Steam Wallpaper - Launching Hidden Cache Executable
Detects the Steam application wallpaper (wallpaper32.exe or wallpaper64.exe) launching a hidden executable named ._cache_GAME1.exe. This behavior is indicative of malicious wallpapers found on the Steam Workshop that use this method to execute malware.
Microsoft Sentinel (KQL)
