US 8.8.8.8:53 p2p-fra2.discovery.steamserver.net udp
US 8.8.8.8:53 20.229.133.155.in-addr.arpa udp
US 8.8.8.8:53 44.198.254.162.in-addr.arpa udp
US 8.8.8.8:53 42.248.133.155.in-addr.arpa udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
N/A 127.0.0.1:63070 tcp
N/A 127.0.0.1:63054 tcp
US 8.8.8.8:443 dns.google udp
GB 142.250.200.14:443 redirector.gvt1.com tcp
GB 74.125.105.39:443 udp
US 8.8.8.8:53 39.105.125.74.in-addr.arpa udp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
GB 104.82.234.109:443 api.steampowered.com tcp
DE 155.133.250.4:27024 cmp1-fra1.steamserver.net tcp
US 155.133.229.20:27019 cmp2-fra2.steamserver.net tcp
US 155.133.229.20:27018 cmp2-fra2.steamserver.net tcp
DE 155.133.250.20:27024 cmp2-fra1.steamserver.net tcp
US 8.8.8.8:53 ext3-sto1.steamserver.net udp
SE 162.254.198.46:27025 ext3-sto1.steamserver.net tcp
US 8.8.8.8:53 cmp2-sto2.steamserver.net udp
SE 155.133.252.69:27019 cmp2-sto2.steamserver.net tcp
US 8.8.8.8:53 ext2-sto1.steamserver.net udp
SE 162.254.198.104:27025 ext2-sto1.steamserver.net tcp
US 8.8.8.8:53 cmp1-sto2.steamserver.net udp
SE 155.133.252.68:27019 cmp1-sto2.steamserver.net tcp
US 8.8.8.8:53 p2p-fra1.discovery.steamserver.net udp
US 8.8.8.8:53 46.198.254.162.in-addr.arpa udp
US 8.8.8.8:53 69.252.133.155.in-addr.arpa udp
US 8.8.8.8:53 104.198.254.162.in-addr.arpa udp
US 8.8.8.8:53 68.252.133.155.in-addr.arpa udp
N/A 10.127.255.255:27036 udp
US 8.8.8.8:53 clientconfig.akamai.steamstatic.com udp
GB 2.19.117.14:80 clientconfig.akamai.steamstatic.com tcp
US 8.8.8.8:53 14.117.19.2.in-addr.arpa udp
GB 2.19.117.14:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.117.14:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.117.14:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.117.14:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.117.14:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.117.14:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.117.14:80 clientconfig.akamai.steamstatic.com tcp
US 8.8.8.8:53 shared.steamstatic.com udp
US 8.8.8.8:53 steamstore-a.akamaihd.net udp
US 151.101.195.52:443 shared.steamstatic.com tcp
US 8.8.8.8:53 cdn.steamstatic.com udp
GB 2.19.117.22:443 steamstore-a.akamaihd.net tcp
US 151.101.195.52:443 cdn.steamstatic.com tcp
US 151.101.195.52:443 cdn.steamstatic.com tcp
GB 2.19.117.22:443 steamstore-a.akamaihd.net tcp
GB 2.19.117.22:443 steamstore-a.akamaihd.net tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
GB 142.250.179.228:443 www.google.com udp
US 8.8.8.8:443 dns.google udp
US 8.8.8.8:53 r11.o.lencr.org udp
US 23.192.21.216:443 store.steampowered.com tcp
GB 2.23.210.75:80 r10.o.lencr.org tcp
US 8.8.8.8:53 22.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 steamcommunity.com udp
GB 104.82.234.109:443 steamcommunity.com tcp
GB 104.82.234.109:443 steamcommunity.com tcp
US 172.64.145.151:443 video.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 video.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 video.cloudflare.steamstatic.com tcp
GB 2.19.117.4:443 tcp
US 23.192.21.216:443 store.steampowered.com tcp
US 8.8.8.8:53 4.117.19.2.in-addr.arpa udp
US 151.101.195.52:443 cdn.steamstatic.com tcp
US 8.8.8.8:443 dns.google udp
GB 216.58.201.99:443 tcp
US 8.8.8.8:53 99.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 shared.steamstatic.com udp
US 151.101.131.52:443 shared.steamstatic.com tcp
US 151.101.131.52:443 shared.steamstatic.com tcp
US 151.101.131.52:443 shared.steamstatic.com tcp
US 151.101.131.52:443 shared.steamstatic.com tcp
US 151.101.131.52:443 shared.steamstatic.com tcp
US 151.101.131.52:443 shared.steamstatic.com tcp
US 151.101.131.52:443 shared.steamstatic.com tcp
US 151.101.3.52:443 shared.steamstatic.com tcp
US 151.101.3.52:443 shared.steamstatic.com tcp
US 151.101.3.52:443 shared.steamstatic.com tcp
US 151.101.3.52:443 shared.steamstatic.com tcp
US 151.101.3.52:443 shared.steamstatic.com tcp
US 151.101.3.52:443 shared.steamstatic.com tcp
GB 104.82.234.109:443 steamcommunity.com tcp
US 8.8.8.8:53 api.steampowered.com udp
US 8.8.8.8:53 shared.steamstatic.com udp
N/A 127.0.0.1:27060 tcp
US 151.101.67.52:443 shared.steamstatic.com tcp
US 151.101.67.52:443 shared.steamstatic.com tcp
US 151.101.67.52:443 shared.steamstatic.com tcp
US 8.8.8.8:53 123.35.104.34.in-addr.arpa udp
US 8.8.8.8:53 cdn.steamstatic.com udp
US 8.8.8.8:53 steamstore-a.akamaihd.net udp
GB 2.19.117.27:443 steamstore-a.akamaihd.net tcp
GB 2.19.117.27:443 steamstore-a.akamaihd.net tcp
GB 2.19.117.27:443 steamstore-a.akamaihd.net tcp
US 8.8.8.8:53 27.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 shared.steamstatic.com udp
GB 216.58.201.99:443 udp
US 8.8.8.8:53 p2p-fra1.discovery.steamserver.net udp
US 8.8.8.8:53 steamcloud-dub.s3.dualstack.eu-west-1.amazonaws.com udp
IE 52.218.44.10:443 steamcloud-dub.s3.dualstack.eu-west-1.amazonaws.com tcp
US 8.8.8.8:53 ocsp.r2m01.amazontrust.com udp
DE 54.230.207.189:80 ocsp.r2m01.amazontrust.com tcp
US 8.8.8.8:53 10.44.218.52.in-addr.arpa udp
US 8.8.8.8:53 64.92.85.52.in-addr.arpa udp
US 8.8.8.8:53 48.152.155.18.in-addr.arpa udp
US 8.8.8.8:53 71.180.230.54.in-addr.arpa udp
US 8.8.8.8:53 steamcloud-london.storage.googleapis.com udp
GB 142.250.187.219:443 steamcloud-london.storage.googleapis.com tcp
US 8.8.8.8:53 c.pki.goog udp
US 8.8.8.8:53 219.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 189.207.230.54.in-addr.arpa udp
GB 142.250.187.227:80 c.pki.goog tcp
US 8.8.8.8:53 o.pki.goog udp
GB 216.58.212.227:80 o.pki.goog tcp
US 8.8.8.8:53 227.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 client-update.steamstatic.com udp
US 151.101.195.52:443 client-update.steamstatic.com tcp
GB 2.23.210.82:80 r10.o.lencr.org tcp
US 8.8.8.8:53 p2p-fra1.discovery.steamserver.net udp
US 8.8.8.8:53 p2p-fra1.discovery.steamserver.net udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google udp
GB 104.82.234.109:443 api.steampowered.com tcp
US 8.8.8.8:53 api.steampowered.com udp
GB 104.82.234.109:443 api.steampowered.com tcp
US 172.64.145.151:443 video.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 video.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 video.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 video.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 video.cloudflare.steamstatic.com tcp
US 23.192.21.216:443 store.steampowered.com tcp
US 151.101.195.52:443 client-update.steamstatic.com tcp
GB 2.19.117.6:443 tcp
US 8.8.8.8:53 6.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 cdn.steamstatic.com udp
US 151.101.3.52:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 lancache.steamcontent.com udp
US 8.8.8.8:53 clientconfig.akamai.steamstatic.com udp
GB 2.19.117.41:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.117.41:80 clientconfig.akamai.steamstatic.com tcp
GB 2.19.117.41:80 clientconfig.akamai.steamstatic.com tcp
US 8.8.8.8:53 cache13-lhr1.steamcontent.com udp
GB 162.254.196.23:443 cache13-lhr1.steamcontent.com tcp
US 8.8.8.8:53 41.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 e5.o.lencr.org udp
GB 2.23.210.82:80 e5.o.lencr.org tcp
US 8.8.8.8:53 cache16-lhr1.steamcontent.com udp
GB 162.254.196.26:443 cache16-lhr1.steamcontent.com tcp
US 8.8.8.8:53 e6.o.lencr.org udp
GB 2.23.210.82:80 e6.o.lencr.org tcp
GB 162.254.196.26:443 cache16-lhr1.steamcontent.com tcp
US 8.8.8.8:53 23.196.254.162.in-addr.arpa udp
US 8.8.8.8:53 26.196.254.162.in-addr.arpa udp
US 8.8.8.8:53 p2p-fra1.discovery.steamserver.net udp
US 8.8.8.8:53 cache11-lhr1.steamcontent.com udp
GB 162.254.196.23:443 cache13-lhr1.steamcontent.com tcp
GB 162.254.196.18:443 cache11-lhr1.steamcontent.com tcp
GB 162.254.196.18:443 cache11-lhr1.steamcontent.com tcp
US 8.8.8.8:53 18.196.254.162.in-addr.arpa udp
GB 162.254.196.26:443 cache16-lhr1.steamcontent.com tcp
GB 162.254.196.26:443 cache16-lhr1.steamcontent.com tcp
GB 162.254.196.26:443 cache16-lhr1.steamcontent.com tcp
GB 162.254.196.23:443 cache13-lhr1.steamcontent.com tcp
GB 162.254.196.23:443 cache13-lhr1.steamcontent.com tcp
GB 162.254.196.23:443 cache13-lhr1.steamcontent.com tcp
GB 162.254.196.23:443 cache13-lhr1.steamcontent.com tcp
GB 162.254.196.23:443 cache13-lhr1.steamcontent.com tcp
GB 162.254.196.23:443 cache13-lhr1.steamcontent.com tcp
GB 162.254.196.18:443 cache11-lhr1.steamcontent.com tcp
GB 162.254.196.18:443 cache11-lhr1.steamcontent.com tcp
GB 162.254.196.26:443 cache16-lhr1.steamcontent.com tcp
GB 162.254.196.26:443 cache16-lhr1.steamcontent.com tcp
GB 162.254.196.26:443 cache16-lhr1.steamcontent.com tcp
GB 162.254.196.18:443 cache11-lhr1.steamcontent.com tcp
GB 162.254.196.18:443 cache11-lhr1.steamcontent.com tcp
GB 162.254.196.18:443 cache11-lhr1.steamcontent.com tcp
GB 162.254.196.18:443 cache11-lhr1.steamcontent.com tcp
US 8.8.8.8:53 cache1-lhr1.steamcontent.com udp
GB 162.254.196.8:443 cache1-lhr1.steamcontent.com tcp
GB 162.254.196.8:443 cache1-lhr1.steamcontent.com tcp
US 8.8.8.8:53 8.196.254.162.in-addr.arpa udp
GB 162.254.196.8:443 cache1-lhr1.steamcontent.com tcp
GB 162.254.196.8:443 cache1-lhr1.steamcontent.com tcp
GB 162.254.196.8:443 cache1-lhr1.steamcontent.com tcp
GB 162.254.196.8:443 cache1-lhr1.steamcontent.com tcp
GB 162.254.196.8:443 cache1-lhr1.steamcontent.com tcp
GB 162.254.196.8:443 cache1-lhr1.steamcontent.com tcp
GB 142.250.187.219:443 steamcloud-london.storage.googleapis.com tcp
US 8.8.8.8:53 steamcloud-eu-ams.storage.googleapis.com udp
US 8.8.8.8:53 steamcloud-frf.s3.dualstack.eu-central-1.amazonaws.com udp
GB 172.217.16.251:443 steamcloud-eu-ams.storage.googleapis.com tcp
DE 3.5.134.128:443 steamcloud-frf.s3.dualstack.eu-central-1.amazonaws.com tcp
US 8.8.8.8:53 ocsp.r2m01.amazontrust.com udp
DE 54.230.207.189:80 ocsp.r2m01.amazontrust.com tcp
US 8.8.8.8:53 251.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 128.134.5.3.in-addr.arpa udp
US 8.8.8.8:53 cache7-lhr1.steamcontent.com udp
GB 162.254.196.6:443 cache7-lhr1.steamcontent.com tcp
GB 162.254.196.6:443 cache7-lhr1.steamcontent.com tcp
US 8.8.8.8:53 6.196.254.162.in-addr.arpa udp
GB 162.254.196.6:443 cache7-lhr1.steamcontent.com tcp
GB 162.254.196.6:443 cache7-lhr1.steamcontent.com tcp
GB 162.254.196.6:443 cache7-lhr1.steamcontent.com tcp
GB 162.254.196.6:443 cache7-lhr1.steamcontent.com tcp
GB 162.254.196.6:443 cache7-lhr1.steamcontent.com tcp
GB 162.254.196.6:443 cache7-lhr1.steamcontent.com tcp
US 8.8.8.8:53 cache14-lhr1.steamcontent.com udp
GB 162.254.196.24:443 cache14-lhr1.steamcontent.com tcp
GB 162.254.196.24:443 cache14-lhr1.steamcontent.com tcp
US 8.8.8.8:53 24.196.254.162.in-addr.arpa udp
GB 162.254.196.24:443 cache14-lhr1.steamcontent.com tcp
GB 162.254.196.24:443 cache14-lhr1.steamcontent.com tcp
GB 162.254.196.24:443 cache14-lhr1.steamcontent.com tcp
GB 162.254.196.24:443 cache14-lhr1.steamcontent.com tcp
GB 162.254.196.24:443 cache14-lhr1.steamcontent.com tcp
GB 162.254.196.24:443 cache14-lhr1.steamcontent.com tcp
US 8.8.8.8:53 lancache.steamcontent.com udp
US 8.8.8.8:53 p2p-fra1.discovery.steamserver.net udp
US 8.8.8.8:53 lancache.steamcontent.com udp
US 8.8.8.8:53 p2p-fra1.discovery.steamserver.net udp
GB 162.254.196.6:443 cache7-lhr1.steamcontent.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google udp
US 151.101.195.52:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 4.4.8.8.in-addr.arpa udp
US 8.8.8.8:53 api.steampowered.com udp
GB 104.82.234.109:443 api.steampowered.com tcp
US 8.8.8.8:53 p2p-fra1.discovery.steamserver.net udp
US 8.8.4.4:443 dns.google udp
US 151.101.195.52:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 api.steampowered.com udp
GB 104.82.234.109:443 api.steampowered.com tcp
US 8.8.8.8:53 test.steampowered.com udp
US 8.8.8.8:53 api.steampowered.com udp
GB 2.19.117.24:80 test.steampowered.com tcp
US 8.8.8.8:53 ipv6check-http.steamserver.net udp
US 8.8.8.8:53 24.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 p2p-fra1.discovery.steamserver.net udp
US 8.8.8.8:53 api.steampowered.com udp
SG 103.10.124.121:27054 udp
AE 185.25.183.163:27031 udp
HK 103.28.54.182:27041 udp
SE 155.133.252.86:27024 udp
US 162.254.193.77:27023 udp
DE 155.133.226.68:27053 udp
BR 155.133.227.51:27023 udp
ZA 155.133.238.194:27043 udp
AU 103.10.125.155:27025 udp
AT 146.66.155.68:27052 udp
NL 155.133.248.40:27054 udp
ES 155.133.246.50:27036 udp
FR 185.25.182.51:27050 udp
PL 155.133.230.101:27018 udp
GB 162.254.196.70:27033 udp
FI 37.27.120.223:27059 udp
SE 162.254.198.47:27030 udp
US 162.254.192.72:27024 udp
US 147.75.193.65:27052 udp
US 155.133.253.55:27055 udp
US 162.254.199.170:27059 udp
US 173.237.31.180:27069 udp
US 162.254.195.72:27041 udp
US 205.196.6.212:27023 udp
IN 155.133.224.21:27046 udp
US 8.8.8.8:53 121.124.10.103.in-addr.arpa udp
US 23.192.21.216:443 store.steampowered.com tcp
US 8.8.8.8:53 163.183.25.185.in-addr.arpa udp
US 8.8.8.8:53 182.54.28.103.in-addr.arpa udp
US 8.8.8.8:53 86.252.133.155.in-addr.arpa udp
US 8.8.8.8:53 77.193.254.162.in-addr.arpa udp
US 8.8.8.8:53 68.226.133.155.in-addr.arpa udp
US 8.8.8.8:53 51.227.133.155.in-addr.arpa udp
US 8.8.8.8:53 194.238.133.155.in-addr.arpa udp
US 8.8.8.8:53 155.125.10.103.in-addr.arpa udp
US 8.8.8.8:53 40.248.133.155.in-addr.arpa udp
US 8.8.8.8:53 50.246.133.155.in-addr.arpa udp
US 8.8.8.8:53 51.182.25.185.in-addr.arpa udp
US 8.8.8.8:53 101.230.133.155.in-addr.arpa udp
US 8.8.8.8:53 70.196.254.162.in-addr.arpa udp
US 8.8.8.8:53 223.120.27.37.in-addr.arpa udp
US 8.8.8.8:53 47.198.254.162.in-addr.arpa udp
US 8.8.8.8:53 72.192.254.162.in-addr.arpa udp
US 8.8.8.8:53 65.193.75.147.in-addr.arpa udp
US 8.8.8.8:53 55.253.133.155.in-addr.arpa udp
US 8.8.8.8:53 170.199.254.162.in-addr.arpa udp
US 8.8.8.8:53 180.31.237.173.in-addr.arpa udp
US 8.8.8.8:53 72.195.254.162.in-addr.arpa udp
US 8.8.8.8:53 21.224.133.155.in-addr.arpa udp
US 8.8.8.8:53 212.6.196.205.in-addr.arpa udp
US 8.8.8.8:53 68.155.66.146.in-addr.arpa udp
FI 37.27.120.224:27065 udp
US 147.75.193.65:27038 udp
PE 155.133.244.52:27058 udp
IN 155.133.225.19:27022 udp
US 8.8.8.8:53 224.120.27.37.in-addr.arpa udp
US 8.8.8.8:53 52.244.133.155.in-addr.arpa udp
US 8.8.8.8:53 19.225.133.155.in-addr.arpa udp
US 147.75.193.63:27044 udp
US 8.8.8.8:53 63.193.75.147.in-addr.arpa udp
US 8.8.8.8:53 cser.steampowered.com udp
US 208.64.203.186:27013 cser.steampowered.com udp
US 8.8.8.8:53 186.203.64.208.in-addr.arpa udp
US 147.75.193.63:27057 udp
US 8.8.8.8:53 steamcommunity.com udp
GB 104.82.234.109:443 steamcommunity.com tcp
GB 104.82.234.109:443 steamcommunity.com tcp
US 8.8.8.8:53 steamcommunity-a.akamaihd.net udp
US 8.8.8.8:53 steamcommunity-a.akamaihd.net udp
GB 2.19.117.23:443 steamcommunity-a.akamaihd.net tcp
US 8.8.8.8:53 store.steampowered.com udp
US 8.8.8.8:53 store.steampowered.com udp
US 23.192.21.216:443 store.steampowered.com tcp
US 8.8.8.8:53 steamcommunity.com udp
US 8.8.8.8:53 steamcommunity.com udp
GB 104.82.234.109:443 steamcommunity.com tcp
US 8.8.8.8:53 23.117.19.2.in-addr.arpa udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 23.192.21.216:443 store.steampowered.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 151.101.131.52:443 cdn.steamstatic.com tcp
US 151.101.195.52:443 cdn.steamstatic.com tcp
US 151.101.195.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 151.101.67.52:443 cdn.steamstatic.com tcp
US 8.8.8.8:53 crash.steampowered.com udp
US 208.64.203.140:443 crash.steampowered.com tcp
US 8.8.8.8:53 140.203.64.208.in-addr.arpa udp
US 23.192.21.216:443 store.steampowered.com tcp
GB 104.82.234.109:443 steamcommunity.com tcp
N/A 127.0.0.1:63070 tcp
N/A 127.0.0.1:63054 tcp
N/A 127.0.0.1:27060 tcp
N/A 127.0.0.1:63070 tcp
N/A 127.0.0.1:63054 tcp
N/A 127.0.0.1:27060 tcp

Files

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\datareporting\glean\db\data.safe.tmp

MD5 527397972128858fffdcbbf941cee38a
SHA1 676cffc6887d1d187368b6fbab4de745a347d0c8
SHA256 792fef23e189bab1d168793bd979eb1f7aa394824190af3b37d1e7e8225fc1ae
SHA512 570c3d453a29fe1decf523db8aa07728a63f1ecb23c0e5054b19f676aebee662691d709125b993fa8d9deda7cea67724932005f49ced17659807e99db28ae4a3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\datareporting\glean\pending_pings\649912cc-fe87-4400-9148-12b320b65c0a

MD5 f34a48654b57ffe992e9535fdfb3ae72
SHA1 24e8e63ff667378b486bfb4436cb5da25cea467f
SHA256 473b89b2057963d4a8edce84fa70f71f67eda6826f4305959b0ba100a99723a2
SHA512 2eca2f0b721e22c414b07ebd0e3be205ff724d82e8f3d212e19f933ee3139a504e60604ce04995530d8eb5db04289b3d7d38e65fc1ba5327b2c89976e2449306

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\datareporting\glean\pending_pings\e6f7c576-2368-4aec-ab82-d029c7b6af94

MD5 87d0987fa4f1a66628e60a07897936f5
SHA1 90894af9001b6bfc3ed9cc9fecdce1f16e831a8f
SHA256 e56d3ff2cb53d938bf3c3a2df601b2c197c34d6e4aa99ec0a9d2099fb9bd9978
SHA512 2afc15dec7facb452c0dd0fb657e2e8c680813a212175ad257f025d2cea6e1c05e82406be30ba7a5cf4b0bb21969366b47081fd370e3d40937ce1803a284a33a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\datareporting\glean\pending_pings\0026abd5-721e-4803-af35-45a3d634bc72

MD5 f61a2881d119fec1307491ed6f4edb19
SHA1 58aafb48eb6832365b7d10671fef7a04f0a9e936
SHA256 3b2a3d7714b52116fc2fcb7c1dd588ddbe89407134f8394601dea39ff19736a4
SHA512 30e401bb1cfd4b82d15f6f144ea00bfa4056bed6e3bc141ffeb9b60c2fd068ff0aaa4471546d637e4aba592f902a41a2e9e60a9329e14880a546cb20dd5d56de

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\datareporting\glean\db\data.safe.tmp

MD5 91aae585d1ab3eb64d93962cb947acfa
SHA1 b2a2b0c3469ec9dca7032bfea3b95af016a8293e
SHA256 b8fd2c80129cb33b9379a087f856939a32309575ace77ac2a91c53abfb4f640d
SHA512 7b3475259b13f298781d8437fe84d5d8974536fa2011368a30420a32f26495221b1177f8c35a14ba47e5ee6ff0dd7580d1322324c59680af592b9b7caeb03246

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\enjqfdim.default-release\activity-stream.discovery_stream.json

MD5 64e45116889793a5f5c84a934c66deef
SHA1 74b6b85659f636d881d4b42642d05e77f7d9c250
SHA256 0bb4916b7fc2c36ac5bb6cd2c1560b1a6588a4c96da45b98e2341fff3262d7af
SHA512 cbe830691d6e4806315bf8ef4978caa54c6ecd1fdab385ed570946bd7fa1d224888f715e5e7c766fdc04f78fc0258cfcbe927322cc84cc21f661a49f48c8b8b9

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\prefs.js

MD5 2ea91cc124a52e0dd7d959a1f08d9abc
SHA1 20ae97bf366d9881ce15378f3c217be0ccafaf57
SHA256 261017c8a884b5b7ac144f01e53c33f6234400e11a274fbeb9ac903a049410ee
SHA512 36ac204f2b022da1ad8ae819d5698bf16b0af2cf400a1c56b2fdf70d7ecf453b7f04fcc88939969653923f13fa0e44216223b343d61d28395a49e6b02ec57d51

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\AlternateServices.bin

MD5 b17b1aa4b3cf0fa47d14b37fcfa532bb
SHA1 bdeb6a87e78e8909e59ead84575b81ce7b46b1fa
SHA256 ae51929bbdb834ac9e5c86d32c065c524282d5cde8b6d5e8622ee5223252224c
SHA512 427c977848aae2ad6e36fa59d54a9fc6f228fd2ca4d36e89ce0c2d9f4bb73cf8a8be7001e481f89b65a1d1a5144091c027434ec8039eacfdac809c09740e0486

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 09372174e83dbbf696ee732fd2e875bb
SHA1 ba360186ba650a769f9303f48b7200fb5eaccee1
SHA256 c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f
SHA512 b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info

MD5 2a461e9eb87fd1955cea740a3444ee7a
SHA1 b10755914c713f5a4677494dbe8a686ed458c3c5
SHA256 4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc
SHA512 34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll

MD5 842039753bf41fa5e11b3a1383061a87
SHA1 3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153
SHA256 d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c
SHA512 d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\AlternateServices.bin

MD5 83115d5abf6b3b69862a6dffe2f0b60b
SHA1 50fad9a68ac6b601d9ab47463d9dd33269496c86
SHA256 4ff865a55611284e00a706336edbfe222ffc13f5a196eff8d7bc813ecbaa374d
SHA512 4d2fcb57e6ed77d4d6bc1b3ad97ae9067d3fa599f5999127ded00f34d9a74070917f929b7628ca0288c5855a55e333d8c718be540db37862aa4f60924ff8966f

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\prefs.js

MD5 f66039d46909d76525d494b9c9b1766c
SHA1 86da363f0bd0507f1ea1bffa364296493a8c6d82
SHA256 3641fa85b73c25747fb7f0cf5322f274edb52435d0562b44c89dbc3c44507eea
SHA512 662b5533b142fabdb99b6b37ea31537fe6694678d8717f20c20ccbca05fa39432f2f0fa851e0a947fe36a17d49c0b28006bfbfd90e1fd494d646cb767a7c045a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\sessionstore-backups\recovery.baklz4

MD5 68cc2bbdab71b8f4c0da9753a6ea8163
SHA1 d8c97b6e70feac2a9673342ada7d835449c39c5c
SHA256 92feb7917ecdc94a9a9e39a8fb9b89288d6a2c9fdb2ba41aa82fa97356b119d2
SHA512 84a24d081a5053bfb7bb82255c59ba4924c4418ed9b3fe3f03199701ef0c439ab1d69d623835634b5c9ab798127328c41ef0111d37d5579e1677a886edb9dfb2

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 0a8747a2ac9ac08ae9508f36c6d75692
SHA1 b287a96fd6cc12433adb42193dfe06111c38eaf0
SHA256 32d544baf2facc893057a1d97db33207e642f0dacf235d8500a0b5eff934ce03
SHA512 59521f8c61236641b3299ab460c58c8f5f26fa67e828de853c2cf372f9614d58b9f541aae325b1600ec4f3a47953caacb8122b0dfce7481acfec81045735947d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\gmp-widevinecdm\4.10.2710.0\manifest.json

MD5 bf957ad58b55f64219ab3f793e374316
SHA1 a11adc9d7f2c28e04d9b35e23b7616d0527118a1
SHA256 bbab6ca07edbed72a966835c7907b3e60c7aa3d48ddea847e5076bd05f4b1eda
SHA512 79c179b56e4893fb729b225818ab4b95a50b69666ac41d17aad0b37ab0ca8cd9f0848cbc3c5d9e69e4640a8b261d7ced592eae9bcb0e0b63c05a56e7c477f44e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll

MD5 daf7ef3acccab478aaa7d6dc1c60f865
SHA1 f8246162b97ce4a945feced27b6ea114366ff2ad
SHA256 bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e
SHA512 5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\prefs.js

MD5 af76dc4435365e6c16ed97e46cceaaab
SHA1 c8e0ac7f6337aea143e30c924ea135ef72503a4f
SHA256 7935964ffa534cfacb702cb6b2be7e9bbd8a01587e25c074e7ca083e4d1ca9ee
SHA512 cdc277d5712c607f46d221d9b4303951548eaadb011c75b82f375e34fd5264a4c86d0f0037599f1150b1e890a90fa7ae535efca90dbb1314968143edadf90a93

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\sessionstore-backups\recovery.baklz4

MD5 eb3abf026a89fa6d55d1d2a12e9b93cd
SHA1 f07a214e2522b2fb842d1e36f79950fc4797a3ab
SHA256 509a415fd6682661ba857df75ba8497b75257cdafa674a26e05e101cda4d96b8
SHA512 8851adbecb5e4ce71b572aaa29b0a25ed6776f4f4bd8c033edf2bd21958f61ae7bb0a9a7b7b93d0c910ce04f215c3c238e7f13551a1f96d4592525bd7d68c9f3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\sessionstore-backups\recovery.baklz4

MD5 61472beba99ccda81873cb02de88b7a8
SHA1 a2334895db3be50504b6236900310b8ca1e205d1
SHA256 20059f4ac941fd959ad9fbd5c6626eb4434a2cc22e3574627cd355a405867f41
SHA512 831c4ce7c427f52041fe3162bdb7f5ddafa81c35886b0023ec056ea07e725e0960cf42371aa0647e7ebacd651b3599f90c71fc146086dbd281a69bab9469f18b

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\sessionstore-backups\recovery.baklz4

MD5 bd1de9135e7b2b3e0f317803601bea57
SHA1 2574d150c7895f3911d15e5a2b2ee12958a955ed
SHA256 b3c26a5bebba936eb91afdb4933e695cd6ed988abb9b5aacff0a326cd58324ff
SHA512 f87e286b6d15d1d51dc92982c501c5525aa07c4456d64dfb9661877b4c989a586eb705653beaeb100cd696761791482e205fe06734006b25274993ab75264411

C:\Users\Admin\Downloads\SteamSetup.0nz417bQ.exe.part

MD5 1b54b70beef8eb240db31718e8f7eb5d
SHA1 da5995070737ec655824c92622333c489eb6bce4
SHA256 7d3654531c32d941b8cae81c4137fc542172bfa9635f169cb392f245a0a12bcb
SHA512 fda935694d0652dab3f1017faaf95781a300b420739e0f9d46b53ce07d592a4cfa536524989e2fc9f83602d315259817638a89c4e27da709aada5d1360b717eb

C:\Users\Admin\AppData\Local\Temp\nsy3188.tmp\System.dll

MD5 a36fbe922ffac9cd85a845d7a813f391
SHA1 f656a613a723cc1b449034d73551b4fcdf0dcf1a
SHA256 fa367ae36bfbe7c989c24c7abbb13482fc20bc35e7812dc377aa1c281ee14cc0
SHA512 1d1b95a285536ddc2a89a9b3be4bb5151b1d4c018ea8e521de838498f62e8f29bb7b3b0250df73e327e8e65e2c80b4a2d9a781276bf2a51d10e7099bacb2e50b

C:\Users\Admin\AppData\Local\Temp\nsy3188.tmp\nsDialogs.dll

MD5 4e5bc4458afa770636f2806ee0a1e999
SHA1 76dcc64af867526f776ab9225e7f4fe076487765
SHA256 91a484dc79be64dd11bf5acb62c893e57505fcd8809483aa92b04f10d81f9de0
SHA512 b6f529073a943bddbcb30a57d62216c78fcc9a09424b51ac0824ebfb9cac6cae4211bda26522d6923bd228f244ed8c41656c38284c71867f65d425727dd70162

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\sessionstore-backups\recovery.baklz4

MD5 701e1d3e8a34e59d847d6a62c90c1dbb
SHA1 a9b33d7df5581b7017e39f891744f2382d33ee03
SHA256 6bb1036e977fe1078ab170f73c622567aa99a8ccb0b6b5655ce752315102fd40
SHA512 9caa1d9b10038f230a9c75d706c7485895153f15ade71d0c971c7dd6c6e1432e20776ac067520134c519c70294a348632a805bcc0c2cbe4c7d25d09b4fddf0b0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\prefs-1.js

MD5 e9436d18cdd0c942a9ef4706a57ea155
SHA1 90b35ffec1e118ffc8678ca9e59091f2cc1bf457
SHA256 ea3126baecb26d27c825f0d2e34f78421327845187310f6c982e7f1d7f4c374f
SHA512 9b218e3cfd445ab3e4c9e2a3bb25874b20f2acd44347031746e6d4c4114a47d5e2ad4cb765b27f17bb00d763efe5254ac9aeba09be086b069552d525f1824755

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\sessionstore-backups\recovery.baklz4

MD5 c6cb193b3e2748ae35cb3f8ffa92de1e
SHA1 91586f690613ab9b4c20c9618e7b893ef1cf38a5
SHA256 390e65159961cdb9cdcd5520ab718dd79a96bfa7c17450840b31fe834b4fec35
SHA512 fb74a1f11ec94fce435da32a90766f6617e02a14949965aae68df85acfeb2bbdee71bf66b45433321649ef90dee46da94c25fe360325ab7bcfb94ed576f0ebfe

C:\Users\Admin\AppData\Local\Temp\nsy3188.tmp\nsProcess.dll

MD5 08072dc900ca0626e8c079b2c5bcfcf3
SHA1 35f2bfa0b1b2a65b9475fb91af31f7b02aee4e37
SHA256 bb6ce83ddaad4f530a66a1048fac868dfc3b86f5e7b8e240d84d1633e385aee8
SHA512 8981da7f225eb78c414e9fb3c63af0c4daae4a78b4f3033df11cce43c3a22fdbf3853425fe3024f68c73d57ffb128cba4d0db63eda1402212d1c7e0ac022353c

C:\Program Files (x86)\Steam\Steam.exe

MD5 33bcb1c8975a4063a134a72803e0ca16
SHA1 ed7a4e6e66511bb8b3e32cbfb5557ebcb4082b65
SHA256 12222b0908eb69581985f7e04aa6240e928fb08aa5a3ec36acae3440633c9eb1
SHA512 13f3a7d6215bb4837ea0a1a9c5ba06a985e0c80979c25cfb526a390d71a15d1737c0290a899f4705c2749982c9f6c9007c1751fef1a97b12db529b2f33c97b49

C:\Users\Admin\AppData\Local\Temp\nsy3188.tmp\nsExec.dll

MD5 2095af18c696968208315d4328a2b7fe
SHA1 b1b0e70c03724b2941e92c5098cc1fc0f2b51568
SHA256 3e2399ae5ce16dd69f7e2c71d928cf54a1024afced8155f1fd663a3e123d9226
SHA512 60105dfb1cd60b4048bd7b367969f36ed6bd29f92488ba8cfa862e31942fd529cbc58e8b0c738d91d8bef07c5902ce334e36c66eae1bfe104b44a159b5615ae5

C:\Program Files (x86)\Steam\bin\SteamService.exe

MD5 ba0ea9249da4ab8f62432617489ae5a6
SHA1 d8873c5dcb6e128c39cf0c423b502821343659a7
SHA256 ce177dc8cf42513ff819c7b8597c7be290f9e98632a34ecd868dc76003421f0d
SHA512 52958d55b03e1ddc69afc2f1a02f7813199e4b3bf114514c438ab4d10d5ca83b865ba6090550951c0a43b666c6728304009572212444a27a3f5184663f4b0b8b

C:\Program Files (x86)\Steam\public\steambootstrapper_swedish.txt

MD5 b2248784049e1af0c690be2af13a4ef3
SHA1 aec7461fa46b7f6d00ff308aa9d19c39b934c595
SHA256 4bf6b25bf5b18e13b04db6ed2e5ed635eb844fc52baa892f530194d9471f5690
SHA512 f5cee6bba20a4d05473971f7f87a36990e88a44b2855c7655b77f48f223219978d91bcd02d320c7e6c2ec368234e1d0201be85b5626ef4909e047e416e1a066c

C:\Program Files (x86)\Steam\public\steambootstrapper_vietnamese.txt

MD5 f350c8747d77777f456037184af9212c
SHA1 753d8c260b852a299df76c4f215b0d2215f6a723
SHA256 15b6a564e05857a3d2fd6eec85a5a30c491a7553d15ffc025156b3665b919185
SHA512 efb86809a0b357b4fcd3ba2770c97d225d0f4d9fb7430c515e847c3dd77ee109def4bef11b650b9773c17050e618008fc03377638c1db3393ac780b5b0bc31b2

C:\Program Files (x86)\Steam\public\steambootstrapper_ukrainian.txt

MD5 cadd7a2f359b22580bdd6281ea23744d
SHA1 e82e790a7561d0908aee8e3b1af97823e147f88b
SHA256 3dd0edfbe68236e668fb308f92fe7c6493dbb05bfca85a48de93588f479ccc99
SHA512 53672dd13e6ccbe96f6d4a61297c595b6d6cba8de92caa51ccf8ab1d8a82eea5a425eab348f295b9ec27de0026ef849d9230f751a46e040be8863923f91b8519

C:\Program Files (x86)\Steam\public\steambootstrapper_turkish.txt

MD5 29f9a5ab4adfae371bf980b82de2cb57
SHA1 6f7ef52a09b99868dd7230f513630ffe473eddf8
SHA256 711675edb20b3cb70acf6cf75f2eea8e0d87c8ace3e11c8df362b4517427a34f
SHA512 543fe63f791250e05e8fda24fd2ceadebb4c8925e8927de49ae490895c87eed3e61a9ad50237532649f99fe3165836261de215ee3f66ffbfc6d677ddeea7732a

C:\Program Files (x86)\Steam\public\steambootstrapper_thai.txt

MD5 53f7e8ac1affb04bf132c2ca818eb01e
SHA1 bffc3e111761e4dc514c6398a07ffce8555697f6
SHA256 488294b7faff720dc3ab5a72e0607761484c678b96d6bcd6aad9ee2388356a83
SHA512 c2e79c2505a6fd075df113ffce92ad42c146424ca39087601daa4ed15a2b5528d478a093921d9d8a738c7b6b963275a0693ebe526b6e2135d14ced03639d0e70

C:\Program Files (x86)\Steam\public\steambootstrapper_tchinese.txt

MD5 194a73f900a3283da4caa6c09fefcb08
SHA1 a7a8005ca77b9f5d9791cb66fcdf6579763b2abb
SHA256 5e4f2de5ee98d5d76f5d76fb925417d6668fba08e89f7240f923f3378e3e66f6
SHA512 25842535c165d48f4cf4fa7fd06818ec5585cc3719eff933f5776a842713d7adb5667c3b9b1a122a1152450e797535fc7a8e97ebdd31c14b4d4900a33ede01f3

C:\Program Files (x86)\Steam\public\steambootstrapper_spanish.txt

MD5 66456d2b1085446a9f2dbd9e4632754b
SHA1 8da6248b57e5c2970d853b8d21373772a34b1c28
SHA256 c4f821a4903c4e7faea2931c7fb1cf261eba06a9840c78fdca689f5c784c06c4
SHA512 196c2282ba13715709ece706c9219fe70c05dd295840082e7d901b9e5592e74b1bb556782181cdbe35bd1ab0d6197fef67258b09491fabc6f27606dbed667d49

C:\Program Files (x86)\Steam\public\steambootstrapper_schinese.txt

MD5 56dcf7b68f70826262a6ffaffe6b1c49
SHA1 12e4272ba0e4eabc610670cdc6941f942da1eb6a
SHA256 948cad1bb27109e008f2457248880c759d3fa98b92c5b4033b94f455cb8ac43f
SHA512 c3fd9caf0bd4c303a7cc300faada9cfe6dd752e82d67625b31f4c0c2c091596508bb477fe19f758fdf79b25b8ac3f5320a8785d2b6705b9bcc28a054a59454e2

C:\Program Files (x86)\Steam\public\steambootstrapper_russian.txt

MD5 e04ad6c236b6c61fc53e2cb57ced87e8
SHA1 e9d4846b7e6cc755ee14a5d3fa45ee7d3bf425a4
SHA256 08c775efa77c2a92d369f794882e467b6e2526e61bc7aa7724f48e174524502e
SHA512 0dfb7e6d811d649103499018f3d115c542fcaba420ceb69124a4d837fe162ce514e7be2040860c5ef5f9c01c961fa6eea8730606b73ec107d87597989b6fd331

C:\Program Files (x86)\Steam\public\steambootstrapper_romanian.txt

MD5 6367f43ea3780c4ee166454f5936b1a8
SHA1 027a2c24c8320458c49cd78053f586cb4d94ee6f
SHA256 f8d1972e75a320344e3c834ba0a3a6a86edb39e20ef706bda9b7965d440d1998
SHA512 31aab33e0d272cb43a8c160b3d37256716a683e5052192fd0e4d3cdaf30a10a9afa9d26d5d14ad216ee455627c32892a711d2bc137ee7a7df9a297f001a19e32

C:\Program Files (x86)\Steam\public\steambootstrapper_portuguese.txt

MD5 eb8926608c5933f05a3f0090e551b15d
SHA1 a1012904d440c0e74dad336eac8793ac110f78f8
SHA256 2ed2b0d654d60e0a82b0968a91d568b775144e9d92f2b077b6da75f85ad12d04
SHA512 9113c42c38836f71ff0cc7019aff8c873845f47fbf1ab97e981cb038f4d8495b6df784402b1ee9666e8e567ae866b0284c81e6a16efb47131d5ef88569c4843a

C:\Program Files (x86)\Steam\public\steambootstrapper_polish.txt

MD5 9b0b0e82f753cc115d87c7199885ad1b
SHA1 5743a4ab58684c1f154f84895d87f000b4e98021
SHA256 0bdeee9fa28d54d384e06ea646fbcfe3f06698a31dfdc1a50703ffe83ad78d32
SHA512 b7780b82fbe705bc8e5a527c011eb685c99ef0b2eb810617b9f82b891341af95ef1c2f46dce9e458c0c4dcc3e7a0d21db6c77f03419cd1c4b521a9b72f9017df

C:\Program Files (x86)\Steam\public\steambootstrapper_norwegian.txt

MD5 58e0fcbee3cca4ef61b97928cfe89535
SHA1 1297e3af3ca9e4fe3cc5db78ebbfa642e8a2c57b
SHA256 c084a68b65d507eb831831aa2ab9afb9536cb99a840d248cc155ff87fad18425
SHA512 99aff0c481e34cd0e4fcbb2af471afb56d91aa11be664462b08e17ae169ca03ef77e7063b4ecd0f38ca7b2f6dc0bf2e316c7b31dffbbcfc763cd8fae27dc78d2

C:\Program Files (x86)\Steam\public\steambootstrapper_latam.txt

MD5 7913f3f33839e3af9e10455df69866c2
SHA1 15fa957d0a6a2717027f5b35f4dbe5e0ab8ece25
SHA256 05bc1f4973c6d36002ac1b37ce46b1f941fcb4338282e0ec1ec83fb558d1a88c
SHA512 534e541757d19ee157a268bf7ea358b48015f400542fcfa49cdb547cd652926160f015fe2cf026d9c4996e56ab90ca3899dfd457997d915bf6bc9d7bb00ba804

C:\Program Files (x86)\Steam\public\steambootstrapper_koreana.txt

MD5 202b825d0ef72096b82db255c4e747fa
SHA1 3a3265e5bbaa1d1b774195a3858f29cea75c9e75
SHA256 3d1399f5323a3ece1b1a8b3b31f8fd7f50c3bd319ab3f1c38c6e347452c95314
SHA512 e8fc7cc09f431301d22a07b238179ee053505090e3c4db30ead061513fe7159f1fe8b80efc93f4597fe00f01087bbe0bb2231e13693d72c8def138657cb91566

C:\Program Files (x86)\Steam\public\steambootstrapper_japanese.txt

MD5 7e1d15fc9ba66a868c5c6cb1c2822f83
SHA1 bfe9a25fdc8721d7b76cecb9527a9ba7823dc3d7
SHA256 fc74e26a8baabbe4851109512d85173b75dbf7293d41eb3b92a1957a773c8265
SHA512 0892be14a858cc860766afb1c996b2c355108a7e50971ea3ec00d15069e919a6eb05a61fa839bea3938492c391e274144c5e248f4c204a602bf36adf27e5b406

C:\Program Files (x86)\Steam\public\steambootstrapper_italian.txt

MD5 8958371646901eac40807eeb2f346382
SHA1 55fb07b48a3e354f7556d7edb75144635a850903
SHA256 b01ec64d75fd1fbd00fbeb45a3fb39244911a8b22bb43de4e0c03f205184f585
SHA512 14c5dbb017822336f22bf6779ccd4a66604ddc5f2c3caa24271e96f739fef007754d96844efa422d6682cbcd2d3bc902c36f0f6acb3eb87ed8d7b3f885973554

C:\Program Files (x86)\Steam\public\steambootstrapper_indonesian.txt

MD5 1514d082b672b372cdfb8dd85c3437f1
SHA1 336a01192edb76ae6501d6974b3b6f0c05ea223a
SHA256 3b3c5c615fd82070cc951ab482d3de8cb12df0b3df59fbd11f9d3271fa2fbca4
SHA512 4d41c945ce7c94746875b0dbceb14811d4966de4e97fe047406a304162fde7e1e2a16367fc2e43978e2e5aa66749f036b4444aa2312673c2cc3af296e8b77f55

C:\Program Files (x86)\Steam\public\steambootstrapper_hungarian.txt

MD5 18aaaf5ffcdd21b1b34291e812d83063
SHA1 aa9c7ae8d51e947582db493f0fd1d9941880429f
SHA256 1f45bb7bdfa01424f9237eec60eba35dc7f0dc4e8c2e193fe768fe96d3ff76d5
SHA512 4f3e56d1abe26b56d3f805dc85baaca450c0c7bec57ebcf8a6bb6ebb8588307dad130c83bf792bac76694909a14fd6a4d7d1e9b31e32fba11256343b9fc18154

C:\Program Files (x86)\Steam\public\steambootstrapper_greek.txt

MD5 189ba063d1481528cbd6e0c4afc3abaa
SHA1 40bdd169fcc59928c69eea74fd7e057096b33092
SHA256 c0a7a1df442ac080668762df795c72aa322e9d415c41bd0a4c676a4dc0551695
SHA512 ce59ad9b17bab4de1254e92ce4fe7d8c8242832f62ab382e8f54199a9932cd11b5800cc33895441426373d5210cc74104e0271b721a7e26ed400b716ae4d5903

C:\Program Files (x86)\Steam\public\steambootstrapper_german.txt

MD5 5c026fd6072a7c5cf31c75818cddedec
SHA1 341aa1df1d034e6f0a7dff88d37c9f11a716cae6
SHA256 0828572e4fa00c186dbf1d9072a6154d65cb499c6a37e338f3305f77a2fee382
SHA512 f9d28714b2a05f8d9025f1692e4d7e8baa6daf6176353f65646a38814a242ef2adededa44419edd69f10cf96ffba506dab7cb6e52111457bf69cffef12174b12

C:\Program Files (x86)\Steam\public\steambootstrapper_finnish.txt

MD5 9e62fc923c65bfc3f40aaf6ec4fd1010
SHA1 8f76faff18bd64696683c2a7a04d16aac1ef7e61
SHA256 8ff0f3cbdf28102ff037b9cda90590e4b66e1e654b90f9aea2cd5364494d02b7
SHA512 c8ff15373b37e848e6239a82424569e77c82a5fc557d17e7d2ed1d0d2b2f7d026cc1e2bc98cb5ee945c02cfefb82803c23fa6a26f48ff0adcf762f94cd5dd035

C:\Program Files (x86)\Steam\public\steambootstrapper_english.txt

MD5 da6cd2483ad8a21e8356e63d036df55b
SHA1 0e808a400facec559e6fbab960a7bdfaab4c6b04
SHA256 ebececd3f691ac20e5b73e5c81861a01531203df3cf2baa9e1b6d004733a42a6
SHA512 06145861eb4803c9813a88cd715769a4baa0bab0e87b28f59aa242d4369817789f4c85114e8d0ceb502e080ec3ec03400385924ec7537e7b04f724ba7f17b925

C:\Program Files (x86)\Steam\public\steambootstrapper_dutch.txt

MD5 31a29061e51e245f74bb26d103c666ad
SHA1 271e26240db3ba0dcffc10866ccfcfa1c33cf1cc
SHA256 56c8a86fa95eab0d8f34f498e079b5516b96d2a2f1ad9c2a888555e50e47f192
SHA512 f85865c1e9ab45e5586d3dd2b45d15265193e8a3c34b6bb1ac7e415a1ea878cfb044e8e01012e917e4f00bb9e0a422f56253f328df1bac99a145e19433354cf8

C:\Program Files (x86)\Steam\public\steambootstrapper_danish.txt

MD5 03b664bd98485425c21cdf83bc358703
SHA1 0a31dcfeb1957e0b00b87c2305400d004a9a5bdb
SHA256 fdf7b42b3b027a12e1b79cb10ab9e6e34c668b04eb9e8a907d8611ba46473115
SHA512 4a8cdd4b98432ba9d9b36bc64aab9a2eab31a074d1cbdfab3d35a14216c60752b5580c41bbb70104993420043685d3bd47eb6637b8fcbb3f42f76a15e4be041d

C:\Program Files (x86)\Steam\public\steambootstrapper_czech.txt

MD5 2158881817b9163bf0fd4724d549aed4
SHA1 c500f2e8f47a11129114ee4f19524aee8fecc502
SHA256 650a265dffdc5dc50200bb82d56f416a3a423eecc08c962cfd1ba2d40a1ff3f7
SHA512 f3594aad9d6c50254f690c903f078a5b7a58c33bd418abdad711ebb74cfbdb5564679593e08fb2d4378faaf4160d45e3d276ba1aa8a174ed77a5791bcac46f28

C:\Program Files (x86)\Steam\public\steambootstrapper_bulgarian.txt

MD5 4c81277a127e3d65fb5065f518ffe9c2
SHA1 253264b9b56e5bac0714d5be6cade09ae74c2a3a
SHA256 76a6bd74194efd819d33802decdfddaae893069d7000e44944dda05022cfa6d9
SHA512 be077b61f3b6d56a1f4d24957deaf18d2dff699bda6569604aac4f1edb57c3cfd0abc5e2a67809f72e31a90b4aed0813536c153886da2099376964c60e56001a

C:\Program Files (x86)\Steam\public\steambootstrapper_brazilian.txt

MD5 0340d1a0bbdb8f3017d2326f4e351e0a
SHA1 90d078e9f732794db5b0ffeb781a1f2ed2966139
SHA256 0fcd7ae491b467858f2a8745c5ecdd55451399778c2119517ee686d1f264b544
SHA512 9d23e020875ed35825169a6542512ec2ffdb349472a12eb1e59ddc635e57c8fd65fa919873821e35c755aa7d027c9a62d3d0fa617340449d7b2c4cf8dd707e93

C:\Program Files (x86)\Steam\public\steambootstrapper_french.txt

MD5 10c429eb58b4274af6b6ef08f376d46c
SHA1 af1e049ddb9f875c609b0f9a38651fc1867b50d3
SHA256 a1f6ba57ee41e009d904905c0ce5e75a59ee6790e08542561303109e1faafa13
SHA512 d8760f61760bffd8671b727d386ae220e7e6e68829a01553cfd5eb60ef8bd1d7c1b25e7b17a6db5bd17ba6712ef44999726764459318e784843c73bc4facaf46

C:\Users\Admin\AppData\Local\Temp\nsy3188.tmp\modern-wizard.bmp

MD5 3614a4be6b610f1daf6c801574f161fe
SHA1 6edee98c0084a94caa1fe0124b4c19f42b4e7de6
SHA256 16e0edc9f47e6e95a9bcad15adbdc46be774fbcd045dd526fc16fc38fdc8d49b
SHA512 06e0eff28dfd9a428b31147b242f989ce3e92474a3f391ba62ac8d0d05f1a48f4cf82fd27171658acbd667eaffb94cb4e1baf17040dc3b6e8b27f39b843ca281

C:\Users\Admin\AppData\Local\Temp\nsy3188.tmp\StdUtils.dll

MD5 db11ab4828b429a987e7682e495c1810
SHA1 29c2c2069c4975c90789dc6d3677b4b650196561
SHA256 c602c44a4d4088dbf5a659f36ba1c3a9d81f8367577de0cb940c0b8afee5c376
SHA512 460d1ccfc0d7180eae4e6f1a326d175fec78a7d6014447a9a79b6df501fa05cd4bd90f8f7a85b7b6a4610e2fa7059e30ae6e17bc828d370e5750de9b40b9ae88

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\sessionstore-backups\recovery.baklz4

MD5 02b6c78ee740aed27f8506d73ff58624
SHA1 828f0656fd208da28f1328b21f63f0d856dcfd50
SHA256 9705c5d94cb037e103f1a3b01f1e8cbe8e45d494524d7622074d8d57093081d7
SHA512 ad1e7c8299f89fc246fb1a09a43194464d5cea13435763798daa9c908db5ca66e872c615452563a7ff0c53fb5861517a74e728f172b4806e43b45262db70d9f3

C:\Program Files (x86)\Steam\package\tmp\graphics\[email protected]_

MD5 577b7286c7b05cecde9bea0a0d39740e
SHA1 144d97afe83738177a2dbe43994f14ec11e44b53
SHA256 983aa3928f15f5154266be7063a75e1fce87238bbe81a910219dea01d5376824
SHA512 8cd55264a6e973bb6683c6f376672b74a263b48b087240df8296735fd7ae6274ee688fdb16d7febad14288a866ea47e78b114c357a9b03471b1e72df053ebcb0

C:\Program Files (x86)\Steam\package\tmp\graphics\icon_button_news_mousedown.tga_

MD5 00bf35778a90f9dfa68ce0d1a032d9b5
SHA1 de6a3d102de9a186e1585be14b49390dcb9605d6
SHA256 cab3a68b64d8bf22c44080f12d7eab5b281102a8761f804224074ab1f6130fe2
SHA512 342c9732ef4185dee691c9c8657a56f577f9c90fc43a4330bdc173536750cee1c40af4adac4f47ac5aca6b80ab347ebe2d31d38ea540245b38ab72ee8718a041

C:\Program Files (x86)\Steam\package\tmp\resource\filter_clean_bulgarian.txt.gz_

MD5 836dd6b25a8902af48cd52738b675e4b
SHA1 449347c06a872bedf311046bca8d316bfba3830b
SHA256 6feb83ca306745d634903cf09274b7baf0ac38e43c6b3fab1a608be344c3ef64
SHA512 6ab1e4a7fa9da6d33cee104344ba2ccb3e85cd2d013ba3e4c6790fd7fd482c85f5f76e9ae38c5190cdbbe246a48dae775501f7414bec4f6682a05685994e6b80

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\prefs-1.js

MD5 f76b031d04c61211903e180066836365
SHA1 2d2f3d0697e10e43d18d9f74b28faf2c54dff7b5
SHA256 f061f2283952551522b2439d70943c5eef4469e175f18df2fa309a1a175949c9
SHA512 1175d9c851ca8ebf1d29d06cda2c68b98b44a927e8185f92d46c34450a8382d156e4b3563d2be89a6c4412bed326a7937cd3e6090dd9c446a73232b1f0ea2c25

C:\Program Files (x86)\Steam\steam.exe

MD5 52d06173e5995fdb588e56840ac7343d
SHA1 0e3a1de21cfa9652adec0e9385db153e494f07f0
SHA256 0ab4f7c0d72361c9c37c5ce59f1df39f1a138f258c380a9bc1328ce146651721
SHA512 7e6e0159afa4fd02d9bec216d6861e425cf44d15e2742c05454aeccf4408be36cb43d57ec89094e5ba64e25c1282f912a956a66e297ef8e62b130a809dcd5693

memory/5480-13197-0x00000000007C0000-0x0000000000C72000-memory.dmp

C:\Program Files (x86)\Steam\logs\bootstrap_log.txt

MD5 250587670c8757af1bf73d1a0a6f986b
SHA1 1e64bf9da3a81e6f9ef13b577969f0ac3d3257f7
SHA256 e8898021792b6d1727d5efe736da55ecf0e51390425c9e6a676fe4db1492533d
SHA512 b39e880e651d43c72f15c01c51963e025e9b556c289c59cc39a0f54f34cbdd19c330afd4ce8c6b5ccb8afd4b61aba339f11f749702cab19b266fcf926f36d742

C:\Program Files (x86)\Steam\crashhandler.dll

MD5 020ad894f0395691f728e74614adbd96
SHA1 d9c479da05f8cd20f42842ab9c6cb76170feaced
SHA256 ed97c4061db76f43a87aab8c226a6be0a68bbdf9cb331b3974bb9eb3da60a399
SHA512 db6bcf95135da7c247e7750e469c806c75c96622c1f765989d13e09439e3d52d434137cf9322470ffe3ad19b0bfb38ad23f8f015063511e7c77525173e6ee8a2

C:\Program Files (x86)\Steam\package\steam_client_win32.manifest

MD5 b1a967b318030e275d3bf19635f17644
SHA1 ab036db9ca9c485e64333333d18b1b27655461b2
SHA256 5b1efdcd684821cf4d00e8fb4c7133d1e6a8b40d511c62c7e6fca6e3fa2c9e36
SHA512 eab0a2fa354481a8db92bf503437ed0d200e4727fb454834aab7f5125cebb901ee53b9bea44227b44bdbb3bb1280290699b4cf8fdbf3bbbef8b121c621d95a85

C:\Program Files (x86)\Steam\public\steambootstrapper_english.txt

MD5 27993eb75894ca4894db266ad9b5e61b
SHA1 4def653ee04b0514822b690052598435ec25e686
SHA256 fbc09c1b9a55d04b57be8fb2ad5ab58b38f76054ecd3d1b70440a2d08191b05b
SHA512 eaebeee5b1a7dfb9bdf661623554793d7ef7e15d9f9cf01f94da1eb0b84b88c8f24176463d15c407ebf670c5b7fd4052daea33ba43e75c1de2979487c4987bab

C:\Program Files (x86)\Steam\package\steam_client_metrics.bin

MD5 52dc1577e883f555a9d899060e8915f9
SHA1 111ef918bf3f86fa6a345c555646ce0fe33bfac6
SHA256 145bc7ccb9cd02441986165e3c59dc3dd521d648991f9312dd4b01df406f2a77
SHA512 4833cc6bef5bbe7991ac67aeff855b83b078391d42df4d015969d4433107b9e932d8ff9e87f257556bb9f973cb7110566f036e83cce62b10f169bf5884c6a356

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\chrome_elf.dll

MD5 1d7c12f54a1c26b49b287ec08da3430d
SHA1 4ae1c3281c61780293340104aeaff1533eb1c59a
SHA256 22abe408da4703c068ef3b4419e09d270b4961096f16ff86d1bac752cab44abe
SHA512 0e2dd6cfafc5f151dcc92d343b64e5ecb1ab31de8913212985a86416f0d623047c5a65fe6211c7cdeff30bb6740e14b99adac3496fa0d799fc3a4115e2ced21f

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\dxcompiler.dll

MD5 e42ccd57a524076ddd278038619c3861
SHA1 331eaed6c9d6e97bd58b76e346a10bcf54ec2a14
SHA256 2077446491af4a4a92e69c249d6b79a8b7a090ae5d3f6b525cb59dbfde9baace
SHA512 5e74839aadbbd492e482281e199f76c498a93ab62b533b7275ecf30f6df34db22dfc9daaa1e41a7c91a7e50a2699d5cdf50a7165384c0ad1b5068ad1ccda1ffa

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\eventlog_provider.dll

MD5 2d35374fd25759e50c61f42a07bbb861
SHA1 09a5932bb4add6414c896992bc3c8c272d927cd2
SHA256 7b7576bfcc2173557713ea9a5c9b0a2ec816e956a90b4e2194709764ed337cb3
SHA512 fcb1d30f0b4518eb68579d6cf156bd5e1454d08b92714c5fe3544c8ca07f2764f6a9fc5caa1ed9beca5b3a8b5d10d28e9660a4115e1d9fd6d0162aa01953b9d8

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\dxil.dll

MD5 d2a3821ff8201eb0f095b805db0fb4d7
SHA1 550576dca8bf7ee81f175d5eb65631a507ff0cbe
SHA256 9137f402f2687d5c2d83dfa7e15180ceb9ae29d741b16506aefef18f94d4768a
SHA512 f4aabeecff7a5579c41dd65a2c408383ff164224e30a5d81ca39f4aa31db8b42efcf7bffe4303fec87541d90a0c38354c44028c6dfdcb9c060f24c065e03ecb2

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\dbgcore.dll

MD5 067f141b175624d7a88a3558484e9d02
SHA1 b314045f58c45484646960463c37b85eea163ed0
SHA256 7a8cbb3ba129bc3a41ffd8315ccce023f4626ec341b35c79c8c84add8bfb7f27
SHA512 344d9990da1460ffa8e19a511a4e975c6c2c7dd21d73dfcc3849729ef33678fbe688f0282fdff799b81c41b2200772f5b36ea488506b6acf11d649f81b653a7b

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\d3dcompiler_47.dll

MD5 25c6a5ff6eef9dbeb199aa695d0bac52
SHA1 ebeeebc3f40b161328454119558f06c23bef5524
SHA256 3a70b65777fe52b0871aa6f593a0248f6b886f17c60c2cda09b7e4dc42a91a63
SHA512 8e6bc58a3d73826a17418eb95664a9d98c5c65e67e0f9a4f163bb04750e22ac771e522a63a26798eeb53ed2f9d9e72e22e1158fe06d9c45056722a8fab472296

C:\Program Files (x86)\Steam\bin\audio.dll

MD5 63b971674d0b8e46a59dbbcb185901f1
SHA1 83992615705bffb1a29576025bd51f2abe8c59db
SHA256 7bd7f1f5a6956099caff7e2b5a538aa4bd0f4a70768529c610810bb79b969e49
SHA512 018f96a2ed4f18faef77c893f4b558254d94083677e955fda3fb60e379ba171b7f29b48d7e55f9952842dfea5ed6eb52a3edc90b0bb3075192dbc40fd2c71ae6

C:\Program Files (x86)\Steam\aom.dll

MD5 d764264518e77cc546a5876c3bcebad4
SHA1 ea17d45b396fa193a851bfd345e2b2c20ad60e12
SHA256 e78492de0ab575add50b925bfd44216d224d09904a9b14c17087a92fdcbc15cd
SHA512 7cf132ea5254a55c08186ffcf5e47360ef5ddd57d03d7051171f6753b22e3925304d183c2037bfd320ad56c08e079f9b2c4640db8cb3dbd38ff500c7a39e997f

C:\Program Files (x86)\Steam\package\steam_client_win32.installed

MD5 57e4b4883a5cfdd277161a3c58e4e0d8
SHA1 3d04b5ff9819dedc7ea4a777f0bf798ca06e4129
SHA256 1a585a941c447d237ae8a3f6ee667a2263dc7ac490f3bc9a3bf51411d0ec7d53
SHA512 c42a4b25888cc0c6ea48287e929aa5016402c04f9ae3a3b7dda9c88d4b8226385eaa4a25550b7129556fb35e73a1faed222b9bf0ecadb17167f1ff55ee114ef9

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\libGLESv2.dll

MD5 3cd37ca91216ed0b7fcd78beb2cc15c9
SHA1 7ab7ebd83fc094a64a1d3fb68fb90912e1447a90
SHA256 7ed85c93fca522e485cfa4a9688bfe5c5ccf1b3dc3ad4a518fba7582f2208061
SHA512 810b7bb12e6ee24fbde119923b4db804a3aa410850c587d94ad232162b962b9a0e179c2857511b16aa2c3a257443202fc8320c5237be4daef435e6acc8907f96

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\msdia140.dll

MD5 02229c4846fcdea33d8afa6c5027a8d0
SHA1 1ceaea09a8efec2a26c3c557cfc988af21739db8
SHA256 f430f70c0aaef9ac63b6c8119dc2e4b946d2f11254be094bb023e785a7d984cd
SHA512 44d58947d3496ed254cf1ab378b3341c5ca6d082f338b0523fff7ca529904e28c83d41a553aac24738e62b1666489f4e4a6efb26ee3d8879244449c538bc1df0

C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\libEGL.dll

MD5 3a304c8e873f8dd2bc6e24f90bf9fccd
SHA1 26f44bc752f99780af4ad4971a99f27204bc3381
SHA256 591623ae0702765d55580edd0a5c0add25dfda32d4d5c41767588626175316bf
SHA512 5fa50ea4a1028f47187021bc50cb2d63730d024e7d3bd048100f836e45bf364d8f69ac01f142254ef52a8517dff4d58ded548e0c524d366c49c3fad86d11f518

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\wasm\index-dir\temp-index

MD5 497094a51dca91b93a018783ca4926a1
SHA1 187f0b3adbad1ccae54d281d3ba9a819cb47205d
SHA256 f92c76fd0751ed4c561a0e0e5a84b03c94c4728f40509cea0699482755e2b319
SHA512 2b2764baf172d01033d2e9b76260c76e73b1c41e68d6a2dd81d92b04ed402ad605b0eeda27cda2b01272ddb7a5184e4b6d9b12888f8c6ffce29d8745b05466d4

memory/11404-13260-0x00007FF987CE0000-0x00007FF987CE1000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\DawnWebGPUCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Local\Steam\htmlcache\Session Storage\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Steam\htmlcache\Session Storage\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Steam\htmlcache\DawnWebGPUCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Local\Steam\htmlcache\DawnWebGPUCache\data_1

MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

C:\Users\Admin\AppData\Local\Steam\htmlcache\DawnWebGPUCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

memory/11404-13259-0x00007FF988DF0000-0x00007FF988DF1000-memory.dmp

C:\Program Files (x86)\Steam\config\config.vdf

MD5 6e6a2b18264504cc084caa3ad0bfc6ae
SHA1 b177d719bd3c1bc547d5c97937a584b8b7d57196
SHA256 f3847b5e4a40d9cf76df35398bb555117dfe3626c00a91f2babdedb619d6ad53
SHA512 74199ff275400b451642cde0a13b56709735676959d65da11ac76dd645ab11dac5de048ff7ede0cb8adb3a3056b3ecbeb3dc7481bac3768d02051e564c74b679

C:\Program Files (x86)\Steam\config\config.vdf~RFe5a22fa.TMP

MD5 3cdebc58a05cdd75f14e64fb0d971370
SHA1 edf2d4a8a5fc017e29bf9fb218db7dd8b2be84fe
SHA256 661f122934bbc692266940a1fe2e5e51d4d460efb29d75695b8d5241c6e11da7
SHA512 289c40fae5ec1d3dd8b5b00dd93cf9cada2cb5c12bcfefea8c862ddf0a16dced15d6814dad771af9103b3a5d3016d301ee40058edde3fdea30d9767146d11cd6

C:\Program Files (x86)\Steam\config\config.vdf

MD5 a2ec2e91c3ef8c42e22c4887d032b333
SHA1 e2c738a2e9400535b74e2263c7e7d1ecefe575f2
SHA256 8f9f970835f133258a7f740126012439385bbaa5a1d6a9d0d967a390977441c3
SHA512 b069d241efb19e09ec8b5e60ef6c43e00d5cc0f774b9340127c2180356dd1964ac625c1afdfaee5f99e72b26f56046fc329aadbbc365b403af765a55e9c9aab3

C:\Program Files (x86)\Steam\config\config.vdf

MD5 fe2968ce887c5f1ae166955a4f07c416
SHA1 48837cef9c9bf64037a6d6bc4b6a198232d7cad4
SHA256 8d9047bfa3243f8708b3ed369b9b24d77c90836e5a18fc681af87fea52789213
SHA512 2d78bf96e538fe99e1633ce80927b097742706f261e5a0cd89257822952d76515d23dec12976d638cfc7992dd3b4406eace4b8fb6463961909fa93130ec78469

memory/8692-13372-0x000000006EA20000-0x000000006FD61000-memory.dmp

memory/11404-13382-0x0000017E307A0000-0x0000017E30C0E000-memory.dmp

memory/11520-13383-0x0000021196500000-0x000002119696E000-memory.dmp

memory/8692-13386-0x000000006EA20000-0x000000006FD61000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 075d7eb19787bfafcf509f82d386e5f3
SHA1 e87eae80affd36202d97c39acf2bb2489e4504a1
SHA256 ff45f783071cd645a1923b48d07430482bd28ad7e7081f3ef23a1c89a7ea9414
SHA512 eb2376c9b9efc7869088d401b5d442c4ecda170651d428625e5400f753e55b728946bf5c3d9a0861dcefbc35db9d907ce6b37f2bdcc8a15cce0c7c3222a78a1e

memory/8692-13398-0x000000006EA20000-0x000000006FD61000-memory.dmp

memory/8692-13410-0x000000006EA20000-0x000000006FD61000-memory.dmp

C:\Program Files (x86)\Steam\config\config.vdf

MD5 c8dd269758205dd0628426743efd40a8
SHA1 1398e79935fa4d07caa32ac3f8cf1ed5f5ea6c23
SHA256 139524775703596df248455da319c298b4f6aa0b52d32539a66611182c91f271
SHA512 59af80752238079643e14b919c33966893f5bf6adbe274ad6549f4e9f70f8a366bc6af3caff78b72800c0527af0ba3c25a7e01178eb0bcf04b8820f133666ffb

memory/8692-13422-0x000000006EA20000-0x000000006FD61000-memory.dmp

C:\Program Files (x86)\Steam\userdata\1530346111\config\localconfig.vdf

MD5 78984ceeecceed4b212ca8bde652cbed
SHA1 ec3fd8a39591810ae44a402d01456ebf30333fe4
SHA256 89e70bcd4ecfa4153064d1de39ad7920ce7dcd824da3e9755fe3c20a1c201c7e
SHA512 deed2f7a2470b18450f0babc14ba4f6c74df7d00c0f07dc7e682e40cd0afeab84557cdef321f1b607db905c70fa63023c4233e11f4c1f245b8d8147f80244b82

C:\Program Files (x86)\Steam\userdata\1530346111\config\localconfig.vdf~RFe5af416.TMP

MD5 2ca36e8a5839f0d3203b63e5ceba54c3
SHA1 1e9d4008e2c73853e7d67293a98ead5e12a1ce2e
SHA256 0315d23270707c04af2797a11deaba638b4102380cb0b61fd4b54b031ef36340
SHA512 1caaa2b0d4e29b664ac294167945853da75d1db03d562b3eefd99d384d7dd08678359e088a51f14c1600897c934fb4ae0a0a5a6c5961d37acc4a9f9e74bd2758

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 792982936df622fbe6c664a457e2fdae
SHA1 db2d57d8988be4a5b7baca1a805322c23c5c2fce
SHA256 dfeb0bca0721031ac78d65d0ebd79b7b6d106d91648d643ddfc143296f989da9
SHA512 feb56c0a6bf777aece730a542e035dafcd7365a57c289f9b4cdbda5899fd0508932fca32bd6957ab3c745accc113ffceafa2a078a3ea31635714573db9cbf95a

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 a00faf569c31be19413c05bcff89d765
SHA1 b7b0b96b59d3baf53658d1e0f484d15346c907e4
SHA256 86ee0fbe434411da8c182bb2147d4ed7991cf6abb2983682319096a6fa67df98
SHA512 d7cc772d88cae1312417baf9970bdafd9ce6259772e028e203251855d92120b47244b0bbfd90f522589e8fa19edc8433119b9a1e1ff26644de70527469762449

C:\Program Files (x86)\Steam\userdata\1530346111\config\localconfig.vdf

MD5 78b1af30d5e10b94f2bffd1e1fd23790
SHA1 92a521d0a6c92ba0cd5e40974d9ccd5e0e086fe6
SHA256 5be9d1391f6ca53da0b4b09308dd79a15660e23859981e0a5e4bcec152cdde5c
SHA512 dbc480c8521f0f47b8b01ee7166822cff494cc5d8a0859b6216fb434328772fcba3b67ed756562616ec9f03ced3270a9eb1aa5a5d46af763beb038c085298c5e

C:\Program Files (x86)\Steam\userdata\1530346111\7\remote\sharedconfig.vdf

MD5 81694b86472ee06f79663652e0434a75
SHA1 ca12981edac0e41d74b62382195c940cc4527178
SHA256 52cffbb2056edfcee514344792c9f97d51b758b5faa0d13715934f40a57ac738
SHA512 4b1e67c84c4c83df3d07a0aa4bb813d5f898b2621484f7307a5c74badce502d3fb450ccb1d24a783c430e9ad8dd628f7308707aa6cfd85badb0e5aa486322849

C:\Program Files (x86)\Steam\userdata\1530346111\config\localconfig.vdf

MD5 8c68aba113d98f3f29514cf89721c19a
SHA1 04b742cccd4c4bb10dacc59d81fbfb1ce9a3acd8
SHA256 50046432f47446d66a0aeb41a0e1fce7742a7f805c757e10e68ce7025f7e8aaf
SHA512 7c3ffb8e62bfc5ea8022c742b411a11a76d509e8974ac5d005631e6dba50f239eb85867e9af8d10b3f6949a19dde3b4d349d2248caad06aeba1bf824c1f049b1

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 53451f2d8b54e543376b60d55929da84
SHA1 8d1b4768dca22594f3a6263487c540024478a75a
SHA256 39f6c0ad804fa94a1fefe5f6fc94e63b5e69d349540dac535be9feef73555424
SHA512 072ab0785bc5ef178865766d046dd7e8f88ac267d8b5be18bc5a77debbf766dcde69e017ebc8dff13f30f082bfff2447757eb566557d7d3eb8e4d96225a188f0

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 f865b9d433d3b1b21e8b55a9f4cdb657
SHA1 bef8ddf5bef56235336a950ee1ebf7294f5720ee
SHA256 4d0a4f9fc2388e6397002be663a8dc21d72b1b80ae48f3248d8b42763a03d146
SHA512 691bb45bb21f775fbf45050e6251a36bc5d09699d31895adacd9dbcccdf7f2489dbc4313f27fbf069ad74521797bc85425d84739b9230e3565931adccd87c572

memory/8692-13548-0x000000006EA20000-0x000000006FD61000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 9e6c6e7ef29458fd8bab9454241251e3
SHA1 eed1de1bd9d8654f0afed2f8742e7be986a74dba
SHA256 509929f1aee210d6963e5edffcfec0757d2989a4c4d1e8ece3b5345c4ba23847
SHA512 d4110e30a45952e94e09c55e5367eb5116a671cecbec7abede23dcfcfc8a95db27155f9cae5021c97ca216c034d085873bc18a4c1223938d53a68642a32d3306

C:\Program Files (x86)\Steam\userdata\1530346111\config\localconfig.vdf

MD5 23eefea230f1cb6cdcdd0889baa12c1b
SHA1 e3d728b5a4a6fb8d6d9ccb2a8ec69d4627140a09
SHA256 1a83138ad3d3d9592b809f46073d47152192a394d6a4065a484d92fc14c2c06f
SHA512 047a842cc504609cc22e01e48f86b97dcbdbc54a07cac25971e5d85bca994d1a8be3b3234a4f8ae18e5bb2db02862f0c60780afc239f63c0967f1d5fe656fa31

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 fd2c2d4b0b5714cfa6fca7f71f951812
SHA1 d126f67102f120018b01b14097f52826a02925f4
SHA256 a5d6e77d7f0c37cb565d2cc1d58410d8bd89bf2575785be7bc45335b628355b9
SHA512 5e1f99433363080f96acd8b7a914c104c00297346748852a89373b9f2fd4968a87c8f27e1b997568304c582ce04f408e3014d36499e4c9163cc58e70cbdff66d

memory/13280-13696-0x0000022FC30F0000-0x0000022FC355E000-memory.dmp

memory/13892-13794-0x000001D4551D0000-0x000001D45563E000-memory.dmp

C:\Program Files (x86)\Steam\userdata\1530346111\config\librarycache\271590.json

MD5 d820875401deb7477aa8f88a92e6ba22
SHA1 729a291e5608bd4cd5775c74ae966cd11c34659d
SHA256 bda07eb220610587e2e8b22950c84a8fad3c5b6b3712dbc07b2977c8da541c6f
SHA512 c859b9f3d6aecc24cbf57797c1911f3b37e637a8de8183efe3e47490e4895efc2d3291ebc491281517c9f0f9b81d28ea6845c8484a6ca9f1e9cee7c3534026c3

memory/8692-13873-0x000000006EA20000-0x000000006FD61000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 8e763492847296a6b1c26a0d41979774
SHA1 3e820330ccdf3db7c78f9359028825ef41886ce1
SHA256 d3026f8cfb3c5f4c3f704e85facb04237762d218933bc3fc3cdf62cf0c67552d
SHA512 ea5d0aa3f55a8a6eac64eff853c3b668772c40a58d60f18da92fa2d46549d064112d37e314db34efb159d1e132518648f63639aca8d8dbf40e300dc11ce2eae9

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity~RFe5b293f.TMP

MD5 1b6f56e01234fc93e247382ef2bb6a10
SHA1 33c42854fc79b1736ac23d48d7c7e875892a4a85
SHA256 ee20151abdf2343d2c7c01bd73a3c25189fcad522f49726740248bb5f602665a
SHA512 78e7d99608ee71b0eac961152c7ef6779e028b3f9af2c74034b62cd1abe1f1c5af79d783ac4c40f5a40370bd1570fb3a57e96a761ebb281e3fb953260899ea3e

C:\Users\Admin\AppData\Local\Steam\htmlcache\Dictionaries\en-US-10-1.bdic

MD5 4604e676a0a7d18770853919e24ec465
SHA1 415ef3b2ca0851e00ebaf0d6c9f6213c561ac98f
SHA256 a075b01d9b015c616511a9e87da77da3d9881621db32f584e4606ddabf1c1100
SHA512 3d89c21f20772a8bebdb70b29c42fca2f6bffcda49dff9d5644f3f3910b7c710a5c20154a7af5134c9c7a8624a1251b5e56ced9351d87463f31bed8188eb0774

memory/24008-13891-0x00000223BA9F0000-0x00000223BAE5E000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\LocalPrefs.json

MD5 ffa043925000de7be13202f3a0b16095
SHA1 ac6efdb1af35d0d44b72ad0607adc07e05462046
SHA256 0b5e691cdd8c0f911e3f1b116bc809d9c6b3ed2d6331ca4c9a95297afa1e90df
SHA512 2fed66a673dceb7a4f40027a94f93a4c00cb8c80e8f0c014f7913af6295ced4a36a205c579a05badecd366f98ff7fdbe7b4921b106239fbf8c1d07b6c1ce30e2

C:\Users\Admin\AppData\Local\Steam\htmlcache\LocalPrefs.json~RFe5b3063.TMP

MD5 a4203abc0b1f4efbd63ab5313b2b52a1
SHA1 2c3c2044893733822f4b32a5b916d2b039da2860
SHA256 26beb507aacd5bef31d516930ad80675c06d5e97d9c242091a880cab179a5b94
SHA512 75f4ac04d69037ea0360d8dc4fe167f21b8e9d74ee8df6fb7a4793d3a44bbf2a26cf6e6e48e8fb281bc645fa128166199dc1c2a674299afe5b1ad40832c3335e

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 ae6c767317700ada1704344262b92745
SHA1 b4f8183e65019070bbe880ba1af1c7dccc6db59f
SHA256 c722cd2b6b1e2436bed8a4554a37ad1d6f61dcb4e1ded9451acece89895c03dc
SHA512 12102b32c10d11f79afa0180520cf209495990889bedf22f65dac0f11a3bcdecce75fd448b3ef22c53e9a57673aad99e6f1599604cb57cca89eeee26e09cd365

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State~RFe5b43bc.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

memory/23380-13957-0x0000022B5C950000-0x0000022B5CDBE000-memory.dmp

memory/8692-13969-0x000000006EA20000-0x000000006FD61000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

MD5 4c41ccce8ee05e8ee019768d765c0205
SHA1 c96c0a98c1200789c4922249f1dd25a8b0d81156
SHA256 48a035f605e5113356c7c9b54f4a495a7d3ffe85a21e6bdc7120024ca012aec9
SHA512 8a9c5a6d5107aa7b80cadd54e20ee634e1ab7cf2af17640cdd03071d9867ef75fe75f6fd87089253367894f9f4ecc8c203aa852400bee22a2bdeee2ad9b9a25e

C:\Program Files (x86)\Steam\appcache\librarycache\1113280_icon.jpg

MD5 7ecdaf8a54ec52b20640a88527512903
SHA1 3133a4d748ad3be61fe9db759339cd5de73339b5
SHA256 7bd8b75aec0a4d4a377f3ca3a023fd8b7c5fc7dc6a2a66d17f8cdfe5b731ab0c
SHA512 60ae2031eed0c38264f0d8db22a9b6efeb3f80c791e916e15a1730853162d56e0da014dbd93a5479bae4f3bdd5705ca89be70c90574a524abd1c276ed5c55a2d

memory/8692-14063-0x000000006EA20000-0x000000006FD61000-memory.dmp

memory/16100-14082-0x00000268FF2A0000-0x00000268FF70E000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\sessionstore-backups\recovery.baklz4

MD5 36b9b66c3177d998578be9e1ad8e9ee5
SHA1 0ae0bbaf24aa0ba60600e7bba1df8a7e2423d70d
SHA256 0a921763794c6e8c031dd6ab82071404c48421dbaf2743098e715ddb3df4766c
SHA512 687ee751c09f3726875272b78b40b6ed328e198da4ff59f470cb96910c271bc3eef7fb59e42d6a2c8d6b1bc3ef1c21185640048f154dbace5e6140ebe99208f6

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\0HAVN5MGZQ6XY7BDAOUO.temp

MD5 7aab2bca420fcb7aebde65b2875616cb
SHA1 9160a4868e726d882c2cc17b89accf45a785c138
SHA256 a310522510d0a1b4adb3eb0060ea3847b38ea625d7c9b6ce345869d68fad30d2
SHA512 95dcedee1f858f213d861bbfbe90a130fe99385f89e2ef33450e4b523bef63069fada9df603f4c8cd5ce01fb2e18d885829960e6659deea45fbe9be4d907ea64

memory/8692-14116-0x000000006EA20000-0x000000006FD61000-memory.dmp

C:\Users\Admin\AppData\Local\Steam\htmlcache\LocalPrefs.json

MD5 110f4e016bf023df2194748715d551ec
SHA1 2fda2c93b382e39fe1c3373a59054ac27d74aa45
SHA256 172baff5dff84edbff5a99c08d3be53d8d192585b5bef7402dbe7f33495e9e74
SHA512 341ffd80dd5407f9930761eeae55d027b00ca7333b8ec1aed332e5251f31876a917772066d2d1461dc351779e2a8d6bfe0ca3952026d466ffd56902a3399f409

memory/8692-14132-0x000000006EA20000-0x000000006FD61000-memory.dmp

C:\Program Files (x86)\Steam\userdata\1530346111\config\localconfig.vdf

MD5 f3c9ce06a092d41eb83430b488b2626c
SHA1 60cee3d35bd3661be026fc648ff8f1a1e477eac8
SHA256 a4a9565b5ab7863fea7e06b7487b6bf54132bd772cd5402dcc71e605ed2cb3bd
SHA512 7497a3ed3cd2c36c57e53ef63dac5d5ee7675a24df13dc2d67b9be2dde38385b263f94101b2a099589517209c2054747f9b449ae63c34c109ef2311cfff5d1bf

memory/8692-14184-0x000000006EA20000-0x000000006FD61000-memory.dmp

memory/14740-14185-0x000002BA178F0000-0x000002BA178F1000-memory.dmp

memory/14740-14187-0x000002BA178F0000-0x000002BA178F1000-memory.dmp

memory/14740-14186-0x000002BA178F0000-0x000002BA178F1000-memory.dmp

memory/14740-14192-0x000002BA178F0000-0x000002BA178F1000-memory.dmp

memory/14740-14191-0x000002BA178F0000-0x000002BA178F1000-memory.dmp

memory/14740-14193-0x000002BA178F0000-0x000002BA178F1000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\datareporting\glean\db\data.safe.tmp

MD5 a0f5669441d0b6fa2d696bfc9c3db165
SHA1 d7f8cf06765002eccdba5af7c55c57a0f7870d3c
SHA256 56514a95dc1c91bf0c47bb1495cdf18a23ffdbdbb3077ea77edb227668c32735
SHA512 9ff84b2f0dac72c1c760640bc6f0bf952146bbe30415f3237b14f0b89101d966167b4232875dbcc1d3137e14ddb9d27612a8f1e31d56828e9aee657a207f916e

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 e649bc3170a6bd34edfb21e820bc9486
SHA1 986f99e88680b5963c9cbee01e5e72470cd7701e
SHA256 e3dea7d5cd7ce93a9050aa6abe7c644f57d7e6e60e10856e85fcadc8b4c3b4c6
SHA512 fa39a7d21592ecce72c506b206e422e41dd54c74bfa08d116a62a854cfe231430539f667dcdf1e7d725f4067a35417b4b3d389eb8065bc2af5c06cdab2ac6c37

C:\Program Files (x86)\Steam\userdata\1530346111\config\librarycache\265930.json

MD5 97fca2f72836ad21de052ed34d1159ce
SHA1 be2a61787e977c0bdea2d12577c9c02de5875289
SHA256 87be2d688a2c58809f1b6604671719249dd561921b819548faf38e00b7628160
SHA512 4ae639b2ff3f1b68319e1d75f9bbf0e1ca9f5a1bcdfc3cb4bbfb3f77e4309f91e0b39cc7b572baffbd5531bc832e64eae7ef6db7e5027f99f8605b624daed9d7

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 d95f74182fa85c2edacca8c038aa7460
SHA1 25982a87002271310621cf5f7fd2961b14913565
SHA256 bbd1a22855cb68e874bc06e82f8fb3eed78304e61c5c9f2b87346f3c27b74654
SHA512 42daf39e86e02dd95a1583b78a8abcac0422dcb2f6b0f00ac5c4140d71758fefaf05e4d8b3a7b81383e1b72491a554dcbdfdeab11885d232ab29fa99eea17fa3

C:\Program Files (x86)\Steam\userdata\1530346111\7\remote\sharedconfig.vdf

MD5 f3a78f6943d8d90909fa6ad4b7ed0e7d
SHA1 6b7146bf3c584062eaa6b654487bfa6316508f86
SHA256 c166f1f6e5f58a95f9570e2566298f44a6dde52baef99843689e3d220b7dcbc5
SHA512 bbbafb2308d55ce53588c2fe976223ba2ad659f702dc3946d2a963fc5de39c29ca062a6bcb55dfa049ea6ea5a71dbe7f5f725c34bad520ced13ac918d30b6ce4

C:\Program Files (x86)\Steam\userdata\1530346111\config\localconfig.vdf

MD5 0de4eced6968ecbc0e6d368ac3e2c036
SHA1 88f0355688be579e941c79d2e02efd2e55eb8917
SHA256 ee4a66524e8b19ecd57a37f6a8c9951586f6e6cd61a42231fd5e500859c30c3a
SHA512 77ea320d0365cd03f30b3f999c258a7b9b858f6f081628996b9d5a14c6cfd3daa0af660a5e7c6b5b995da6613b92050da06210c1f48c265ba68cfcc3949f7cee

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Goat Simulator.url

MD5 a466da0623ff52a995c6125d331bdf01
SHA1 b75f10f1448d9d71e792e889d0d048f4db197f09
SHA256 c9f9015d212f12dddab6fa1abaa973c80927561e3bc7c58b1dab5a9ed3195b16
SHA512 50563e2ed5447eb4a199e779189d89429a10cae28cf980741852f4624fbd0c577ef45e951bdca489254365bf5b0bd14f32e3245be2d2dc611ab59f8b2c9e7fa1

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 393ba6090982a9083ba4f19507b63c45
SHA1 47313c6a9b31c819fe60bb049624c8d1e2c0645f
SHA256 c03f07ae0da7c6742a2622ef901e666ec394ad0d2a3fc728bf76957b9f971947
SHA512 2b653bd66c226f0846856b9b95f53025eb78737f5efd8668b887224e0a7fb075d6c394e6d382e80e521de8dbb10f72472e41abd9d361d7ac8bf2be71be32af95

C:\Program Files (x86)\Steam\steamapps\appmanifest_228980.acf

MD5 9036e5ffdd48a272988d38c882be4ee6
SHA1 e032db769c8437053a35476298e807cae4944473
SHA256 31fbeca467f6e0b5c1530059e7dba1e08503646781de9b1460843b5a020ea294
SHA512 72d535e7dfed83bd79e76a2ef1ceb2a530d195fe3cf9da32779c4b644d07e7e2493c371a868605e61689cac6dcc8c9cc09f90ca68603a24ba7671b25a6435df2

C:\Program Files (x86)\Steam\steamapps\appmanifest_228980.acf~RFe5e5e0c.TMP

MD5 d661702721b5f234b7a7e729629c957d
SHA1 6a6ea8e4a48ef67da9b0c35127fc9a0c38e9a951
SHA256 1774c5d46b834a00f98ad8b20e6cbb2cec85b641b4dff4d1a62a86b690fc4236
SHA512 5e19018318532b9022eee88b7ead2ca73b2e064120403f89188b1cbfdcf641f4372713008c6528d8a1e45282cc8e5b63b23af02cfc4252fb2e1987b4d589aa5e

C:\Program Files (x86)\Steam\steamapps\appmanifest_265930.acf

MD5 dee75768b26f9bafe322c3d358bf524f
SHA1 c4735e9a0c48a97faf660fa7ebdec68a3a69b317
SHA256 9b203506de29891d5b5fb9169adf7ffcac3bae802035c8a83d746f5ed7d71233
SHA512 a48410842a8a9dec9ab87e79a06b63cf59ea4adde1ddada59e5036066b6372121c2cadd59bb826902ac27ed9e5f1ab844b0c5754ad2e26453bfa07df1872fd91

C:\Program Files (x86)\Steam\steamapps\appmanifest_265930.acf~RFe5e5e0c.TMP

MD5 eb5dde2e785690e147b693e254dab213
SHA1 b86d1e3410878b063de51e8e0afaa2c2611f3cb6
SHA256 6d397418b7486c644f4385e29ea404932c3bc021d5995754e669f6f8f0cd84fb
SHA512 c95e91c8c905f4565bb63d245f59de6f5523a69fdac9de41c6134d051e0386e4ce0ac1bc21c32d8d8ae591d02c65749ed7d038ac41d36108bb98bab36c184c18

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\enjqfdim.default-release\datareporting\glean\db\data.safe.tmp

MD5 8cfdace3975b2963f60b368caee14e3f
SHA1 d196550d524167bbb7ed8697ba6d4e8c1d9cb877
SHA256 0ca17f1e5529cf51a01eb91378337a3186864b63f3f6bd8fd1e5e2b7fc69a272
SHA512 95a5eba712c42a8b357e436262f2887947ffca498a059c275860b725515bef74b650476a68bb0c4b22c014ee029f34f22a5560a3072ed995971db6a41ed65bd0

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 08d3338c2036bb0ede1a707c45019fd7
SHA1 99cdfea21f5338dabd1a9702b13c71534f7a01c3
SHA256 c8e1c4eb7fe4a8778beb40bfb1b106ddca22850b5a0e87f832ef3df4d85b64b0
SHA512 25f2a2889b97a1f2e8ece3f98b41eae1a62477c44ad2fecd3c3447e95d24bcd8c2c228ab54a6dd6edcf9e9963112dd878b9b1626fdf6a98ff51e494d93b92834

C:\Program Files (x86)\Steam\userdata\1530346111\config\librarycache\228980.json

MD5 5216ef382c2d09e344ae46f2c073acab
SHA1 91040770b2b51d00e6b7c32a37315eef249a55bd
SHA256 2200afe5bd5dccc0cfe9d34b29eedc49014dd673e5b9b2d1797e3f52a14b5617
SHA512 0a5bc2a98fec77d33e0aca0934d547746883d5ce2b6cfe23e36dc9afe5fbd51dfe12d955213cd0123b4ca004e225182bea6722d0870ea65ba5a808756e893f7a

C:\Program Files (x86)\Steam\steamapps\downloading\228980\_CommonRedist\DirectX\Jun2010\OCT2006_d3dx9_31_x64.cab

MD5 7cfa3970799aae1e11578a06f55ed7fa
SHA1 3b4ff2abb10779173fde3ca277a809757f4a6d0e
SHA256 95ba9afa45f3e969f7c285ef703664dab075274f27e19177fc73a8adff04baa2
SHA512 f59578da843533fe129c2cc7a118fcc8b1844e4d376d0b07c652d36bc9945969f8ef105e1318cebe24099420628236d3f516fee5919adb873da836b28284174b

C:\Program Files (x86)\Steam\appcache\appinfo.vdf

MD5 7c07d50543d4bc00bd99938eeb2c9882
SHA1 760d236f3e77d7d075b2c62e9f459efab1d1cb67
SHA256 eb7d56b890f7564a15cb38f2e288584085835ecdc1c147d37361b9661b118cc5
SHA512 b0e905ad359beeea1d68590d8e4a9dfe2045a414ee7f018b0902df6edc80aa13b24c3ce815fd5afa4bc42364df4217102e0b61cbe6121a1fe79008bbd056738b

C:\Program Files (x86)\Steam\appcache\appinfo.vdf~RFe5e8e34.TMP

MD5 d0a637528cf7d7c1f44f392e3181350e
SHA1 80caab601f1cdea8968a2de56baddfd78251b038
SHA256 dd5f4e87a99d4f18e19efcc863233da08723c3752ad654b835562b6a225eda40
SHA512 8321091afe710d8904ef2aa021dd5f71fcf3a22df5063004f33a4a181eaaa88d86134681dff35c30592da77f350a59a41919c086b6734e2c0ee1d099b3d3c3c9

C:\Program Files (x86)\Steam\steamapps\appmanifest_265930.acf

MD5 3fb787e5e976c2e24f6780e7b3bfed5d
SHA1 50551a11bbb51c3df9aab2189e14bd8ad7f6a407
SHA256 03b3fff376217a66d690490c3c6610c5557eb99362eb2e31b6530d9180807c75
SHA512 6a0d0bf4deacee08578074b3ef8557abcac76fa06a9e47c20bce129278a43146cd7f1f163719c5c95c834353b5dda89f7429c579b0476331227d1ec0aef26272

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\UI_ShowMultiSelectOutline.bmp

MD5 e0123cb7af6089ba2340229bebedf484
SHA1 ed20754f85bf5521bbd11cb46b5f67b37098c557
SHA256 063cf38a54855d609838db28ec37b451f52a40f7c128978eef62fea95f4508f5
SHA512 ea60866b82f90f4baebe2ed4f8eb29976fcc779ad0ba4f14098b97c005a73e7fa2c2e5b3a728f3d932a324801f3a19a17ebf9ab5e035e1779c1df4b437b74036

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\Localization\JPN\onlinesubsystemgamespy.JPN

MD5 3fc6ca581afb72e9dea93cf03d6f4f31
SHA1 1abbbe0628e4183b8e254320d905bbfe06f28e7f
SHA256 42228cdeab528bcd075fe2a7f120b0f259d30928c0c26a3f9810c92cbd449fad
SHA512 2019bdca19227e9bdfa8bc088ddbcffc6da5ef4b9bba7f6b6445e218c3f5faa1bc13758040a7da19669ac293edd0774f1f49db865e85eb05dfec1e80c7676cdb

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\Localization\JPN\Launch.jpn

MD5 378efa270caf2c3021c9c911d4108009
SHA1 8bce91c7d814d16bcf695581e0496bb3173e05c5
SHA256 1b46bbdfe5f77bf6af009dd0f2fa4813172a901e3f10bd079e3255b463a8e5ec
SHA512 63d105a8d6230e1973bee860d1f30d7182b6575c05d9491936af9c26d86b494662c29523de731dd02fe2ba17533a624bfb6d2c7c83ed8698861334090502ee20

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\Localization\ESN\xwindow.ESN

MD5 02e00615bfdbc54bb51fa2bbb164e94e
SHA1 6a3a2aeae06b1f29db2b91ba7caedfc59c561f24
SHA256 91bf3103f07b48a72fbbf1bc3c18f64dfecc9e49e732bb5bc41d9c60018c5718
SHA512 b903aa118dd1bece2eead5b755ee64842d2b062f8b56b6851ab7f0f7afa0b7b5866383d662427ac76743fbd6a426d559b9f56c28c4f14e069056b1a9d0009b73

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\Localization\INT\EditorMapTemplates.int

MD5 c7553adab7649e32516223cdf1b20b9c
SHA1 364b2ff170c05089e427ce99eb1b880001b7ce00
SHA256 4ba9c28f24020efae6b51807fb81b83b32ffb018ffa4e358668eb23bf800fa2c
SHA512 2473ff27418023cb6e98b323837a6dae38d12dc588dee6ef2f63333f7472ec6425ff2882c2262161d65e1268b2e0acf99717882da998dd36de552ce4911c07c8

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\Localization\RUS\unrealed.RUS

MD5 95b915454a294c64b739363d395f0c20
SHA1 f1d4ae464cfb07945b096ad0a5ec6946dc51a27d
SHA256 1f2fe611aaba30542968bd040dbbee65b3506c4d7397b0d2595cd2fc038802b0
SHA512 2c947bd21d0f5aeed07e66bfb8679600a97cbf6a9a4be1ecc5321e92cf216819102af13b7f2e9177ef2518883442614cfe8749dfa0a1a207ea8399715379adad

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\Localization\RUS\descriptions.RUS

MD5 612829379faa4e9de1c23fbdd787d754
SHA1 f54e678d3320e7bdf09d46d79c17076c82bd550a
SHA256 d5f343181d8ebd9e3cfe54c90d60463fb1c38652ba102f9a4e7607a6f3093f14
SHA512 2720d5f787baf3c22a88428fa9a3139d758b84705c2c0458ca2950adf916e80ea85abc529cbff62d044e3c1e629aab5693c0cbab8a611f49a8731e163a1d7b4d

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\Localization\FRA\gfxuieditor.FRA

MD5 1d3142fc9ba681104511bb9799cdb657
SHA1 bb43067b9c75be3a8fb40d58dab01236980999e8
SHA256 6e379eaa52c2e283b0f43dfd6a641854ec8fca650ac4948b5f7282e7e8bf6b39
SHA512 b518551d4d8c32d1082b370599d13a88ea3b51c50eec1991d9bd3cd735afbb2cf6f4aec550e83ac05514a9762c803e1a76464601301456a895c5c1b78b4a7a49

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\Localization\FRA\editortips.FRA

MD5 28178fe9174fbab76ef63da8d70be2f8
SHA1 dfcca6537e9c4747d92779401945f253bec6a16f
SHA256 7c0aca6c18d135af4bca9a56f7d7bd9f61fe5078deaaf29d3031fa004dbb2601
SHA512 7bdd1260aeb7af8f1ccc8bd9d2098e00b7836d10dad129863d3c4c3acaba58f564f009851ddba1bcc31a0ff1a3c38ec291cca898260ebd1755c5cb27d6c49b40

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\Localization\RUS\windrv.RUS

MD5 006db8d1e5d38c4cd75be969ccf63a80
SHA1 95946fac9caa61bcddfe9b77ab9ff90652c666e9
SHA256 0225d6cb8795254ba33eec4f3d6bfe94dc1fd6d50ed3870eeb87910b0a017ab7
SHA512 df2d53bb4235e07e2675e0f9827e6454b91f84c48ebbe9fd48cf90221d934ce84ea5dde54ea2c5ee255aba01c21026781e134381da136a8d1956800710c81cf5

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\Localization\POL\subtitles.POL

MD5 1b8879d5bc1d2287cede45145984d148
SHA1 2899c7babb01b5affd6e5f3509e9ea870235cec0
SHA256 ed963031c8a2a2593477d87a34755695183376228b74539c0a7d09d692f2548b
SHA512 0233db550b7a963f6ec6a038e6b82a08511c745e53fcf5e83e4e53d14f5a17f54f510df54acb704c38ff172ecff65c5729b3feaf25bee663ddbb71b94833fb30

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\Localization\RUS\startup.RUS

MD5 df06fafffc7105bea1a5d0ea5614c04e
SHA1 c7a747810af1a1c76054a2da8613b3273523bc80
SHA256 2d96b4d67a38d80876a879b8e3a93b90e3750f7a3b7399ae360b9dc8d99abf10
SHA512 65dea6b7715ea80e3f2b39e943ca419214c6bc5282fe28238d28e48bd85db47671f5b2fd69c3fa4c22cd08b095f9e12bb0c9fe815adacae81187a539194dba79

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 5f35f67e6a329fc3d76565849b67e724
SHA1 47a8b7352613655344b95648599645af6c54e16e
SHA256 11f5e57ecf671a5e1e8f98cd2ad3040bee16466a115bbec545d6ad78e4530cd0
SHA512 48498bb66dfe197a0588e802ea6b1d044ac64cc17d954fec1e0469380c2a8ca32a60fefcc502d0aba7c67176962748af3fd1a312d29c80126f02598122806686

C:\Program Files (x86)\Steam\steamapps\downloading\265930\GoatGame\Localization\FRA\Engine.FRA

MD5 597131e9856d6a70d041c7cf1be81c47
SHA1 0b669be479ca0d56c4f3fc9196015a488448f693
SHA256 8702918b04e405b800343312a870522595c0c4173d7aee11aa9c0d43bc942cba
SHA512 5837c76213f24cede791a5ad9eb8521e5fb831a02ee0b40feb1649d62dd43074780c2999dae4f76db38364cd78f20db605228fa782db3a45e3256fa7a102421e

C:\Program Files (x86)\Steam\steamapps\downloading\265930\GoatGame\PCTOC_ESN.txt

MD5 716a7efa3d84ac9981204f7aec23d0b5
SHA1 09cc8caf8805d4c51156d9c1ddb0e8f7272eeeea
SHA256 201a35234a5eaca3c725b72a3393ab3d47446b811fa541cbdbeced6a09173cdf
SHA512 acb473b7feed87feacac6c746da4185d1151b86f2c5ac8fb21315ce6cefe9899b7f3286bc0390862facc1a1c4a2b05f6d3362f045a4d895fe6bbc4aa863ed7a4

C:\Program Files (x86)\Steam\steamapps\libraryfolders.vdf

MD5 8e90a83a66b5c56e991b9b58b4dee95f
SHA1 3d159497135bf273a59a97e656a1c2ec4da75eb7
SHA256 7e34d0963425342dd8e18dd6b50ffb110a3ca19981245ece6f4b7c916a7852f8
SHA512 30e8ed6b3ec7b8f272e16d6d3144b0aee040837da7582d2463d4df4d1f407bba2d4bd9a084f7b50c408cc4b399952bf264888cf967bf65a54b7792dd1d68a17d

C:\Program Files (x86)\Steam\steamapps\libraryfolders.vdf

MD5 1bae661d3e4d0f1dcf684b5621c70756
SHA1 575c60d66b09ec004b7780defd8533a8fa5aa2e4
SHA256 bdf2e683ade4ca036143e66ec1e02396c6d5f44787d84ec12c0a65532a2a1ea6
SHA512 4e884956237b6d5e8c4d16edd1b6ac5c4f45bc733b32f85c31b5d484aa282beb5ae0a6d35439436dc89e7627ce1549b8e1ac1c1afbf22e7fe472e93ad8c9e953

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\UI_CenterOnSelection.bmp

MD5 71ba821c4708e4a0dcc02db52e78de4e
SHA1 4392073e46fa074e2352e7e4c807df7afb0b819b
SHA256 d1ffe30d776e01842df92c171bdbf66f7044385380330638d670f61f887f3927
SHA512 76bc95f358507aea7f651cedf8328b68073dc35eeb6b084d3967b99b542c4a396a04fa217acab762cae7044b8b7a1a6e7134b1fa74bb46bb852c54757b7e9a36

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\LVT_LockViewport.bmp

MD5 23fe482762ab32d8264a6aa8e42f24f6
SHA1 ef84c3fc5b85bb99e22f187503e6095f201b1541
SHA256 8f5f079dc179163228d9988a0bbc18fafa70a9e5e600e696e79c4e782b4e4fd8
SHA512 7da9d639e406617e677dd60877d7eefa13527e2b39eaa777d229d5c5eb2552a5b491746db3e0cc32fdcdaf632ae63e5ce7796bd4e664e84e89c11bfdd8e90b28

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\KIS_Continue.bmp

MD5 8a97f8f7e92464f064e28ce0a1884f41
SHA1 cea43a02ebf227c3a7e2e7f8fc6851ab6770408c
SHA256 d34481ae3d95057ca973c695efd7dbb4014102e976cb24e1145697daf26e48dd
SHA512 61ec5d1f8e2b40ea7e7a3d7155ec417dafb8d072d9bf237b090c1e090e963cbe8c138b31fa882a060f953bb85ca8eaa12af848738a06471e123cf017616bc0f7

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\Vbtn_ShowBounds_A.tga

MD5 0a15054a5b7128d2fd5572c300fa06ed
SHA1 98c3207b4615b57a2b9ab834c40fb36e3041e1f1
SHA256 6d91adf1b1fda8368c7b51845440fea757533268092d8c9f889cf3feefea4411
SHA512 3bd6b1061665d57237740a15ef4fe77906461949f0b57c45ae1a350661b5ef6ef8c947b9d0d490370310ed600a8a519d2fd5758417446691a84876a44e223a90

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\Vbtn_ShowBounds.tga

MD5 318fdbe34227c416fc2790f21767ed2f
SHA1 c611b618585be9d1ebe6959ba37c238d60d2aec9
SHA256 0bdb14c0f9d86830bfeedb29ddf1deca476508610ffab4d34ec27f5cd5cb240e
SHA512 688b44c2abdd8377e8688b506d811331f0b56395b8d2223cadcff03384a4364823ed3fdb2a43c22ca62cc665fde59d0964eeb3f83127e1bc02d2329bbe6cd8b0

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\RCEditActorTrace.bmp

MD5 195d9f626509c820c991161ba08c04f0
SHA1 1dae227602429250e133f0bfd54532a90cf0835c
SHA256 c315dc8c0f3c99be9b474a0e94da0247bb9dd1308e8dc6872aceafbd0118d1e7
SHA512 b975666ec5db2449a86b7ad86f29846bd5dd65e99aab4c68d5b0ba540e6a6480571bd91ae91751a45930c3adaee543fa93e1f27645223a939af01e1ba6e79156

C:\Program Files (x86)\Steam\steamapps\downloading\265930\GoatGame\Localization\POL\GoatSpaceContent.POL

MD5 8040d94db73ff7bfe7ee05b2e9e87be1
SHA1 0db50c5f40c6d2cc6ac669aca756b4c2ca97d73c
SHA256 c9161b1eb21d464af3800cd6ecea5c69f2174f0759a2beb74f251268b15cd3d7
SHA512 185a435e2ae00516d457516544903f78634d4ce88a1fa7f58bac69b67e4b22dadfcb5dee41b1d897af03df5fa634126342126de399c151c8bbc42a59e0f4df69

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\CASC_CurveEd.bmp

MD5 5b457f366b2abef3cf21aac2ecdd1d8f
SHA1 a82ccd732c129098cbe40f0f4cb8243fc9188e28
SHA256 da98c78bacf9a8db3264d78d302a33fd7e756971a99ebd0f83db8cc0a07ce18c
SHA512 d8dab74c03adcaf467a181ead6e7a9ccb2df871b41299f7e70dc8f3cc918f4da106f1fad6c515f3a09dfee6a77ac5ec011ed532d17c989c7ebc76498d3836b47

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\Landscape_Brush_Component_active.png

MD5 7a81b0e40aaf38176719a5376370ae7e
SHA1 1f9950ff900dda3297d739b410751be76502ee28
SHA256 64cc49b2a01801f7440b43a993d6037d1d4e551b5654f7cb1d571130ef1fe4e8
SHA512 06908d9d9746265c1885d83120cc3679139417b3a98f6e8384897f81571647780cdc5f08537c05ae1bd8191042022c7895ad27fd53b37298308d80e21e6821ab

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\PushView_Stop.bmp

MD5 54e1d7d80e0a08573a9d24c30589a2cb
SHA1 ccd22eba71daf4b3cb244c3b2576acea7fef0a26
SHA256 3d4e5217425a338c18ceb78317f0e1e5af1c5e374ce461973a682962352d8cf4
SHA512 f0cb7ef1720cc75ed5bf648925af9e85bcea711d3df7c3ca46f89e369161e68dd28ce0b6966edf4d238b743fd2415994af9b7e1b5339204f0357d0166d3ccaa0

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\FaceFX\res\bmp\PreviewSplash.bmp

MD5 fc655270a903ee13ea0cbc3caadb5813
SHA1 440dba72ec76fb09543cc50c5558a6d8496530ac
SHA256 2511198fb556d6b21d6b07c28099796d042d3189a9365a71037fc4c979e42136
SHA512 7d22eb0633849c0f733c2ef957de5ab31f202da26e8a2912a866df83a36d9b59545bd4c884c8bb8952e976c1fb4841a8b1b6832801c91bf0c506277f4512c618

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\ShowWidget.bmp

MD5 aec30a7fe04bc62407afe1bd4c1dfb2b
SHA1 f298bd98b55f5d75f6b05ccaae2484f8230d0a88
SHA256 a07cc7b2fb1bdfb9f2f5ea86551fbd251db4273c97c92393e0ce29341675484a
SHA512 f0d6baef0a466579b626328b598ad832f216864c54c29325d38f379cafed392ed1d319c77f858065ade9fa870b95a63705c7003d6a1d4385e50a971007940dd9

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\CASC_LODAdd.bmp

MD5 75b0266fc3a8bf07a2d70aa3e3895b3a
SHA1 0f55d08f5695e76b63968f69d7d1791c21913361
SHA256 d9fa6033cbe3346fe7834373a7e7f8faf2604fcecf01655fd180fad7ea237b82
SHA512 14db5b35d3a03bca174ba9e0f28e9e8c58fd540e3ca0114e504f6d2e2fccc71ba37cdb9ceaddbcfd69071f96a3a7d1f14d60dc534f797b80446fd25cf2aa2e4a

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\Localization\JPN\SubstanceAir.jpn

MD5 f48fa5e9440e653840eb7d96fc1f1764
SHA1 a9796771bd01597c0d2b7bb800d5a1546f62dcdf
SHA256 0e7b8018990234ab0845ff55c8ed439c8e51ca40763bf4793e5355ec36e380b9
SHA512 e00b8fb5bff61ab7c0728a47725e626de760fe051367f6178e659fbaedc99de0001896843be3553fbc069c00bff717495b65cdee1627abc0ef1860b82b6d0a19

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\ASV_ClearPreview.bmp

MD5 d4c79440b890763515aeb0b373f2a97c
SHA1 648a83927af9bc52107719a256a5bdac31ef2994
SHA256 29b553391eab5c2b8e5822874293ce8a3f1300240f1422b1b77505c39fce8d21
SHA512 2d40feae4f1b2b460b105ddfce3cdabd16528fb74f2c60ee9564d528ee78f2accf1b677b1f0e38f5969444c225b584c3854b2bde0f2d69ec28f3b49836af6ea0

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\PhAT_ShowSkel.bmp

MD5 6f9e94a484d2065a431c529b7173f92c
SHA1 3a8f3014ab135675a013f1dc51dd29eac28d71a4
SHA256 ceaacd190df8a349c1f9de887e6722e96ccce7f769736c1f84bf8fd245256563
SHA512 2b0c5c34cb99f57415f42eb1d679ceb70e67809fde06d27221572f6c70c22487b197cd5d568e1d626196caf941a8dc56bb26d5f3c161ba4e0ffd655ebbb200ab

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\MatEdit_Prop_Browse.bmp

MD5 80e4cc3f37a91bc0ee0c36b9255aaa63
SHA1 fae09485a37b3252bb604beb6092f197d05f2364
SHA256 6a1dbadd86cc2670a9876a1b53379397558d79aa073de8a7e8c33c07560b8734
SHA512 89931ce366484e236d8aa739b46f6a1b4b4dbc824db999feae53d88bb632eab6d032bed5b590071cb1f7e2773ce569d43962d037349a4199e422e607591195fa

C:\Program Files (x86)\Steam\steamapps\downloading\265930\GoatGame\Localization\POL\GoatSpace.POL

MD5 a87761d83dfa4badd3a5b29e56b24e33
SHA1 01ad04b1a258d2087866d4d3dd18be51653f989a
SHA256 943d56d1ba384bf3a289acb90a614d79f1706fba12ccc1a256597dcc274b7145
SHA512 807a5e4b806997ff4d4d93fa1f2514bea7d4e2d77f8e17b1ff1bd1f702cac2c27e28e5ea7f42b97f59535ba36ff464364706a8aec51dbf9e75505c8cfc1f443c

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\Prop_Delete.bmp

MD5 23be1af80186515929083dbde5d14196
SHA1 731307b0cb5c56bbb5e93f7ca914f73d8ea1ff9f
SHA256 a078f02a0e008f37b3bc6d4bdbd4507e89e23951f0bd92d86b07bc362ace7e38
SHA512 38ed59a42560fe8f9b355e2a31a2927a845443cb9b7648a8f5ccae50db542ff17273608f0e505862fa40dbf5bc9d2a0921c068040b4794c5fb221ff43532e950

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\ASV_Cloth.bmp

MD5 233a0be611bdbde3d041b3663954ed0d
SHA1 c3025799a6537a6dea773a19249c2348ea113547
SHA256 60f468139e3c9dbb0d50b492cc519516d70b7e81d885e741c7e1026566585213
SHA512 9a0e2eb1866c12daed5502fa55059f268d253f6b71f47df08039231153838f2c37b3be4d6fdc8925975c53eed8dac9fac13862d1c236d25121f44a3ae2478b2d

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\Prop_NewObject.bmp

MD5 3fb68f6ecc1042874c32babded7de6eb
SHA1 769386cad50e3429e261444f7038e835d544f9c3
SHA256 5cb4d49c94d4d95c6f4ea410c1ec6b9889755bdc6529f2e1a2cca6659668ad93
SHA512 09d37ac52ad2b186fbfb2dfc39a358beb8556665d09668379af70d91de6e74f00cd6111da41cab48d27f55755531aae202be3dca4c173d1b079e60e88c868c2d

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\PushView_Sync.bmp

MD5 217b1aac90c074902e4e94dc391d3e96
SHA1 fc2571ae7df8080b4c29e809fd6260de7b5ca276
SHA256 43cbfc8d2db0e277810a7a9b3674952618aa3f914d162a4ed513b588e8fe68cb
SHA512 12856468c168ec86fa359e3b64e03d20bac8c3f6b7a80a417f1df8f9c6fa405409c5f8b9270031a2c7be658cc2ffee203e86eb370226f1cf143440276d402c70

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\Localization\ESN\core.ESN

MD5 2d184a22a35dcce6675d98120d0d0ecd
SHA1 b2cb7f4bf43cb6b7b73e56f795e1685bf5302f7a
SHA256 8b9245c028fa09a1660f85ef6005017a322c1f5498e80b905936b753ba3b1cef
SHA512 aff63b1596596d6d937eaea52294ed2299054ae38966dbe172d5d944902f5602352522895838292f76323f7f5b901f16101fd21023d8d1e15e6c38c1a05e76ab

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\Open.bmp

MD5 e9fb0c25d64e84aa10a4cd9908840ab0
SHA1 02af30a759eb7978101668e785760d0911762464
SHA256 4537a2259c531466bf79f9f2b15ede1f8005f12752bb6d67f5e35ec7413e7f66
SHA512 e829a5cb2312bdc6b354059e84eeaf0b35f525415eecfde64cfa33c2f72e18b4b3eb30a67cfc129e5e0e7cacfa83cb275d8930080632fa095c9258c7926cb2a7

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\Camera.bmp

MD5 ead35080917817e1c74f99d48cdfd355
SHA1 08a891fe89d906e34d6ab72f1fc77fd62cc984f7
SHA256 15b07721d37ea72054c0b38ef31a03c86779c1a76f3e78a2623a6044ee0a64df
SHA512 de8879372b37a1df93191ef8c40cd592a8a24d68a090d3570ace6fb4412640e3fd02f1622295b85c247224ed4286c16b5af4b0b69296ca684af86170c3469efa

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\PhAT_Hinge.bmp

MD5 e257eefded739d48a61b220326b736e5
SHA1 99c856a29a2bb5c22a4ce046bc95370223c3b6e2
SHA256 43c3a3a084ce239bf7b438d34cdeebf208e4277980dcf60edc70c4e17ef8dc9f
SHA512 7e1a21e096011d5d2ee5da4132cbf4feec4c75efa41470e749627ca0cc9e8527b919e250121240e56d62ef8937556bde429623a2e1b30f0a761885c41e2e5ed0

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\Landscape_Brush_Component_disabled.png

MD5 04f5e3479666af0e6d2765ad80753fbb
SHA1 9c894552333133a1c1be002778c2881c7f4241af
SHA256 2ce1993ade31d3b9d57cd3f0e5bc91416a6e77544afc865ae1cd317c0485f314
SHA512 4486591f58d76e5bd747d66fd93904b4fe25f63c8381a892677311bef529d8b5222ca109e4c8635d347a60e1fba38ecde199218566476c01854a21f1ff414268

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\KIS_Pause.bmp

MD5 cbadaec92cfa05b32f89943c7fc61987
SHA1 a0349547c1c51816ad12231522ee8222aeee8559
SHA256 1c49b61bd2f005091b35075141ac1642e717e2fe38cebc8eae188bbd8447c3bf
SHA512 011af9ac17f18008f5a545f5a033c88f5a9e1aba87fae0f279c411354b371feeea1373bfb94b076345979cb7177597ae250f2eb116a8189c1b6d13d3d5cd0226

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\LargeVertices.bmp

MD5 39d857db5dc83e0e0916369a24389e89
SHA1 d585966e4f38e28ace80a707ceb47a3caeb17226
SHA256 41a45a61e76b3ce1e1b399a44be2a710937cb1b44fe26e34f5cedd96328fbec7
SHA512 893838b187cf6c8b12b386f204219331e0e6c7a6b22f42510123ee368a14df49a2678b800fca97301a9831a2cb62703560ed2f0c7c6370ed266fe80ab9c27213

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\PushView_Start.bmp

MD5 d15efbfa6455362ae24fe65fc6244cdc
SHA1 197ec1b9fbc93c3b4febf6da72ca8cfe1586b14b
SHA256 2aa10eb65b4ad8135da8a74fcd8ca776e4b48504a8b8d31b9f743e2ea29dd162
SHA512 216cda52fac5b144fb0009fd2d4ea18bef9c2e5f00f9594fa3390365d2d1d75d6d800ee296ee28cc97a243a7dc8675d4451041a7b5c72d3dde7f4faf8d21b1aa

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\MatQualityLow.png

MD5 7e5730c9d06411bcb54168d1c19cb93f
SHA1 720cbdd6d944da95cd1d673bb96ef8e1e4e3e6c9
SHA256 f9cceba36ce0afc119e7469f63a2d133821163e6ec5c638bc83985b74542e6d8
SHA512 dfaf9d1d78183ac199fb94c4e132b816302337c4413e5687bb3c76bf6abb93994d18df1d8485a14a41c4932295abb7b53785cfaf091e2c6f845d94f934e5f98f

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\UI_Layer_FolderOpen.bmp

MD5 16e2cd2a57af50b0dafe66943a181081
SHA1 5f83b2c72a37368d70c77ea65e97a2c9a2adf890
SHA256 ccf39cac9f491ed3fb7b92a759940235ab35c7888a4f80aad167ecdd6d07079d
SHA512 beae85ff232e98160c4190e9d7d502e8aee10e60e28d4dc784df2b2b40f4338708c0a44a2a7497a30358c0323cb482e855f2f8a46393d04619616406a7af47a5

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\SceneManager_Refresh.bmp

MD5 018c890e0aeceb6762861c0a76709916
SHA1 b72eae2b6f7a36d03d0c4070126e111ce55ba048
SHA256 97263890b658c7e27fd62b2bde71518b33bd14b9c659f4f6bf82b912e782ed87
SHA512 ee020a07817380aca9c648a8be8b7aebeaf9b9c4b75653c5c78ee8e9f94620d68b403de3021a2d8573a348735b5eb9498cfe51c22977809d9d901cc47de5d7b8

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\Localization\KOR\descriptions.KOR

MD5 a340ee3d53db936c5a3b1c6fd91ef294
SHA1 b02779b9f8b9c9f8408fc062439388b9ade130a2
SHA256 2abe2e928624cadc2e3d0693b9f7099be23ea3df8acd0cad32527f142047f553
SHA512 8d3ac0843fe492b0bc538a164d17ea79ba2308281b2007cfca11d994f84cde48a651028d014128a58ae5c7a5b3ed4c4326061c3552de04b81c30a8f37ae51e5a

C:\Program Files (x86)\Steam\steamapps\downloading\265930\GoatGame\Localization\INT\ChatDialog.txt

MD5 260b1c669fe3491d9da00e185f6f1243
SHA1 8af36d56e467f268b92e1ab133474f58ad1319c8
SHA256 26c425b9c095559519465aeaa57619adb43fb5ae887e9713cc0db81c2069d6bf
SHA512 e02fff016151aad49bad6a14112e1ae25218f148ffe105040f5a1bc35c489643554aa8d494854cc41a6d32d23d3045114fa6a1f4d25690b887b4b8d844e1e525

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\CamFast.bmp

MD5 8b073ea0723d226cea33cec2182eeb86
SHA1 9c46399baee58049b0045b9d9c694e3bb3eeb2a2
SHA256 545ff5648d307001b62ab51097a806f75fe641559ac9a03b22943c44dd029174
SHA512 672c20b84eb66890d1199f6ea5a250b132570f1d39495f4933d0b1973bb626f554709ecf200563225926fe654bdc90b1863b8316aff8d5bb9cc90a884bbc5ea7

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRC\WarfareRemoteControl.xrc

MD5 c2ea09dac80cf31b1d2861252622f0ea
SHA1 ba2a2cb21f59c2f056d8dcc706b0c4c273936976
SHA256 8298a5618e39dc9405cc930e060584caf069fe7e1e716050dd0f6db3c4fee4a6
SHA512 f0ea91356158d67a9dcf9498044f178cb76df1cf07ca91175099a9577ee027d785abd8eedb74124110d19ab7cd857cdbd91feb839826ebb4012572cb6139d855

C:\Program Files (x86)\Steam\steamapps\downloading\265930\GoatGame\Localization\RUS\GfxUI.rus

MD5 9496b927456fc3a2e731b98594a5d055
SHA1 38f59ee7946933b9df5203cdee518553a1dc66bf
SHA256 9619ae312d34fb4c48a440b9a2fe915653f3c39e27e94fee14b8615190d3a73a
SHA512 c488760119c625718234cb91ca27d383154a75da5f1197da2c45be296362ceb17128d4166fce49873f4f10a8349f81ed37816d81b03152aa1fa07b59ef62e96b

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\FolderClosed.bmp

MD5 d54f2cbefb694758df01eb78ed14aa5d
SHA1 18d570c1eaff5186ce8912cde95108999025614d
SHA256 a43b6a101fb9a33d9d2bab2cb71cb3b679d26f5bee60043f386b20c5e77abe0b
SHA512 0952644486cd92fadff28bfe48f222feccaaf58aca2bef2e77cfe25a8aff96fd7dc7eef1f20ef7295c6a8804317db149a158cac6024083635b4a6380e7180af8

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\UI_Mode_Image.bmp

MD5 e7a3c532ab108185268ceda4bb24a33d
SHA1 97eb457aba1da185e7d5dee1f7dd59c6435f6ec9
SHA256 f2e4986e15d38d0c7ee51e043a839748c53eb982d884e84ec8b521f9dc6b9634
SHA512 0bb05b4a15419927ea7599c1b1903b83bde6cb0a80f83017c30710b267bc8e62d9f3caf3bb0a1f4fcb8072bcd9f89b14960b824b3400ee62922e4e257806612c

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\SceneManager_Focus.bmp

MD5 29536715805e5b1756e1e5e2414941fc
SHA1 0ad536c4ff885e1393d39e3b0bd1f67030631e91
SHA256 01c31a4338b2f02a5fa7aa80f7037158bb23e8522dad41157557936a0c6b7550
SHA512 253f8fbe55a3830af1ceec44fb17723df0a5be30c4141064406d380e0441a08e893611bab9a811eb4141195e64b48acc346a28748792a293ca9a136ee8d306ed

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\CASC_DetailLow.bmp

MD5 843064b07e8df7f515576ac13be5cccc
SHA1 0043973c939625fc3b4ba4d69f484f9134ac4691
SHA256 755517fe6e100c357490ab1567c14a544607e865fe1c60120c36f1f1c78a3458
SHA512 bf764b3a237683754670ef90c0ca9229f97297cc595c98d32081ec2abb21bd1bae3a5735565ca51a248c4f5697a3fe1b6ba02eb3a2a111a4831ec9ada3d19acc

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\Showflags.bmp

MD5 cafbba71bbdb01efe92919110178147a
SHA1 7807246743499f481c66f444d16dc863cba1f4b5
SHA256 9467640ca46e5d7011ddd0365f3d24782224d1a866c235404dcbb689b7158f0a
SHA512 9d55850f948952356a69efcae090607ea4b1a9686d938a292d2ec534b35820f56b8740a7cfd7ef9a0529a13d439f7895893394f2dca070661744a98b5c3e8a52

C:\Program Files (x86)\Steam\steamapps\downloading\265930\GoatGame\CookedPC\Engine.u

MD5 2ff7023c0bd43277bcb69e71c3f37409
SHA1 818933c1377531ba1141703cc66536a08e429445
SHA256 376df95d53b5cb486fa1067ae7ad700e13db16c3aa200bf8864f2858ea8bcb6e
SHA512 a729bb664775813e90df2c1db93ce5016c91a8aab630b884f8f983d374ef1422d541a411c327c34ee735fe99223ba2d9e4accca40701ec5254a2bb030c14b75b

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\CamNormal.bmp

MD5 239bc1e425c6fa77962977b26a6fc846
SHA1 f61f5b3c392f6065f7fa366a307421220d011478
SHA256 5a90bceb8cedeb8ea99b50c086c56fb70d335ef6cc0ac3d104c75e6fb175eb86
SHA512 8629563c9e0ef145435b4418eec304ce23abd5a722bed4b520e8ddfddd80423a4708fa9d341a3209e9916469ba03ab62a0a46001ce69b0320bd01c51143703bc

C:\Program Files (x86)\Steam\steamapps\downloading\265930\Engine\EditorResources\wxRes\KIS_ShowConnectors.bmp

MD5 630d10a13e6787ea34a4365d1bad6e38
SHA1 14d2674bc4ba85b7db364ceb821a3f15c6c18b34
SHA256 536125582335b0a2ed8166332ce5b4790ca0fafa1fc1794340d369335718be77
SHA512 f78da793e859f57bb3cee73b8b0eaa5880845b2db4a7259e63d372ded98ccc3d58f50b3e68288c1776a16dc44e6a15abd35530b0344a0472be6758f2fc8c4bd3

C:\Program Files (x86)\Steam\steamapps\appmanifest_265930.acf

MD5 8d842e70682f76414daebd9f6a7311c5
SHA1 5c27055ee47e04845940aa22281afd3fa5c76b69
SHA256 ad43b9772d14c17332cd76ab4c901ec5239f814e1c43e7cff2f451dbc0699c4f
SHA512 62d906fe0d50189fc834b0d2fed46a152af2200be57f4b99aeb19350a062e63172933d38a0748ffd27a44a6e80868d05022a5de36d78904e655aae2f26ccb310

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2010\installscript.vdf

MD5 081bca29f369001a81a328369a67bdac
SHA1 9056314563128ff716ecf15f542e7ffcc1f93c00
SHA256 f2d06079d05f4d9e1ce402ba0247127c403b5b12232ab38956d2765b32012e89
SHA512 ab787d0511295bcdb3edc67a744a82abc2df0b59cc50e0edb72865a4e4f4c471a0f4888af52d92d6ad4dd986dd35594dfed21ef8afaf9264f6b8826c50904f8c

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\Apr2005_d3dx9_25_x64.cab

MD5 fe9e6c4c7d7aa341a84f039d954560e9
SHA1 0830cc54adec654ab4394032ec4e046185ba01e5
SHA256 b4188ce988af9c4771ae0abcc7edc42a091133f9f20196564f51755dc55ea85d
SHA512 40322144e859063872af8b91b1c6682e92974b26c13cb92e17d179560f6706be4f9a7eac0e5a3c6664a7576b5884e8b4f3bbc35976d6cd2867ab9359e9d1815c

C:\Program Files (x86)\Steam\steamapps\libraryfolders.vdf

MD5 f774f162dfd672c8fb41f7a1479baace
SHA1 b6fea57a389df55daf1c1116cea404ced0e1c56a
SHA256 c1ad914c18bf14127b9d5931357bc8b01d66fd490b4d516e71234b5b3d98dfb7
SHA512 5547887fdde88e2b608e93085bb41dfe41625e304537f83a82d96d91de0a077110f204bed2a5378284d1f5420d3a0f2aee4f12a4e3cbb8c1a04b67a698ce147e

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\Mar2008_d3dx9_37_x86.cab

MD5 cec089e2479e50634e1cea97b279eb86
SHA1 97646b2edfaaf691b8bc9bd9699f0cbaea724e75
SHA256 0be4fe173c7becbab42a25421f28d54629479e240a3378b37ac4b657bf60e128
SHA512 b33a0ff999e2ef7c35eca4042470922d084e1580193bd290365c5d9c39db223532a79f9ee476dcf62f550cc7f8d6b26dd869e49cfd1d52d61e01ee5e76cc0060

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\Mar2009_d3dx9_41_x86.cab

MD5 cea31ebf2225612a2b5ad62eafb01875
SHA1 f22a61c817eb47537c3270b0915ec6b95226f030
SHA256 74ff3ac77380b3a7271f22b21e019c50f6caa8585f0b59cca094e76ce170a28b
SHA512 8bc33721f6d3a55809c4ca10bed24b21e6551be0c5fcb7924e38e342e1063b0894646bd7310e15be82fc2ccb186c283981b2ca9a8a8542d16ac68886763e7dc8

C:\Program Files (x86)\Steam\steamapps\appmanifest_228980.acf

MD5 a03d87c9e93b7fd20441f7fa44126d5e
SHA1 635f2c689791a2b34a3b5c8567f770890ed4077b
SHA256 51f0abc8581ae56491a4ffb0f620f666c5e4036ffbf8b3b39e1449c418a7b4b6
SHA512 6e74b3211dbf843b59feef0d01b212a1d7c5175726f5c3806af933b6892dbf6c28303b58858a37bad2622f58c6d8e561e4b1684bbac9e15063e6fd304969a2ec

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DotNet\4.0\dotNetFx40_Full_x86_x64.exe

MD5 251743dfd3fda414570524bac9e55381
SHA1 58da3d74db353aad03588cbb5cea8234166d8b99
SHA256 65e064258f2e418816b304f646ff9e87af101e4c9552ab064bb74d281c38659f
SHA512 241ba3f82f37818407bc00909c160b653b45a1a3d156e043b87ba18a7819294716705c952c7b46516c4afd86e6f99bad23e7235b951a371ae6728107f19e5f23

C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Engine\EditorResources\FaceFX\res\bmp\Curve_Background.bmp

MD5 b0caca1e745b2e11ad7343e01bb65457
SHA1 5c0df398cff734b94e081ec277501d2a0081386c
SHA256 b01fdfcd263ad9b82bf34aaf52f86f4cdfdd2296017968733ab24abc98702f71
SHA512 f87d0f7fb268db7ee708e86370f3788b0d560103734785130b72329941847941a6f95c64377ca1ca291e5dfc851e9a3dc477e6b051a28a7d6d2c95c0d7add7af

C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Engine\EditorResources\FaceFX\FonixData.cdf

MD5 4b658a8e7a2009eacf3e43b5ba000262
SHA1 ca75377122e294ce38d67cd3ff9a86927396b8f9
SHA256 5d30b5c8a08fa5993687cd573a6d25fb004eeefce9366df1295582b5f2d3d76d
SHA512 bf9df2e0cc0124c81102d98d4a3b288cc88a886b84a4ccb5bbb6d61c788ca82b2b0bc4a98edf366c1abcdaef5d4c902a2b218bd4f468fcf89e4e1917e16977cb

C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Binaries\Win32\wxmsw28u_vc_custom.dll

MD5 a5a571dfee695f312c96d99600039fb8
SHA1 be39471e24c911776dfd27561d5573fe2aa48c8e
SHA256 29de0e25d1c0bcc5cf6ac2f935c0b1a240dbc843d26c9ebb730cea7154f39d55
SHA512 b3bed8fdfe916e0ea7cf322a4a764ecfb7b7fe9bf34e3fcdf87a56c1386ddbb2cea84bf5039c1d7f9347ec8a15b2ccbff690a8af736552126e45eee968255970

C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Engine\EditorResources\wxRes\CASC_ToggleGrid.bmp

MD5 64bd900dfb84e931b0c258d0d6d67411
SHA1 a8639a604ba59b5508a1e7d43188fac7996c2aac
SHA256 7bcbfc39b31716a306cd13358f1109025b3421405f45535ecb125a2448ae71cd
SHA512 d1e204e207d6403fbf3079256aadccbf640ceb0521963868bd43efb9f0713ffd4da4429ef339d742b657f389c90a768b061166d05afcdc5753305040ec6b7623

C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Engine\EditorResources\wxRes\Landscape_Tool_Visibility_disabled.png

MD5 8678453ce653656c1f69812fe2ff902b
SHA1 ca5e7b616808a9b49adbff8cecc70e4191d562d9
SHA256 99b0dd497446b5724ff25819d8b3ab1aac49289cfa39e26f9b00c98161610840
SHA512 8ea0e25186e550ecb0d90e65e05652f68b1770381c60bcd31016fb112a188cf625f9699b65993d7776eed013b8246a4438e3ad86f940d2ea337343e003509f9b

C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Engine\EditorResources\wxRes\Landscape_Brush_Component_inactive.png

MD5 10d6f464022cbd5b81b9f645def939cb
SHA1 619cdf6544736b39268f5f08313507e280d1307f
SHA256 b227f920c8f4770afe342c4c7023535daaac8ac1bbe11bc5a3dae30ea6f47ee0
SHA512 1b98825805e9d45f9583ef53b9f0cfe071fbf446548996bb3d353bf724432072559b9ca7af842d5793324167aedefd3d9837b2384c5aa19622e865811e452899

C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Engine\EditorResources\wxRes\KIS_HideConnectors.bmp

MD5 8e7813698fa301621e61a2eb5747cfac
SHA1 252f746d136fd88ae4ffd236b6afc34fddb41ddf
SHA256 40ca976b4cefee1f8d59e8c449ef25d10905bba2c2ff530c1b1c38ecf456975e
SHA512 976d78249c1fddf23abb530f197d5b2f15f6ef4581e0bff2fb69e7f924b8eb26ab8d50d7834d72adcec53e326fc7478494100cc88b88d47e6044bf9e170f7b2b

C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Engine\EditorResources\wxRes\KIS_DrawCurves.bmp

MD5 7a01872673e5c7af7297ebe937b488f3
SHA1 b083cb897d0b16fdec69e9ce7737cd195cf8b457
SHA256 53c682a0070f133b0ea7d1c427ffe802a6e0f2f0fc98f542006892f31ad5163e
SHA512 dcf3a31142db738d1c7dc6b4908753d91d8d0e528c78852a732f3d88372300e3fb181706b0587c986e64bd33100aa3491277b92886fa7aafc6bb014d98b84ed3

C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Binaries\Win32\wxmsw28u_core_vc_custom.dll

MD5 83f1cf033e63b4ae8935282b41db8e2a
SHA1 8ff9ed0186529397731e912a545a7c27979ce6c4
SHA256 8fa02950068982734d55f779944e4ac255b4cfbb14c8edc5fbd59d509e31440f
SHA512 c2e35c6e965fbc399eb4561304c8271b2ca4976c46a5579d13cc56faa6be014bc66c3ebadc807e4c22c27ee731f0a9fda3ee3e39ab3357d5bcdfaa3d3257f312

C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Binaries\Win32\PhysXCore.dll

MD5 80e7f3bb4b6f70a10b4a1fc4b299bee9
SHA1 59936b85e41acb2d2a899c0669d21a9fa63a87c8
SHA256 db12fc7ff25cb4924b6a84245fe5b8c7366c1c1e62c7023d3fdd6732b305dce0
SHA512 10946e563bf4ad326e21490976a245cdc70403165cf336b2c24b13f91da6b095e87a71e0e67fd9f497d7fca4eab2c77f7337df9c93977b7bf0746e117740f07e

C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Binaries\Win32\GRB_1_x86.dll

MD5 53f47d18f4fb474ef08be1f5ecf384e6
SHA1 482f05592dd095a221be5d9ff246e59371c8e8df
SHA256 1fcc2b04c3b48a53b1c0b3018e721077c36f75f3e2278c346aa1abc5894b60c8
SHA512 048f8670ec930d348cc5b22354a8730c853012bc5a46ba33dd9bc09acc2c6a8b7d825ea65209fa2c0a8869b4ab57f97880538424efddb4f153beb69e2066d246

C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe

MD5 4e1e378a5c0fc4ffda176f7bc2e8abb2
SHA1 3a096400d468451fffa697493ffb1754b89280e5
SHA256 b1d87e9a59b9f49fc2acf07cc54e5312df47626aaacade581057c8204f12745d
SHA512 326ea1dc8f779d508bd145aff6580e4d4313e8c2512fc816cdeb1474ddafd8dc610472049324e7dc08f4e8e8879d828e5dec34f12d36f4de74f36776e31d320f

C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\GoatGame\Config\Heist\DefaultUI.ini

MD5 f21855909cbb172b7efb4f63da77e757
SHA1 4a95e20f51f4f85e3800e4a284df053fa8ec9c38
SHA256 75ba878bd1c7c7725699323155351ab49d2dfe270fd454a38186650f441a6058
SHA512 ba26f3ab21880a3bb480c7f92e8c7da88463b61997265a381a91a897207e7cc8b74d338eb8cf87eb9eceddcfec96f64f4215507274fd242b89bd3028dd97b6a5

C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\GoatGame\CookedPC\UDKBase_LOC_CHT.upk

MD5 6d012ede12143c9cf679dee76f7e63dd
SHA1 17670615c878b5456b2e9136dd30fb2de0eccf02
SHA256 ee18c72e4f3ff4f44237f60549df80262585d6bee7ff30c82542cb53e5809afc
SHA512 a2ec023343ba62c16f63cb22335420809c1c4542f8fe8782c652a8a011de69b870268e586902bbe81ea266bd2109b60a231cc83593733f221f7ee5d8300538a2

C:\Program Files (x86)\Steam\steamapps\common\GoatSimulator\Install\amdcpusetup.exe

MD5 5663c13a59817ad3b1b30b2d5efdf484
SHA1 b438800af30f36ce91bc40dced5752081d34a8ba
SHA256 d3ec032bd6e777f9921cca95eb1e838a67dec017ad22c1e2eef7cd1408acd337
SHA512 d454315502d91674b5b0272a77e1827f06ef83d9453e7388cddb5736769d6bcd38188c6a59fc878848a9c38f2be9dc10019412679b9556e3c585847e1919122b

C:\Program Files (x86)\Steam\steamapps\appmanifest_265930.acf

MD5 ef42a1991b9e8993aac923f40bb000d5
SHA1 f0790dab2ea57039409a42729a8809ec09364e31
SHA256 48e87dacf845f9a36dd79b126811d9f1e199f17d6bd17b7f2701a624e69ba02c
SHA512 66cdb6293aab5d0ea84f1e1afe29015d2c3fab1ef1a3ae4f3dcdae7febd43ac3b6fafa3828140e2ee9fc00f96263921c341b43becafb608e1876f6f1ea01418a

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\installscript.vdf

MD5 41bb1033b07eea2e5fc09acb64c9cf47
SHA1 7fdf558821560bbc18ad062cf345b91d26143fb7
SHA256 66a16410fb82c61b70cb8369b4643457fae6ecec553014fcf738173dbac7a958
SHA512 86dac531b050a7d309e61d318cfa3d7a1d80a2954f44f463dc049e51f720e0eba3ef261376b2f30590a8031804bea104fe3ba23fd3cc1d6e54c7d83dc7802601

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DotNet\4.0\installscript.vdf

MD5 fbc7bb55b04ef1b04812ecd2ff702a5a
SHA1 a278387f7b2b4bac41ae90d4a6310bc2cd3284ce
SHA256 6d713f963ab4dadcc61b38080a71fa50ddbcaca64046ef2f1162708a8e121336
SHA512 a3862088b463667013533d9da96998a406aaf6ad8a2a35d740c4fa5585bddc4d69f5c990dd660535272cfb109625bb96bc6a867e107914197316725de66e3f4b

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 6273fb392227edb7ff980aadcbc4d421
SHA1 e9a501317c2d42580de91681b0e9e5406083a9a6
SHA256 c4138b4859f204657b80db8f5a160d5f415302364902c3f9c3a9f4b70fb04486
SHA512 3f82d9a06c5188ed16880091e39482ef3f4e5924d943851bb07b54bfb941e6551663c50aa9d5883afc0fc60e859afa7a9051d84a36d40bdf6fcc0d743085cea8

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2010\vcredist_x86.exe

MD5 1801436936e64598bab5b87b37dc7f87
SHA1 28c54491be70c38c97849c3d8cfbfdd0d3c515cb
SHA256 67313b3d1bc86e83091e8de22981f14968f1a7fb12eb7ad467754c40cd94cc3d
SHA512 0b8f20b0f171f49eb49367f1aafa7101e1575ef055d7007197c21ab8fe8d75a966569444449858c31bd147357d2bf5a5bd623fe6c4dbabdc7d16999b3256ab8c

C:\Users\Admin\AppData\Local\Temp\Setup_20241111_151329388.html

MD5 7f421acd11f6d79c7e52c1d93cf538cf
SHA1 89ca85de98bf12e8f9b1a2792e1ad17fb3032cbe
SHA256 2d84c8dad4117c5429d1d5419ec9720f768923de2f93f23dee48fbb28c3fa615
SHA512 8e5046ba06333fb81192af69f823729890819d8ab8e197eadac64d5da2f8cc82d6ccbda68b8594daf3a58c0ec0926354ab309a0e127941569be79471b93d49b7

C:\Config.Msi\e615f67.rbs

MD5 28622f35bf694553c87992f4fdb7cb4d
SHA1 b9d9ba3e2648b7535ed16a0fef7d521b039a10f4
SHA256 49a609a0e06a55dd8f76504e134139f8e370be3a164c943f63d24d9a51398457
SHA512 bdf05ffed457248a34b67866351dd1ce22a9684b10e097fc02d02bcffe33c18b559795a87a9c3a6eb893cb2d0e4e9b85ea1252427a3f12eedb6fc057b2cfc737

C:\Windows\SysWOW64\vcomp100.dll

MD5 28d2b08d3d33670b0d010ed2ba2ab513
SHA1 191ea62082ac776995f22b96cb3b6dfad953c57e
SHA256 183729409813ba5a8501a581979530bfddbabe5617da1588eb8fefdcfcba5d7e
SHA512 bac78a84e74b0a5a5171316cde802c57b91772336f57c19903cba139de2bd48ae7020e9f8ce899175b67cf61f7866a112fe9014c3fbf4a08a3f2aa71d440f291

C:\Windows\SysWOW64\mfc100rus.dll

MD5 1655e43d3dba000394cf208e95ea2b02
SHA1 b29fe26cc85f102345619ca514a93e832a294e43
SHA256 b34cafeb0dda67f5b271e15b20e94df4805058a37adad5dc3331e11fa612bc42
SHA512 3a040ae2b912dfecff43c82c148e097563174c0326f8211c56ffa1d82e0c1f26f7829b52ee9d68e0737a8e05457472c800e8aa99ec6883904967b8dd2d5c3b76

C:\Windows\SysWOW64\mfc100kor.dll

MD5 222be89e34f4bb9059b7587074c5f88b
SHA1 47eba84cf57011765a16d0d514069c9c86af16bb
SHA256 0f0e518d6b12111ed847b2f62929799d2754f6f45b21977f8929842a2cec471e
SHA512 83a3a51870b356de1330a47a79ff00032155debeed8a53b16142fed6a332b9b49e02076991d354f817410bfeb535c9c73ac872402194a822c877b4c9f7b15db8

C:\Windows\SysWOW64\mfc100jpn.dll

MD5 76022ed341931c473d2dfb27d56e37fd
SHA1 be2b19cc30093069e61349908153d22383feda7f
SHA256 0c7637e3ae7e2c429807194c470a1e7bd98ae02d67d543380367f142cf08173a
SHA512 0c30ac2a2a1bafb4462142ecaf059800ba262e2f82d82f229f78a0b91018d38ed101aca29ef01458dea6f9d34b8fd76940f7c8765ff8fe9d412ee3dba5419f42

C:\Windows\SysWOW64\mfc100ita.dll

MD5 a99884aeac9c704600c6f5a44b3f7694
SHA1 1d65b58014f1ecffa3e8affa4b21ab4466732d9e
SHA256 54c711b8ec19ab39c881ba16af97dff6d1cd74c1e2fe6ff50ec51c466015aa6c
SHA512 dd2f6113b0d879c3699c97db42fbef03413dfccac9772596ace7fed5850b269ac0adc94c30439d5c37688e11ff73ffa53409d483bd2f419e16769b0213a5d46c

C:\Windows\SysWOW64\mfc100esn.dll

MD5 b4e91c857c886c8731f7969d9a85665d
SHA1 a639781b1dc2c7bdd855be37fbb39b55ad5b734a
SHA256 7f3e218c1bf7bb0f00885afec8ed60c8edd48a73622feb2fce7cb282af1be900
SHA512 fbb841339b216fb677ddf798d004503a1c0c8a60d17edd502d2a893985cefba8b13febc594dcaa0ed9df823fbced0367d8c1074d7025e6bf6e6d4ec5cd1b2648

C:\Windows\SysWOW64\mfc100cht.dll

MD5 44ee19cb7dd5e5fd95c77fe9364de004
SHA1 9dde4a75e2344932f4a91d8ef9656203c2b3b655
SHA256 254e83fad56aa1a1cba3d5e0fc32509fee82482f210e238e81f7d8b117a69b8c
SHA512 2c636abf08d44eedf452edf02bf4243e76e14bb95e8a24012787ddffcce69c1d7fc4be98c4b5cd70532fe8420882e1ade228900c5f36669fdd90fe0383dde6af

C:\Windows\SysWOW64\mfcm100u.dll

MD5 d23a577eb4829a9f1b1d4ea679e98b54
SHA1 cd364f8ae5a64dce82225a3c9658114a1a905504
SHA256 5104d9b832d6be34d8ffbfa1eacc1a95e7ef8864e2c3c5720f04d217f8dccf51
SHA512 2652652d40bdb512756ea572d7f1202225ceda89584d12725258843523fc65b51b240ffe057f8570b4b0e785bd2d429ee5bcba782ba30a180be7cc331c33ad69

C:\Windows\SysWOW64\mfcm100.dll

MD5 be83b709811fbb18dcaa03412da0bceb
SHA1 f4745ba4108f276cad6c48f1a1ccf050c2c5d716
SHA256 ecb4abce8a92f459b0da962a629d0beb66d417a209225ffd321eda60666d36b1
SHA512 4f04afe91fd7b38cb98928cd07222fd1bb550ee14b508bb959a2ee35eb2f51cacdae0572b88c5b4786b2b5dae8f47c101d13b6d01f8ebfc74540c3db9d206f73

C:\Windows\SysWOW64\mfc100u.dll

MD5 f3de10aabd5c7a1a186c9966f037d0c0
SHA1 6aaae8331a5377f4025d2d860e5872b842a41df8
SHA256 bc50848aeef466dff4a3d8c386bf0d0ec35b8e5b438031ae885aa5371f2e1a42
SHA512 07d93b8abbf8acfab1d8f0711a37086764000310450ba361e7d5e1369012b3a45fd394460841b0f3cca79acead2080bbe1f029bc36191c133d7ccea182ca84e1

C:\Windows\SysWOW64\mfc100chs.dll

MD5 c086a0aa8c39cb2ea09ea967d433733e
SHA1 b5139ed7a2af76ad71c1ed3625543c0c98256984
SHA256 21688ed8de2a5c9e95e25e750bd6d8a7bc5446172dae69af9df96feda022fc7e
SHA512 eaf03cf10669dd289e108370a6de7484acb0f59389eca6da907d579767de919b08a6388e635e06bb3d222dc4d9303f964634a6b8820572e796279063d192e926

C:\Windows\SysWOW64\mfc100enu.dll

MD5 2a2c442f00b45e01d4c882eea69a01bc
SHA1 85145f0f784d3a4efa569deb77b54308a1a21b92
SHA256 d71db839de0bc1fcc01a125d57ced2aaea3f444a992426c316ce18c267c33a8c
SHA512 f18d9019eee843d707aa307714a15207be2ded2eceab518599fbed8a3826a1a56f815fe75fb37f36c93be13f3d90e025f790db6b3ba413bfd5cd040b2cc7dbf7

C:\Windows\SysWOW64\msvcr100.dll

MD5 0e37fbfa79d349d672456923ec5fbbe3
SHA1 4e880fc7625ccf8d9ca799d5b94ce2b1e7597335
SHA256 8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18
SHA512 2bea9bd528513a3c6a54beac25096ee200a4e6ccfc2a308ae9cfd1ad8738e2e2defd477d59db527a048e5e9a4fe1fc1d771701de14ef82b4dbcdc90df0387630

C:\Windows\SysWOW64\atl100.dll

MD5 c85670ab64068f8080998aeba6c5019c
SHA1 ef762c375486594f6604f39311d32442156ac8bb
SHA256 87d88235f69c062e5b759f91253abaf7bd055937dd119bd26858237f812d3ded
SHA512 870a27585f72e444fa9a2b46ab53ed420932952be8a3c4ddd0d831d72be0ac1b44992cf757de76d0cd667cd5b6150e9eb96ac2a8e7161a22c7d557946a12e5c6

C:\Windows\SysWOW64\msvcp100.dll

MD5 bc83108b18756547013ed443b8cdb31b
SHA1 79bcaad3714433e01c7f153b05b781f8d7cb318d
SHA256 b2ad109c15eaa92079582787b7772ba0a2f034f7d075907ff87028df0eaea671
SHA512 6e72b2d40e47567b3e506be474dafa7cacd0b53cd2c2d160c3b5384f2f461fc91bb5fdb614a351f628d4e516b3bbdabc2cc6d4cb4710970146d2938a687dd011

C:\Windows\SysWOW64\mfc100.dll

MD5 493fc0f59054a6f4f3775655fb55295c
SHA1 2afe4f5eb626fb5c5aa5bb6c2bc61c88e37cf42f
SHA256 cac58c98f7e587ba1b2a4f41874764b59bdf6cb684a4a44aee93f91b3b9a019b
SHA512 9da41078a65a6b8c731388ccf4ce2a988705305f29f0841039b96cd2649f82e8ea219f082de184826e39f0edaa4a1d9aff2e60ebb8d27771222d0c7cb165598d

C:\Windows\SysWOW64\mfc100deu.dll

MD5 eca6624efebbe2c0c320ac942620c404
SHA1 acbeb473088cac5887e9d9823a00570a102a8705
SHA256 2bf46f1536ce621801fc621fabbe59f32ad856aa8ae085eb6e4469885c171da3
SHA512 860e7c994091418177dedc7d4e935985de0ceadc4eebb569d9e38024478daa78e621b57e722195915183c4e1935efd98c08e1e4c8cb2e7c47306ebfc097f49ad

C:\Windows\SysWOW64\mfc100fra.dll

MD5 bb21453c6707a7b5dd9f727ed375f284
SHA1 56e7a1011221b87af1b1ea766114161fb5dd4a3a
SHA256 8630d9b71a04bfcad5ed15c11cbf88f2de42abfa458bc66963e6d0d207dc01c8
SHA512 c74bbfcd5c407fa1d8189f1805e12e2261268059c3f4d7ee5d5492811d161906b27e9623be55649504b2888f3aae0ad98038f420c1969cb6693328c78ec6b1c8

C:\Config.Msi\e615f6b.rbs

MD5 5c947ad55c024af02d62e3edc0073241
SHA1 12d91bcdfa5cbd22177caebd7472fb972015b0eb
SHA256 4ed4848889a367d75913b7533f0d7e38da86839ca91fe06bfedf2c327623094a
SHA512 698d6e4b531cb47e5ea2f99e96c2281bc9f36b216aeb29b32b5cf5e73d4e448aa445b58a9ba8f5ca76a005fdc1c4c89399cf68fc58415072f0db986aca2a4f11

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\vcredist\2010\vcredist_x64.exe

MD5 c9d9eebccef20d637f193490cec05e79
SHA1 15d032d669078aa6f0f7fd1cbf4115a070bd034d
SHA256 cc7ec044218c72a9a15fca2363baed8fc51095ee3b2a7593476771f9eba3d223
SHA512 24b56b5d9b48d75baf53a98e007ace3e7d68fbd5fa55b75ae1a2c08dd466d20b13041f80e84fdb64b825f070843f9247daba681eff16baf99a4b14ea99f5cfd6

C:\Config.Msi\e615f6e.rbs

MD5 28d5ec9fdae4e6a39c18cede07ba2b90
SHA1 0d818eaed09e2d61556285949568e00495c49e7d
SHA256 5a2ce398ea7891cee9b1c7581adc609f84b0213928a9d81a6d7d71945f807e8b
SHA512 dee8d1d2356ba4ba08a172e08376955237b20a109922f2924102df239062399525a228eb54f7a9fad6a70ed9ca934f7f446fad28bb8e4780487247dc4efc3d77

C:\Config.Msi\e615f72.rbs

MD5 00843842cb6744db4a090e0ef91b5557
SHA1 b188cbd730cec5378bac9df3306149df183dbb7c
SHA256 1a47f08b870d3d2cb23457ab08322947fd294965d4b805810d1b3c560b86e2fa
SHA512 8ad7d2d8ce42992d9b0fd0797c4928b04c02037dbdf64990be184d47a63756f71b2b7dcd7e7263cb85044f2e276352cbfd79f5b7cf9c977d3cb9aa2f5714fe28

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DirectX\Jun2010\DXSETUP.exe

MD5 bf3f290275c21bdd3951955c9c3cf32c
SHA1 9fd00f3bb8a870112dae464f555fcd5e7f9200c0
SHA256 8f47d7121ef6532ad9ad9901e44e237f5c30448b752028c58a9d19521414e40d
SHA512 d2c354ee8b6977d01f23c6d2bb4977812bf653eae25e7a75a7d0a36b588c89fcdbdc2a8087c24d6ff687afebd086d4b7d0c92203ce39691b21dab71eafd1d249

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\dxupdate.inf

MD5 e6a74342f328afa559d5b0544e113571
SHA1 a08b053dfd061391942d359c70f9dd406a968b7d
SHA256 93f5589499ee4ee2812d73c0d8feacbbcfe8c47b6d98572486bc0eff3c5906ca
SHA512 1e35e5bdff1d551da6c1220a1a228c657a56a70dedf5be2d9273fc540f9c9f0bb73469595309ea1ff561be7480ee92d16f7acbbd597136f4fc5f9b8b65ecdfad

C:\Windows\Logs\DirectX.log

MD5 c058c76d95fd23ea8f60b2019cf2dd8b
SHA1 bf0c6a7af11344035fb392333a2095d767252be1
SHA256 83bb79930fb309eccbaca3f0cfe49a0d27430f7e090f8d2e8b61e5203b60ab66
SHA512 d061c66c6dfb9fa682a09d1b24b34e47b79a8054e2d35d1909f8d576bd611a908190feb813ef3264c4323a6c3459a9bf779813b9436c7b7d0980f6b13b9012fe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\apr2005_d3dx9_25_x86.inf

MD5 bae5034d79a545ce120f2c336de0f68a
SHA1 7276af2015696d5041214fa92eff4375b3d8b183
SHA256 f484ef48e0c6e2be8207d8c8c7308dd966d52bea1fde221b927d3e49f1cab0b7
SHA512 be58875949d23732ff63a6f505b242a44811cb9603a9863d6a78a4c9193b6336b89ec9a82666865888590a7b81ad99d466a3847e7c22d0de399d476364280a22

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\apr2005_d3dx9_25_x64.inf

MD5 f052926f0715b88b23ad52855b34df46
SHA1 c411b1ddee73a4b317d652bc3ec159ed58efffa8
SHA256 3d97810d00ceb3e7674a2ef81427d4180f77f93f9454837c5933fbc6a1ad5c1d
SHA512 8fad81eeb503d81b96c098190b5c4155f4bfe1cf2f36fdb5834a176c7c78d11b52efb6b3ba6f3168d7a21a1fc5e53fec770d125feaecd7d1cfad9cb1106d0b94

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\jun2005_d3dx9_26_x86.inf

MD5 62f8ec9c0d3bd54ace90cb15f5caa208
SHA1 e84f4a60c79f862aca0f917d1d30898af4036fad
SHA256 262ed4a65dd45e19f196cb2d9946326693ee31a86b51bf77116dec2727971cb6
SHA512 3de4ad76b207c2a0ecc10835cb787d61faa02e3531f6242a606ac0686cbfa156f59c30695effe5560d9a8481800b356873b7590beb8a739b33c0b1fcccea3fab

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\jun2005_d3dx9_26_x64.inf

MD5 134624a22aefee1fad4eb11445b8d342
SHA1 3f0f65ab8be678250660ba47f33f229643c118b1
SHA256 addafcf0cfd36587c12eb2692922f0fb134874d11005a0544cc054546a493933
SHA512 24bfc2d96b3078f82ba031045271460295f3a1e6dd3c8c30d8d50c98daa9051aeca93ed8ecae8722b70083d3b0ba41735f81068e7514e81767e1e119e45ad6f3

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\aug2005_d3dx9_27_x86.inf

MD5 e45a175750a672cbb2553087a8c5cf8a
SHA1 70d487f99e101bf39650594c27674313181a8ff6
SHA256 d02232a6587c460c026601517178318bab2ac29c59d269c6e3d1a3a993a9a1c4
SHA512 199882ada178e41be14af82001829d009379445028d3803d2a86eef899c01600cf2aa86123311b728e888498674379a35d40ed0964c2f88da24758fe3c7093d2

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\aug2005_d3dx9_27_x64.inf

MD5 7cfa60cdb7e697b40a268eb8814446e5
SHA1 e8e77082361d5a5ebf6163cf880f9700cff5741b
SHA256 0a8ffec8d7ef3a0aa005f604a045dcf80cf5b6473b4f26e30c58eee23e253fae
SHA512 77aaea559ef94d405194351b52643512a71990833dac22a331d5b78d569263db11bf969e26224ba8a362bf538782010ca074286ea605490d40c10f7d2d53d255

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\dec2005_d3dx9_28_x86.inf

MD5 e0b6120a048295ebbc629a9f8fbe53ad
SHA1 3d9cbcbdafc1f9058af74896a5859591e164555c
SHA256 d4d03c4ab3c8486d6331548e967ee17e011fdac90f63c0a9a44a744815a7da7a
SHA512 66c0b9501bb08d41bb708d0a724fe6ac27abaf735ca224074e594cde932ad1f9eb9db5defba8a8a71a0a12904f20324ee4d129a1ac9fcf816fe74d648379908c

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\dec2005_d3dx9_28_x64.inf

MD5 9a3ccc90b71d554e968eca0a812bf0b3
SHA1 0ed1ca28d7f6c8b4e017cd48b8504340cb4d736e
SHA256 510b6d528be3f2997b8bd811486dc3c13eb27a9de22d1bf030e6db0e632cca4d
SHA512 0f10d2ec9f72651927599b69dc3f4e037febfb9c2a18e02eaa49962903c1cf77b63ae6335c06effdfac26b87418ef2c7a2d53dd799a28d275632d8255ffa8be4

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\feb2006_d3dx9_29_x86.inf

MD5 f4c258b663ebf54c55d7d09b05b26ff6
SHA1 85af1252cf3d9ae7afcf8d576cdc17910203ad03
SHA256 f12f4bd86d5cd748b0fcf7106e9dff333c27c0886541339ba1f40c443bdc61cd
SHA512 cbd491fd8e847a4659758bfe0f5a4b56c97e539e3b3aa7ca601c329d858c882cceefb9ee8341d794235b7c2403a090f45a0ba8f2f44de3e3b1685d027d8bd19f

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\feb2006_d3dx9_29_x64.inf

MD5 0d951a2eda3638d4c976a5ffc1a9f8db
SHA1 fca89fa6bc6d4c25758b7baaff9136c3d73140ff
SHA256 ef36ece1a6bd8af3b0b9247b081d28ed511b7e18c43eb3aff364c9ce8d3a06c3
SHA512 89e960fbf9421a208476f7f65acf8047d231f3d6fd87fb31b01185ce88f5ebb1fa7513224124889082f41f1dcd579cc8bbb638f1af73081b4630fb07934dbb80

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\feb2006_xact_x86.inf

MD5 9dda266ba05cd917cca889659e3b98c8
SHA1 2a2ba2ccb3c9d87c03198b9ef3b9c6e21d693055
SHA256 45146fd446fc8533dc5f97d88bee9ae220161f24797114d0bf3afc7c479ed69b
SHA512 26fa18c8058397b8b5d89baf1fb9cd689827b48781dbe40ddf884c0a3ff9cf8d8451c6c084a693e4fdf107ad181fcce35a2fcfb371548df948416b5713d8ce38

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\feb2006_xact_x64.inf

MD5 7d46669082d530935e79c74c4fd83bf2
SHA1 194a05e3b019beb07da96c3bef780e6154a78b9d
SHA256 b7ca1a4942057592c5b83b4425350da41c61779dcae608112141d727091842d4
SHA512 590a9628fb90d4140d6f96238caac46f8ab23a59e3a9d94a28d1638006085efdbfad259b9633e4a56585f6cc10119d67abf3fa873a426a1946af589c17f84fa1

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\apr2006_d3dx9_30_x86.inf

MD5 a49046c25439fa900b1d1bf826506ce3
SHA1 deb71dad1d55dc5af2f80a1c3010c0d899bec187
SHA256 373cca07c0ceffa72901441219a4457de9ff110aededae5e4818588da39cd344
SHA512 d3e04f2e7b358faaefdd683e7ede8a41c2f65b7c8072754b03b2a5de416651f92712fa7d9bc6027d7326dc5bd8a497161685c04cbb7bb36a384aeee8dd77b086

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\apr2006_d3dx9_30_x64.inf

MD5 5d684b07779ae5b421e23167e2b9b44a
SHA1 1e3570908b810cc799f047221351cac7a3583787
SHA256 b70b8f62a2459580d22999301f1823bcb8a9bef54bd33b38e0af274a3a12e010
SHA512 6688f5a9952b36a0a83e806c9be99d9ffe9ba4982b76a9c7e8cef5f824c17ffe9e5ad9ef4e4974c6e2a9cb37e8c05584d8d83033182d1c5d00a786bd2b693e23

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\apr2006_mdx1_x86_archive.inf

MD5 b9dda5b7e6323561b289e0be4e4027e1
SHA1 510f83f8d2b50816e33df8684b35fa53dae51a47
SHA256 80d44f16d81ae8bdb1ef8f0efdf53911523280723bab4392285cbd33a0fc633c
SHA512 cfd470d44ca0d76e756f8a72e01ac7d60c498a0012b461c9b371fccdbdc6bf972ed848ad7487dadea7f16aec7f8749630b1aacc7f936e6ced30a6c798a6c139a

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\apr2006_mdx1_x86.inf

MD5 2ca62bfeb43facdd1fc06f20fb20397b
SHA1 ffbb8f6a8a11f949ca180a7e73279c4b775bbbb4
SHA256 2546a1875bf868edc621a1cd0ee262151faa08762bcced0117e1304eace0c04d
SHA512 3d16b07bbfd172dfa979dfcf4384baff35538de371dfd0b266e5110772f0751f9e5274fa92b06d1f289f8aaa585ca1fe382f8469561e74e343f37e8a05f85dbb

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\apr2006_xinput_x86.inf

MD5 53294b978995caafcb6a9ac8f67b8580
SHA1 c165d2c615261f135f60442ad0a6e589d681a850
SHA256 b604779115d32d439f77b33257c96f928ec4ce564189f7d0d357099c1da140c4
SHA512 a3da7e02ecfadb181ed13855b093908fca0aae2ee75e6bc4f873fe69a34cdc08f3bf504aac2ea98f9573437d2ff000e43ae8450c87036ead48e6c2b80ec523ed

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\apr2006_xact_x64.inf

MD5 09c9b7346b65f5ba209934f16e711c8a
SHA1 9d6cf0fe295475c438fce214d9d24d5579f2f29e
SHA256 d9c3216ada5dd7791ca852a8ea97765f94a7b56fed27b20916b5067eb82b14d0
SHA512 26b84a457b5bd17a5deba56926af156a2144213a2b75fb015641a7817fd2307cfb439ca22ec0bb584dd21f8f9e4c7b3cc749a350b26cfcd0257f5fbda23fd9c6

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\apr2006_xinput_x64.inf

MD5 019f21ca754cc2e21d97c3a2a97d5ef6
SHA1 54d97b4018e0cd04c63f1221cd8da7a0990a2cb0
SHA256 f9d01e93e547045e1d232242c900530dfdfa54698586c7049281965e3bd01ca2
SHA512 0c0ef6a8bbc05eb81cdba8aa2c3f4a0d39f4859b6de495c79f813894253ad1ddca4851841064cadfb1901ea1f056c68560aae1e68bd12c590a143a6b7f0b16f6

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\jun2006_xact_x86.inf

MD5 fa59f92f7d32613a12189e75eaa700dd
SHA1 f2c3947427e7eca9fd1ad53427d1dec28a5f0f55
SHA256 6bdce6f6779712e38c6d9e6e5961217e417254089f096c719f25566e952cb257
SHA512 e8dcbd918cdd7d98a94d53413088e2f75e4d1a15d4f69b6927f3cf19760d9f2fc577659fd533b2e4e2997aa29f285b0fbb35830331997549e429dbdcc7ae9853

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\apr2006_xact_x86.inf

MD5 f67df97463d42bedc122fbedc37096c4
SHA1 42cde962b355cb3c6a7a7a88c8dc315f811a7494
SHA256 037db252501fd0e30303c11706d804d9eabbf319d0b4e88181ef8f297b4fef8e
SHA512 93815abbd6b6666438adb146bff476aa2728aa7475178259fea623dbfdae819bcf1accddddb7695ef23bb2913d234264ad2ec826bda6eae5d99459798b032144

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\jun2006_xact_x64.inf

MD5 a983924d66305104b4e21a551dc66448
SHA1 23deca69eea790ae7afc30cffa55e87ac8520cdf
SHA256 fe9caa55be17684622fd7339b1b96e1f0d107dc33c065706d24a435d523c6e12
SHA512 83c2117df0fc37979ccca7d861598a8a127d135456f72597366ac65276906435ab99fa353f246f9f61634fe96f8376d38253300f177d5cedac194cc92407f3d9

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\aug2006_xact_x86.inf

MD5 ddb0d03b1d4a6ce09da5cbc61f5525c0
SHA1 ba5e1361e394301d5b9d9a4aec68ae21f19c70a5
SHA256 34e7227e03812fce5415b0a4c3d15a9e9b259350ac9873db2a98b2ea76ae2284
SHA512 2160652a7f8adfc346e0af6f822875c34d2d13f168b9895b063925979d4fcf33a7da777ce7d43c9ef2b23186ac00378e8c2d4ee115bb2ff794e863e8b6feec5e

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\aug2006_xact_x64.inf

MD5 d40e6c659cb7a757d8e751b050495927
SHA1 a9c515d786bc8f5c739fcf5ac1b6e15365f9e14e
SHA256 6fe310a67227203bbca3389dfe3403fa268cb424f4b525cca2d5407ed26670a5
SHA512 fb58acb95f1914da3c650168ed50fb6f75df68773daa8e8389db9c7c7c4d0e8bf93e46458fb76de676acc65132d781a7624f67289860a19e03520ecdbdb66896

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\oct2006_d3dx9_31_x86.inf

MD5 8f7aa1f0f2389f3cac574652f5d6672d
SHA1 921f2161cf46c6314a330ff52c83f8a3f1058f0d
SHA256 a1c61096019a6ae1a9f31e3fe67aa2bb7e9e451967959d7088344f3f20ab572e
SHA512 a85c03ccaa27adf3c75287529f18e84f526cf91785e0f4281db0eb86feba78522603e21def19bd2a33e03ceaedd9109b8af1dbda4a3fe93fe6eb95366b6df747

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\aug2006_xinput_x64.inf

MD5 90d7a7386af9b951f939d869567894d1
SHA1 ef70a6efb5f7b32193bdec6c5ff13a4abeb4f00c
SHA256 35f25b9538e55172cf36729519581444e26b38a9dae5cccc4ad75dfa34ea08e7
SHA512 10920d0116aab01eb1130eb91b26bd91d4b3ff8e09a77db5b79f88c94c463389548c2b3ce494162d4b2c3fda903eae6c2d87492475c56fc901c37fc8306555ce

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\aug2006_xinput_x86.inf

MD5 f87111f61ac57d80199cead8e63ec45a
SHA1 4a525a78a90fa87290f60f0598fe285f9f46c90a
SHA256 cc66d67daa1f4c31ff5e59c2606c3930f72204a5057c29b9d58dde37a47b1cb7
SHA512 ddb1b7259aeec662fa271f6a6d271e9d48c4b8ce4d47d452dc2ab15611421baa13cec0024e668309b7444b31fa5b24f41b032796c81a36e94d7e577d9c516712

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\oct2006_d3dx9_31_x64.inf

MD5 e2a0e651573cffbf81578b864b50cfe7
SHA1 1c739f17f63ce7c5ba00638259628f7fc919cf74
SHA256 c031987e68e476365cd885e41a072f85fdfc9e480c93871d024a5ccf26d17118
SHA512 abfc6452d055bf6a3fadafb9562352bda90ee0edae5a0fec798951ef9d39701835212533a60eaab67c5c0fcf01ccb9115fcea3779b024ee1e11f217cb676e7f0

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\oct2006_xact_x86.inf

MD5 6181c4b93bad5332b34180ac0bae5077
SHA1 259c8de2dff2a5dd8d4971fa1ab3fb0d193ae90b
SHA256 66998b21cbe6f05b12cdb4bb45549dcb1b4a92f8a1b910334150a8d767fa39e9
SHA512 8508ebc77b667907c5c2f587131f24cb25c5a67ab2f7d8b94216931457f486b37b9701397ed6ef527c9c6786f82a938a52d2b6cb0afddeff4101cb100e3ceca8

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\oct2006_xact_x64.inf

MD5 535ca39d61f752c3f1ba4956871fa27e
SHA1 4941efb676adedb9a46d7cc7415d8af03957b3fc
SHA256 4c388e9eaf3c39e75d003a58020e491b675b3a6054c702062a9c90e86f691d96
SHA512 f203958ca9c7d37daccd342a4deb125b60ef839b5b674a2a0220d7f0d770d5cfcd5c1f691470200bb4d8711f2f6a77d8b968e17020dbcec8c40b127a09f5f9de

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\dec2006_d3dx9_32_x86.inf

MD5 c28f4fd1644e2a20b1c897438e197e1a
SHA1 5178534444ed7dec8c63f02defe7bdb864c47123
SHA256 ef09d783bf5cff2cfba99946e5e71fda577b196a49c88bed1c51b5fd29cecf94
SHA512 7cf93260efb1d794a17ba25b1fa02ba03b0ceeed8131d274b805155072a9a2b92a899471a8b23add8bf46c6a5a3cda63499043eaa754001bb43cafd882c8e708

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\dec2006_d3dx9_32_x64.inf

MD5 39929631df326b944470256c4f9cbbf3
SHA1 932de27abf59c889c02ed747f0ac04f5e494492a
SHA256 ff00313af4a90f426492d72969f5efc6c56a17f2dd91f20cb5c0a38d9f1f2b6b
SHA512 8dd2755a2b2fb90c6880cbbde65d127f55d12df2bab4560ddf86d6793b2cd4733929d97efef5fd8eeb417731a571888c893188df0361ee57eb4437fab331cb13

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\dec2006_d3dx10_00_x86.inf

MD5 1b702c5bdf738a8abf4a3108097a6b7c
SHA1 c1d9c9d5e07117f273064bec36ac92b5ed624d38
SHA256 33291a47388edecc059f1825c1979142d7a9cd4a850716f9dce687deba1fa750
SHA512 498483dc823e76316e977dcaf7fbc557c3e60c67129a678701d5168105edc97f97479107330d5eb3989dc179273cc9b74d055827f036f2f3551a0a3d398f04f4

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\dec2006_d3dx10_00_x64.inf

MD5 eec826f7141bedeeef38c5a3528b5034
SHA1 529081aedecb7b9fbc7d9707eeb6415f98bc128e
SHA256 2a43ac72ab9a6f4771c02b6e10884921b733b86dbd7ebdfc5502d011cd5c8d05
SHA512 62cbe09326cd04c891faa124c65554fd631382a2e078c70ef72a1a07d57239b3ce599b57be3fccc755075174df1d63ac3597dfb3aef9b4ea34ba4597d804d2c4

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\dec2006_xact_x86.inf

MD5 211700aaa53bda6894be85df3dbdc792
SHA1 4874325e984b4f0d884cc732da474b3bb59d3848
SHA256 4c0a40094228a51f567bec65c2cdf289d268812c1af579e3c6b76cd3adb77e12
SHA512 8f51d965cd1ee20cac11256afc5e422d94d43435729d653b25c5347e108fa50e59c3bba18fbd7fe4e2a1a6bd54da1622b80e029a5914e973f3faf5884a262baa

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\dec2006_xact_x64.inf

MD5 ca414f7196d9b2a7a9d4057ca0714fac
SHA1 7eae4a5bfcd42915adeff5377036ecb4bd656999
SHA256 f2f2040b8d13705f00d8e20a53f22093aa0f8c8d6aa6224992ba727ace7b75f6
SHA512 1efb725a49a8ea7125074436bfe988af360b1ac22629d34a754cabaf3c151855d08e826a0e244cdf9b624b531de14d23f32c1c16c82f6832c8604cbf52882e11

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\feb2007_xact_x86.inf

MD5 5f1df74b0110f56ae0b6556dd2dbc14c
SHA1 c8c7d383f5e37c06015e1304b599568999bd4e09
SHA256 64b6020f43bbab7f7c2368fcfe7224165fef555b2bef813aa13b2d9f6295d46c
SHA512 06572fbaa625c85b05f5f4eaf880083607b6d010a8d4bfdb28cfbb1021b08e533f3491080faecb24055acb897b337d83caf9306fadebc1f1353763e8908850a5

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\feb2007_xact_x64.inf

MD5 42161a1071084cb4f32b0d7d748d9b62
SHA1 e7e29605c21b7a2c370dcf979a40c50b93ceb298
SHA256 184c1684c57de07983edaaa1ae2751b263497673ee8418af023a63fa03553f53
SHA512 2aa8e864dc28ee5d0583d044e3d8a9399d8d49b9fb1c522c1c640eb7b079515ffb0bac5280a220c23e15ea4c7ad45c7f1722e05e9f9baa069f4a2670e4976358

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\apr2007_d3dx9_33_x86.inf

MD5 044cae9c30c88bda73727243f5e5206d
SHA1 de744e349cf4ea458b10657d510966d21ad08d67
SHA256 349a09a2791d697bffffc61410a536cdcf258f0d7c86dda44a297e8aec4bdf00
SHA512 18e501142004afbcd28b41bdd3a9b19e2eebc047d7858ee11a9135f19759cfd8c643ff074a51e937bbcab7162888fd95effc146be21fe63dfc300ef03ed44056

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\apr2007_d3dx9_33_x64.inf

MD5 e40a6f3215c3f1397eb18b3388f95032
SHA1 4845590abf12bb5725d94d7aeb953a5686918537
SHA256 2d87efca75d8b9aeab3262841d52a7c56bad34ac6b9691f4df2d89b14c950f8d
SHA512 942f54a3984a29e1973ec096709de890fe870a9dfc84a8c5597244251cbd69f84543cc5cffe620a076d0a16dea6e393c6790553d6d9e2fea1af1c0f00a12140d

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\apr2007_d3dx10_33_x86.inf

MD5 fda5776cc944ebf6d84fb45c8a1a35f5
SHA1 f3b603dcdcfd6a310c2b0945f1a3b97276041ecf
SHA256 3286ba521fda888b1808f12955a58d7da4df7d2fdb472c7837a1e0e1a6317a06
SHA512 b051b04ce06ad21d08ace3a28d490214556f4b5be060ee05f8a4ff872d1cc72df05624021a9a0cc1efa4e63772f55cc61f11edf03537831a44ddd6ab409e83b1

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\apr2007_d3dx10_33_x64.inf

MD5 00ad98b94609033c2819745587b0eed5
SHA1 2a07dda60a97dc2b4a7cf3cfc6245e72cea0efb0
SHA256 3e61c4d723d282c36c5493d82644ea96715b7b548e50494d22b4a83d4e2b8237
SHA512 e7fea5f9186c324423c0b129dc3e8594df49dc84c61400f4635ccf688075b256d7923ca8f4483bf7b2fe43862e71aa134cf2c9545a23c622d0cc04dc7d6dac1b

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\apr2007_xact_x86.inf

MD5 99f23af200574f24c4c5d9ee12fd2cb8
SHA1 f0e50816ed808748f9379733921c9302551cd937
SHA256 008db10780aa8fb6f20b7aa5f5d513ca77efb36c8dddfb9ad89173ecaf700af5
SHA512 5e97d157ed8ad10f9cbb9490a16141fa52b2f32e09edc7e7f5e4b2d9c9bf38bbb85706d76543ca4ffe9b54d5fbc4b763b7df0893f1e7e56ae4c8ac1a720dbaf2

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\apr2007_xact_x64.inf

MD5 dcfa000ba60f73c2c02ab590faa1ae10
SHA1 154b9ff40cd92bfaa572b289662d0305fa2fa017
SHA256 bf6ca1165632efccb0292ae8b739ce68d78ebb95dd39b8e4c1717d78a026db10
SHA512 34f6cf1f3fbbdd79d04dd55315b0074abc21b9c26df6e2fc9d66c6d15f36ad35edea741000a84a25ea9a68a94d46f500398a27c8865a30746574741dffaadabf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\apr2007_xinput_x86.inf

MD5 e188f534500688cec2e894d3533997b4
SHA1 f073f8515b94cb23b703ab5cdb3a5cfcc10b3333
SHA256 1c798cb80e9e46ce03356ea7316e1eff5d3a88ccdd7cbfbfcdce73cded23b4e5
SHA512 332ccb25c5ed92ae48c5805a330534d985d6b41f9220af0844d407b2019396fcefea7076b409439f5ab8a9ca6819b65c07ada7bd3aa1222429966dc5a440d4f7

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\apr2007_xinput_x64.inf

MD5 94563a3b9affb41d2bfd41a94b81e08d
SHA1 17cad981ef428e132aa1d571e0c77091e750e0dd
SHA256 0d6e1c0e961d878b319ac30d3439056883448dcf26774003b73920f3377ecac8
SHA512 53cac179d7e11c74772e7b9bd7dd94ffbc810cfc25e28326e4d0844f3f59fd10d9089b44a88358ac6dbd09fb8b456a0937778f78ecc442645764f693ccd620b8

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\jun2007_d3dx9_34_x86.inf

MD5 b1d65a13b527d75ecdc30cabf407d103
SHA1 db6df8ce6c28cb4a0275aa134c2d42a0ed957fa2
SHA256 a568b7b8a0360ad94b1ed6388eca6ca9d8770937360a426a0fdadef9a4019bba
SHA512 7d80f772b36c408c258f7db1180bc09996620634e6304761f5c10659d0885bb8d0b19bcad50a13a5d99ee92dc8e15587534d966bd32c5a8910308eab623a7f86

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\jun2007_d3dx9_34_x64.inf

MD5 d203c1993f21a870871ebb0c99de313d
SHA1 e69a5bc70fe66f89fddd81330dc148a1e788a56c
SHA256 77f3fa1756181a90d2ee63c26cddfdaba0d720c9a49121db28746cd02b3e071d
SHA512 e03c341f2d8df6e8174447d32bccb56b096073a35a3d8193860bd4628d812d1fa381bd35a55e17b4f27c5c5fffddb25223d932e995736fc608030501954d45ba

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\jun2007_d3dx10_34_x86.inf

MD5 55e30750af2bf57321ad1097a512d725
SHA1 0af3c73afaae0e8a1fdabe25beeb96b32eafb9ad
SHA256 808983dfd3db7c3452589ea4e14ab4af8ef47dbad3b639f9a3c55685c9b73867
SHA512 0ad8b51a550243d3f24ec5934f2b5e53f1d8e0b87997a7cda38840b3160121f1e221e6cb09d3f5b384df74be2ed10d4dd92fb02aff98bd0ededab751ddaa7149

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\jun2007_d3dx10_34_x64.inf

MD5 bf312732fe77f600a36f2a7b98a346dd
SHA1 5e9c70959111dbe60ad86258cb5bb20d0e9caa0b
SHA256 0f75b7ef71e183476ec938705024eb8a10a77d7602a336be876c7f5d17429725
SHA512 10f3d128da5180ecccda522164269e4940b69a7f55af9501de648e572ab5275f02c113be5342969c73e118fb7ec49209883c4a8d6c4648fb898289f77ce7a3d0

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\jun2007_xact_x86.inf

MD5 757a5f0cceaf39b5c7c9bd61650fd12e
SHA1 a7b3dda77f0f2334466d324eefeb3e5f6809d880
SHA256 33b980fb973394d9d8cb4645914d4cf6793bf92bd311e0431ce9cacc59fdcbc5
SHA512 f4f969b017c9233bc4a2267118fe921689b3237d28fc2b251ea3b6227e0b17dee84dfb8df6491928791891dfcd265688069b92d8a88cb9dfdbfff07b24a4dfcf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\jun2007_xact_x64.inf

MD5 c8ca749e73883789faf6561a375d9b51
SHA1 fabee2ac65f1d4267da8df07cd3e4cf4eb19148f
SHA256 405d8cbe3c87b16afac2a9254497412a42de4ae2d8fb470a1234dc3260e0b90f
SHA512 56a0fd5b8f065b82f5f9b73dbcbf912045847180a6614dc48ed7b27fea3909839615aab0c8d0a122d9fca952e9591da5152b4c618e84a2d7aa409dea4fa4237f

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\aug2007_d3dx9_35_x86.inf

MD5 815d75e4264b1f9c0bbcc529ee7a290a
SHA1 cc956156066c87ce1bd2b7628453f1824a426412
SHA256 c0d87c1b079b54b75b86939199ca5ee1f796ae3de9c4ed0ae074a4fa01823c73
SHA512 bdaaca529cd52df20cf1e35b45e1824fe48d09442666b18faa3e948937026b09d880a27f1d915816bc6e1d98b0b486d590f867aeaa046317b7f48d6a0f949391

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\aug2007_d3dx9_35_x64.inf

MD5 0b3f4e715a43024fd00f769e62cd8b9d
SHA1 ef6de20d95a920e3b69307737976bb243783160a
SHA256 e34ad9e49f31cb9211e0f350405c344d93fc65075e470c8fe09dd78af68f2c80
SHA512 336df101ab341c5f22d516089fd31fd9f0541a01d3ac4ab4e171b73452ba3bab3cad84af50f1e9da17c46bcfbe7a1b52284e2ef2af49c67c6d6cce2969e14ec9

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\aug2007_d3dx10_35_x86.inf

MD5 741a5ce76295b86694cd7540870eeec2
SHA1 2c165af0047c98d2864379ea5fec33bb1507bbf9
SHA256 7987e2c475705bf8f049a15af946ec0cb5ccddf27c0b5c8126694421df601770
SHA512 b7d0a0bdcd060ee263860024abe5b054aeb2c8c8c7ccdff9cfa9886188d7177b1bb8799909b3c95aba181292b5bb9f9426ecab0a6a2689970afca5a1739fc4d3

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\aug2007_d3dx10_35_x64.inf

MD5 703b4ea6a182ee3b48026d01319579c0
SHA1 3184959599dcee4e74b251ff14dd2aac81e2ad68
SHA256 af4bdfeb4283f04e24475279931e042f17052224cf708f0c444fba2f2e221289
SHA512 a6e67befdb1d757bc08f6a726e6d79c4f51324edbd1f48730616e27079bfa60262b88b4c49cca046e3da3832e375dfc29b2ff48b7007443606da94793ef7ed84

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\aug2007_xact_x86.inf

MD5 8898bbb8acc1b54b3b9b6a2f6b0e2cfb
SHA1 e5ace499d26e573544be76c8e45cc5278d15022e
SHA256 c246c38e41ed71bde4b3cce4fe337826173896a04c26f8b2a00b06bb0cec024d
SHA512 b0633c44541cdaa2d2c3174027d849ecdf5ccf2149da4a2932f59db600cafd8b959aa0382973e23fec7a76ed7555e96065a4d8aa077f50c2a14e5080673aef30

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\aug2007_xact_x64.inf

MD5 a78f12b4514614db269bf55faf383875
SHA1 0425c3e3ccb15f691d6f5d30b71856138063002b
SHA256 2fcc4bdc6516418d3b4935c301e14f30e3bbd0adfd264bc34067b27b0b266b8e
SHA512 9d1cc2704541b71b246c2cc8e6e1d667cd7e691e42865aa5b0a800cf26386cf00781ae7727b7f90711e987148e98f4253e05b6d3872d3f69b0584bcf97b3fbea

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\nov2007_d3dx9_36_x86.inf

MD5 08ffe480ee5e54fc19a2feea46adced6
SHA1 c939391c489bb321f70707183b0d3f4b5f13911b
SHA256 843764f70f56d430c0695e263c895a135a631f793213d1005fafcf9c210d1ac9
SHA512 c05aa34b860b5620c982731af15889da5571395fb35faa24d43ccbb1b42dcc756769a0b9153c28112d7347f28d4ba933d8b15fb36a3e511ac99eb148f848ed99

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\nov2007_d3dx9_36_x64.inf

MD5 345ecd585eec22fb33a62e59c2758b6d
SHA1 2d6ed63996903c32b3e7ae24d86c924b11d53e7c
SHA256 d1b544b3912e73e5984cd759096120febe6f17e41a3cf920ef82431b9b569c1d
SHA512 6d88cd48bc32a008989ec4bb71afba0afeeaa12f17833fb4072c38b237bd006f192f4e4e7a65d8aebe5d6dac1d13098eea370b03ced343a5541e0ef23e813364

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\nov2007_d3dx10_36_x86.inf

MD5 582814cd47564fe8e3424cb2eb090501
SHA1 87a2114434564bb0a5cb4ea337577dd405f5e42d
SHA256 96f48bb810055699d37e9e27a65947483a0b4df304870e3b5448d3051b3e4926
SHA512 203d522271aacc0200bdd684934a8478b54a258f55ecca49a178ccabf418a328cd02ebd2a9656bd9dcd40c33de21d33664c5b16c1e7877de424d37b4f9b3e7a8

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\nov2007_d3dx10_36_x64.inf

MD5 60e353607750ae5e63cb8e56f443321a
SHA1 8f1b07f8cfbd66e9a7e3c15118bddd99b04d6871
SHA256 7a49ae818e199cf9f9bd831f94cb6d03a1e72a141d76546261979b30642757b7
SHA512 038aecc1264f608c6028ec2288f0d8de6c9202bb3d1e96fd247e889afa06f1ce592bc9e224f37e83f29c0984cca6c4e85ab11eb28570aafa20b076f2b2e5b6e8

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\nov2007_x3daudio_x86.inf

MD5 4287ed3f6647fcd80ec6b0f7f2606964
SHA1 27b2e4212295478645a017a4df820af6bdb4dd0b
SHA256 f882bdbc8230d24b24e20f9d0db447586e9493801900a8ba381eb493bd41f5d5
SHA512 c816d7127fb7fadb971b757ba76d4b918fe18bb16e5d2249b4bd80b0b6c47208e7ba5e11b521d9cd0a23d464c392f98a3c617b91c0ae799f3aa10401b4e2bcd7

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\nov2007_x3daudio_x64.inf

MD5 55402001ac41f0bcd1f457a36d298848
SHA1 a18fbdc9631610f2550f05cc3aed5a665afee7a4
SHA256 1cc72ca78433fbb72ee6b654c908748ea846c87c80424816745f285ed3bc910b
SHA512 96cb7ff1d43a7c1642d8ce9cb3c23ba460f6c083a7927fe0ad7a3ebb85649c384ef0542ee3e7dff6b99413b95a2a333327cd28349665901f466782fe96ee491a

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\nov2007_xact_x86.inf

MD5 7e2a5eadf9f1eaf90d5eac15b7a9f558
SHA1 907cf74056bf7ad91e47c98aaad9a092ab42fd02
SHA256 24714f229e479338ed89bdd6143140505fd63f517b7e71170ea6c072a1748b06
SHA512 63c2f438e6feaec2b9fce15617940c97862a54527d549fb6ea149e4d18199c1752e255c6cb167ff20b9cc1f74b87ffc97110b65652bc5c3883cd14894d21f8fc

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\nov2007_xact_x64.inf

MD5 bebd51d24aa338f6192e291d03684b6d
SHA1 cf2c0efb60f44748b0ef3f95276b0512719f130d
SHA256 841d579573afd51499c7cd8ee986a41db63cedb722e8fac351d3632ff470c161
SHA512 28fdc41091d761faad79c1af33da0372086689113df2f1cb40513d50727e5aefd652a977ad5c92bd62f1c5ef9cfc24c23bc6758ddd6a4d1ac5db0b5e401432ca

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Mar2008_d3dx9_37_x86.inf

MD5 020d1260794d5780937f0f7a919cd62d
SHA1 511ecd1186deaf129a5532b79fc776a9ab8fa9be
SHA256 d55858e166a2fe00d4acc30da756f0ab2c4dd5a79a9874eab3100722c74a1b75
SHA512 201e24e51dd859c35fa9d0a403993cb0b2eba67effbc598ca4491f05bff4f0805731b1e7cf6026b7dff9fbc3167c16b43887f080fa40ac11c6ffe09297401f9f

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Mar2008_d3dx9_37_x64.inf

MD5 ec75fe979fd2c2372ea75c72a905c832
SHA1 954642c9087489285c8f0786b63aee108ec08d04
SHA256 a4fda3373241c2748a969ddeeb6ef41b3cc1bca6608362ba87db75f69023fe9c
SHA512 dcaa772d21d1be7fe59f1ad32d10e7cb454ed2a4d98b3add201f8bef03718c29f9915fb4cb779111a954a9d93d898393ac2ba593c2d4d378b88bd492b7b5381b

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Mar2008_d3dx10_37_x86.inf

MD5 1242da12c637d5976af936f60f387c26
SHA1 a6890fa9d41f6785d54a7d3e1b229b64010089ab
SHA256 bae3bc2b7071d2d1c657a87a8c8af6c0fb5373f11c9aa5f61b406924717d0792
SHA512 7fcaf6ac1a8166e8c68d650dfea40bf329565d4ef92316ed0188a252736c9e288cc8f7d017b0de4af05245d1bf94a85b2dc72a93c618a1f2caeda45fd84a6a09

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Mar2008_d3dx10_37_x64.inf

MD5 b21f653f707315be4c85ff4630af305b
SHA1 32b0d69a786a2cd37d2fdf541931d90ae8656944
SHA256 f37681f4d49f71d48b1960c3efac74f28af9fa764b29ed3a40b5f424fc8f60c9
SHA512 e68348c9413f77749218fa34e55e416c7bac95f234522bb6eccbed1185a3f3af2a393511d3b83dbfc64580e1725f9f53e7e586570d696a3fee76761e8b0902f4

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Mar2008_X3DAudio_x86.inf

MD5 9ab8a749708995453ee8a995a877af2b
SHA1 eb8a0ad7f7b38aa190e2fb8a4a2d11cc9fa9b493
SHA256 0b6e28f00364a9ff436c3d99f0d4e80bf615f1450f420122324853cc0b88b16c
SHA512 9b0ed586fed0ffe25d4076b202afcc7ad580dbb05593e392a12d64b639098f8b7687463f213e53dfbb85616c5a3781adaef8f1ffd293c082a84291472266480b

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Mar2008_X3DAudio_x64.inf

MD5 2f7b3369825c6b74f4b645ebf52c8e98
SHA1 105972c77223b943df6533d517c698241ddee9b1
SHA256 b7dba312a71ed109c9c54cc5cc096096eb8cf0962396e8dc996f8fa28307547c
SHA512 88a47bc3520f9fbc082f1ddca7e083cff9bdbe5c4a0a851925ea14d8e0f327f2a9982e5b4ac457e4950acdcf6788299c4e13a15ff38bb76c8d212f1466cfcec2

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Mar2008_XACT_x86.inf

MD5 e3ad8befca2528572d6c51a15e072c94
SHA1 9718337261b8b93b546a5c20bee8b44d26707053
SHA256 6b0cc0dc993e172855864fa078c4e5c8f2f46bfc3200bf2ccdf3292931ee3cb2
SHA512 de4915424d8a53ede76394fac14c4de46838f21afc8bf30f560d2d00df4f366dc9ab48bb343be3580087a7d5862a14c08f83b5d9cc8e78aa4cce4e6b71b70c59

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Mar2008_XACT_x64.inf

MD5 d5debb90aee2d6a73bb448aaa99f985d
SHA1 950ff1a768bdabf14ca2cc6809431c3be8b19d9a
SHA256 1038a41e63ee8abbc8be85a86fafb2ac1d03defa6b88deb270f96a6ed1a97122
SHA512 dca65e91d4eb619fb34615a3c8683e04af84e843346b88bf4d52cae0c27e52b5a7a417c531eaf50cf45932e3fd6f5fff1bcfeeea4fe65efffbe791c8ac1a8101

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Mar2008_XAudio_x86.inf

MD5 35c6f6f109257f242cfb2ad2062d50c4
SHA1 222406bf52449ff0d5a7ca8ace6cbd3dd5f41708
SHA256 472bcfb54b5d63377da128596dfb30c8f200f79edaaf6d29de1afcdb71a3413d
SHA512 71180d47d8c177d84e68bcd6b9f948dc8c946f7a6c4091e20e04f1c8098b9ba92bde976194b06595834ba4b159a702c091d04ec823ac377b7ba7713f057f99ee

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Mar2008_XAudio_x64.inf

MD5 8eab978252843c5c47a913e4eee460b5
SHA1 b5ac7e6a36157c41d56e1113d7768e67530640c0
SHA256 10a2db49dd3bea59133bbd82b3fc0f8a959b65b0c250c11a9a6f3123b961e6e9
SHA512 d1b7be4eaba7126f3f64d625cb9c9d16dd40dd1dec96b4d647f9a5e24d6b945faebb65f25348d9ffbe092b03b1a54414cea9a2e4d1eb1deb102ab5abdb34d810

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Jun2008_d3dx9_38_x86.inf

MD5 c7fc0a82355bafed08a5597930b80263
SHA1 037419fc93581e053b4cd31c57222c8b8761e242
SHA256 06faf7f7ea5503dcece13d6537e57cd2581d5188a5d839fe7f118298a721b51a
SHA512 51829843dd7e2e501d6054f500fa523bf63f19382890880cac0e3f207a00dbc544195489de67c7dcf876d9061f2af12bd346513e1c98047b0c185669be5d8cc9

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Jun2008_d3dx9_38_x64.inf

MD5 df5538bc9e0494845a8e2d607e06e561
SHA1 a056a64230f03835dcf9bbc5d84edc2eb0c09484
SHA256 ddad68974990a21a8d4a91c47ef1034ddf0475551586f04e86b8cd2f0c990d6f
SHA512 4f19379034eb47e01de81a611facc2c8300c7b10306ebbabd232a249debb4acdcd3de42b71d851011be5b3abcae1ca232ae6891be79adfd754369dc0f16b249f

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Jun2008_d3dx10_38_x86.inf

MD5 d12a6b9889eeb330b4a4e86e9bd175ae
SHA1 62a4a7cb8fcc0edc240caea13b2b487cd012fb00
SHA256 f5f54664ec67f6333a9f0607d891bd0dc2acfee8cce09ac4ee0372b5d0aa12fd
SHA512 86274606e76b98b71dc4eec5180b3a52cb6627ac5ecc8b008512b7bad404e03b834b7129ce326a3c9c1cfa8b19bd5e97467a9390bc8a0e749771ca06d9f73491

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Jun2008_d3dx10_38_x64.inf

MD5 e2b760696e2300b1c9b6c2531b39d029
SHA1 1c576840cf04b73de362b28b943bd69b09b3883e
SHA256 0de0ada970774620c0905227666fc30910e64f3cfa4b99e4c5481685d12e3ded
SHA512 94e4bd9834c21acc7709fd28dc557455929f940be0a4a794105188dceed7e023f87a489a1de44a9f93f3780f6f9088ab3d4e829a0089bec74a25ba4297a0dd73

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Jun2008_X3DAudio_x86.inf

MD5 7949a4d37b517c39295f0d656cbde501
SHA1 27313949fe172d687e9faaaf91044ef56b7c973e
SHA256 0064b7db5bfe52b6f40f61d962901c7baa116abbc72328f50586b6fa65f894bd
SHA512 93d947c95b7ae357bd47a5a050437cb05192eb6c84e9222a46d70ecc7c54bc2a5cb1d3f65cb2a4db5fe18106ed9be5a7aefef08f9634b28cd5cf128bd00352fe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Jun2008_X3DAudio_x64.inf

MD5 0225e16dbd17754f202f34cc1fdaa60e
SHA1 d8d7e02849d9594b346023e9e69a5b2a4fffc45a
SHA256 f4526ad18f081b84a139e6d98923569fc8ffc7644e20499e2f68abfb3e87753e
SHA512 2b308f4c4592a80d4215781ba7ace57f93a7449b2ce36a7c78203e1f16f1b7321dff6c32272180c9cbaee5d31afbdcd11f3d474004fe13c63752d3c0201d2033

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Jun2008_XACT_x86.inf

MD5 59c4f83a7fa2a8dee4970d37a96c2b55
SHA1 75b42f58c61d8c8ae185cd8560dbfedb7c4d6d9c
SHA256 79cb10222e466d54908d30ee433830e9673d5a538fabc5f4568521c2aff66eb1
SHA512 9a9b7ea3b354cbb29d88797533332abd4d1ad195b28ee6af05a0c6f83343b1e2ae0ce172e9941eb5f0d7ed3fb0382c1319fe4808ea2bf8988a1dc63b78c8c095

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Jun2008_XACT_x64.inf

MD5 9b2753cd7967a014a6391b44900ce258
SHA1 d6d227999ad32de75e05ae7d7fc43640e8893ec4
SHA256 90577c4c3d5d0de80c805caf0cc713582698ef7224fecf4ff911ba6309c5c920
SHA512 31136e55f01d382cb20f7109d0369a3ab7c8997dde1b65e9214e410ab686add4ef6950241c0aa9fc93ea0cfe3134d98ae1f3f48b44e92a620715bf159d6f5914

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Jun2008_XAudio_x86.inf

MD5 e82ee7f4d71ae8bf90378bb6dc107d57
SHA1 6fc8e3437dc9d87213064e69bf0769d20fa7a739
SHA256 e5e435c4536f987e1087218b025e6dc66c24c3e300e839391891f1b3bfd360dd
SHA512 baea9f4d6c744f26b55426c9666f135c07f3e8af15fee04cdf34c0af83567815dadd5a4ac8a6547a49d58e0c837a28fb18c4fe1f50fbed8da9991bd2aed8ab7e

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Jun2008_XAudio_x64.inf

MD5 c564c4dd81be3fe65783bca776be371e
SHA1 b60e1e1e34b8c56fac53dd7af79e1e05e04866bb
SHA256 9ce21064f2feed9bc9426a6e92e9c850aae31abeb80c7906ff917fbf4cc03913
SHA512 5b790aa1a6215ce8687cf3503267e31d1d7b41b5e4675bc634be957fbe14c53556989278017f2c97336df13d16eeaf975e0602a4cf9c8356598c392977df4dcc

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Aug2008_d3dx9_39_x86.inf

MD5 b28ef6e3eebceb622d1431fedd9f545a
SHA1 c6ae73cbbdff4632911dc1759a9ccdd73056ac8b
SHA256 8a23d386626328f9519076f33d5c3b71c639f2347741442c3374974e6f61bd53
SHA512 4f2bfced9eedabd6ca807a1b88cc063d15a31ab0bd8e2b60c65d6daddac9a111c434a0fa7d7641813d9880612464351ea30368bf6f0ed9ffc69bfb4d51882d12

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Aug2008_d3dx9_39_x64.inf

MD5 9411bf36f2075b7e42468277e8020e40
SHA1 c38bb84e7381baf0d2720e5f1822781a639c04bc
SHA256 4cbb1c6804b9c76bba4e41f0d2a45f1daba7350af9da4ae6966651f7f4da041a
SHA512 c860da71a89c41e81c1c89b3e1f4e93e747d7dca1152a4ba063f53f899fc701fe24f14abecfe883571af518df4c2d766432ddbae2ccb2c52bd87d85f6ad015b3

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Aug2008_d3dx10_39_x86.inf

MD5 baa493c7a361f1ac0c5efc94f1568f97
SHA1 16dd101673b96b54bc5a38c20ec3ed785c6bf7bb
SHA256 e83f8d48323887af89648c5bd7af713b42d20ccb757be34675f1fa527e6cc33f
SHA512 2e8db3d1ce2830caa9a0f698bc31e2b907e39a233fb056fae44062b3ff732b3b62f12fcb2eb948c1728df9b64c4d8ee873c0f95e56c2ad1727140236ecc71095

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Aug2008_d3dx10_39_x64.inf

MD5 b01ca47b1cffd13ec5d8a6a592ae8449
SHA1 e1b615488ba42c44922522dd47b2e99f1b5394e7
SHA256 a5eab981c313538afcd7abc7742854d251c736835ffc1f549a4768fdf49c3e71
SHA512 2609474f1ce19473ff8f5f4550f9eca077bcf063bff8ea7fe890493e1119e80e6b233141a8e9dbe7d9f1e167c4941fead6cafe506f98053e623728b7edcf4ea2

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Aug2008_XACT_x86.inf

MD5 d2aedfbc8bd56092d658bd60b464dfa5
SHA1 54f8e1cd59f43cbe02767face39fa42f50ddd229
SHA256 f1daaa8d96108a4a338f62a4a1339143ddc566e194ca00dde5427136bfccb0af
SHA512 41d74bf9899e8d904bb0bfeed5e053ac3c453e0d591526aaf5305ba33128abfe29cea09bdc23e2131f91626a66f0ff58f6cc02fda9692e58fb2c476795e2b6d4

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Aug2008_XACT_x64.inf

MD5 f616331f6e6916d1d27fbcf357cf1478
SHA1 e5530aa845bca9b1c89abbbc189f65584008cedb
SHA256 cf09d632a4b2cc670d435f356f309dc58359735834baed10343fdfbf37eddaa1
SHA512 c39fd664f43c4cfad8e65d5d6b3ca845abc0b341cb663acc7e274a00c3218394d3d04cca850312074a294bcee4e5a0796a3c90d6263de63f8f83078d9c44c8ec

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Aug2008_XAudio_x86.inf

MD5 e0947065f559b93eb93a7ceeaa8bfd44
SHA1 39bb647363b00924c7c0b3792f8017d7c7d9e3b4
SHA256 f211a7d99b3ffa0180bd91f68b2c285564227e075d499e950e76fde04e7707e3
SHA512 620810dcd56857b2d3d5f1271c5d4979cc90977acebfea81edb472d02da8e6104e89984816a91ab57a2469253a391bcc378093f1adaeea7c0d35f7f1b794969d

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Aug2008_XAudio_x64.inf

MD5 fe4812a5425f1b6d9562b9609db16ba8
SHA1 01a206feff15ead479848ddf056a560701960fc2
SHA256 311bd58ed7437a1cc79692ae360a02efbc8ec51194abcb80bad78b2208a94d58
SHA512 2a98b997af381504ec8e2c5b182c73717ab81a455ae77c57036aa904f87dc8fdfd16a7835cc1e631e9435257da8bc631946b32d8f3bb72d260d1114c4c3c4390

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Nov2008_X3DAudio_x86.inf

MD5 e8adbd1e68258d5657a34ea722f3bd32
SHA1 ae4e88d17663889e841992436b524a35506ee534
SHA256 d0361ffe046b7a7a374a4938d419e4121365892e4f2138899f670619ab34ac6a
SHA512 62b132cbde7afebaf20a437b810ea42b7c782eff4fa1f83e2e586b2fd9303829ac90c54704e28f53010a8487e04bf92b791c85fff4c949a12cdff2132c2b09de

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Nov2008_X3DAudio_x64.inf

MD5 fe8f918218c40fcc007bf16e9cf0b76f
SHA1 2b66a5a714bc7a0ebdccb0029e179bb3f32009e5
SHA256 d04d052fa3065cdf00e96bcdd7dabf3583ef10b6d80fd67cb03c32f09f2e602d
SHA512 9845d8d2c0c0c618594e692abb382e4244d95f5a06c48d7ae694dd09ada670ff23bab07fbfd09310f60f6684267ed0709a1d146da6fbbecef4790b9373840b2b

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Nov2008_XACT_x86.inf

MD5 87c8d16c6db20854f9610bd5be6e5ae5
SHA1 c17d78456637cc2a67b35d48f9cb3c730526425a
SHA256 31680e7a90d24eda04c910e1f3e6c02774cfc5c36ae08e7ac043665264702f83
SHA512 061d80816e2e5a7a2df68cd91a95e5f17aae8610a18b254abb7d5929826b14da5755eb01912eb369d1fb5725f2a4c144ce92e0d08b61799903d83fc91f35413e

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Nov2008_XACT_x64.inf

MD5 d28248a55a7747733c0e4356c1a15d70
SHA1 befab66a5faf1889c6eb2208698874b00024b78c
SHA256 2d8a68e726728e4f4be05e35fca812b855046ce4bf697f0dea14094dbd7e1d79
SHA512 f7b89d96e287ddf8200462c4eb0415f2fec81b7a69e5fd4bd5bd33cfc805287d287dc403060b01639cdb67b14ebe65e42f75c3a1fabbcaf8692d315cd5bf45a7

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Nov2008_XAudio_x86.inf

MD5 052b3294a9345385406ac2056e724804
SHA1 79372406f5cf40deefd8ada18ba238e80360ac70
SHA256 950b5aef596fc5048732f6cf263dfca5bcc25df7dc17df91efcbc3551751a3b3
SHA512 9b0cff2968acd2552609169a138d40fcc25ff2c35b70ba61cabf769f4e5b54774f32392508867b6ed9198b3da5a858b3a7079d7c4a4ddb31f63e4d4985efd2bd

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Nov2008_XAudio_x64.inf

MD5 318d70544da7620126540b0712200e7b
SHA1 707c4a04f02e10b08a16528b0da8b284cfa315c9
SHA256 ed20b160dd26a5ed3c220a1fd9b5fc880b3280ebf56c2f73e76b6d4da5ef82bd
SHA512 4acbf6b35043ffe9c740e3e48fd9320e10f5dbe317dd89dcb97b68495b60cc2cb2cd98e57fad030ed053636b710d344b96667b69bec4b7727ba2508f35f23aeb

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Nov2008_d3dx9_40_x86.inf

MD5 d9f6cb1edf9f92a045f4b2b8ec17cdb9
SHA1 fb362c8de21847523211fa512cdbf73e5b49aa60
SHA256 955637638635025f01f82febab4a4977252a765439d90ce940fba752723b9db6
SHA512 e22fa0520dd3f905b5170e3ede4d9b9e40b0522c9b39308d150c01e5bc381949d70ce04818efa9eb2a08bcc3b26f2179db9a5aa1a5d14d757ee2dd2c5c3cfae5

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Nov2008_d3dx9_40_x64.inf

MD5 4f4a9d3074a4ce8fa141a17b0c2e97c5
SHA1 e77b4e76ef70fb08befd69a03b9f5dcf02c81428
SHA256 d071b30f56763506da0c939b8d35b0540bef3ef0d51a5cfbc45816ca91f891a3
SHA512 7b961d3b9ed247e75047a5bac6d65ed741fb3c210fadfb23d4b77653af7001fd557fecbc2bfacac00188894374ec7ef3b0a5c1b1f6ddb0c9ad3ee3dcd1f32027

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Nov2008_d3dx10_40_x86.inf

MD5 7a3a4c3b7c9c979261ab1fe477809731
SHA1 545004e59315dea0bcee6bde61bde3c45f79d107
SHA256 a4eed39cf36adccac4317e5822b30aa37ac5b001bcf4a24f7b5ccac6b8b71e9d
SHA512 556cf8ff26de695e39aa42fbbfe0bb986fca9ecdc08209c28404aa1b285cba8bc4ba62659fd0d929d138c781446fdcf2a30c0e1aa1487f6f1d75c9f15145c7bd

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Nov2008_d3dx10_40_x64.inf

MD5 f0769f57bd08036d669104f9bc942228
SHA1 18fd51cbdb46f1ffd47103dc026f1cabf4e4868c
SHA256 7f902d9ce6f6d71be1d16997ffc9661be2540522c73cc185516415a52dced2a5
SHA512 427acfacf52759a1ebd749022c375767fc283a625b6773e06f8965926e0b96a969a27a440bd661015b56eeffa6decce7322e43974172966520c9ea5f6164914e

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Mar2009_X3DAudio_x86.inf

MD5 c1501e224e63e7c7fbdbfb7734a8e4f0
SHA1 c6aff4de1b44499d304649b782346b0a6decdbd8
SHA256 aabd029d75f25244bae4ca17dbf9c4feebec0d5f121fcd388c175c3360be1bac
SHA512 e29f985810029a43a987ba45c905aae84d0615330e6fcedf81806a403f59c8861fdbb31935b0c610378d8131d38ac6798c778f5c6fada9f51838cd8a8cfcaa99

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Mar2009_X3DAudio_x64.inf

MD5 5e65d9cfe5f15381afe2016508800dca
SHA1 93a44fa2bd9559929c4ed459a336e1cc27738f90
SHA256 4da1a6bbcb7e84073dcd1898f854702ec32f5324478b2fa39c4a9868abeecd3b
SHA512 9ab50d72212f79f949679b7e7c19f698f2b1c6f1d695555d925b7cdcff800a14fc98535476150a15c563eab74d8a98316f44027b0e3ad2834735a6f94aa07646

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Mar2009_XACT_x86.inf

MD5 25b4458970583bd63b3e21ca5eda19b4
SHA1 a41a7c318342365d64f94da5c2b9d0490895d684
SHA256 764c3caeb1725a11701ca7119fdc49b3219553b79f9a5c1a02b20991391e5a21
SHA512 4239e25d6701e28a58424361d2bbcd27abcd91308ee2b5abde611304b0c2caf3cd807c8aaf3665569a565664b12c53e17aca73703ece809b9f26487d9f9a3778

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Mar2009_XACT_x64.inf

MD5 eb9c537b01096960889de48d1a13725a
SHA1 205f797be95c576f2b15760a25440f532011332c
SHA256 9369fb0a9d3353627c097fc19780e5e7126af47766ef6a4a95ff3ddcca56691e
SHA512 c82ecd2c952b1df01e6c7f7858341c62b36330945dfd0c6bdc404d14bee5682ca06a19448961e03a2093ea00040fd38ce60c126b9f155607b7435b28f74055f6

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Mar2009_XAudio_x86.inf

MD5 ce1394e17492dac92e0257482272617c
SHA1 f1babf395b608a9966cb5d89d85d131ce8263576
SHA256 1b66e4d80f9843fc73b0a6097fb8ed5f3d2cfd5cfb5c328904d2c370bd87bb3e
SHA512 c5b800c6d519d147e37b459b3c667d2e05b6e344ac38be69aee40dc1e20b232c9a123f0f6ec8fb5909ba8d76fbb24a626ffb2f76b08bb3d3984d6ad6541d6a9c

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Mar2009_XAudio_x64.inf

MD5 8d2a8bbe89cd936282ff828c10ae57ad
SHA1 acdedc9919abeead28ef07da56ea33f88c45c3a7
SHA256 4a554d09934581a87a4cc98749b525b6794947b64b8414d380edfd502713f9b6
SHA512 69ee567df6d9edf90a6a2a882b745597fe0720af3eaa0f23ae7241e7519aee5af435566bb1e0cd8b2f6bf6956b21f73d7af9d8e9511afe48a54f68f440aea2c1

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Mar2009_d3dx9_41_x86.inf

MD5 b37a5ff044eb65521a290c79ba1a3e00
SHA1 ed505464894bd3e52654834487f3821ae117edfe
SHA256 bd29711cc2ecd924990167ffa95f48842e24aeed3acef1023717040240b4bbb6
SHA512 eae4408cfa7f9c39b101489688cc570a184b8a57f3d20d3b0452a581fb80c4f485dc2f512a39669a92a5bde81fbf474e1585f566ff482e87610780c23126c21e

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Mar2009_d3dx9_41_x64.inf

MD5 d4a1295d35748a262f28c2d3ed7a116f
SHA1 f6794d7a852b3f56e93fcded600077220ebfef74
SHA256 12fe918aeb224a9bd4d2a8142f97c95d58a9a69e591e7e4f95014c155bb03519
SHA512 79a2c575482ebeb4157971c07df42c76b42fca1b00e213f3f311935977bc27c86ecee6b387d93e9dadee06bdbcd6d4edbd72ca0a66925eaee547f1bd195e7f02

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Mar2009_d3dx10_41_x86.inf

MD5 6f64b88a71edf6070f48277cc7e22125
SHA1 1c77aace8a83ecb9a388bdee2aaf38e78af08ac5
SHA256 0170a4b551b58d92a753e86793bf3af762fe3f8d781512f710a4d661aec8d626
SHA512 4349bed85d5c42f921005ad6915571b680cbf178dc1c9fc8f218dbda7cc34b76647edfa324d3c529dfba18da800bc010623a6ee8b34a5ede0a447d1e7dc93827

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\Mar2009_d3dx10_41_x64.inf

MD5 d9bc0224ff859db21a9f684ff138cbae
SHA1 dd4f2ecdc2a7801588166d92d6e6aaf769bb3627
SHA256 53dc284b87f5787804823977d2fbb528e393829367db5d2ac5dd79c581a27616
SHA512 29d5c1e3b54e79e322a966d954935a31aa7108aa31f04e711e36efbdabdbbd3282ff56df9d640fe48f8707d55a7af435c83b7f281177d4d5bf01364786596ff2

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\AUG2009_d3dx9_42_x86.inf

MD5 dff48361a5cb0dea034dc6f16de99477
SHA1 afa417acf7e9da37923255a623ef34c7f6446c80
SHA256 5989dc367a8f84815bcfa1c46ff756527c6250c62973220d1af354b70027eaf2
SHA512 750b69eee07e7d6e7fbdba722e2e1ce377729dca5fe52b4d57d23dd2b80b28b3af8403aa43c469a5042ad35eb09ba4dbefc40a014a137e1b5d87e0f2de203856

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\AUG2009_d3dx9_42_x64.inf

MD5 ecbefd1db4cb52d5089b1d4b20a08656
SHA1 85134f773bccff3e874d27d7e79dcd1e9485c903
SHA256 4887cbec8545b02152eb16f6296987a43a256b69b408330eaee362184f298d98
SHA512 a50afd834f0d892af5eb33b9c6ffbb330ddebcebd123fc7f706f05efac9491b49dfdcfe6196f3b6a3c9f7ffedf4fa723e0499f03417552404c0fb4f4fa3c046c

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\AUG2009_d3dx10_42_x86.inf

MD5 b3a2e761e5da007cc6036c5703e12eed
SHA1 447e852f9bdc357b00864d4dccc7486f1313918b
SHA256 a80a00464775da82c02f628c5bc13cab0d0643ec2a44b28d2acf7c77d467becf
SHA512 28a106886578fb38f144602d2b29c72a906bb24a50b16ea7d3f71f8bd7f194fc0d7c8451dd1c3e9ecc59be3a866c07a23dd394a17d39eb7b55cde7b347bed3a1

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\AUG2009_d3dx10_42_x64.inf

MD5 8d272f58bf5ce42962d7d9835e9b489e
SHA1 7e0969289f839b5dfe606f6ce6ed106460f97682
SHA256 2bfdd3d3bf485439013045b3a08942f457385bb89ab76d9479fbdd85f09e9d96
SHA512 0554257a41df07860233f26330020a45e2dab2613a6028f79914aec7552d5c54525b137e450202db1283b602c3d95908acbf9f1eed20dd79c21fda5963fc2b5e

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\AUG2009_d3dx11_42_x86.inf

MD5 9deabc0af1186bc22a6feacaddc5839a
SHA1 2a1fbc0737777513390210fe7fa48fa8805b15b0
SHA256 edf6764083b47c04fda52b149f565587c6a07d4455357fe3c27c9e56cc57a94d
SHA512 8a3dc2b4d25a2a4ed94cb70e88b051d9df9985f3c6a8af0725bb521e029015755b415c23a44ae8318aea4a04ec9b9c1ffc895df41d28c384d78a465dbb29ed3f

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\AUG2009_d3dx11_42_x64.inf

MD5 520790b3b1eb8bb9ff00e4730d17e256
SHA1 51872475e3c31bb749f0bffaa42ab4ae362b2dea
SHA256 f9c13939779d4526107cf7d3554c122efb564cff02228d02b0b6ff211904f5dd
SHA512 da76b41ba262ac7adcb2b48b8e3845b7c57b1c45a664a1f0bc90d420cfeae1ee454c2089ca37ca5df264759f016c781ab1bf17c026d9733df7271e8ee3320dec

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\AUG2009_d3dcsx_42_x86.inf

MD5 a156f288883f2c1e867896c114509aaa
SHA1 02d7a136da0bc6c8cec933a880c62b90ea8d329c
SHA256 ff9da1b0328fd918cf9558ee57387a4865afe98db1410cc16b1e921c5a744c48
SHA512 632fd6b2940a851bc82c2d57a962dfced3b2cc61010e037ef9065b4a8da5a0f112bc2c66984cf76334556bcde35d49dece1841ffca9c149526a56d3824178b02

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\AUG2009_D3DCompiler_42_x86.inf

MD5 e7f9ca8ca804cc404f855be173f6ac61
SHA1 5cbe6a3e7cd65a66bb6ed17930ccfacb8c756fcd
SHA256 bb8834d2366f6899c507bae176a13dadbd44488451a263eac830be95f4bad43f
SHA512 cca663b914f6f6d1b86db83e4f2976b103af041ca171257b9815a689788018434228182bac943fcdc7770d43180d53f887ec987e9639edc26ecabc7d20dbc4e1

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\AUG2009_d3dcsx_42_x64.inf

MD5 32b0f585bed3e042371e125ebc7e0f80
SHA1 dc0f6d3a501cceb50a92848f045725f93182f150
SHA256 f7a5a84bb654837193e0f40b579777f5c6cc2c7341cf90503d6a6709d319797f
SHA512 ff7ebc445ead8c5109585ecdc58c7bb20f9cf9debebe587ace38c64f70277ee6a9c9359af0ff55a1d4bdd2d01b958efdce743f30cf5b20bc8656fe4124ec5670

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\AUG2009_D3DCompiler_42_x64.inf

MD5 bf489f4a6f1c8772091caf9d3f96628e
SHA1 c0da8b93f1e17acd81e5664ff7f014cf470d12f8
SHA256 8977772e5392b8e79364b3b8d97300e97ad891f38d5a2dd306549401e46b05ff
SHA512 2e21de522c0be4b797262528399d7ec8604fbf466e8de49cc12b9c2e2daa3a8f0977e952bd36135ed4887516d31ff8c782273325d2afad48f8b3202f35b4ffbd

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\AUG2009_XACT_x86.inf

MD5 5b6e899df58c5dd0201934027490278c
SHA1 8379d615b05654bdbdb6512b98abdb93a9179796
SHA256 1eb88b5460824fd32eec9b90e7ef5cb529f51215046e539d39fa27a409709766
SHA512 2326b2b5f046ea663bc8723155098ab58341ace400fed48933575dc55b1cd14ee8f8d67194303783a1d1f412e395eddd8952127eb35d8ec745208a6889dc63cf

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\AUG2009_XACT_x64.inf

MD5 e8623d8be34f89b38932adebb2ab2df8
SHA1 f7d844b8c77bbf1bdbaf4c615be7591299185bb1
SHA256 5d57466af1801ff3a92b1540907f0e4b91d90189177d68c6b4c8833e5d57dec3
SHA512 a398b5057707743dc3077f04e3796fc231da56b54d58c826b13ec610bbdadb0513c56183156be2e45b47ae96971a9287097ffdcd709f496e96f8f7233375f1a0

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\AUG2009_XAudio_x86.inf

MD5 6d9bf03bfc9465df08d17b18c431926b
SHA1 184ff4a21ae4756179fd179d1c3d007842a7ec2c
SHA256 842cc52100b5774bcda19e40837bd552b308e74829d5b35a505822c7436892e1
SHA512 35efd74761fce6b8c7371cbfc5c8c50a0142a3fa3492dda3e566b031bb1dfd58633960230985d899348073de38295e25f76d716b153640a9e0e8ce6d59954f5d

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\AUG2009_XAudio_x64.inf

MD5 af52205973fa73d4227dd5e105f6a37a
SHA1 2e16e2914fcb65e55a117b24b992d6e8cbec8c55
SHA256 4348663aa7cfe22916fb13d93307e7384376fad9d6fa34c6196f80df42c61a33
SHA512 92b8ce27f01fec9c17c2677eb4e9e3f1dd592a94a3ea12e9580c8e206a8895c99b0498b2fac30323814c8da16a48555bf5a76eb72afcf5b99ee2e05c67cb4ef0

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\FEB2010_X3DAudio_x86.inf

MD5 e84adf38d499ae39090ad60fd76d76e3
SHA1 6af4d58bc04aac2723e8b97649f1b35fb1aca84c
SHA256 d4da3e530982812d1e2a31570b80af541fac1b13c72997d2aad7ea3bfeaf4a4a
SHA512 6714992e7aee7bd0798fbec68f92c97ee502127580e21e1b6693ed6737312b44dbc9fd9ef579fe552590e9e5a4904df94e4116334265a34699a04aa76ab87c24

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\FEB2010_X3DAudio_x64.inf

MD5 49460e9297b0faab5a5d73e7aa2caa67
SHA1 a7e211f3d4ae808f67a798924c4d3314183df873
SHA256 68351f03f4ef83e4b8c359e3e130441081690a1866b838a1b35d64674ef3abbf
SHA512 92c4c0751e9123e1eb09da312bc44041d13262e26cefb807dcd1b354c5bd12c0d7197f1d3d457ddef89714b77ffe45db9c717332963c6daa507ae02a6d5fc941

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\FEB2010_XACT_x86.inf

MD5 82c10b720e33be099f69e4010d44ecd2
SHA1 e95a2eb23db3fd610d71089500aad523f93c9469
SHA256 e850fdb84bcac0f667927e53fee943efd3f43be6c6a0ae1e17f3fff83ddb2635
SHA512 853261c439b26cdc8991ac289b9f9925976452ed613481b0cf09e75444882805ffa15633eba441d8e1a04641f5f6378b68e2270a6a48d3911d7f9c2c0b1235bd

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\FEB2010_XACT_x64.inf

MD5 45f4f5d8439b3a33df8f1d9f39a162c6
SHA1 e09440edc243b072aa589ed139ab9fdeff3193d2
SHA256 c7efd1ec4e4d31644a5054d32cc1e6795464472c05439573ae93e1727a5eea4a
SHA512 f8b7ab66b7fd182efddc2a851c6468a311705267afd5fb81554713b338f24642c5e7b5d5000b85e417154c4285457f9fdcdcf9f42c155c801f7a295e6ae3ea34

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\FEB2010_XAudio_x86.inf

MD5 e6e942a2cfbb587bfcc4203b5bb34fd4
SHA1 2e0172ea1936911a98e11a6e98990703e24172c0
SHA256 74c827ef94881099761e04397ef8f162fd0ccaf4876a5503c4b53a5216d2acca
SHA512 3d70d76e6f459819a1703c5019a2e10fe518ee6e8eb5d3313fe57d3d1b6313b52c4904398a26841c78a9ecf9d715e1201e834ab3df47265e070ec94417a78e4d

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\FEB2010_XAudio_x64.inf

MD5 1c4dc3c97e96135a784867d68d193bef
SHA1 5019f79ea9b624999fe58420daac619c5695994c
SHA256 da63330fd2a1538b714ee6cf2e09256446a04a55f866b3f70237d8a7165cb3e3
SHA512 d529d68ccdacd41a7bb688bf226a23f4d08639213d96e3e428c16176681c5f7d45ca8527291322b2a6d4dd14fea1cab3cf183006bca3b5a45fbf2e05c2ee1437

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\JUN2010_d3dx9_43_x86.inf

MD5 a11deb327119b65bacce49735edc4605
SHA1 0be2d7fa6254b138aa53d9146cda8fedbba93764
SHA256 6b33d32da02f664092d44b05237990f825b4062c105a063badcf978648b5e95b
SHA512 b0134a3d6f2d576e5fafb601014ab66fef91d661013acc8a7a9129940369a1d9ed5c0f228bb1666a4e891f09b4b18e83f0cb2080047aa84fa45ab663e5739a31

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\JUN2010_d3dx9_43_x64.inf

MD5 ce097963fc345e9baa1c3b42f4bfa449
SHA1 e7624afc3a7718b02533b44edfe4f90d1afda62a
SHA256 272650a2d9b1cfea17021f4bf941b21f2206791e279070d4e906ce0ce56ac16f
SHA512 f3c4f00eebd9d465bc2415d59c417bca0f5a07c8e13880b28704f770763609a653d4b06f53d98325b66c2c7094895190900c47980f81463215e919f00966ee7b

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\JUN2010_d3dx10_43_x86.inf

MD5 53a24faee760e18821ef0960c767ab04
SHA1 4548db4234dbacbfb726784b907d08d953496ff9
SHA256 4d4263cbb11858c727824c4a071f992909675719be3076b4a47852bf6affd862
SHA512 8371471624f54db0aca3ea051235937fc28575c0f533b89f7d2204c776814d4cd09ee1a37b41163239885e878fb193133ad397fe3c18232ad3469626af2d2ed1

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\JUN2010_d3dx10_43_x64.inf

MD5 13c1907a2cd55e31b7d8fb03f48027ec
SHA1 ca37872b9372543f1dbe09b8aa4e0e211a8e2303
SHA256 a65f370a741d62c2be0ca588758d089dd976092cb910bb6b1b7d008741e18377
SHA512 545aaf268d141e2aae6800e095a1ae4eafe6bfe492d95dfe03789ccb245cc3ef3f50f43b10a41a3b0efdc7f8c63621b437323e133ba881f90a3b940095b80208

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\JUN2010_d3dx11_43_x86.inf

MD5 fb5d27c88b52dcbdbc226f66f0537573
SHA1 2cbf1012fbdcbbd17643f7466f986ecd3ce2688a
SHA256 3925c924eb4ec4f5a643b2d14d2eda603341fbbd22118cdd8ae04aaa96f443c0
SHA512 8aa2200f91eca91d7ee3221bc7c8f2a9c8d913a5d633aa00835d5fb243d9cb8afa60fe34a4c3daa0731a21914bc52266d05d6b80bfc30b2a255d7acdf0d18eb5

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\JUN2010_d3dx11_43_x64.inf

MD5 590fe1ea1837b4bfb80dc8cb09e7815f
SHA1 792b5b0521c34c6b723a379dd6b3acf82f8afb1f
SHA256 2c4cf75b76203cba6378693668c8c00b564871c8bfd7fbda01e1e841477b2a3b
SHA512 80bee8f1ad5bfaba6b3ac5a39302a1427dbaa5919d76c89b279dc753170ec443924eadf454746ce331a6682ee729ab79bd390a5d3b55db8d08fd6f4869101f53

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\JUN2010_d3dcsx_43_x86.inf

MD5 cf70b3dd13a8c636db00bd4332996d1a
SHA1 48dd8fc6fa3dae23cb6ca8113bc7ad837b4570d7
SHA256 d5200b332caf4fff25eb3d224527a3944878c5c3849512779a2afcfeae4c3ca1
SHA512 ae31a9e20743a2052deec5d696a555460a03d400720679ed103759241b25d55e2fbc247170da3c0c0891f32b131ab6a6845de56c2d3387ad233aa11db970b313

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\JUN2010_d3dcsx_43_x64.inf

MD5 e1f150f570b3fc5208f3020c815474c8
SHA1 7c75fc0cf3e3c4fd5045a94b624171d4e0d3b25c
SHA256 5289b5ad22146d7cc0c35cdb2c9662742693550de8f013d1ec40e944288d155a
SHA512 a53618ed6ebcd50ef074b320eb3ebd38af4770a82caa808e47cba6a81982ced46cf954a1c5a383f171006e727d8211b4fce54c9faf27b4c14a770a45a09037b8

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\JUN2010_D3DCompiler_43_x86.inf

MD5 1a86443fc4e07e0945904da7efe2149d
SHA1 37a6627dbf3b43aca104eb55f9f37e14947838ce
SHA256 5dd568919e1b3cbcb23ab21d0f2d6c1a065070848aba5d2a896da39e55c6cbbf
SHA512 c9faa6bb9485b1a0f8356df42c1efe1711a77efa566eee3eb0c8031ece10ffa045d35adb63e5e8b2f79f26bf3596c54c0bd23fea1642faae11baf2e97b73cf5e

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\JUN2010_D3DCompiler_43_x64.inf

MD5 6494a3b568760c8248b42d2b6e4df657
SHA1 700f27ee4c74e9b9914f80b067079e09ec7c6a7f
SHA256 3e779533a273e3395109c7efac13ba1c804c01b3ddb16938406fbdf90d851216
SHA512 2bf68b123d7823ad7182e132d9e55f8de7580229e8e1b3b40030da50bb9bdeaf67bb9727ce2171fa83b7f804c24d9728ffabb44cb5017b16b771bb19e62b1b42

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\JUN2010_XACT_x86.inf

MD5 dbef26a0b937dc1859e9582aa88bf928
SHA1 25f85650c6f62e59c11f7234be22d34e890793b3
SHA256 ca604ce9d2ee43a09b39b23a6a2a048b1a79d85c7d78679cc73aacc75cf7a62e
SHA512 4259193cd51168020b3b02ffaae89d7b4a972273b227cc3116c8cac3874b7c329e66c989ad200f93b05d1e4f90657b5391f37d6d128108db66ad7d6a758aa34c

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\JUN2010_XACT_x64.inf

MD5 dc506eaa8bdc02b0918e8ce956b505ce
SHA1 9bfa75f2b2d7ba26a778623c8505e10428a1f6cc
SHA256 f3c288d84db29f7bc4d2c771341f765b5e1940a4827fcb55a65b48eec83c71d3
SHA512 9938b821370919a25e801cc19841e951ef4523fa62eeccade6825e74c43319e9bad2f76e5971ce5d26ec2fe55258f7c9390626bc3b934c84b70f7a2870976b89

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\JUN2010_XAudio_x86.inf

MD5 31d8732ac2f0a5c053b279adc025619f
SHA1 c8d6d2e88b13581b6638002e6f7f0c3a165fff3c
SHA256 d786d06a709d5dc26067132b9735fc317763fcf8064442d6f77f65012ba179da
SHA512 abc37922307f081a1ffdc956ce59598c19ad1939ecfb6ea3280aa6aa7a99c3eba5462731586ca262f7d7257d7d2a74ff57a45abf6b93521eb6f1c9f22f8eb244

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\JUN2010_XAudio_x64.inf

MD5 dd987135dcbe7f21c973077787b1f4f8
SHA1 ed8c2426c46c4516e37b5f9aac30549916360f7e
SHA256 1a0f1b929724f8b71d5ce922f19b9d539d2d804c89af947d5927b049ef0fd3d8
SHA512 f0469c94219b4df99d7b9b693161a736fa8eec88a3f6c7f2cf92fab2ade048dfe61fcde3a4cf4f7a2aaf841d079a46b17259dea22cfb02831983f55bd7f61899

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\dxupdate.dll

MD5 7ed554b08e5b69578f9de012822c39c9
SHA1 036d04513e134786b4758def5aff83d19bf50c6e
SHA256 fb4f297e295c802b1377c6684734b7249d55743dfb7c14807bef59a1b5db63a2
SHA512 7af5f9c4a3ad5c120bcdd681b958808ada4d885d21aeb4a009a36a674ad3ece9b51837212a982db6142a6b5580e5b68d46971b802456701391ce40785ae6ebd9

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx9_24.dll

MD5 bc831661963763ac4d504c5cabb1fdd9
SHA1 51b323ea377f9dcd52946f5fe77ceb5673d1592c
SHA256 94ec67763f67932dd4273ef5cc12889a5cef090ffea3ee78a80c7b530272b1b5
SHA512 fe97241d5d9ce298f62ae3295eb9f4091430c8c2c53e967b76e0aed76c3579f8bb07338a0de48e4547c63ab381b3b3d0989a183447b8e47496f35493541295e3

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx9_25.dll

MD5 5b48fe9d6686f0d54b26a005ace24d1d
SHA1 1c395f6d2aa729a607e69dca73f8205cefd26aa4
SHA256 4c54df27ce84d21b2924e64ff79b13e7876ce85d8e0c9c1d0abd8da73888187a
SHA512 6a4fa549578097ba36495ec210365c27d165065820f0fdad20864a3139949e72da00f9b7c614d07d8950307e596b693ed7a291a5c69cc0f9ba30c5f74d6332f1

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx9_26.dll

MD5 523ab607eef81cc4d909e7febd8a788e
SHA1 2fbf1444daab3312da6b34509763656a28252134
SHA256 8ea96fe01c3c86a36fcb3795ae03eb12034003e335ef475571efaeda17c5bc78
SHA512 791f520533f58cbccded4e7c1f64fc14d20942efe57f32a5ee75eca4107543718eb35ecaf52e6eb3d9112867141271b8c097766fcc3562f016bb612bf840528a

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx9_27.dll

MD5 852edc778a7a50077694f84d8e601234
SHA1 14705b638e1af81ddda5dc52f68c61ebfce5e9e3
SHA256 a70d571cd675c97c9eeb4a234dba1d667ffb54ec3bb14defb36b3e2f605ae257
SHA512 51c4031d98bfe3251a81ea9f4434ce38f077645a40d0ca413e31b6951c384a1635cb040c24ccf1baeef3d5a47d0d18d8b47fef3bcb28570d6e936fcea6f912c2

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx9_28.dll

MD5 be19b603dfbaa829ee5b7749b3ba97db
SHA1 3d42825b3e7fe5744f67ef145ed47bb524496305
SHA256 f3e391b5f1c1f9637cabf2b812b6f5d65e4776c89d779f506f6b643cc563176d
SHA512 095e8357911c1a06000f5df291bc3cbd80aa3a9672f485fd1f2b9bdb1172d1c7235449485948bee26fcec630d6b80fc927454f9b32cb31c823494c780e0e3df6

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx9_29.dll

MD5 99f4fc172a5ace36cf00aa7038d23f2c
SHA1 893e05e369c2388daec359ec550fee5b9122ed40
SHA256 c5e21c18f8c79bc517da59e3192c39ea73bdcaf85867628187f6b3cca07dd21f
SHA512 a4b86d84f99c3d0c0825e3581878aaa25207765bcfbf31cb07cd6bf69a9cbbe1c3068719b212e38f741e06a89b9bc6d217077a0dec7f9efb1be75fc3c214dd52

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\xactengine2_0.dll

MD5 2112fe0c46662d429347a7d7b49e3ece
SHA1 8cf607547e9c5a10f129a3a8f8f32bd295c0d5b4
SHA256 cfd1c2d34feb7d94f282e97bf762a99bfa7309dc7353d96dfe4aadc187d26c67
SHA512 77f77add8411d418798d643d783752896d3fcac002f15696caeaf45b5396d2d42fe53bfb409d66ad505cdaac0ef0a20a62aa45b50aebe65237d2c44af36bbc34

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\x3daudio1_0.dll

MD5 4e961525cc7ff0e5d7da19e170b7c14c
SHA1 7e3654ef7f7c9524ff415582f1b066f29b4234c4
SHA256 228dfece2b4555a243a73e7bf461036f1e53951977625651ff5a59deaeaf4b88
SHA512 8785d0b2188f36d53c1a2b99a669d6edff1c0c27905d5bda1615a503f115d5b0762f008481145cb0cb6a2589926543b9c8ed0ecc2e328593682e39b90fca2087

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx9_30.dll

MD5 e415862612e65f10d7d888443ecd7594
SHA1 aa8440ec3b5bac6594fd58d97c10c2ab7d419b2d
SHA256 5edeed79f2359527a55b8189cfa8b9b121cd608d44eead905a0f3436938ad532
SHA512 f5de2f9e045c3d579d98b25fbbb7b90aa9ddcada0c6bc4e103e5257394f3cbb7c968d89db61e15b10605561cefdd63456912aa428af5a62cb769ac8c4e5eecba

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\microsoft.directx.direct3dx.dll

MD5 a73e7421449cca62b0561bad4c8ef23d
SHA1 cf51ca7d28fcdc79c215450fb759ffe9101b6cfe
SHA256 7986e3fbe05418fe5d8425f2f1b76b7a7b09952f3ec560b286dd744bf7178059
SHA512 63d24647ac5d0beb8f1284973927263cb6e05b4c399cda3912178114b42d541dd516c6d67a453ea997d9d0cd9126a1802678062f0951c2547e1b445ba50dfbe4

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 1b2b1bf6f67f6dae67a613e796525ff6
SHA1 deb92cd69c9551ac50f31f56667052ed56abfbca
SHA256 aabac6c591513905af3efc673324552e36aaba66755dfff05e0122c2b1fb613e
SHA512 7106d360672a80a98a969f001d5f4aa7b8e0c942556a759ed4841fa27c8f2a1df684d7be054f1d61d72b5baf116cde53a5698da25bbf433772419b08a87dfd16

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 5e2b8b8a5ed016468716b9ff82a1806f
SHA1 f1772121149d87745738cd471d0e504301a9ad0d
SHA256 5b70f0ac40a38c903062a12ff7cd71d907e75238a044ded9b34fb51e9a9a2799
SHA512 4620c9bafb7dfaa8d4351d0d99ae3442ceb2220201f16bd9bab4fbeb1f411fd63d4f0e79abf6e762f4d0e62d42608fbeebd13943ce338eca59ad1080ea6c2728

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\microsoft.directx.direct3dx.xml

MD5 d2ecbcc04f7e087d738df9329d47c30f
SHA1 0f2d7c485020928227b668a148b0a60d99bd6695
SHA256 7b38e6dd8c567d17d94f595c33fb234284abe884a1148025f59c8e426ec30c03
SHA512 5662bbb30d7a601efac49f0e090cf05112565ac40dd998787e40d4ee6988f985ad8513b0d5f80e17f8ec9e7784af1c50a70137c0ec22b0c72107b601503bcbeb

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 e99424055596efcdeb275da06fe03d06
SHA1 5ce9236acb25aac411623290f9b35774d2141794
SHA256 8d2e2a6283d5e565b0bef530093c091f8adaaa952bf2d1c83e1e3d2d80b9383c
SHA512 1208283bb7fa20d66d48ced037ee063b3bbf44c760679b7dc03f356160f0aea4dabe289d6239998fe1229150a670a7db38853a080da3e1aab6658e11d5630c03

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 d3f1922325be8e7e1c72bfd8179454ce
SHA1 89134f43ce2af4adfbc4087392aee6fe56be7ff4
SHA256 8418941d8f1d4c84288e0bf54392378dd3d87b602bb693ff4f8a633022681c12
SHA512 d33f513ff6c199acabe86eca6dc06d56c330ccb78be4d13fb6b1906a3cba3c93afe982b05cb057f2b88f6e6637452f4d99d4a4fe6f3f7c473de9e67a40758bed

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\mdx_1.0.2904.0_x86.inf

MD5 81700fd8d24ccd5ed83ce202dadcc625
SHA1 380473dc3560cc64fd0beca96674554d87085c28
SHA256 3bd14cf2a96544ece692e1911500f7196370a111017fb6b0e23db0f0d0f40dfa
SHA512 8ee1bd03fcd6125d22d1d35437537f594a84e67573ac72d440d45d419b88f5d3d1f5fcd8804e1a0b873714c1a71c63a488b8068f0c465e94940ea6e2db1c7860

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\microsoft.directx.direct3dx.xml

MD5 1c124cc5c3be4a5e8d6619125b1b33eb
SHA1 455365d2ff521d135b75522a4ce6382aa73b7c30
SHA256 c3cc575c93690ddf44fd71fdeaff3d61552e9d4eafbef77840e4208522d81fb7
SHA512 1e9fde35b9c4d4a123a92545f5b15b12657d4652328e8d249ca31338f80b10a9b70811a16c40e82f286ce1b192bc545d29605c2ded4b937cf69088d9aa9943dd

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 b7edf6f818515bcff610755fb30d3ce8
SHA1 27661dc1ca7827f59c1d4a3cab2bd8312b80cd36
SHA256 9bb111a362377fc78b7a13af36c6eb6fe7bc89827384c35d5fcfe312cfcc136b
SHA512 acccb334a34fd395626b2d3043ddf03da05ffda4aa74fa182a65374a5d07a3c83c9a617ac0ad15181d39e4b2ec37aa07cc53a6b6e348299ee89afd6cfd53086c

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 823eed4950aecb8c6b2cadc04346d8b3
SHA1 3f7353a798a411eb8cb3381bf292a2690fd176ac
SHA256 50dcd783972fbfd6a4e8901cb003beb2ba2698e295ae68be4b4e59925a2e095d
SHA512 537ce7e0589c308eca328d43b47b62ba223c3ea79185be475d65f0e8c8e7cba6e9feb0d7b6005747390a13a16765f800d5d054c8d0f8952513d6c8ad85ecf3f7

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 ccd53738df4fa27849b6bb05dd67d10d
SHA1 28126653a3d1b4574fcb0c09176f5fa0ff28ef78
SHA256 c29d337bf7639fbf424b34cc0409d2715762e1b4d82881fb524a2508381c9f62
SHA512 aa3a10504fbe49a4c44151beec7d9b543f4b89a51621fa60810f385bdc8a6821e4bfc37cd46f3688013f6f4facd33ab45bd0deb4a1fe16453e1be8f11f2119c3

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 afcf5f50c632f3a5598abc28f196d77c
SHA1 294385693592f9d6320f8b0b18f45bc194d01a4d
SHA256 5e90089e69e4f7e2e42ea4a81fb62005c3710d0a4acdf207b97ed03f5641d013
SHA512 29746ffc665051e13386e452c3e41a593b6339e09a228927929be100cddb3e0e0fd3b54abe02eb7d46a3d97466ecb02bac362398b72fd8e804cbb21c8bc856d9

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 b27a9fcbbb9533d3ba917868cda73754
SHA1 c476ebdbed055515abd466b45dcfa7d00398c313
SHA256 272d81663fe2f2630ca29d9e5034e6f0395e7e79e0c59c51b8cbb97b366e023d
SHA512 8aa5977fe3801c2f47ed575f07a5b713dd850cfdf088eded960463445fd4426421dd119a072d63185bad13c3f5f04a926c07339931fc07a63252e4cd1e5e5d7b

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 a5c86181941ff78a08ec4f59a479498f
SHA1 7d52be9150f9314f9fe9d19c07cb59766d3b62ed
SHA256 12f81921b467fceb69045804b92d368005d8be7270e2b2584384ee6aae26655b
SHA512 9e5e7ad65e3f739a72d7c1e14e06abded6e65f70a158e57c06dc80405ddfc93c2fc99cd3cee3b5004f37599d2aa80c5e010f93879e9ad0d2abc4f19f82257905

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 57e483c68fcb56997674164eff76397d
SHA1 def70ac15b5d369c4c60b1abd1f41aa29c302f2e
SHA256 4e2cd09f8a84c2626c8ca63546667acd6d9962b9ac8b45a64c6847c49aa53956
SHA512 0ca80d1ad85b914ff1323caa1b2cb99521a5963c087ad98966900c8a01df76e133e26df98cd6d62f972fd477b42ad9cec870a665219288be944165ad9f359a39

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 933085360527de1b4947289ca468184e
SHA1 d5ee5e1e3c992c7518b5ce510c627c1564131b12
SHA256 78d85f0e2cb7d7bde534222f4ebfea1c9e06d37ecd3bb7ebd59e35f00b94b11d
SHA512 2e22398d7cdcd6a46daf3dd3478d861bc4012ba1b54862311ae031ebcd3f908352157cbeea528f22ef1824f8924c3f217311feaf1804cf675eafc07a8d3962eb

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\microsoft.directx.audiovideoplayback.dll

MD5 75933586afd94ea24c5acd3dbc89a272
SHA1 970fd4b49d1368330c10279798991b901a233c2a
SHA256 406f473429573e9f0084aae125ef8f19f59291aa4c33cf7d40e7d996995a3238
SHA512 c096f0f11fb306c6a84886826306fe9c2862c3c79b14a8991a174224b41c2a68b76e5be506494d23d354384c715c5d82a1cacffff9644de9d6b93e9478087a1d

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 84bcc60995470c903f36c60fef593949
SHA1 4de26ddb71e3d4234f98c3823e98f0b7c5029942
SHA256 5b55cedca0d9b3798efc72f8419192118e5001fced44c17a87d6612ea2ebb97c
SHA512 b90d0aac844f43d9a5bdd87c0abdea4b69d85d9fe6fa5851e7fe8ad4f1d0b7cc36874553cd8f730d572a86da97ab08b40d4bcdf2e29ce90434d99c3c8164b3e9

C:\Windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 dd927a258bf721f7517dd5cc9890ea22
SHA1 7922392c6b0c8e1197cb18f2c87ad5806522a7f2
SHA256 7507adf24f441b9d77cfe6219ec8f856297dd01a0ac27de6b855bd01d303df5f
SHA512 ab27ff3a053812bdc1756e6f287339339403e168dd77182cd34a5aea826ecee63493102ce2d6e917da2b00b6d5fdcd469eea715f92bdfa9b9e746c5b939ce051

C:\Windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll

MD5 46f26e2bafd44960e7f13b2ef80aa0bc
SHA1 2277bc8980e0f6c3672c2348b0494f0cc0ad611a
SHA256 489f65e1e00534835486e9255eec92b83edae4dade6dff867a380859ae53006a
SHA512 5b5147940803bccd0184b46e60560f967831541e707b5ef19781103e31235f1ba05d00e44a6f2ed061ebf5dd7013d9c696131a3edaa77d3aabb85b3255ba5489

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\xactengine2_1.dll

MD5 7c9952111f4c743b9f0d8b68b6ed93c9
SHA1 75dc863ed10e4e4a18fa06dc32789cf16c738c38
SHA256 666cef7d27a38f709063c9c581fd95e6b3fa27167bff4beff484dba2dc922a2b
SHA512 aaa3396fa9081f25b2eff6682ea26afbd297c8a61cee4540f9a947c1a96ad51f114a9985bbc69ea7d0251f6e4b1e835c92daf0f8c5fd66e477e3243ced3c9bef

C:\Windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 65979e8531c9719b87a6c7b60ed5c023
SHA1 ba430f09e8ac2e9e52a013a609791aeeade02fd2
SHA256 149dc668acfe9819938c7cb3489aadf72d9adee54ddce95e3b8fd32135862ddb
SHA512 d90ed00af7058ee19894548a81f9f20b9e5950f95601c54fa622a2666e8cb664ee5155b3729e9e81f9a098820be2f317325c5d35b4acc2033476faa133c5860c

C:\Windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll

MD5 d035348ec8968861af585b7132fe4c7b
SHA1 877ffdf77b9cdc1be14135cff0b756a231401617
SHA256 2e28c8fb8b87b5ffd1e0ea27710a2e785ef4741a89e4b3c3af726ec63d15a1fa
SHA512 94358b581510c68049ac92990674a6cb495cb8ff005f7fc03696c57ba8b4cb384c5035d9332d0ea39093ba5fa5c8082143896cd2fc7ac24a192520789c707458

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\xinput1_1.dll

MD5 f1726346e583442541fe73429f8e9c10
SHA1 a1b7a4edd7d1164197f734218fb485165c075d0a
SHA256 69cd725c53e0302e75db20e9a3e4b33f58dceaa2e6ea4938b2733df8bc289a71
SHA512 ba17740271ea92c917db85c64d4ef63a8f2036fb1398abdcbedf9d49c09a53e34ea04e8b3f5a2ee41c2b2ecea6196ed7f9866ee48a9f3528c3b4c1f19dc167d8

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

MD5 fd1b55b856bcad2230f4338f72f9cf9f
SHA1 3d1bcaae1f2f2a759486bbf4dd543eadc7efbe91
SHA256 300ed1a4ef37c8d5f13d67a5daabd46bcdd9ad9da4fe6283f20d7d38f72caaf5
SHA512 dc73dab5f5384a01bf66197ebc9b74a24c146e8f17571c98edf1d7d1dbc33b0f4075d46150b782891397d8a4875a8cf375a111855eb689f2a8e6ed0aa3ee0091

C:\Windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 2f06697a759ed7ab4f39c0748bb78447
SHA1 9b1a73777cdab6aac7118616e81a0604e2fb0047
SHA256 980e0db55a47d721db96226e1452ecf845fc1c4176840e1e20b77eeb426f4251
SHA512 d1aee2d44a937a47be683fa12d8c331dede7c6f1bf05a8367e88b1707bc6f712194e4c38ec0e266402fd4c3a53241c376abfa6f1dd3b7ea188a5766f8a4aa0d3

C:\Windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll

MD5 cebd995ddeab2c525a5c4e95789bc961
SHA1 1c98da39d7eea36d73b361ddb24054038c2b8331
SHA256 0ee2a2c371a918cabc85143202864d0c3a4abf1b93a5029081a622e0acf17ab7
SHA512 158b3fe6e6605eb56a99b2135df529226f9af4b001ed0c2e1fd201a60054e2201dc22245ee5a02c6e7778337f1974ee21fa088e94b13a7402e61f64658de49a1

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\xactengine2_2.dll

MD5 5c4d3843b491c047b7a619901fbd2ec1
SHA1 e02dd40f54e7dde0bcbd648e4fc6f723ac438bee
SHA256 4f996edb65022e33ae9c9f7acf7232c8d444f75c50c72894f6d3173b55404ebe
SHA512 474105b213bc067e0822ee22c769f0caa7a02f2d74a0422b676675fc45482db3a8a3dcb2744339a4c7fa029a2f58a2aef5db500c65cf646106d8ed096b17d062

C:\Windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 1da42980698aa6f384658eb204e65a02
SHA1 2d6aa81437f91b1fa984d36991b7df75d1b88418
SHA256 586052b34a7d1eb295eaa951d14cba713e4615e25d52d71bb7246a18b5ad996d
SHA512 a2247408a3afe9cf59ee113bd699f79b20d2e3c0d2b47e8807e07fe17a20c41a9dae085713202d47263b602811899870c29027629e2745dfe4143baa57f6e49c

C:\Windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll

MD5 d9824a9dd107e598575112b4ff897292
SHA1 adcc54d159f1eeead01dbd2fbc73c808ce519920
SHA256 ff4c03bbeb292317a77c86c1c81ae9564acb984b352fbef36d66e2d8bcbd79a8
SHA512 caa1f0411e0470a315ee8c7a62defa972ff17557bcfcf74016c64ad11b0f6fa46a126131a18e275e59e025814545e1d7ffe145377f6a0bcdb8cc93471e4c9bd4

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 25573f649fa2150288ece51b87f57d9f
SHA1 3bdd2014221c4338f110fe104e66ff41be77bf99
SHA256 617f9b1edc55438a2f74ad4d33a3b2c4897f0208e74ddc8c15cd1d2faf2e07ba
SHA512 4ee961e4d3308cc3c74a3b1bf33a52748b251f4aa74ffd2ab7eb4abfa9ab924405dc5211ce509f0e50e95fa832c1bdf6219fb11d04935cd85786e8821b9e31d9

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 25c76c1e29d3e8e7398f0901f558a629
SHA1 2e907c9688a025538f1b2d0cf1860a2ae49fd2e9
SHA256 2ee41d4d591a39d648e90db4d47d0fa0557fd68197756ee2ee94fcde4d820cfa
SHA512 7308fd91859d00debf446bd6b594f3ea196dbe46a3583858c76d2cbb008a8698207f1ce7746afe3de4efb9a27980f5f813c77cc88e273fa82b2695d8f3d15039

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll

MD5 7ad4d9fabd109432eed91b359ceae430
SHA1 c1dcddd86f9fc630cc0231acd7b732fd55dc5f63
SHA256 f3359d5e41b1d4fec7230579a593e40fe44f6afdfacd1e2bbe52ee06d84686fb
SHA512 bfeaba581a7aeff86bac0c184da823e4a26516a3c4f39af6b6b1bfced73117f3816c567b182f4da0df1935a6e97b6d0520cf02f518736b52fd27d37750e863fb

C:\Windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\__AssemblyInfo__.ini

MD5 50f8cc6e04835d8759f42d2b85fce650
SHA1 175ac01547f8e9dc5533138b45b4a97be2e33c75
SHA256 e71a3412b96819cb9634e1ffff6690da3675689f6f356190117725e9035acece
SHA512 6a18510394e1babdcf2dec4473839a0e4ead2a83f559e83f4d464ef94a07f684da81b14f5f7a0880da958d2bf724fd70a485254efeb1fe98cb09e21a37f5949c

C:\Windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll

MD5 c0843f0f45edeef233b1e581ae75e3bb
SHA1 04569c78868eaa8927ba64f93312720117152843
SHA256 8c9685959706750091b0094522cec8644de1d1c6309e7a2fe02cef130d3a2b9c
SHA512 8fc293f5c5de65893d92c54f921c84f8a3f44fc733445dda7907ee09d062371ef05c11d014ba2017fd15908b911d0185a14b89d0a311a870fa33650c3176e442

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\microsoft.directx.dll

MD5 0c453970e89db1c1eb9de087e6eab5ba
SHA1 c4c7e034773a240909332814f499730575a1cd71
SHA256 942e98f142373547493f13b14e1603b2420851aff013d3085bada7b6b2214d9c
SHA512 ef3b2cc2598b4ea58f00f93155319674450c8c35b706108ce3bbb5c2502efa179046d9d50e12725e6dc7a555f4880404ed03de15a0753606f20a1654799886fb

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 490807c150b7d8be44bde871f4df8c56
SHA1 69b68a5b8cc3f3e75aa2ba284654ca58bb62f23e
SHA256 36a21fc4f4c8f6ba4ad900613ee1b08ff43f2545585a2601c9fc4cf083d68a77
SHA512 9442e26de55009428cc6e747637c2cb64bd2f008541ccbb37fed4e83ff66845c7cf3874d93542e0ba544e2db61f4864b665b7720568eba284beb095489f3ca64

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 43c280c3b15ceb2472ab560d09629664
SHA1 e3a897d7608d03c93b5c2b8aef52703452cf6696
SHA256 bebbc40ca25ef22e9d16b0de1123e0cb0444fe7a78b4f0b4395bdfd81618698c
SHA512 5229eef9153b992684b6dcb4a32b231c63322b5e4b49ef262228c0dcca4760f97cda5d15a7fcdf77d813eb24b359101e716f72988374106ace13473f27e731c5

C:\Windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll

MD5 fb3bc0754921873a65f5fbdca845e6ee
SHA1 67cde5bc8577cd3040e275d290ac021874da9fe8
SHA256 f500c350dd71df7452b92444e19b4644b04283434a6557123f1e4d9fb078c3f8
SHA512 292b8bda44e6ff6449c4b38da9b8317491c0f0da3d1e5f7947741de27cc51bbc078fbf947c89c4be3a0b54f7066f0480990d1de57919edba3414aace77c47635

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\xinput1_2.dll

MD5 33b62be226934e1b01f5043870c70427
SHA1 ad96f837accd277da2933d07aa86ffe3ef803b5c
SHA256 9714d146a785d458f0de8fef387d82c9f8e101c02407a0cbeb06f02a69518eec
SHA512 41f859fa59145ef6cdd6cfc4a14f90bb932d2c6aa339bda1763d8e315e6a78bde561010152460e6f996c9ac9ffe6650ccdf6ded34656081a0ed9ab1270773710

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\xactengine2_3.dll

MD5 69d841744b2bae38fbb2d40a230a549c
SHA1 2a6429b1b1758bffe3366ab72212fb9b02152d77
SHA256 ca20cf8e4034719a46bf67c6009486c2c1cfc2da10ffed3a67dcae677b4f6793
SHA512 d5e26da74fc84da90b0f60451479524f1d03946076d009328aa7f9939456762633006d11970dc4c849101728ca32350c125005eb4e3f75114d4528cb17a35b44

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx9_31.dll

MD5 797e24743937d67d69f28f2cf5052ee8
SHA1 7d39afbf94675487a9ff7e41d2dbb8daedf7ad00
SHA256 e2065619fe6eb0034833b1dc0369deb4a6edc3110e38a1132eeafcf430c578a5
SHA512 8804d0d95688a932c7bf7e1a023179de8df3a5436e356b36d803cb9781f3a378adb9fe69d03b28362755b808cbeb2cc718ab920672270de0b954996996328f5e

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\xactengine2_4.dll

MD5 6550e1a0a7be611592c31222fcb981fb
SHA1 2197a951ecac85f7144fb925f6daff9ae7811e5e
SHA256 1e0e09fc077bdeee3de065c663b83f6717d39d56778833f030955077d490d000
SHA512 4013fba5e4211e66ebd9f733ff35635cca82875d6af71dcfeb481a436efeab608fe41310bae63d55c7fdd64a5c5f64068ec1eeb997160c8ae27f21f28e2bade9

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\x3daudio1_1.dll

MD5 121b131eaa369d8f58dacc5c39a77d80
SHA1 d8fe20cb6f28bc5334ae64a8df3563d1985beb9b
SHA256 ff15f14174a5543f028fa49cca745582fe4cacf3bbe490749cf43444690ab359
SHA512 ffe19ffea137603e5401f133d461b30af6fc25b3affb8a8ce20b98e3270de398b9ecc83a6cd904ff42c5885d3806c7e175957bf4a5827dc2f067756a51bc40db

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx9_32.dll

MD5 26af232140c88b42d92a88f2198edf6a
SHA1 b62aed3f71d8963227e5021c2222192873ce753b
SHA256 e96693794daa05a75a83c11df2e7b42f2de61567c6ad0b69e353b50f6c88119f
SHA512 54a6a235af4dc3f3c693fba5ac2d487d96c9d7a2bb7deeab35d5a252e723e597226ec84e953625c8808546f91fbcfc42add85076846a63925fd9eabc09dbf935

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx10.dll

MD5 6f34f7405807dcbf0b9bf6811c94c6d9
SHA1 2de04a49825acf76a6a7aa02108337142d30b6ff
SHA256 fd2caa28493ea76021b93641958238b7a933f4f6db1a2070be03cc81d87d8307
SHA512 df623daace6702d25365697b62a4ab7d03d944306521022c6e65e94cf1970b5057da811f10e675c952d93a37abd1b862b8ce8648429780aeb99a4d55fda6aaad

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\xactengine2_5.dll

MD5 86c93789e9006f1ac47ed9dd47d4c8a1
SHA1 e9de46eb68271018aa31c71ef89d1ddef19edf7b
SHA256 ec68b5163cbb5f15e2fbe37fdf5fcb0d01dffbe53a460cb2cf668f31f0127ad5
SHA512 5a86661171f039946fa0568c6a9c655026c0a74c04a7789fadcb4acfd6a4faa5179d14149321920ceca9a1214910abec3e67e356898d5bdd044ffeefaeb57df3

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

MD5 bce73adcf5fcfac42ce15c6691275ea8
SHA1 484355fcbc55357c2f576fbdd64d33c8ec8ffa5b
SHA256 76eed293cdcdf17942acc313366b22b55ad78ee0389989438e63ab7ae145167d
SHA512 5e53f89142918eca969e005d006f0a106862877ee6e5d317ffa1b7c017730fd1d3d98e5e75f603183d0371da39c11022cf62232a2b614a9bc5e055f52d6da65e

C:\Windows\DirectX.log

MD5 b3b06b3b49688fdd16e49e5c87eb661a
SHA1 2190d49960aeb15820c4698ca5604f444961cfa9
SHA256 2fda6bc9c643efad451876aebb746b11cd1c2a6ce7dd11e54ef1b1aa10604e1c
SHA512 7545fa66aa74ee714c13abad854eabe53d5ced66319166f7cc8de2d3de308f8c03bad46a7eb57e1e447f7803a2530b8d74284f1f97614d50957d1ecff021044e

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\xactengine2_6.dll

MD5 39000e033d39d19ccce21aeafcce2476
SHA1 6e7823e689a9b720a049a260380805a235ddbf75
SHA256 be45aef0889b03e2243282a912f41580e8566db666a782c26a1d4d7988799d03
SHA512 65047afe28308ce69e3b410b3b52b5fa4f615c95802019cb9b78ac69694e9987076af4bddb2ed7e47b0fbe73729c91b94c525e5b7644a42658663ed044b384e6

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx9_33.dll

MD5 cdb1cd22baff21f48606b3c1a18b000b
SHA1 9315b5db975a34dbebdb4dcae652ba1db01c482c
SHA256 c6b7b2ad7742dde5dd8d1a35fdc1c185e586e551ad9c74d3fb21759cd8ca4da8
SHA512 c5fb24de8f1ee6fc1ed6e74580b5d22599ea4eb6c3589645fff0b15dc8dca051c4917e60fbc00ca86542dd63a8f5e40da92ea77e24826c0c6bdba9b58c36d4db

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx10_33.dll

MD5 37a8171accf46a9c196054066c28827f
SHA1 886264510372602c2ee0193c5a185d719a61316a
SHA256 b04e2b089656eae01a0071359f9d7fb040dea804c1b9d2379431864174259c2d
SHA512 713b843a35dcfc32caa67c52ce0a32af6f54dfc4c11615d32613017aeeb257fb3f9168443a4288c71209e5d40f2e1b281febcbae6da076d2b57cf01aa3cd78b2

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dcompiler_33.dll

MD5 fae7e1d578c42a7c3d9d61a99d178bd5
SHA1 8ac88ff2bc5f616ed284a04ddcbaeb72fb1f304a
SHA256 12e238af4b4edc1f774213709a87a91b77b2c9d2d18fe475b027872923b6fa17
SHA512 75107c64acfb6d84e1b05ba78377dc4699ba83b694b7ace474665c85f3e5843db6d06348fefed539c6c2b233775c7ef81d7bfd81937207e04e637043633cd0b9

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\xactengine2_7.dll

MD5 7febb8ce2233cbae738b16d42ed29674
SHA1 fdc5682d6aa0ec57b8f3c742fe736d74b3c649cb
SHA256 a43c92af3fbe91dfe2a1d415342631fe64e18c7dd3e16e93b6c78947b68e7bd6
SHA512 73a3c07b13b31d2df1cece720a0268cfdb7ae2a066b9e613f7c4ff0fc37b94bd4f32207149d56e1bcaa5656fd4501b1d136d94e18e97c07a8e793906dbc7927e

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

MD5 45d4dac07aa361bcd77aa815d1724a16
SHA1 3bbdf7da5d51211ae269572961b5ebf508ada28d
SHA256 34ab99536ea59ad60ba6efda3ea6d18291ef096a0bab3664248d6045805da0ec
SHA512 d940002a8e0112a3b56a909008403b447e9cbb80e38b9bbd508f40aa68224f7e5d9681e1039e747ae939e0829a25be2319b9f9d0862cebb042e4c525ccbc20be

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\xinput1_3.dll

MD5 77f595dee5ffacea72b135b1fce1312e
SHA1 d2a710b332de3ef7a576e0aed27b0ae66892b7e9
SHA256 8d540d484ea41e374fd0107d55d253f87ded4ce780d515d8fd59bbe8c98970a7
SHA512 a8683050d7758c248052c11ac6a46c9a0b3b3773902cca478c1961b6d9d2d57c75a8c925ba5af4499989c0f44b34eaf57abafafa26506c31e5e4769fb3439746

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx9_34.dll

MD5 1ca939918ed1b930059b3a882de6f648
SHA1 0c388397620ce0edbb362bb3ab2d4a9f31a56b6d
SHA256 b6f77f06518d35345fb61172b6a13159125ed60c469d28b1a2e07970e9ddf81d
SHA512 d1e09da8551e588b8d5d5837a79da9ae4ddd6a372457d3c341e68e3da07c0c1e84decadea9534cc87ef9ef38c094171004f836e6f74831fd6531ce72aaefeb5e

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx10_34.dll

MD5 5aa9987f2e62b56d7661b6901901f927
SHA1 2cd4e3e70c3b37da134ecfeeedd377d1726d9759
SHA256 330e120d745e1132252df81800362a7ae0b61a9060afc800165ba8a1d55d3fb3
SHA512 af9e39f368b47b1500e5d68a6f234361fdfc29ea31c32f614c5887f124d6097be0b2d8f37287d0cd0b094d3a12e3f5881ea822542a1c85f10566604fd6228988

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dcompiler_34.dll

MD5 75f206c195bbaca6ef28565b1c0cd75c
SHA1 4687454c58f64f2154f0e99bf5a323f73ca1790c
SHA256 5044a5810fd931339933a8d0c56115a5a5c27d8c0d8e348977e2724a032accf0
SHA512 84c0a8fd3e4293d85e919940f6f24d88fc6fd68f39cffefc34014656fee54256ce581ba408eebf5bf9dac3da9de19f2bf8403521c55881d3877dd64a8e50120f

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\x3daudio1_2.dll

MD5 9e4efe7cc29ece294f3506fe0d8090bd
SHA1 b5d0e9cf45ac3b05fe21aed3ba41dd94b1ad1fa7
SHA256 7c06bb70d12cf78de9c6a12a53c95f9dba41c140a48bccd500483e5b87795a8c
SHA512 998d3034cf21bb9aafe0821a96c64ab0c38f770cf9c6a6820a2292b569510dbcd0e71ce56dae813614d9a148c146e095245e963905e71679c3cfca1ad98f5e16

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\xactengine2_8.dll

MD5 499210c45afeaadee8cf4dcf7d5e570b
SHA1 de5ca60de47c8f54d531b88ea80d9a24a8e87a98
SHA256 15d82e89bea30bf82de6ba0cfbe97eeaf05d1e06bc0133f0d1ee8d0cc41f51f6
SHA512 f76f69bc3b6cb4f92e675eeedbd10a80f0b970d75ea04392484d477a4d02dec670cdadcb90be9eb215c4ad48a90d28347c9104f0835e93b5a9803fd62670536e

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

MD5 98b1369d38333fe9143259687edfb25d
SHA1 3536573ce844dc1441b91e1124b6689b93add430
SHA256 d4e57566914f1d36f4ebfb6e164ce2170f1d5e6392189d0ad6de3ef3b0a9aad3
SHA512 3544088b8436ae6e48d22a7638d59f3c14fb914caeba17a87d1af469b82f818a1a71c5faacd52f69b5bff190b44fd91f893d07b7e05c2e9a9dd363bd75722057

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx9_35.dll

MD5 3ef18b78d17c962f2b71ac1cb7757684
SHA1 2380329c17c7a530075c7572d17592bb3a00c4c2
SHA256 2198022938156b790e9cfb0f7997494b66a11a1ad49b395be58251d635b66b26
SHA512 93e9bff79630ee5897bfb3bc496f778aba160312edcff9f0b8cdb8e8af3d5c7b73a8d95d54ab26cc638a2ff7cfa27153629f9fa8a4a687ae3c83e1178471e720

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx10_35.dll

MD5 f3764552e45880dc49b82f38699aa87c
SHA1 25e347799bb3f36bdee30aa78cd9e59c7faa5add
SHA256 db775655fd923e29509402556f86002dd9aea062cdcdba7073e1057a67b5ce50
SHA512 7e52bbfb4f309b9f5a9632efd3dc28a0509b7d5edf471267f7e794ce8479dd8cefcb29535327a7384bcc25b5331ff87c223fb70fbb5da22fea3c919ba4c5444a

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dcompiler_35.dll

MD5 5b441670a4f5f8bcce76741902b8af56
SHA1 b98df0c54483664ecdc92eccdcdee09d082972d8
SHA256 5a866cdf74f981e783624dafb0e72f133ad9f9b293856d7a18c7558fa357beb1
SHA512 0243deac1124425b65cfbc7d6465bfb09a4849e6c5be3645b808cd3fa487c3044c5b45e9943ee31542a7a47803c02f0b92c05c1e4bee18cf6076641e1c0794f6

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\xactengine2_9.dll

MD5 46ee68f04a75a1ccf40235ea6f1cba05
SHA1 43a30e195b8d894c69bd857ee377ce7fa6170fa0
SHA256 93a0d8fc38e4e9a301d9e721afbeedc5af40becc0b11a6e7e8e38f08f366ff6e
SHA512 16e4c624e4e74d8c1fd7652ae745a87de3698567faf0cf03651ad87f1f730405fc0d2eca68e4b0ff3c5c526c254aac232f9bd359ddb6563313a8f02db3603fa9

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\x3daudio1_2.dll

MD5 ac49e8536bf510251611a77e2a6cb8dc
SHA1 8b1f64007fa777fa2aca1e456735ab872cbabeb9
SHA256 1ae37d90d39c36c142a51ab9fef7230788ff95080f2bc47734737bf82d3c2c9b
SHA512 2c33ba362315ab102e4898ae92f7bc71e7c0c7fda8cd79f896cfe76e5a2a4129bf6a1e48d75b82ed7d915c0ced819e81c0f89640677b6bfa388962ce19bde2a7

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

MD5 ffc75edfaca60d28b6e6c1da8488f0bd
SHA1 358ae6e2680666b994e721db5fac0105a86a9c6f
SHA256 fbe2e9cf7e400537a4871218113df178f70501ffeea59a8f0f721927124d6d46
SHA512 dadf216d9e92b349179b27cf436483dd5a52bfdc1db659f3d99b6d1bcc5f1fdf3b0fa4bc8bd08f89439ca1f07f5dc66625043f8065c0cc75e8b3627e59eb8d0d

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx9_36.dll

MD5 44bfec5c9c82a2ee9871d88fd3b9a0e2
SHA1 e2aeb78330d0815cffedfe88438a71024577d4b6
SHA256 c12f0ab0338eb5031d3d04beaf7208ac848f7e037d21ff963d2af90221cbe935
SHA512 35c42ce3afeeb3710d3d96d2cf9ffa2828fe17f8d749fd149e3797e87e154508c77f637de0e424d38bb3fa56bca959cf9da7787323950ec8261b144c09ae306d

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dcompiler_36.dll

MD5 fb4299688a0d3a37687c015ac2b9922d
SHA1 a4898d246afbb0ed399e77fa5ff29c99caf912a0
SHA256 f15efcab1780fe7d784a3cd3798f147fa249e81b7ef9a494b85dc7fdab084734
SHA512 664b139754d587dc32820354c1333fe6a5528b07b8bbfaf27374a5da7e86a4c3e7904250976ef3cf8620fd0568c34fa75704a8b1585c382b99d4ee46518617ae

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx10_36.dll

MD5 d9158e78a368b08d9133043eb3058c12
SHA1 d71d6f103bf7433f442f55c355dc74fd4b8a736c
SHA256 aee0248f18dfef8194451a22c69adda1cca38c03ae9aa776114da9d8851d4c38
SHA512 8bcf2da86f708ae84141089f80131244d957e64c6fed0fc39dc688201659cffa7005bfd4cbbb315ee0a60c61e38ead3b4e4fcb3d2f0ecd0386a6fbe486d82bd9

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\x3daudio1_2.dll

MD5 f6a9fc2ad2f9111372b5ab3bba3707ec
SHA1 bc7afb780d42a332497139b5236b809433d86009
SHA256 4c448c7f77e3b4385d2cd35d0c470589cdf0524e532f9cf7ae084a8f88aa949a
SHA512 6cb44bb174ef28cee3e3a6ac51897b5cceb3f2d06d08c556cf6476a285de3e3b03a624ca92fc11b95f29694629457fa39747e3041736f9b76e84f19a052ecba6

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

MD5 c92c92060d535cc9800b6ce231276852
SHA1 79281861482c717e61fe9bae300e0fba310485fb
SHA256 e0838d8d562ed4683bc06ecdbc46fe19dcddf711a0c7909dabf62da572035dcf
SHA512 7c8893c92c005c7c21f829912da4b9e5a843e842826d5e362a9828710486240aa109f26e38a84cfc03617f4abaeda25f0ce215b8f6a1f9a65c58ef5606814d13

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\xactengine2_10.dll

MD5 73e055af78a64f9b2779d44407ca2ab6
SHA1 d771ef11d22a79dba7deccb9b3efedcbe74532d9
SHA256 113640ae8cf78caa7cface2f906f9e6b60809906f5c26e08b2e90fc48430f3b7
SHA512 a8d979297ecce24a29459e7ff814e53c649a6c969869279dbf0f29edea4d73883441519a27e5e46bb1e4b5b942cb26907cea9a488de0067e589632687b25b5be

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx9_37.dll

MD5 ac3c517fb0fbbe45fe44007bcd3625a7
SHA1 eabe1601d0132882c7226a4ed04fbbdd5e8f0db0
SHA256 c2ccb84c672a9d8966e82a28005a4269886ee304972ac3590c0b8a9c1622a3d8
SHA512 89b44142355c494f2a21276d0629f3536adc0dd7cec101a1f2816031afcc8a96f94663ad46744c772d6b63d172ea62e9b957d6292e4a6184f958576f62b05836

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\D3DCompiler_37.dll

MD5 ea752dbce35045d3c830dc16578cc8ab
SHA1 0a9bdf391ccdd113fde4d10f0afc80d54df01259
SHA256 715876d15b590936e4d32602a764d810650eec134922b32eea742e2fa71791c1
SHA512 3cf5e79062203d39fdb74e789e22405b93de126deda3d698963682d51f264cafe9a91d433312bb7976fa9b50a4798060fcb97b6de7f0dd422eecac2a922e31dd

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx10_37.dll

MD5 4a43e9a2b17e4cafa9cb5fec0b5b686b
SHA1 9e28d3d197958e65ab8dcaac91fa55cd1991c3f5
SHA256 61aaf973712f848b24c3e769e3252248ece96db63f206de0ca7ff43d9ed87a51
SHA512 8411bbd130427b690332d222233465bf79426670f565ac3b01a71929dadcfdd18002c54d60981dc1f202e6625f99ab73451805d64518fad9b5a9793407df2d71

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\X3DAudio1_3.dll

MD5 c593fd0a96ee4b6390b653c4c641313f
SHA1 60d71ca2eed9ff8afa5561cf1dccca03607134b0
SHA256 74ec3e6b253af1b68252e62a5c08479453b3341d49c606adcf36913fe9ed9717
SHA512 1bb328d1a68dd7b7657d033bc2bcb8e2c096bc591e435b5691a4ad4f0f49cfad70d4e48af48d10eaf4ad13d479a3f4fef66b09a0852f8c61ff33937c7ea22190

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

MD5 edbb7730845fe5ed4717b06f84c1cb2b
SHA1 d9bc196e34d69ca0ec91a5a835b444ac3e8aea42
SHA256 de817d92db706f329d50567221c42110ae781d679ef853cc684aec779ab51ccf
SHA512 cb7c5db143087a470d7ca7f5d4200ae62513ffc27b864528d851c310d0f6f68d55b6fa45b7d3e0b81043ada5f7f6468447e9a877b6c6e06099c38690a6c07d10

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\xactengine3_0.dll

MD5 8a83673f0ab001870583fde2b004fa59
SHA1 be8d312b359a9b8f9f184d78c93c762cbc46e321
SHA256 887329745c479ce8d3023c969adf66780dd7e51ab536f0a08550ba4c77066c20
SHA512 583c73590d4b90576955783e24149125615b135f5bf5a815674e2546b93a8f89f6c3a286df09257e547bcfa8c0bc399abba59fb64158b411a83f28a4a4feabca

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\XAudio2_0.dll

MD5 418cdc57e55ee79c3f86c13a19b3d5e3
SHA1 cac2b8396b1c82a6f7ee2a3e3ec3d2e4c2f869fe
SHA256 e435b73193bdf651f7ae564eba05266595ac672db45e0e22dce92d0bcb3c6513
SHA512 1ba5a49d9102911d13d86ac4f0e4ecb44069c93a58e2e3225d9464755c14f8d57f230eb32049c2747385f7cbaa9c0da0f6001f27b685eebfcd94f3f5b8fa3250

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx9_38.dll

MD5 8f3eb548ac4ed90252394f60c77e3196
SHA1 e40bb2e3c99c55f2df9def2765bb014e01389622
SHA256 743e77a228e7d75442263ad70051e44534f7972c6326fd34b505a9c2c245894b
SHA512 bad441c93d37269a9d49edc39ded933e43baf2a563c425ea2db222a9859ecd1f076c2255c077a5afd07922b50adfda2bbb731ff6f292623b353a3dfbde4ce4e5

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx10_38.dll

MD5 a2650b27472c21cdd817eeede65648e1
SHA1 c0e5f70386bb229e289a476f2a95965699ba53fd
SHA256 bf463b7ee2235f351309b5fd790f514acf2b55a4a1f90222f7479024cc28fc34
SHA512 85320f262c10d80e889258a8584648dc20283d1af0467924e8745555c94a8fc056ac609b31d36a898829ad418c9df06047ecfcc644693bd136ccb50ecbd6fe91

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\D3DCompiler_38.dll

MD5 103cbfc5591008ad33046e20e8e1eebe
SHA1 4a8bd29d7cbe5652ba58cd6754318a03497d841a
SHA256 ddcaadbdd47bcba02c8d1880d456acc20732d21554977338ae507987ed04046e
SHA512 ddab1a2ab33b224ac3f9ed396415bbbdf96bd59bc6794fe26796ee87691154d5e1ca2abf8bb85e7a9fb6793446bf17f6f6f53b74e69443270f50ce0b85e06b6f

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\X3DAudio1_4.dll

MD5 e3832514bd21236067b7227f6165ef95
SHA1 bdde126bfa7e3133f33e3d3e7b4618422c61acac
SHA256 799b38139523a3b30d26e21798ee705375c61eed8ae2434fddb52fde51f4bb78
SHA512 e60bb2b8cea5864f3311dbc0ad8f7813764bd55153bc0554e2842b6973fe24a1ce9e4381fc6fb05792d97799fb247d591e15b7dc41eec2bf563bd4f7ca797d85

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

MD5 6f05a242d0253e19d67978780bc06528
SHA1 ed8c623b0e462e92185d498552a11be01723861f
SHA256 ea31341129f7558d34fc2fcae9e715343aaadfc57f06a33a6da18448bd71b77d
SHA512 2bafde8afa6918956f745b34397a4f6ac479d3696a363184ea75cb9e05c5d83796527ea6cf343004544173e5370bca0258d5636e3cc5cec16701d68d82cd97f3

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\xactengine3_1.dll

MD5 2e0e25252e1d41752876e9fe12ade175
SHA1 d9de3a83235166a4bbc4bc356419c07aaf3e3f8c
SHA256 088999560171c60129c95f9b541852392602561dce43e4c61a453d48065f52ca
SHA512 a4555cbbde372893c564e1fcd707525c92fbcfb6915354b0062474cc47fe36ef66a3af212c08da117f2f2121698e556633f8c399199344354ce0d4cea4d0a2ca

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\XAudio2_1.dll

MD5 e34ff0115b1ee3b4e03d22ae9840ee03
SHA1 746e6e84ff7f630643ff9381b9dff1f40a49ca16
SHA256 32a7c6a4edef46f025a4a5c64b892e29baaae948e86d9ed49e82014eec1441de
SHA512 7448bb3ebb8815e13e14514c8580dfb7f6de1a96c90f6611f6766dfb48ae7bc4a06efdc493060c054f222e7d9b308e062e1cabb19a60f50ff9e20f06905df58d

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\XAPOFX1_0.dll

MD5 dd165760f1b95200a3da2d9dfdb84234
SHA1 0724300a1cbaa32e03a234cf6080a67967c335d3
SHA256 8b396d275de2550af8ada6a1ff71f0f4870b51c8407e44044c2dde7ad6b754cc
SHA512 eb130afda1481dd0e27a19330a8be8045b3172e46edcc5a0cb089e191fe415c41cfbdf3af8f084a6ff58f89cf8d7d4d0879a3bae8f93a52ffc84da2d4fec5ccc

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx9_39.dll

MD5 8cb3defb8887c4f0846db1fc1304d6d2
SHA1 5fbe058848db16117ce7cfdabea1f178ba229a6b
SHA256 5d29988cad858f754ecc62c3d30de555f82cc21b5b26c448b890295e9b7bee82
SHA512 4cb675b179d05ead18d2e42329e0d10cd1d520cf9c8c0681b89aca79ac9c814e82941b0086135bd57721b66b55b6feae00bd29af804f59a486e935fda413fc43

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx10_39.dll

MD5 e6c2f1d8b667ddc04cb55b9f0159ef97
SHA1 9dc5c2d54397aeb56deafb63ee34b641f7030ee7
SHA256 613afdb8b44bb3bed945279229d9604a3cd553f8c2b9b091235cbab8cd00de61
SHA512 5cc39f19b6de99bad0be00fcbde9d498e23f29303c6ed4ba79c2b2bc63f259f9b617ecf6ac67beee8a71c03a0e80c29412e0159a5014a43a6168c37835bb0e00

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\D3DCompiler_39.dll

MD5 c4f1972497fe2ceb7d900938c97fcf91
SHA1 27c1886e7823813ac61c35ea0cd5b72ea0ea7dbc
SHA256 b99b655abc4ec45851cc2acdb7a348e739687200a4fe3be9c35d6738dd61112f
SHA512 8d35dd4000e1d632d0924b594d6ef13454159f8c3b85636f180486ff794b76f8a84d7977e340ef08217f0f68747b593eae0b44824a20c12494007f4a40cc3d00

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\xactengine3_2.dll

MD5 f3c6be26949caadb11dbf0086082fac9
SHA1 6b7a2475aacaf63f30964e9958713bec331c82ba
SHA256 e6a34c1f068f89d6515cb460eed3b4dbb53522c5579e6c75741482f0d40d9f99
SHA512 167afd32d847088d4973437f8b89badce194211f8fb1a14cf30df11848e4d4dd8d5243765edb1ed09df0f9b674cd7de764f1dae9fcac91f0ec98ecd259181d3b

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\XAudio2_2.dll

MD5 50f4a0d5e6a0bafefa78f353533b8e06
SHA1 d370434eea3a557ed77b2363dfac720a5ed98666
SHA256 9c7897b4ee1bcd190b1c0b7b77e64ee731d234764683a1e2286af70d86b62753
SHA512 7686b893996b76a25ca7da971ca3a10400dcc682a05e8317a9d159a9317537de0bc20dfdef643e85e6ee548d7893138497fc156f77534124a8eb3e3ce47f0cb0

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\XAPOFX1_1.dll

MD5 d95eaabf5d277ef91d9ca70151209e56
SHA1 3d47ebbd6236045309d2222a696b7141c0957379
SHA256 5ab63c0f040fdf65e681eba4daa55ed83e89ea10c426dc2fc763da0fc94f3ace
SHA512 6d2e73468485fee2b4007f1fdf16381cdd6c77edbe5530f63cbf8696646b14d06100fdf54a48547f29ea5775f29226b16808a5a1bd4c0778413855f80e5b8259

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\X3DAudio1_5.dll

MD5 350fefe18b86bd4d9ab2a96d00215a49
SHA1 be4ddfa0edc3a463471fc170e9706abac0a672fc
SHA256 315944bb2a1959c8a4bd2677ed415363e1611c7351ce55319dc98fd2aac83f87
SHA512 490bdd66920e36aaba2a4d12bfe4aacbead7403b1a623bead0d9ab5f68d80f46fa530c5f7de9e747eb8acbfbec8c635aea32655dddcb6a9d8e006339e1e8857f

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\xactengine3_3.dll

MD5 8ba296419af3417d1e9806b83166e472
SHA1 a2a8a64aedcbda68149a2726b094f1710cba71d1
SHA256 ef052bc9b7fde596fff3ea2d9c8fc994f3282953dead1b7f5477e7154af67245
SHA512 877e89553cbfb6afc6dfb22a590a468f035dccffecf842cb26010d5e62e33fe10e477d5cb157d321de3ecc59112ba616b80e767028eedeb4e70a591f1b81b902

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\XAudio2_3.dll

MD5 47ed15dc87ae334c13c4dacd1be2cced
SHA1 54f94839c4e4d798a1f4f1fb6ee240957a738cb0
SHA256 04dec9d7c68962e01efec0aac0ef7a3499bc4c16e8a41bd61fe6641da48d7dcc
SHA512 da0707a153172c48036d885404035829ea251b7df5a9246fc05dd164ceae9604cb0cc931b85d77151bc613cd5e7e4d0430a4fd92697c8bbc8faf5fcfd1c140c4

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\XAPOFX1_2.dll

MD5 295e47a75f278580f9441041eaaea3d2
SHA1 0716ca729ca3d84e9dfb4bd97c1e12466cc68625
SHA256 d1a55061bcb42f69b7cf35e2985d48e30c7a90f0bc668e90390f465b36bd0161
SHA512 a3cee1d45759fe3323fe8c3c49600856a86b61b3174c4d9c71e58a95db4848683c71605f5bd8c04bec591da02d96b79c68c1135410930ca63d17f7a929f2dc4c

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

MD5 44442b56a318475a3e7acb055ca79d29
SHA1 9ffe16ecdacd79269344643ca160d940e88e7292
SHA256 4c8befaece0c58eb75c38e2347db04557c1bd2a4a269282c3769d6bcccf50395
SHA512 d64ab17f7e1baaeb5aafa4e7eb100257d7a29b1f5caed394b2d3b656c4c9ae56a0f9b952f60573e3ebffa090740f95b0f173eaf2642d6245eb8c2bc6c619b096

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx9_40.dll

MD5 eea5e428ce63804f9b12d21c97b5968f
SHA1 77a7f48f4bdb7e66ed5e524bb8879e3da0d6cd1d
SHA256 16fd909aeb68d0d1aca8529dc7f78880b97d6649d70ce8d03a2c858bc28e216b
SHA512 545518dabd82441ddfc17fe1c1cbd7d14603bb58130de1307a31f73b93ca42afdf25dfcf481f0383c4e039edfe4a88ae7b84b06a2850c29bbc3550114e499c73

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\D3DCompiler_40.dll

MD5 3384134eeb8f223178c2eb8323003ec0
SHA1 c8eaef8cbc91f4386e42904dee70abb6ab7304f2
SHA256 f0a6f156d13150de6ebb094233e5ff78581fbdb77bd0ff8d083698c42bc8e13b
SHA512 dafcf4c116d994c17d47d36b1dbc2ba8ca61cadeefa5d770adc391713d2c13ed2b6eb8d2464f4811cb472c8e1eef384ba21d7ad8203ba4e9ef07f33781feaaf9

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx10_40.dll

MD5 91b4aad4412bb223b466f3dfb43e86da
SHA1 850aeb2b3ca15158be00faa5c161312cf4a876f0
SHA256 c05787cbf3aa4527baae96a425ceac910090ef48809990a450c33f3cda0e4767
SHA512 413f68d1ad36aa51389da62eb2fe89969e4460ab166ce44943e382fd2d1cad0953979eebb20af58dd51def3fefa1100ea9fe95c05714c36d5322e281cea1a1a2

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\X3DAudio1_6.dll

MD5 e763798cad2a90b6ab61854f50cd47dd
SHA1 419f2c98d2a3f419db1b1e9b5f4f7c3b9b636c1d
SHA256 574d14ab9a641c6cbadd78f2cd6c088b64b59c3646057952e63cad7d2778e1c3
SHA512 b455b0078786b7ff8362f7404095037a5332603383707a6dd493f381eae3e28135696fb4863e1915ea01c0f12ce10d021a18ab91cbab06b4d20142e0b38833fd

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\xactengine3_4.dll

MD5 686f8d1b4926d48227a06acd4d41cd1e
SHA1 324fd1d21a42f0c30bb071beb2cd5db9abbf3138
SHA256 d3bad7995b998f2c95dbb33020a198ef5a248825321032f051619f353d46182b
SHA512 6ed69ab933492870b7fbf4e178999b835846075fe103e65f9a0f9b1ad8d47c9277f31a7a0fb53f3620b591b103b02bfa8efec530d7372680f585b82e128edcc4

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\XAPOFX1_3.dll

MD5 c4479a4547390e3c5ef28d453abde4f5
SHA1 9b3af3d2ffcf52cc6628cb486372be2870771637
SHA256 c6956ac2ee59f71e86784138b5443de6970a1274ac161945b8a44dc1d535db84
SHA512 94a55bbff8a285d6b91ae72b70664b2c1a067890db175e20265be2d57a4b29deec52f08f0aba8ae07ed30dfcf96889ab835b971d2bf567758d3f7b881a7e5324

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\XAudio2_4.dll

MD5 e684c5fa18adf9ea14737757413bf727
SHA1 1dd454144e8c0f3aaf24db0b77f03737914d9a72
SHA256 bcde4317debd0052b1436a6fda60e1dcb1e308979498117fa0cb50061f38101c
SHA512 9686f92745a30fd9e442ff6a24dd89410aa483ccd46edbefce0fe378645292255a323e1aae146180e8a4ecd15765a996df959a302d5cdbc6dfa4c5fcb8252e4d

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

MD5 d001b26aaa9bec255c0b697732e571da
SHA1 adce71afb93cf04a86c1b9d2f80144ca35742d2a
SHA256 1707a6644d66406a9ac149b8fc959d964dce5c028ca3e1d0d5052e70f80515e2
SHA512 af39d48e90cd2cd575a8d039642985e25ead1fa51528a082d91c9bcaf9d1ec97afd0f66c0bebb53043221ef13dda69000ebbdaea87605efbe873f471e16a6f90

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx9_41.dll

MD5 3fa06cf5079b84155d18b05c08f7131b
SHA1 fafe52876151a08f39dbb6b4aa137dd85558ba5f
SHA256 6ac4df203af419d3f3b7d9a99e14a3490ea3ad307c474bfe36baea642b1421f6
SHA512 24d29c3ffb6532da860fef4dd93e61f7532cea3af94928495a3af0231e7dff6db5cad25713451a2e722c076462b94818cd6969a1c7d8905585b0f64e12174d1e

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx10_41.dll

MD5 1aa571774936717ee776dbed51e9edf4
SHA1 98eac7257ab3350504c0a70342b6b24658411f55
SHA256 9f4c15e1f68795727eded4737acc5a1aa85f896cd9e6924fddc9128b48f1bbd6
SHA512 bb47d95d594b249608e323c8ff383c0655a56e9192e1a2f3157e9c18dc7b9baabcf8e6b09d30fef570e0718edf673c56a23df5b5d5c6ec3242ad3d887669127d

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\D3DCompiler_41.dll

MD5 781e8b5b6fdb3c9b4e4a4a9fb019960d
SHA1 292b9f02bc2377c6f89b505554394ace161c68c0
SHA256 69ddadf8f5be24f10382706480b55e2492008d102001779f976608e880c65aab
SHA512 718955c983708f3ce5b6796de28658603bb61270ca6f1b3ee01d73ca9a789db326a7998df38cbd6330e69bfe3d9504b0fd351fb7bb18566be6af03fa36b7573a

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx9_42.dll

MD5 c6a44fc3cf2f5801561804272217b14d
SHA1 a173e7007e0f522d47eb97068df0ca43563b22bc
SHA256 f8b9cfab7fffbc8f98e41aa439d72921dc180634a1febca2a9d41a0df35d3472
SHA512 2371844bc86cdce2d1933625b921b982c4d1b84a39698b51180b09a2d45732407d721fa01d294ca92a88777607a1bb00283f6bcdd4231137a388216d0b09dd5a

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx10_42.dll

MD5 501ac862517c5445742bee8a2b88414e
SHA1 49f3f2df66d357aa84a5e7a0eb368ea595b7d95a
SHA256 46429c4affe041b08a7acfda0e9162ba42de966acb2cbcaf09ef976232073b51
SHA512 08dc13d5ad0a0d2aaca9d3dbfb53304216111da73bf48810df2982650d580757c10c8b9bf80ae5191e06ebaa44b2bf9c244ae141308748c3e7fb9ef6088900ad

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx11_42.dll

MD5 d09ac80a4b5312239852836c84df3392
SHA1 ba838d90a1e74d6b9a57abfc9729dd3b2e7fb192
SHA256 8c8fa8dce19e2f43e82cecd73a268e831a5ce0a16023845f7fa7fcb597772e85
SHA512 69232a47c80f01433716f3a9202af25e1b9a298a2b7b7d23b959e59d9c4ebf329cbe9a9a5bde41c06e978fda062225447114f9ae736920e7bbce8587a9390613

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

MD5 7d8f5afb77c3ada97a83f3fc253d6392
SHA1 e5424d020c6de84ccf72253834c545024161f682
SHA256 3a07c2436d3fd2473e15518a53262d4f0fb7f2a05589437cc5668f929063e782
SHA512 52f4bd961febfe6f691d7dd1e826f689319656393756e0c5c9e3d9729ad47e072071b204f63a3b37b67204fcdffd4539db08cbf190605dd9652ace51627e8845

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dcsx_42.dll

MD5 b337306dfb508a1bcef1974bfbb8d924
SHA1 203c32d73f99e1097bc306c9225307a18c617f4d
SHA256 e462eb3d41db54988ce3be46ced60b0073f8d939a9946cda67fb1df3c8afe0a1
SHA512 5c7a101e403aa2eab57e2972427a67ae6cd1598a35f983af784ca3a7446f7c60ad3cff7e52510f14647645a49c387020a06242663433db89e6454188b93813e0

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\D3DCompiler_42.dll

MD5 b33b21db610116262d906305ce65c354
SHA1 38eef8d8917351ee9bdff2cc4fbfaefaa16b8231
SHA256 6c976311406c23aa71018d274da0ecdef43b6e3a3b0b01e941a5e8e4e974386c
SHA512 7049726ccbba90d06b3a56e1dbde8196935d4681b5548248cd3e6a8e38183c268152ba2b07eb90823bbe327c02ec946c59abe3562b59e29d9bcff8fe90e0adcc

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\xactengine3_5.dll

MD5 db3c93e87452b8dab4f58ed1fd2b1998
SHA1 fbcc3c80c74e98e8554260b8a08e14dd1670075a
SHA256 1d37ab9b90372eaaafb5055401449dc3184428fed559baaf36fbcccd2479611a
SHA512 af693d7d326dd7874e0eba5b4163c21aad86270f8e54058c637f1cd200e45eafb75f79a2d579c477c06082ace44f3318bcef71698089808690ff88443ddf348b

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\XAudio2_5.dll

MD5 8b01fb723f3b30ab3debddbf97cfe577
SHA1 e379c3b7d0a66da06b6a381deea19bc541ee0689
SHA256 c596de2ab8394fb62538fef0b4657317f4ead50a6d798c5d066e25e334576c27
SHA512 ba8c5bf7eb657bce6e2c937e082b97bd6169d1cf3daa5800e5112d62596bdea47e5c1f23146f3f696cd68e8def4df92e3fb24a9aa8b9a08320738b66fa6dfe2e

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\XAPOFX1_3.dll

MD5 30686ece80545e06d78d156eb9f7d463
SHA1 b257ba4ffad8003fb7d12e9babd3cf4e88bd52f9
SHA256 b05ad9417028b9777f69422caa01ae9fd22c7bfe542bc6e7de2649e28a4ea643
SHA512 ca03bb01d8e2608517462597076bfa96f4b2595c33b2635d80e4348ac3926e17c93e5db30d7e43c30277cf8ac07f982a0c729f83a00df8965993d4f0758eca13

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\X3DAudio1_7.dll

MD5 c811e70c8804cfff719038250a43b464
SHA1 ec48da45888ccea388da1425d5322f5ee9285282
SHA256 288c701bdedf1d45c63dd0b7d424a752f8819f90feb5088c582f76bc98970ba3
SHA512 09f2f4d412485ef69aceacc90637c90fad25874f534433811c5ed88225285559db1d981a3ab7bc3a20336e96fb43b4801b4b48a3668c64c21436ee3ea3c32f45

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\xactengine3_6.dll

MD5 f81c4678a55ffee585ac75825faf5582
SHA1 8fb2e6cf2a022eaed2ff5e3e225b3ca1e453d1cc
SHA256 8a7e7c5ac2e6230f0249d46751522e7ecf85e7490cf7491ab73bf2e7e59e4c0f
SHA512 8c8071bc2640d5c0fcf140ad68d4788cbb0706d17313c3cb74e25624a748b282acbf77eda678cf0d5fecf2ec3d583508c6f4eaf5c84073909b616f59b4f4e5fe

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\XAudio2_6.dll

MD5 4976243bd70fae3d1d24e49739ab2710
SHA1 6ef27b10bcf4e697fe77c3e964b326be11e4444f
SHA256 61b57170f7c6365714396072d22cb98746718c0f44c9f0d5c62fdb1b218639c7
SHA512 af2d6aaad44bed880a1a2ee947618b142c76a5eca42d4608196b74df9108a9649059d8207e84a58b76ad43aefe9b66ffcc519f8126667177011cf4199f163e83

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\XAPOFX1_4.dll

MD5 e4ce2af32f501a7f7dddd908704a0ee6
SHA1 9dc2976efb15b6fba08bebdeb98929b6961063a5
SHA256 0aee44b12913a95840ee6431d90518b0d72c54a27392e21ee6995e2151554a06
SHA512 ec14a58414d595a36c6b575cdae690f11481cd3f0b35fd2f4c6a6d162a6272882cfe03da865e09a34972775790529f51c80b69056a2fcb909f25b549ed2f7f01

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

MD5 730e5493910e5693499485e352381c6a
SHA1 2871488c24d069e677868e0a590e7e74f1f19b12
SHA256 d808bb408a4bd695a9793e70b1c61637e008ac11174dbe1373481e2bdb0c9299
SHA512 62fb2a2ddfd62d48ca8a709426c07e1cda0e66df5b977c3bfdc3b191d15c3a139a5c6180ed7a66b2418a5436273d713f2af1cb21f7dc77df78e0743d6a18e176

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx9_43.dll

MD5 86e39e9161c3d930d93822f1563c280d
SHA1 f5944df4142983714a6d9955e6e393d9876c1e11
SHA256 0b28546be22c71834501f7d7185ede5d79742457331c7ee09efc14490dd64f5f
SHA512 0a3e311c4fd5c2194a8807469e47156af35502e10aeb8a3f64a01ff802cd8669c7e668cc87b593b182fd830a126d002b5d5d7b6c77991158bffdb0b5b997f6b3

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx10_43.dll

MD5 20c835843fcec4dedfcd7bffa3b91641
SHA1 5dd1d5b42a0b58d708d112694394a9a23691c283
SHA256 56fcd13650fd1f075743154e8c48465dd68a236ab8960667d75373139d2631bf
SHA512 561eb2bb3a7e562bab0de6372e824f65b310d96d840cdaa3c391969018af6afba225665d07139fc938dcff03f4f8dae7f19de61c9a0eae7c658a32800dc9d123

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dx11_43.dll

MD5 8e0bb968ff41d80e5f2c747c04db79ae
SHA1 69b332d78020177a9b3f60cb672ec47578003c0d
SHA256 492e960cb3ccfc8c25fc83f7c464ba77c86a20411347a1a9b3e5d3e8c9180a8d
SHA512 7d71cb5411f239696e77fe57a272c675fe15d32456ce7befb0c2cf3fc567dce5d38a45f4b004577e3dec283904f42ae17a290105d8ab8ef6b70bad4e15c9d506

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\infinst.exe

MD5 a7ba8b723b327985ded1152113970819
SHA1 50be557a29f3d2d7300b71ab0ed4831669edd848
SHA256 8c62fe8466d9a24a0f1924de37b05d672a826454804086cddc7ed87c020e67ff
SHA512 60702f08fb621bf256b1032e572a842a141cf4219b22f98b27cb1da058b19b44cc37fb8386019463a7469961ca71f48a3347aaf1c74c3636e38d2aea3bca9967

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\d3dcsx_43.dll

MD5 83eba442f07aab8d6375d2eec945c46c
SHA1 c29c20da6bb30be7d9dda40241ca48f069123bd9
SHA256 b46a44b6fce8f141c9e02798645db2ee0da5c69ea71195e29f83a91a355fa2ca
SHA512 288906c8aa8eb4d62440fe84deaa25e7f362dc3644dafc1227e45a71f6d915acf885314531db4757a9bf2e6cb12eaf43b54e9ff0f6a7e3239cabb697b07c25ea

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\D3DCompiler_43.dll

MD5 1c9b45e87528b8bb8cfa884ea0099a85
SHA1 98be17e1d324790a5b206e1ea1cc4e64fbe21240
SHA256 2f23182ec6f4889397ac4bf03d62536136c5bdba825c7d2c4ef08c827f3a8a1c
SHA512 b76d780810e8617b80331b4ad56e9c753652af2e55b66795f7a7d67d6afcec5ef00d120d9b2c64126309076d8169239a721ae8b34784b639b3a3e2bf50d6ee34

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\xactengine3_7.dll

MD5 4fd7bcb9d8af6a165e9ba0c2eb702e7c
SHA1 a90863632c2d54dd06e01537744a7b65bb3d0db2
SHA256 d7b1cf58898046c430d49cf8f778e4898280f4709340c3938d3139894166fe8d
SHA512 7fcc435d07c434ec392bb9bfa98aee20b0b1cd2ad6a31f073af80f6f37639336349728c9b0fcd967c4c395fc40c0efad1e36142fe7632512b0f26aca1b1c4bea

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\XAudio2_7.dll

MD5 81dfddfb401d663ba7e6ad1c80364216
SHA1 c32d682767df128cd8e819cb5571ed89ab734961
SHA256 d1690b602cb317f7f1e1e13e3fc5819ad8b5b38a92d812078afb1b408ccc4b69
SHA512 7267db764f23ad67e9f171cf07ff919c70681f3bf365331ae29d979164392c6bc6723441b04b98ab99c7724274b270557e75b814fb12c421188fb164b8ca837c

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\XAPOFX1_5.dll

MD5 8a4cebf34370d689e198e6673c1f2c40
SHA1 b7e3d60f62d8655a68e2faf26c0c04394c214f20
SHA256 becfdcd6b16523573cb52df87aa7d993f1b345ba903d0618c3b36535c3800197
SHA512 d612e2d8a164408ab2d6b962f1b6d3531aed8a0b1aba73291fa5155a6022d078b353512fb3f6fff97ee369918b1802a6103b31316b03db4fa3010b1bf31f35fb

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\dxdllreg_x86.inf

MD5 8272579b6d88f2ee435aeea19ec7603d
SHA1 6d141721b4b3a50612b4068670d9d10c1a08b4ac
SHA256 54e098294ef0ad3b14b9c77642838b5992fe4573099d8397a1ef566d9e36da40
SHA512 9f1311803db1607e079b037f49d8643daa43b59ce6eafb173b18d5a40239a5515091c92b244ffe9cfef2da20530fb15deb6cf5937633b434c3262e765d5a3b21

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\oct2005_xinput_x86.inf

MD5 be6e213583854cdfd305b207f4aee0d5
SHA1 4ac378fd06aa6dec48171fd1b4045d1bfe4bc04f
SHA256 a14d5947c0ad4a864f95e3f35344e93f4845094d660eb37b77b1fdae9f7995e2
SHA512 e331c30330b87ad1fc57502bca5cef45afc0a0b6ae1f8746fe8dc47fdcd12cc080062142bb01ed0248c2dba144fb7722564fe780a129e43680b1a73d19b507e0

C:\Users\Admin\AppData\Local\Temp\DX8F4F.tmp\oct2005_xinput_x64.inf

MD5 dbe238ed3a0d3805a1a57c23fb28b721
SHA1 076284d2fd60ea7c29acc3233ad41f2bc1e2f73d
SHA256 534d55cae9f43193f49d74c9303fa3d32cc309d0b23597a97c315f207f2a358d
SHA512 af8a605cec38385dc24bea7b4520ac924961bf8b4b7317430394dec3863f52b2a3cc2d86dfada3a9feec9906ca2f0f48c4e22c10a87fed0c9f70cedefd9ab32b

C:\Program Files (x86)\Steam\steamapps\common\Steamworks Shared\_CommonRedist\DotNet\4.0\Microsoft .NET Framework 4.0.cmd

MD5 28406bac51497481b2c1ebb85dd764d0
SHA1 eb60098fe94f3e84c7455dea7b80b219743ff77a
SHA256 89ad8b45d05977b5cf39105fb3fe82ebe17a3199c7a366ed71879aea9ae726d6
SHA512 dfaaa5188c678b2e3bc6a76d0209dbc7280ca1f3d8db874196599ccaaac1359142fc1ebbe9776fc8c27fdb1187a1d2067ded80815aa078b8c9f1c43045b8c737

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 21de8e8e84a657ea78526bf69a37f35d
SHA1 599399e6676ea4e3c2e637d3e6e30c20b16f0399
SHA256 72b324625d9b7082f421c51057663bea26dc2f2b6a681d67504380dd53c269d2
SHA512 d725ccad963f1f56a97867e276d918ac5313995ac443cbd9a214e4e0321be9ff7ebf89a71ab8c8f3eff7c625071ea5538f5ecac78471285687e11de3d4e61b4d

memory/10152-32986-0x000000000C460000-0x000000000C9CC000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 1a14c05d55203b88d941660fed6d1511
SHA1 0242b8fd935e1bc1b9932020f2f1e237887ed6fa
SHA256 cb0f2f96bccb5e4b05dca4efea817f263b56e5502a85b84a47d3ed7b08bb6d53
SHA512 4f14f1772fb4926d8e1a5621da2e3d8aac04eba0ba95628f6f8880343cd3cc00295ec3be842ceb25706d91f3bb8842676f52bea4c75c8a113d8b0fd9b962cf73

memory/10152-33010-0x00000000002A0000-0x0000000002DFF000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 0fd6fab327352eaa82866a56cc26cc32
SHA1 b42f73a3324f476a68594a7b9f2f86405a56e78d
SHA256 c7a0ee7efde6cc5502da5bdaf90b17da33825357d5a4ddb3b70ff8b223b8c121
SHA512 757d84f8eb7cef0f4fa5fb3d9f5b17d7edcd2ba2235ce8fc6c80af428380c5d1b9dfd492c5da2cafe4f51c1e1e5586bbdba58e198860f6d2fc220d66ef25ec77

C:\Users\Admin\Documents\My Games\GoatSim\GoatGame\Config\Space\GoatEngine.ini

MD5 30d25919163d0e0e59d963939b18eb96
SHA1 9b0b82880c86195f695748b46d9f14fab0923a0a
SHA256 097221f57d0acbe41d71b8d0f0be18ce6325c3ccee86d3326859e7a452be5257
SHA512 60a786dc7acf9efaa56db00b75652ca9865c6a4d0d2149ffee43bbde57818881d53f0a391206fbf8df103629afe31e18504d3bf4221a3b5f245f731c62baccda

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 ed742fd7d9c5a0e57991fa88692ea010
SHA1 9be1a243c083292af9b79fa22b353f4666b955c1
SHA256 8ebcd0be6bdbd3cf9282ce38cd435d0cf2b801940214963961ee25cc8cc5e1b8
SHA512 98f2ea6328e7a77ec39d48b5787ed63aac52ca3f2ec8ca413510c4180427ae60a55ec07eda18d7f73c09548837beb4b9a7d2490460d0d1ba9994cca948b67e99

C:\Program Files (x86)\Steam\userdata\1530346111\265930\remote\GoatProgression

MD5 7cca35bfcd0dc5bdc0f544d4e98cc8c7
SHA1 3d6cc8814b234453d7a996b807a4da1d17e635a9
SHA256 5f0913b294b9afe11978fb27d67dab5f5640b15d250a2996b82ce551dff216a8
SHA512 3628a188f46b52d7b3b939147544269988d45994509ffe5a31f02df5823c41077e54d6b6d232b3674830a0ba61e3b5e758be0f9a67bfcf522088c5fb86cc7a91

C:\Program Files (x86)\Steam\userdata\1530346111\265930\remote\profile.bin

MD5 c8e0229276f28fd6d58eee6b3d10709c
SHA1 7bcdeb1b26b2b79592994e3b7cd0027d9c07c689
SHA256 ae0d23b4820527dde80b771be1de9e8ff1a3792d7146d531468caed32c6d756c
SHA512 dc619d8f17382980088073778b748df058efd1018558449d909fe3f8b37833695f9a20cce96e178a3edb6a085d11d284fdcc8af4938b3442142828aa55ee3759

C:\Program Files (x86)\Steam\userdata\1530346111\7\remote\serverbrowser_hist.vdf

MD5 c04bbe27db6ac4b5699fb2159fb625ae
SHA1 8b5740b4378026fa724add8f7c1d853ad9e54ea8
SHA256 dc455c180bcf5814debd626c6b158f512161c24928ef7a090cb15d722efc5c7a
SHA512 9721c0cd8c7742e37bb566065043ef0913c1fdc583d7df4f9584defc7d549be786fc7eed723539977b682a2762efd226e9586eac0f24195a968ce1e28a68064e

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 0552478202413f5e8be0b058a143bade
SHA1 241cdf0535cfe4274ab190f959d9e96ebe459a0e
SHA256 f0ab3340aea4391b02d2af000395db5351ce889e585e05a887a8ba30f9f22ddb
SHA512 d826f75616f114f209dab77b37356d994a3fdec845095c6c57fe7ebf7df1dd692de6ba7548e9cec60499cf8dfa44de6c9eb653e46cac5ef0bf16b1ffc79c7b84

C:\Program Files (x86)\Steam\steamapps\appmanifest_265930.acf.3974637591.tmp

MD5 d6cd376e069bdec916a6fa221d00544c
SHA1 ff2e63baa8eb1f8017f939beb5a0c8029d348f65
SHA256 deacdcb11070f87e617ac8e8e9c7ce33c7a4d87307abecd8a10d45101e929de2
SHA512 fbb47365114eb7fd245c0a49e8b1760668fa77af2b438f85d36441023d3f9b73bb787433e1367ce03b9cd7e0756361e6b567fd074aa5809437abbd03e9347ed6

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_000020

MD5 b9a37bf4829d224547ac0341b8ff9bce
SHA1 0e23b1ac3b4d4500612e98af8a5631b993df0ddd
SHA256 a6f27f94290de87181e15f540dc251b663644f33f6ae0ac7637f24ae8413f50e
SHA512 23fea938117d98d71048a77b759d6f50f9202858024be09d602e4ffe32f2d3a9dad9f65161d4f8f62e0db5a64f8321bf30bc81615263a782f12f148e03479495

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_000021

MD5 0b6e93c6a25acb4c7847658ac09531c6
SHA1 1f83d47ac0f0f1b0a2c427a75e81a7bc00216e3e
SHA256 5ba0e7777aefceb1aac5f389817f603c2a3a62585f55ec902f5bb448b8c2ccf0
SHA512 7236f6ec2847326247b2c4d816c3018b17d136462e978aed38f0f882bdb4d19966806909414b4fd62e8fb6d3f8dc10f71ee7ffbfa4e009ab5c586b891d834517

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_000001

MD5 23b6980e89a6d20d8c8b1caf7848c242
SHA1 ecf42428bb9e4febbe5bba529572fbbb9e6d17ae
SHA256 ca4ad503fd65e2d12d78c58329c59f0bfb3fd930575c391c1f1f75ce4b3e23a9
SHA512 e0b30b20d1205defea5b00d5481161a6114a6eb5f7e5825e9393258a5d268b8900566c62acea61585f2fabec1d04f7df003cb6b7c3235c319e4172dd6f5b0205

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_000002

MD5 2496b390ea2b688c4591ed6da33db9b0
SHA1 16fe5877112b0195ffb53c6617e8da88d7a1fcf7
SHA256 2c8265c3ac0545556c1d3e3a345516b0010fe15745ebd2914fab918690a61cd8
SHA512 14f9c45321a92857c2dd4a85cf07ea5d7adc4f28d57fc782ec49e09b1019d15932a3e444d619c1dc9f9745776909ec2692d0fe209ff28379ec983c4a4944e364

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_000003

MD5 658c489768de9b484f8d672cb80e8b6a
SHA1 6c108e3fb4bed14807bb2c6eaeb572c6081d0b9f
SHA256 064e30444cbbbfad2dfa97d4aa76e2d8e459cd6b8546740b68b4332047a8f554
SHA512 c59d75f7b6dc583ddf040528f154537fad6f50a021e4909d73c775a03436fdec515d29f19d42949b0bb7148143f27612343144d84889abaf02b918f2fef07492

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_000004

MD5 eca99b4cbda5531468f6e60e4131969b
SHA1 b422edd768dc79c7321e7c658d152613b6681411
SHA256 e22b678c9110655cf4def31801bd134175f6d26f451f4d108ed7ecd4b7d7c373
SHA512 49b6bbf342b5f6c70c68b050f900e718da70fc0dbf98d0f990bf4a41f17041486ec827719c6337b5bd00027f00ece022367a590920a8d1b48eeec57eb009e8bf

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_000005

MD5 2a789754e19f75fe342de51ec3f88519
SHA1 d200d89143c28a1af9618536e1ebc8ab6faa12b7
SHA256 8826d7cac33ad8c69799af3412d6bdb6b6a799d0921a741a256d4e804b58b942
SHA512 f8285a57c6e2d2b8562f1a672acd36b8769d029f641b2c6de206da226c09fab975a1e724f893cafb4178e2b948c492da8a3bf17a0a8693b1221e138f50a8378e

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_000006

MD5 b35b2326b0a91505fe08046948cf61d4
SHA1 a777025ff9b2f2de67adedcbff78a80510d4d6dd
SHA256 7bb812cff455a4cb866174d2e27cf7059e29f044574be1d882b8ae425eea54c7
SHA512 60c7e846e5de21f057dc792aaaf15c8638560cabc893ba6c0e059f8d353af5257a9ea7213d84eff60097559a624d0575a09ef9cf5f0e51334ae62391e884f5d6

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 d24ec481c121b5349107a041a0230d78
SHA1 53e3c6b01ef552c4ecdf1b404d54d8ac5a75aceb
SHA256 9a3ae346d1dd1bf7def5b3c7e15e0d0db5c4b635bfdc042f0465254cd27e7ce0
SHA512 f7485e879e4ea5173e6838d80f4a7920a22e48793a8a2860f79a32e55ee7098fc54a2732d46d04a08719020286895bd7a6558b9edaa7f91279be34e914679ce9

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_000007

MD5 a65013e9771b63b190447bd744c2b507
SHA1 e141f73f81591b4f3155fcb3d32485db3a16b524
SHA256 acca0b446e8f2bf8cf8c4d25dab414993d4b728aa733aec0ccef3837c7e707c7
SHA512 e4db7787368dc14ea76fa12baabc3ca53e63a74b9059a6027e63d292a5bf49cd4eab30fcbbc0507460032e44a1eb2cc9722ce7fbbf7781f56aadc515722ce4b5

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_000008

MD5 3163341632b7354128438d0528f63e98
SHA1 d98ec0386091c654b2655cb11dea959a04559a6f
SHA256 2cbfdfbd884cf687c5855daaf86bd8bfd0362fda11451458d3160aff8af222d4
SHA512 116b24ed3c35f19f449b457fa958cdd8c555ff4c634fd245b367f96b46e53938883a6ed64ff099c40745a83f1edc941f9c573f3b8f97c56ef224c3074656d892

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_000009

MD5 c1749c5c26668277e10d0a430c44f8b3
SHA1 245ff89280f5187d598895bec60d3741d6f65138
SHA256 d9303fe1dd51491d413bac3482192e5e2d8322016be11aed3dc90110e1860f12
SHA512 bc21ed5791a1e76d03e7d579725f969a01f5bd65258b3c9709fd97dbd25bd9b054bf265cb9a0f0e4b4b1a0e3b568a21f3f354927362442c2f2a13b3aa4b16513

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_00000a

MD5 816ed089518c9348f0eb205272383475
SHA1 be26bcb45d0a4c5d32848d6b4b0a4d8d996da03d
SHA256 bdf367eee8b6291acc6f065808af60b1b2ddc47c2fabd4f8055c8ef753a6157e
SHA512 c61a767b27b32827b643fa3aa15f7b204dc9eb0acd912fed8331ad2f5209f136b09e0d7ce74f1326a2159d0d12cab049f5b62595bd8b7e7b2eca7b26ef3cbf73

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_00000b

MD5 646f9377d3fd88a0401649354329e488
SHA1 e2c1c3be2a13db4533edc950d58546361e00d554
SHA256 54d7fda839546733ecd8774560e05158caec80400033b4997c77a1a64b34b524
SHA512 2b0104c96bffdfaae4c8a2ca8c5c731df355394e2bb97bd5403df5cf8cc45abc19c97a000b13de15de833cbfff2961b00ed3b1e32df7a2972702482a0078a615

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_00000c

MD5 419f488cc6036d0229663898a5f036f3
SHA1 a21afe2e1c3d921cd763990e5407bccbcad93f65
SHA256 8d08095ba0aba4d5890973ead62272ab126fe69b4486274e9875f80016455fc6
SHA512 29be90921ee71e49ef9ce27b6147ef68eb48663805fd4d8c5cf15be3ce268a2e316e60bed23ebb19caa281b9bfb35fd213ad82993b3204f077e7bf5ffc0aedfc

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_00000d

MD5 cc603fa85574076ce9238630dc405c1b
SHA1 b1d76242f55d17f570a8bd882786b0500e45270d
SHA256 9c3ccff423e85780f32788f873c767e5d3221f2b0777f83718f423742d8fb125
SHA512 49b90dab7552eb24067a8799d52695c8c87239e29b39ed7b83d897ee7ae074daa9aaa61b252935c7f474de57f67110679bf0e62e1e691071dda362595627a3bf

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_00000e

MD5 23dbc8dcac08f815ac9006e1c5064219
SHA1 61c5431ccfe87eeee90496b1585bb921a452a5b4
SHA256 d35d6e38d806b42da99292c378e333cc3f08580bc6e0ca2368e60c90a5c39e80
SHA512 4ab42d3111eabef677e5b598517ade06ee44304d0ed4a043641ef7544221ced51b057cf3da491dedb7c3be4c0a7bac72a4583d97210712935d47d798709f423e

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_00000f

MD5 bbe9d8e45b8ace5490478221607ce8c8
SHA1 dae8436c9eff36e79df42931eca106f100b6a84c
SHA256 e6d14c099148fa37e8041be8527f8b11c3c7a9e301b7945684105c8bc0a24c15
SHA512 3c67fb66eb4589159fe8ff5ea620e489f06a1eb6b90aea7012e52f6ea2d21b0a3d2212a30170104bbfcd7f1c0b31ed5e1059822c75c45e86f95edc4349d5817c

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_000010

MD5 d79c528ed05b0b77140012648d56668a
SHA1 6def389ceacbb0a2b3e025edb59590acf3e966eb
SHA256 951163d19293d9aedfd5c92414b481d3d8b4549788306da9bb16d5adb2b31918
SHA512 20547314c9cbc3b34f3efdb921539bdea131523f1108d21f72db3a62567bac7300f21170eeb03a068f3627a45802d94c3f6dd8dfc0efc0308aacb62b24008792

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_000011

MD5 ee7997965e433e6b2190b430f97fc539
SHA1 492fbde5c1fb1abcec72f282b76fcf8a6f7e1361
SHA256 e26c13b67679ad58e8324d9618713d5db90c2ce4d84128ddcbadded3672e6c4c
SHA512 85d47a833ff824605764e15a27e3960343eaa2037cf17da81e134e7366bc02267abdbed67c06afffd5c6e51617e155e49a25586fdc64f80f05b186709edb6029

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_000012

MD5 0613555cae19a1c1c291f694f426a55f
SHA1 f969a7eb62a5923ddc5d8cc9573d32c2acc47749
SHA256 d2ace1b8e8cee9036c3ca707a3c05a01f46d949d2f9cdee0d21f468e9c90fce9
SHA512 d82a1d153141c0a4eab58bd208f45d7ae1f330d7cda469ae377be33a32f66311f19c8017bed7b7dfc40df556a11b654e8e143dccd4eef97cfb361e2a2804404a

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_000013

MD5 495771b495ac794b7f0d85ae5a454d3c
SHA1 1d4e497d762e80d25b9ae6f027cb39bd56dcc05b
SHA256 251264d09980a7ccd864ef9d73ff875fe66ac1089f40770bd89cb66a19772e15
SHA512 a3a7cfeaa114cd1c698852e5fac97e71b0f3b23c611434a46cf53c22277d569f9b6eb91378430db8f134a095e4eefeaa40b3062d6d9435331c3aaea6f8192a9b

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_000014

MD5 245afcf50965a62677a0cd0057a24ff6
SHA1 1893ad6318cc7e8bd837a79a66a9de6b83faa3f2
SHA256 1c6ee9b581ddf1e6bd2e078af6ea801f45259ebd607367fe070b1b298bd0b618
SHA512 5cc980451f1df74b9be63535992209d14fed005e070a339705155e670aa0ae9c5306d1ac61f80b50315c4f20b780869768986f957c50db9d01e33bcc5f45037a

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_000015

MD5 589beb41eeb760310f7886ba98816018
SHA1 61663dcc5b2fabd0025f3ac7358fe72dbddbd007
SHA256 9ac044d65152c59bdb8d7641d2a26bdfa640f3e03f3d80887bcf01fa9c10bada
SHA512 7c800b54318cbd264cce49d10708c214e758ac92791c6a60ce2d72ae4a57798b726b583299b0005e085673d68bc3b3270a894acb5e7d7b9526476d032480e6b3

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_000016

MD5 84c61d1d09d49f66f61f429436525989
SHA1 eb9ed38462f6b09f001f24a93ceadb2ef12ef4a0
SHA256 97a4e7fbbfdaa8ef9ccf0fde5660f2e3c0013a1961eab81f0b492b14137c90c7
SHA512 336376cefed5b0f846826af46d4325a62960fe2d3a0cf7b92ca66d92d2e3031d0a75bd3cd955d58e01c379524fac822732a8f4e4d7c37bca9fb01bb42400bab3

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_000017

MD5 466c853bc24a3cabc8c20a463eecb064
SHA1 df216455791b8674f724813b15b3918e58d11985
SHA256 8f9de87f245e3f65b184662593a942ca747c3e814398750fb6826a13d1a211d3
SHA512 4d575bf4b171a41b83044e65f691e870fe329a877809e8ad73cfdc4301dd645e04a74cfaf4297a213132b6e05ab826bf54f3702139078a4c8b918e5b16750840

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_000018

MD5 9e39b2012148b458a6fa5a4cab84a1a6
SHA1 2d4dfee138307f185fb010d5f2049fccace99bcd
SHA256 616d965bbca3eede20978dff1e57a0129e3337f89bb40f0b13c93613be153a04
SHA512 14f13f1bffb40e77ec12324724c3bfb4d806b6843dad8d59a54e680cba90cf63246ac0a22e5da4bf3c6ec0c29db124812813ad933864da7824196996d467e2db

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_000019

MD5 73e2ef88bbf572b3679cb08f7b798779
SHA1 3b1b260664a2900e699efb344f40177e5e98b69d
SHA256 0d8df0d213bd72d65c526e26a28ab5583812e237bf3ce52dffceb28d4347d57a
SHA512 c2c0f24ac12b9ff585f9c6fa97c9b29371eb30e7095132e3ae1ff056ca2853d3b61e6c4aefa264fe882eeb13ce7fad0b10f81daf5f5fdb086b093c3e3cae8775

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_00001a

MD5 51a277e346670f4bfb743f5d92269905
SHA1 97ffb0b11919d1ffc3394f0d5c73be1d7522fcb6
SHA256 a4eaec6d107423dd8df547950304c5248ebed0dcf388277d22750ad0fa1c26d6
SHA512 ba4c00288da38ea07f3971a6b8d4b9ed21e015b3f511086ba664617ebe8bc7e607c531d0f032a22cc76f865af43c47a90c36bf2885ae07d937f2bbd967648162

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_00001b

MD5 183f42b71b52bbe3f09170f5df721a60
SHA1 b745bc89ee5a5f9c789b21b04ef4749e50e81c8a
SHA256 cafbf270bace263aa186ae6bd278723e56d427fbecd5245c80d527522d2fa738
SHA512 318ec3346e7f424fd6440f385d1b70c33c2c73fe02bbc5da211dfaa630f0650c6b9f423ea448a0ddf5e7ad6d5e48c0b68a49018511f1f448e5f94106ecb41da7

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_00001c

MD5 7da11f3290a39d50438d044b823b5fa3
SHA1 7e32b1b9ebf731ec3d0c92f9e67eadce3bf986ea
SHA256 000485e18dbf37ebcdb2a464749379b8be6cb8ec5fc064db9b603c81d36f3ff4
SHA512 faf0903a3aa8aca833821c731374ff7a4104399acd32707e90a635bfe1daf3d625d50e86b83ae6332ac29e015924647ae8286d1bf697452564919f240bf53457

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_00001d

MD5 8f7910da980ab683fe244060e7ac2899
SHA1 23366ffbb8557a032462a31e051ac554d0af0d97
SHA256 a71e7ddc9c694a32f38adf6e4427b1e08dce08561f23c92adf7fa0ee4a742f55
SHA512 caed48746bcb5c51b2a882f7b21331744ff8d14485a28eb53b9b4e5c611aa8f14a1f8d40210e56986e4f0df6f12202b333c46eb7d99b93804672b0ce88bb13b3

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_00001e

MD5 b2984e74e4cd893983e5745f31915d77
SHA1 a1628ba503fe4a42c068bdf57ac16e40086e0a32
SHA256 b9170bc7985a727c463a9b3942c68f53e9900df19a04eeae6028feb920e6ea93
SHA512 5566832f43f459df7c8b9e16046d7c197c10b7d6d337589c7424697cc56f9d4e3b4a8876ca27ea5ed01e2d2609854e75b9c8ad37f633bc9155432b1f8c416210

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_000022

MD5 6498150544e5029312b158d8c16c09fe
SHA1 19984b4776fdbb15d9e68f8453f9ae55d3cdad05
SHA256 4c12bfdb79ffa94e6d4baebb512b71fd59abfbe38373b1ec76102ab60860b52e
SHA512 351a497151ab7febf71726cbd1e3411a5356970bd8b623a4c17771ea58f2efbf4fcfc6f42185b6ab4d98b946517e66750df85cb8fd86b206465527926b8170f8

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\data_0

MD5 fe72b52a462ad1f9f531c6f1bc0c9876
SHA1 c0289178f82ec3600474e2d158fa75f300436d91
SHA256 97562a4970b5231153250bc453d43c2b467204d48d895d74ef58eebcf5e50377
SHA512 870736b163a68261c1f76e623f07d73c9b244b05dd9743cc1af28822f1376f37e5fd6783082036bb24186e8d4a5a7a5ef6bc78b3d61c9c70c3c935b76962e7ac

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\data_1

MD5 d61ee6df9f64fd11feca3d851322d673
SHA1 5a8080da89cf04d5ece78e5b4b4aad03450239ae
SHA256 89033a29ae0c2b3564ab10edb293cc4e0142a43b88ad86c1bdc0a4f6d1d6e713
SHA512 a0266808e04935a9632f61334d68312a2ca5f13033a9df409220c8fd166044edabf3b267608410f0f29bb81909810808a90002171cb5df7fb761a00181b1e99a

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\data_3

MD5 50ede573e4b7fe9b60ca68bb02baced2
SHA1 89ea35afb5930f67e3007cd61760df1fd327781f
SHA256 4b969bf84d84fbdece3effa68735d3baa31be891af7018ee12f4f2647688d4ab
SHA512 bbb07f5263a0d23639e1750af67dd8c7686d27738de9c355aa6f9b6b6a9aea52f01f25a6514f94ac56427fbb62f409e2617621495ee8bfdb21e9ce8f9b1c2a96

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

MD5 07c29077f158212d4ea1c143a686b5c5
SHA1 f7af0e5f416c567bf33d710bd433a6e26b9e50ea
SHA256 4badf8f4b3fccd1d7b5ce0646012479cedad181001b6d362339087ea90455ae2
SHA512 5a89e2cca198e379295d275349ad502203cc84560caa519f50e1bede4eba20215ebad5b29e43c0837b2e4ec8b3667445540ae538fddf79ef1d60c14ce42dff74

C:\Program Files (x86)\Steam\logs\cef_log.txt

MD5 3374663b80b5be3e327e64b359d8f996
SHA1 37889cee9dd6d78cece681d976df8ff593ba671c
SHA256 496f30a63e2924cad93da8fbc9709ae3bfc834644a935d4a59a0ab9e5bbe7afa
SHA512 2b79a367eabc64da9b05b86f882188c9af349d70e1fabce9fa5ee957647e6d0e64c322c6ecd089de81aaa18162b2298df47401a20e2e121462bc466eb5a8f013

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 eaa8ee7c1027252b8ae8c624b34ddc28
SHA1 ef4302adce09911f222249923118cfea83d71078
SHA256 fc8b555e7bf0d3904b535b97fd2a7312384e9510c214a80952d67bd28d90220f
SHA512 c9819274d665b3202e14c0bf08ca16be412c75c0dad40b3fd9d4b42ade34558d14a994e9edd22c30816ce62ac4a3aea19d29d3d7dd464073f546be30e896de87

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\ef75a092-1850-4b42-b7c3-d5830e3b777f.tmp

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Program Files (x86)\Steam\resource\filter_banned_english_cached.txt

MD5 009ca439b8e68dbdb83850d51b07c736
SHA1 b8dd1986d15aef3dcba09c954577c780b549c582
SHA256 4bfbbfd0114ee78d7795835c64aae6dc6b525547748c5dd1150d7d1ff8757c43
SHA512 25e90b8b737b30879ec9073457cc7b30bdc46ed71b8885ce14f9c1946476d65c6bbdd0ddc19bb09c406cd9439837aec5c8ad007dbb5a4378842e1634429b093e

C:\Program Files (x86)\Steam\resource\filter_banned_english_cached_timestamp.txt

MD5 5bdf7c0eb730aad3cc9871da418b9b66
SHA1 e852366f44e2b06f7b4bba5ce3f382fdfbcd7dea
SHA256 59ec931c86ddb5075d0bd7a3697e2ac245c59ef915f75bc17ddf3ab4c97f81ce
SHA512 715166180a9ff0a3bd8823f2f29c3a9729ab4a4bd495501c6dbf9e094a8b6146f3ba0130c79df7afb8f2f03ab4a8e0c4e317ac79ea3f7eb75174ae30ced0d247

C:\Program Files (x86)\Steam\resource\filter_profanity_english_cached.txt

MD5 0b8f38d6f219adb6af9a46e34c8b55c5
SHA1 abfb7eea3e2073ef536ef4c020b79dce54028174
SHA256 c6cced2a542c64817209699a48ba5c17f32ad47a5bb799d395d707f665378de8
SHA512 4a4dcd5efb3433f23848b7bcc18a430f05107985e48f280874f0058eac863b3ddac9f849ab55271f619c026a6282387f553f1ec25e16eba7cb68c850f314beea

C:\Program Files (x86)\Steam\resource\filter_profanity_english_cached_timestamp.txt

MD5 88241b51553b9bcfd111a261c8791813
SHA1 a681a4e7e14012d1a56576653e052fdf933b35b2
SHA256 a0c0ba4e849f98bfab2e8430da5a837c278ee52d23eaf05a8bc93d10201b2033
SHA512 4d84191fde461a646f681a1f67aaea5b250dafa96bef72625f586880ddf87e0ecaff25dc1f2ccff7fbc6e874c40108ac3f21c329119343c70df857bd32e7862d

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 3941ff9940b4656fb572b3eda21741b2
SHA1 5a957668ebe1d8e841d76f0c01a0930bbb2b3085
SHA256 75ea3a2d375d703fc01c0cd5741c19d351012ab0770634b57b52a0842b4d5ead
SHA512 f09dbac5f4e19c6f23861a45ffc75011ca4fcf286a8094556dbc58ab72911ca1378fc6b451aa8fdf6475e14d3d3c59c2286a6886180c3bd63fbdad6934c2d687

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000025

MD5 544a6e4b1b34c5132739a0d2ba39b18d
SHA1 683d474bf1ef4998ae5e37bdd219f34f15a12eb5
SHA256 369ca10d1b319a8fb94a6cd6143f4a524833faec18688d733508dd2c4f6db7e1
SHA512 efa73011d5933b27c23282e0e3caaaec3485d6db3b92212106fa6636b18365704904e7cc444a8b51d0e32d3a29c13e1bc2dc296214c492675b912de85824d4c3

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000028

MD5 9fa060a599b0ee1912f2073ed59df3c8
SHA1 eaaeef616747d09506c6ed1d96901d2c8d1ad4e0
SHA256 7924474a8f327264982347dc932997ed49890ea4114925024ba678fba2d4e90c
SHA512 93837c0d1bf848ff603073bce6ac252f770a35fad094b294609682e11b04b463292c74c8440891e89741f28fa67a888ed6fdc1575fda99a3c2b6065ccc4e7b47

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00002b

MD5 b507567f09861406425726176430b282
SHA1 ef31ff9a5a918797c76752018a667e29e415e580
SHA256 4390634070a440bead4ea3dc609984097da973983ac140b094149b4bbed1349f
SHA512 23e8a4e14a2a8608c817b88080fabce226ef7c280f5c87baa27780dc1307d60f75d215a91c3de6651f17e6df71219b3e51f2665ce9553c71f427a38e7c81d65b

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00002c

MD5 585d504676687dbe72abd522e20a8834
SHA1 055c34a5c78bb8d26ffc956df3db2ae716ef6f78
SHA256 fcf9ce4166770f6622b4fb6d065847572d02224afeddae4c1a87ced5731ccd3c
SHA512 713bdc9d79aaa5590db232a1302bbba88a5f24df2e6f3a79b877fd180d3713b20417e97e5480124d7a1caa19708c37d4e615b300adf732f5e365cc75972a2ddb

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00002e

MD5 aa3794adfd20428fe34118f03bc93592
SHA1 591db28eb78acf0ee9fc1855a1bc45d038169855
SHA256 141849b5f1fabee6f3612317c0df48485ead9bd6147c26a04668061fcb643530
SHA512 699c10405d2fa42569ce3058e578c54c6da13e68a68484d4988101a55ecc044ec312f5409a5fdb3b33fe2f9cd9d94c20459c0aa4b05482a9273e2dcf405c115c

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_00002d

MD5 c9e90bc8ec6a09d8a69f4a4dc6fe8b6a
SHA1 f099ace175891bb8b81eea2595bf8de8027bec6b
SHA256 8fa6b37e750ce1df8e880691ea6dcd4aa922b55a722aa0b1df8ed6302aaf723e
SHA512 c4bda62806935165c94191234b8782408876f1336279a26d58ab3a75f41c51433ad24516c0354a8a047c1e743c4fbb8989938b6a1ff29ae0585b3fd08230a497

C:\Users\Admin\AppData\Local\Steam\htmlcache\Cache\Cache_Data\f_000030

MD5 e13edde4a25e96e573f37bdd11e020aa
SHA1 84a0c3cc6cd74b149cc27de2b0fe48bc2acb70d2
SHA256 45b526e6aa5356b278aa37e67593a25d09c9653e8a0e71fb8e155111d3b7a515
SHA512 9ba4cce47994f949731e594538f56f423ee46a8e602fe922ab6e1d173b87831ae5a80d967d695fc45a08b25aef5c494518b43cde6b4709db690e904b2cc1c053

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\f_000023

MD5 ebcaae2f2471bbacf415517279a022fb
SHA1 8debcd55c69046d3b9d68bee7aadc64b8c1d4fb4
SHA256 7172c9ca4b99640b7debf77e7f7ccc5d9cc2eb725b06ffd7b0a7bdf4217e6dfc
SHA512 11c356108cad348b3d46265d95a44d2ad464e43925d420fb69520c2f717fe199e444d4057d64f6a700ffb56006e79fe9cd4efcd4b5d1196476528dadaf0d22e8

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\data_0

MD5 fde64ab5f71656775e42e1a6914011e1
SHA1 f2d1e02bf40319164f6cfdcbd0264e0da04a76ee
SHA256 a51eef7f398a7aa22932edacb62e3c5a0b1fe5cb406738a5de54a5953235561d
SHA512 2ce6034355de83623ba86a995d7c576b7c62dc0186b0468499f63788f5698830aeeaa25939b1812a9e8f5b409b85df907e4660e5dd7cda748e10bf6ff8eae8cc

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\data_1

MD5 ee0e0f7c85182e689c816ee64cece2da
SHA1 0436150874936cfe58780101e646b5a8b1776b5c
SHA256 979695021ddacb107281831f3f0c3b7de14bd70ee7bde239dc25fb66650c36a9
SHA512 98fdf94c6429844d31f68e52ed5fc706d566b791e62f01afffb8111a268177e39f34432a3f80ae74dc5f54141a38024735042a181034a7155a5da7f94c0633b8

C:\Users\Admin\AppData\Local\Steam\htmlcache\GrShaderCache\data_3

MD5 ec5c8b4137661876922f972d9b8f874a
SHA1 ee0128eae263d20ecaef5e39595b4b463db1947e
SHA256 b2002801d85fd0157814fdd5f7fb4413a0b068786aaefcfb3373530cd8847263
SHA512 b6fdcf3127036500d80d167df882c2dd701949f95766e39b89239dbf5b82c665b6fd26c96b0b335c0c60cb89724bd71b86ed4af3cd8dfa0e1277bee2a181fdf4

C:\Users\Admin\AppData\Local\Steam\htmlcache\GPUCache\data_0

MD5 784f0652df06594db2ba6efaed8305f6
SHA1 167cad8339eab7b17b5befe1e5e82e90bcfff5c5
SHA256 c98be85cda434e22d538403dfb134a6c0792e8ac7a103835638835d61ed0c616
SHA512 a45983017e80716701002778634af453971d676c0b14f21eca540c4221905d24a02acb8e492ec5b950bd77724efd4ce2c8b4b3fb5a21ea8a71500b0bc4529148

C:\Program Files (x86)\Steam\logs\cef_log.txt

MD5 141a248265ab1fc8cbc5faff132b80c3
SHA1 4b02573de53b39ba9f251d8e717b392756d8b1d6
SHA256 5f04ad72f8d0e3ee1d763ee788b659aa80aabfbe82c87efbe91f999c3411c6f8
SHA512 5227cf3fa9a5231a06d769aa250908f9c963e7cac6c95118b245e715cf302b039bb97be60247a9a0e6ff56721b618d4a30c77566367f34202aa17863dc16e5d8

C:\Users\Admin\AppData\Local\Steam\htmlcache\GPUCache\data_1

MD5 10bbdb5cd9003b67668ee0bb6aaf70a9
SHA1 d753305963ed58d93a60abfcc28ef2554e4c4c7e
SHA256 6a744799c3f2eb17354beb5b37ad9be07c67c780b95e92e614078e060902ad31
SHA512 4dd0311db44de3cabe92c8ae30db01b223aea984c077026e648fc8fdf892e5a10020ff3abf042c744e59fda93c3410ff9992c9f484490fc8a60712aa54dd9a14

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 01d87b10ee51543d076aeaa85d597476
SHA1 9b9886773031fd6cd5bfc775b293c78ed83f2a7a
SHA256 a442f5904a7fcc90a8b0f2b2e2e2ab77d7724aa8ece426b1b24e77da0d333dae
SHA512 917f2101819b4b40f1fcc7fdf3522882dc2c8fec94b2ad333134e3e2b69a2c9179476dea602d0594a86b76149b568bed102c917bfa1b5b176827252717f259ee

C:\Program Files (x86)\Steam\dumps\reports\4477939b-da72-40ef-9d49-4e3911de2b87.dmp

MD5 1f11229605c949466a294df2544f8a50
SHA1 9d5d6daab4e861c8cc74d50112752be20cfcb1df
SHA256 6145a995620f8042303f2766bc586f4056a9341efc04f08ea39ff0a81202facc
SHA512 bc36faa2c7fdd0fefda2b6cd84d31ee263255ce7f254c17373459ad3829d2b6cac0432604b726f8e093f85ce7c19eef8d5e0da8b61fed5d2990a399ab60652cf

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 fedaf571ba806966a4165f94bfbd5974
SHA1 54fdf5bf1bab3b9c0bdee21d85d151d5821147c9
SHA256 907d54ff939854f6def3d8d8ad2eaeba8894875763b48c105dea0d773e7b7ac3
SHA512 31a3e4e667550687da1e5a0a1db2a25aec11d5d99e3210526213f8d01d345cade43dabe17983b3d466aa7473f1d0d21692dbd11fa7739e040177fc71fa6d852b

C:\Program Files (x86)\Steam\dumps\settings.dat

MD5 a40b09822bc470cc7a1a01ed047e7ed0
SHA1 ae0ecb606c7939301c4cdb1525534db22cdc12e3
SHA256 f8141e5a29067102945a1da4b73fbdd02fcc5925b68f7d6c0d3abb34e11bcf08
SHA512 7daeebe306255ee574fd899d43a0acf1ef8376d2fedfa7a9318ed15530fd8dab5a6c1fbf3c1d00eab8849f90df82ecd06b4c6cbe2ebb8191691fd2d93c455534

C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\TransportSecurity

MD5 4f6b5af05854395075a1ec0f91273f82
SHA1 8ec9794ed7955e51cc1681ee5f62d621fd19ec2f
SHA256 f425ec60f0ddbed602232958c4c86f0a8fa7e8e99c6b04f616fa199adbe2e839
SHA512 bce893ef6e0fb4b01efb08d2ae584289ea6777a13b837e95c6438432efa80ad1092694bd88a815e61f2dbd9f7cd2965109e6059b77789c188efbbb199f009048

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms

MD5 170d492488dfac47f0df1b68fa42249f
SHA1 c7e74da652c3184331c3bfa0257dc6e63d8aa59d
SHA256 784e262e32e81a155ad83d78a426f0772e5fc9504433bc13e5c907eeda6b422b
SHA512 1718afbc0153478b3818623740c9b2725b662b14383c9c5f804b82fd8bca6566e6263572271cea380da38c16f2d26a73c46daf596b8132020b792dec0aa5a972

C:\Program Files (x86)\Steam\steamapps\appmanifest_265930.acf

MD5 3d77f682c08d53d0ff5a5754217fbb84
SHA1 91c36fc4df0e3c2feede2129ed55384a5606980f
SHA256 0af5dc45d6a9a970af15f81b1b76ac901c1728d95e7a9e3e95c4daee6da46320
SHA512 a075a5a8ca64267dbe2866f69de0bbb28a3108512bbe5b28d1f1fa8750b23c439f106da4cc8db61936fa96d0363dccf20c7509c2b8fd25c931fc9e81e2466e13

C:\Program Files (x86)\Steam\userdata\1530346111\gamerecordings\gamerecording.pb~RFe62a737.TMP

MD5 69d48f1719aabaae6825e878af4e5171
SHA1 9d4a19b34b2b5f4f76198554bed98fa0b78acf62
SHA256 5e72449dde320fc381f210ca55bb25e30efe46e728134beca153f59f579480f9
SHA512 8674fe963b80d3ce524a0c8b67ca226e9c3baa0f8b0ea4b476490393cbc055eecfe6097554e2a97259b396b86e960fe36780d61a29b2b4b87b911c8490b1974f