Analysis
-
max time kernel
689s -
max time network
691s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
06/06/2024, 07:05
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://streamfab.com
Resource
win10-20240404-en
General
-
Target
http://streamfab.com
Malware Config
Signatures
-
Downloads MZ/PE file
-
Checks computer location settings 2 TTPs 15 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Control Panel\International\Geo\Nation QCef.exe Key value queried \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Control Panel\International\Geo\Nation QCef.exe Key value queried \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Control Panel\International\Geo\Nation QCef.exe Key value queried \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Control Panel\International\Geo\Nation QCef.exe Key value queried \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Control Panel\International\Geo\Nation QCef.exe Key value queried \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Control Panel\International\Geo\Nation QCef.exe Key value queried \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Control Panel\International\Geo\Nation QCef.exe Key value queried \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Control Panel\International\Geo\Nation StreamFab64.exe Key value queried \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Control Panel\International\Geo\Nation QCef.exe Key value queried \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Control Panel\International\Geo\Nation StreamFab_Online_6180.exe Key value queried \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Control Panel\International\Geo\Nation QCef.exe Key value queried \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Control Panel\International\Geo\Nation QCef.exe Key value queried \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Control Panel\International\Geo\Nation QCef.exe Key value queried \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Control Panel\International\Geo\Nation QCef.exe Key value queried \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Control Panel\International\Geo\Nation QCef.exe -
Executes dropped EXE 34 IoCs
pid Process 3580 StreamFab_Online_6180.exe 4460 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 652 StreamFab64.exe 2600 StreamUpdate.exe 1952 StreamFab64.exe 5944 YoutubeToMP3Process.exe 5924 QCef.exe 5656 YoutubeToMP3Process.exe 5700 devcon.exe 4124 devcon.exe 5324 StreamUpdate.exe 5296 QCef.exe 5624 QCef.exe 1712 YoutubeToMP3Service.exe 5588 YoutubeToMP3Service.exe 4124 QCef.exe 6044 QCef.exe 5560 QCef.exe 360 QCef.exe 2980 QCef.exe 1412 QCef.exe 5220 QCef.exe 1912 QCef.exe 1036 QCef.exe 4724 QCef.exe 4772 QCef.exe 3344 QCef.exe 5572 QCef.exe 5416 QCef.exe 5460 QCef.exe 5060 QCef.exe 5236 QCef.exe 560 QCef.exe -
Loads dropped DLL 64 IoCs
pid Process 652 StreamFab64.exe 652 StreamFab64.exe 652 StreamFab64.exe 652 StreamFab64.exe 652 StreamFab64.exe 652 StreamFab64.exe 652 StreamFab64.exe 652 StreamFab64.exe 652 StreamFab64.exe 652 StreamFab64.exe 652 StreamFab64.exe 652 StreamFab64.exe 652 StreamFab64.exe 652 StreamFab64.exe 652 StreamFab64.exe 652 StreamFab64.exe 652 StreamFab64.exe 652 StreamFab64.exe 2600 StreamUpdate.exe 2600 StreamUpdate.exe 2600 StreamUpdate.exe 2600 StreamUpdate.exe 2600 StreamUpdate.exe 2600 StreamUpdate.exe 2600 StreamUpdate.exe 2600 StreamUpdate.exe 2600 StreamUpdate.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 5924 QCef.exe 5924 QCef.exe 5924 QCef.exe 5924 QCef.exe 5924 QCef.exe 5924 QCef.exe 5924 QCef.exe 5924 QCef.exe 5924 QCef.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Software\Microsoft\Windows\CurrentVersion\Run\247b6221a26d5c5da9074c127870d49f = "\"C:\\Program Files\\StreamFab\\StreamFab\\StreamUpdate.exe\" --run_mode=background_check" StreamUpdate.exe Set value (str) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Software\Microsoft\Windows\CurrentVersion\Run\YouTubeToMP3 = "\"C:\\Program Files\\StreamFab\\StreamFab\\StreamFab64.exe\" mode=StartWhenPowerUp" StreamFab64.exe -
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\myeasylog.log StreamFab64.exe -
Suspicious use of NtSetInformationThreadHideFromDebugger 46 IoCs
pid Process 652 StreamFab64.exe 652 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 5924 QCef.exe 5924 QCef.exe 5296 QCef.exe 5624 QCef.exe 5296 QCef.exe 5624 QCef.exe 6044 QCef.exe 4124 QCef.exe 360 QCef.exe 5560 QCef.exe 6044 QCef.exe 4124 QCef.exe 360 QCef.exe 5560 QCef.exe 2980 QCef.exe 2980 QCef.exe 1412 QCef.exe 1412 QCef.exe 5220 QCef.exe 5220 QCef.exe 1912 QCef.exe 1912 QCef.exe 1036 QCef.exe 1036 QCef.exe 4724 QCef.exe 4724 QCef.exe 4772 QCef.exe 4772 QCef.exe 3344 QCef.exe 3344 QCef.exe 5572 QCef.exe 5572 QCef.exe 5416 QCef.exe 5416 QCef.exe 5460 QCef.exe 5460 QCef.exe 5060 QCef.exe 5060 QCef.exe 5236 QCef.exe 5236 QCef.exe 560 QCef.exe 560 QCef.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\this.py StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\site-packages\idna-2.10.dist-info\top_level.txt StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\QtQuick\Controls\Private\TableViewSelection.qmlc StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\asyncore.py StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\test\test_import\data\circular_imports\basic.py StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\xml\dom\minidom.py StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\QLanguage\ReportQt_ARA.qm StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\QtQuick\Controls.2\Universal\DelayButton.qml StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\QtQuick\Controls.2\Universal\Drawer.qml StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\lib2to3\fixes\fix_next.py StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\encodings\mac_turkish.py StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\tcl\tcl8.6\tzdata\America\St_Johns StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\tcl\tcl8.6\tzdata\Canada\Eastern StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\tcl\tix8.4.3\demos\bitmaps\exit.xpm StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\QtQuick\Controls\Styles\Base\ProgressBarStyle.qml StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\bz2.py StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\site-packages\pip\_vendor\html5lib\_trie\py.py StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\test\sndhdrdata\sndhdr.aifc StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\api-ms-win-core-console-l1-1-0.dll StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\site-packages\pip\_internal\req\req_tracker.py StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\locales\pt-PT.pak StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\ctypes\test\test_loading.py StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\test\test_json\test_tool.py StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\CEF\WidevineCdm\4.10.2710.0\_platform_specific\win_x64\widevinecdm.dll.sig StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\PYthon37\tcl\tcl8.6\encoding\iso8859-1.enc StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\tcl\tcl8.6\tzdata\Indian\Kerguelen StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\PYthon37\tcl\tk8.6\demos\cscroll.tcl StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\include\internal\context.h StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\test\cfgparser.1 StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\test\crashers\trace_at_recursion_limit.py StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\test\test_http_cookies.py StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\PYthon37\tcl\tix8.4.3\bitmaps\hourglas.mask StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\QtQuick\Controls\Styles\Desktop\TableViewStyle.qmlc StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\my_resource\website_home\white\imgs\vimeo.png StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\site-packages\pip\_internal\operations\__init__.py StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\test\test_import\data\package\submodule.py StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\PYthon37\tcl\tix8.4.3\demos\samples\SListBox.tcl StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\tcl\tk8.6\tearoff.tcl StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\Tools\pynche\pyColorChooser.py StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\QtQuick\Controls\Private\BasicButton.qml StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\QtQuick\Controls\Private\StackView.jsc StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\site-packages\setuptools-47.1.0.dist-info StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\QtQuick\Controls.2\Fusion\RadioDelegate.qml StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\QtQuick\Controls.2\Material\ComboBox.qml StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\QtQuick\Controls\Private\ToolMenuButton.qml StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\test\test_msilib.py StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\include\pythonrun.h StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\imp.py StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\site-packages\pip\_vendor\distlib\metadata.py StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\test\imghdrdata\python.pgm StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\test\test_email\data\msg_08.txt StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\PYthon37\tcl\tcl8.6\tzdata\Australia\Eucla StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\PYthon37\tcl\tk8.6\demos\ttkpane.tcl StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\my_resource\website_home\dark\imgs\music_youtube.png StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\locales\es-419.pak StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\include\dictobject.h StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\lib2to3\fixes\fix_exec.py StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\site-packages\pip\_vendor\pep517\__init__.py StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\test\sndhdrdata\sndhdr.au StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\PYthon37\tcl\tcl8.6\encoding\cp949.enc StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\PYthon37\tcl\tcl8.6\msgs\en_hk.msg StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\QtQuick\Controls\Styles\Base\images StreamFab(6.1.8.0).exe File opened for modification C:\Program Files\StreamFab\StreamFab\QtQuick\Controls\TableView.qml StreamFab(6.1.8.0).exe File created C:\Program Files\StreamFab\StreamFab\resources.pak StreamFab(6.1.8.0).exe -
Drops file in Windows directory 10 IoCs
description ioc Process File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdgeCP.exe File opened for modification C:\Windows\Debug\ESE.TXT MicrosoftEdge.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdgeCP.exe File opened for modification C:\Windows\Debug\ESE.TXT MicrosoftEdge.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdgeCP.exe File opened for modification C:\Windows\Debug\ESE.TXT MicrosoftEdge.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdge.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdgeCP.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdge.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdge.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe -
Kills process with taskkill 6 IoCs
pid Process 604 TASKKILL.exe 5264 TASKKILL.exe 5484 TASKKILL.exe 1708 TASKKILL.exe 1552 TASKKILL.exe 2444 TASKKILL.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Software\Microsoft\Internet Explorer\Main browser_broker.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Software\Microsoft\Internet Explorer\Main MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000\Software\Microsoft\Internet Explorer\Main browser_broker.exe -
Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133621311676857668" chrome.exe -
Modifies registry class 64 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Settings\Cache\History MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 8372a979e0b7da01 MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\CVListXMLVersionHigh = "268435456" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-DXFeatureLevel = "0" MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\Content MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\Disallowed MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\CVListXMLVersionLow = "395205405" MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead\Meta\generator$vBulletin 3 MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\Disallowed\CRLs MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\006\ACGStatus\DynamicCodePolicy = 00000000 MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus MicrosoftEdgeCP.exe Set value (str) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Content\CachePrefix MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\CA\CRLs MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\006\CIStatus\CIPolicyState = "0" MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate\CRLs MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\PendingRecovery\ReadingStorePending = "1" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\CIPolicyState = "0" MicrosoftEdgeCP.exe Set value (str) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Settings\Cache\Content\CachePrefix MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\Root\Certificates MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\EnablementState = "1" MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Privacy MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings\Zones\3\{AEBA21FA-782A-4A90-978D-B7216 = 1a3761592352350c7a5f20172f1e1a190e2b017313371312141a152a MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FavOrder\TreeView = "1" MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\ACGPolicyState = "8" MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\CIStatus MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\trust MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\CVListXMLVersionLow = "0" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Rating\NextPromptBuild = "15063" MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\SignaturePolicy = 06000000 MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\IECompatVersionHigh = "268435456" MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\Active MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DummyPath\dummySetting = "1" MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DomainSuggestion\FileNames\ MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main MicrosoftEdge.exe Set value (str) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" MicrosoftEdgeCP.exe Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead\Meta\generator$blogger MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\CVListXMLVersionHigh = "0" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\ACGStatus\ACGPolicyState = "8" MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate MicrosoftEdgeCP.exe Set value (str) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Settings\Cache\History\CachePrefix = "Visited:" MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DataStore\OneTimeCleanup = "1" MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\CIStatus\SignaturePolicy = 06000000 MicrosoftEdgeCP.exe Set value (str) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\History\CachePrefix = "Visited:" MicrosoftEdgeCP.exe Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings\Zones\3\{A8A88C49-5EB2-4990-A1A2-08760 = 1a3761592352350c7a5f20172f1e1a190e2b017313371312141a152a MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 6548ef6fe0b7da01 MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FavOrder\SyncIEFirstTimeFullScan = "1" MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\SignaturePolicy = 06000000 MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FavOrder\SyncIEFirstTimeFullScan = "1" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DomainSuggestion\NextUpdateDate = "424422770" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\Active\{1ECC6F85-F350-4D09-B4BF-1D10B31B6EA9} = "0" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Protected - It is a violation of Windows Policy to modif = "1" MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\006\CIStatus\SignaturePolicy = 06000000 MicrosoftEdgeCP.exe Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\DynamicCodePolicy = 05000000 MicrosoftEdgeCP.exe Set value (data) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\TabbedBrowsing\NewTabPage\ProcessingFlag = c02f039de0b7da01 MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings\Zones\3 MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Settings\Cache\Cookies\CacheLimit = "1" MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Rating MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DummyPath MicrosoftEdge.exe -
description ioc Process Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1\Blob = 190000000100000010000000cb9dd0fceaaa492f75ce292c21bbfbdd0300000001000000140000008094640eb5a7a1ca119c1fddd59f810263a7fbd17e00000001000000080000000080c82b6886d7017a000000010000000c000000300a06082b060105050703091d0000000100000010000000521f5c98970d19a8e515ef6eeb6d48ef140000000100000014000000ae6c05a39313e2a2e7e2d71cd6c7f07fc86753a07f0000000100000016000000301406082b0601050507030306082b060105050703096200000001000000200000002cabeafe37d06ca22aba7391c0033d25982952c453647349763a3ab5ad6ccf690b000000010000003000000047006c006f00620061006c005300690067006e00200052006f006f00740020004300410020002d002000520036000000090000000100000056000000305406082b0601050507030206082b06010505070303060a2b0601040182370a030c060a2b0601040182370a030406082b0601050507030406082b0601050507030906082b0601050507030106082b0601050507030853000000010000007e000000307c301f06092b06010401a032010130123010060a2b0601040182373c0101030200c0301f06092b06010401a032010230123010060a2b0601040182373c0101030200c0301b060567810c010130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00f0000000100000030000000ea09c51d4c3a334ce4acd2bc08c6a9be352e334f45c4fccfcab63edb9f82dc87d4bd2ed2fadae11163fb954809984ff1200000000100000087050000308205833082036ba003020102020e45e6bb038333c3856548e6ff4551300d06092a864886f70d01010c0500304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523631133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e301e170d3134313231303030303030305a170d3334313231303030303030305a304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523631133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e30820222300d06092a864886f70d01010105000382020f003082020a02820201009507e873ca66f9ec14ca7b3cf70d08f1b4450b2c82b448c6eb5b3cae83b841923314a46f7fe92accc6b0886bc5b689d1c6b2ff14ce511421ec4add1b5ac6d687ee4d3a1506ed64660b9280ca44de73944ef3a7897f4f786308c812506d42662f4db979284d521a8a1a80b719810e7ec48abc644c211c4368d73d3c8ac5b266d5909ab73106c5bee26d3206a61ef9b9ebaaa3b8bfbe826350d0f01889dfe40f79f5eaa21f2ad2702e7be7bc93bb6d53e2487c8c100738ff66b277617ee0ea8c3caab4a4f6f3954a12076dfd8cb289cfd0a06177c85874b0d4233af75d3acaa2db9d09de5d442d90f181cd5792fa7ebc50046334df6b9318be6b36b239e4ac2436b7f0efb61c135793b6deb2f8e285b773a2b835aa45f2e09d36a16f548af172566e2e88c55142441594eea3c538969b4e4e5a0b47f30636497730bc7137e5a6ec210875fce661163f77d5d99197840a6cd4024d74c014edfd39fb83f25e14a104b00be9feee8fe16e0bb208b36166096ab1063a659659c0f035fdc9da288d1a118770810aa89a751d9e3a8605009edb80d625f9dc059e27594c76395beaf9a5a1d8830fd1ffdf3011f985cf3348f5ca6d64142c7a584fd34b0849c595641a630e793df5b38cca58ad9c4245796e0e87195c54b165b6bf8c9bdc13e90d6fb82edc676ec98b11b584148a0019708379919791d41a27bf371e3207d814633c284caf0203010001a3633061300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e04160414ae6c05a39313e2a2e7e2d71cd6c7f07fc86753a0301f0603551d23041830168014ae6c05a39313e2a2e7e2d71cd6c7f07fc86753a0300d06092a864886f70d01010c050003820201008325ede8d1fd9552cd9ec004a09169e65cd084dedcada24fe84778d66598a95ba83c877c028ad16eb71673e65fc05498d574bec1cde21191ad23183ddde1724496b4955ec07b8e99781643135657b3a2b33bb577dc4072aca3eb9b353eb10821a1e7c443377932beb5e79c2c4cbc4329998e30d3ac21e0e31dfad80733765400222ab94d202e7068dae553fc835cd39df2ff440c4466f2d2e3bd46001a6d02ba255d8da13151dd54461c4ddb9996ef1a1c045ca615ef78e079fe5ddb3eaa4c55fd9a15a96fe1a6fbdf7030e9c3ee4246edc2930589fa7d637b3fd071817c00e898ae0e7834c325fbaf0a9f206bdd3b138f128ce2411a487a73a07769c7b65c7f82c81efe581b282ba86cad5e6dc005d27bb7eb80fe2537fe029b68ac425dc3eef5ccdcf05075d236699ce67b04df6e0669b6de0a09485987eb7b14607a64aa6943ef91c74cec18dd6cef532d8c99e15ef2723ecf54c8bd67eca40f4c45ffd3b93023074c8f10bf8696d9995ab499571ca4ccbb158953ba2c050fe4c49e19b11834d54c9dbaedf71faf24950478a803bbee81e5da5f7c8b4aa1907425a7b33e4bc82c56bdc7c8ef38e25c92f079f79c84ba742d6101207e7ed1f24f07595f8b2d4352eb460c94e1f566477977d5545b1fad2437cb455a4ea04448c8d8b099c5158409f6d64949c065b8e61a716ea0a8f182e8453e6cd602d70a6783055ac9a410 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3E2BF7F2031B96F38CE6C4D8A85D3E2D58476A0F\Blob = 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 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8CF427FD790C3AD166068DE81E57EFBB932272D4\Blob = 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 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1\Blob = 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 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3E2BF7F2031B96F38CE6C4D8A85D3E2D58476A0F\Blob = 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 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob = 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 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob = 5c00000001000000040000000008000019000000010000001000000091fad483f14848a8a69b18b805cdbb3a0f0000000100000014000000327fc447408de9bf596f83d4b2fa4b8e3e7097d8090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b06010505070308530000000100000041000000303f3020060a6086480186fa6c0a010230123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c07f000000010000002c000000302a060a2b0601040182370a030406082b0601050507030506082b0601050507030606082b060105050703076200000001000000200000006dc47172e01cbcb0bf62580d895fe2b8ac9ad4f873801e0c10b9c837d21eb1770b000000010000001e00000045006e00740072007500730074002000280032003000340038002900000014000000010000001400000055e481d11180bed889b908a331f9a1240916b9701d0000000100000010000000e871723e266f38af5d49cda2a502669c7e000000010000000800000000c001b39667d601030000000100000014000000503006091d97d4f5ae39f7cbe7927d7d652d3431040000000100000010000000ee2931bc327e9ae6e8b5f751b434719020000000010000002e0400003082042a30820312a00302010202043863def8300d06092a864886f70d01010505003081b431143012060355040a130b456e74727573742e6e65743140303e060355040b14377777772e656e74727573742e6e65742f4350535f3230343820696e636f72702e206279207265662e20286c696d697473206c6961622e2931253023060355040b131c286329203139393920456e74727573742e6e6574204c696d69746564313330310603550403132a456e74727573742e6e65742043657274696669636174696f6e20417574686f7269747920283230343829301e170d3939313232343137353035315a170d3239303732343134313531325a3081b431143012060355040a130b456e74727573742e6e65743140303e060355040b14377777772e656e74727573742e6e65742f4350535f3230343820696e636f72702e206279207265662e20286c696d697473206c6961622e2931253023060355040b131c286329203139393920456e74727573742e6e6574204c696d69746564313330310603550403132a456e74727573742e6e65742043657274696669636174696f6e20417574686f726974792028323034382930820122300d06092a864886f70d01010105000382010f003082010a0282010100ad4d4ba91286b2eaa320071516642a2b4bd1bf0b4a4d8eed8076a567b77840c07342c868c0db532bdd5eb8769835938b1a9d7c133a0e1f5bb71ecfe524141eb181a98d7db8cc6b4b03f1020cdcaba54024007f7494a19d0829b3880bf587779d55cde4c37ed76a64ab851486955b9732506f3dc8ba660ce3fcbdb849c176894919fdc0a8bd89a3672fc69fbc711960b82de92cc99076667b94e2af78d665535d3cd69cb2cf2903f92fa450b2d448ce0532558afdb2644c0ee4980775db7fdfb9085560853029f97b48a46986e3353f1e865d7a7a15bdef008e1522541700902693bc0e496891bff847d39d9542c10e4ddf6f26cfc3182162664370d6d5c007e10203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e0416041455e481d11180bed889b908a331f9a1240916b970300d06092a864886f70d010105050003820101003b9b8f569b30e753997c7a79a74d97d7199590fb061fca337c46638f966624fa401b2127cae67273f24ffe3199fdc80c4c6853c680821398fab6adda5d3df1ce6ef6151194820cee3f95af11ab0fd72fde1f038f572c1ec9bb9a1a4495eb184fa61fcd7d57102f9b04095a84b56ed81d3ae1d69ed16c795e791c14c5e3d04c933b653ceddf3dbea6e5951ac3b519c3bd5e5bbbff23ef6819cb1293275c032d6f30d01eb61aacde5af7d1aaa827a6fe7981c479993357ba12b0a9e0426c93ca56defe6d840b088b7e8dead79821c6f3e73c792f5e9cd14c158de1ec2237cc9a430b97dc80908db3679b6f48081556cfbff12b7c5e9a76e95990c57c8335116551 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B7AB3308D1EA4477BA1480125A6FBDA936490CBB\Blob = 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 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 5c000000010000000400000000100000190000000100000010000000ea6089055218053dd01e37e1d806eedf0f000000010000003000000066b764a96581128168cf208e374dda479d54e311f32457f4aee0dbd2a6c8d171d531289e1cd22bfdbbd4cfd979625483090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b0601050507030853000000010000004300000030413022060c2b06010401b231010201050130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0620000000100000020000000e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd21400000001000000140000005379bf5aaa2b4acf5480e1d89bc09df2b20366cb1d0000000100000010000000885010358d29a38f059b028559c95f900b00000001000000100000005300650063007400690067006f0000000300000001000000140000002b8f1b57330dbba2d07a6c51f70ee90ddab9ad8e0400000001000000100000001bfe69d191b71933a372a80fe155e5b52000000001000000e2050000308205de308203c6a003020102021001fd6d30fca3ca51a81bbc640e35032d300d06092a864886f70d01010c0500308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f72697479301e170d3130303230313030303030305a170d3338303131383233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f7269747930820222300d06092a864886f70d01010105000382020f003082020a028202010080126517360ec3db08b3d0ac570d76edcd27d34cad508361e2aa204d092d6409dcce899fcc3da9ecf6cfc1dcf1d3b1d67b3728112b47da39c6bc3a19b45fa6bd7d9da36342b676f2a93b2b91f8e26fd0ec162090093ee2e874c918b491d46264db7fa306f188186a90223cbcfe13f087147bf6e41f8ed4e451c61167460851cb8614543fbc33fe7e6c9cff169d18bd518e35a6a766c87267db2166b1d49b7803c0503ae8ccf0dcbc9e4cfeaf0596351f575ab7ffcef93db72cb6f654ddc8e7123a4dae4c8ab75c9ab4b7203dca7f2234ae7e3b68660144e7014e46539b3360f794be5337907343f332c353efdbaafe744e69c76b8c6093dec4c70cdfe132aecc933b517895678bee3d56fe0cd0690f1b0ff325266b336df76e47fa7343e57e0ea566b1297c3284635589c40dc19354301913acd37d37a7eb5d3a6c355cdb41d712daa9490bdfd8808a0993628eb566cf2588cd84b8b13fa4390fd9029eeb124c957cf36b05a95e1683ccb867e2e8139dcc5b82d34cb3ed5bffdee573ac233b2d00bf3555740949d849581a7f9236e651920ef3267d1c4d17bcc9ec4326d0bf415f40a94444f499e757879e501f5754a83efd74632fb1506509e658422e431a4cb4f0254759fa041e93d426464a5081b2debe78b7fc6715e1c957841e0f63d6e962bad65f552eea5cc62808042539b80e2ba9f24c971c073f0d52f5edef2f820f0203010001a3423040301d0603551d0e041604145379bf5aaa2b4acf5480e1d89bc09df2b20366cb300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff300d06092a864886f70d01010c050003820201005cd47c0dcff7017d4199650c73c5529fcbf8cf99067f1bda43159f9e0255579614f1523c27879428ed1f3a0137a276fc5350c0849bc66b4eba8c214fa28e556291f36915d8bc88e3c4aa0bfdefa8e94b552a06206d55782919ee5f305c4b241155ff249a6e5e2a2bee0b4d9f7ff70138941495430709fb60a9ee1cab128ca09a5ea7986a596d8b3f08fbc8d145af18156490120f73282ec5e2244efc58ecf0f445fe22b3eb2f8ed2d9456105c1976fa876728f8b8c36afbf0d05ce718de6a66f1f6ca67162c5d8d083720cf16711890c9c134c7234dfbcd571dfaa71dde1b96c8c3c125d65dabd5712b6436bffe5de4d661151cf99aeec17b6e871918cde49fedd3571a21527941ccf61e326bb6fa36725215de6dd1d0b2e681b3b82afec836785d4985174b1b9998089ff7f78195c794a602e9240ae4c372a2cc9c762c80e5df7365bcae0252501b4dd1a079c77003fd0dcd5ec3dd4fabb3fcc85d66f7fa92ddfb902f7f5979ab535dac367b0874aa9289e238eff5c276be1b04ff307ee002ed45987cb524195eaf447d7ee6441557c8d590295dd629dc2b9ee5a287484a59bb790c70c07dff589367432d628c1b0b00be09c4cc31cd6fce369b54746812fa282abd3634470c48dff2d33baad8f7bb57088ae3e19cf4028d8fcc890bb5d9922f552e658c51f883143ee881dd7c68e3c436a1da718de7d3d16f162f9ca90a8fd StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob = 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 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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 StreamFab64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3E2BF7F2031B96F38CE6C4D8A85D3E2D58476A0F StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3E2BF7F2031B96F38CE6C4D8A85D3E2D58476A0F\Blob = 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 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8CF427FD790C3AD166068DE81E57EFBB932272D4\Blob = 190000000100000010000000fa46ce7cbb85cfb4310075313a09ee050300000001000000140000008cf427fd790c3ad166068de81e57efbb932272d47e000000010000000800000000c001b39667d6011d0000000100000010000000521b5f4582c1dcaae381b05e37ca2d341400000001000000140000006a72267ad01eef7de73b6951d46c8d9f901266ab0b000000010000001800000045006e00740072007500730074002e006e0065007400000062000000010000002000000043df5774b03e7fef5fe40d931a7bedf1bb2e6b42738c4e6d3841103d3aa7f3397f000000010000002c000000302a060a2b0601040182370a030406082b0601050507030506082b0601050507030606082b06010505070307530000000100000041000000303f3020060a6086480186fa6c0a010230123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b060105050703080f0000000100000020000000fde5f2d9ce2026e1e10064c0a468c9f355b90acf85baf5ce6f52d4016837fd942000000001000000420400003082043e30820326a00302010202044a538c28300d06092a864886f70d01010b05003081be310b300906035504061302555331163014060355040a130d456e74727573742c20496e632e31283026060355040b131f536565207777772e656e74727573742e6e65742f6c6567616c2d7465726d7331393037060355040b1330286329203230303920456e74727573742c20496e632e202d20666f7220617574686f72697a656420757365206f6e6c793132303006035504031329456e747275737420526f6f742043657274696669636174696f6e20417574686f72697479202d204732301e170d3039303730373137323535345a170d3330313230373137353535345a3081be310b300906035504061302555331163014060355040a130d456e74727573742c20496e632e31283026060355040b131f536565207777772e656e74727573742e6e65742f6c6567616c2d7465726d7331393037060355040b1330286329203230303920456e74727573742c20496e632e202d20666f7220617574686f72697a656420757365206f6e6c793132303006035504031329456e747275737420526f6f742043657274696669636174696f6e20417574686f72697479202d20473230820122300d06092a864886f70d01010105000382010f003082010a0282010100ba84b672db9e0c6be299e93001a776ea32b895411ac9da614e5872cffef68279bf7361060aa527d8b35fd3454e1c72d64e32f2728a0ff78319d06a808000451eb0c7e79abf1257271ca3682f0a87bd6a6b0e5e65f31c77d5d4858d7021b4b332e78ba2d5863902b1b8d247cee4c949c43ba7defb547d57bef0e86ec279b23a0b55e250981632135c2f7856c1c294b3f25ae4279a9f24d7c6ecd09b2582e3ccc2c445c58c977a066b2a119fa90a6e483b6fdbd4111942f78f07bff5535f9c3ef4172ce669ac4e324c6277eab7e8e5bb34bc198bae9c51e7b77eb553b13322e56dcf703c1afae29b67b683f48da5af624c4de058ac64341203f8b68d946324a4710203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e041604146a72267ad01eef7de73b6951d46c8d9f901266ab300d06092a864886f70d01010b05000382010100799f1d96c6b6793f228d87d3870304606a6b9a2e59897311ac43d1f513ff8d392bc0f2bd4f708ca92fea17c40b549ed41b9698333ca8ad62a20076ab59696e061d7ec4b9448d98af12d461db0a194647f3ebf763c1400540a5d2b7f4b59a36bfa98876880455042b9c877f1a373c7e2da51ad8d4895ecabdac3d6cd86dafd5f3760fcd3b8838229d6c939ac43dbf821b653fa60f5daafce5b215cab5adc6bc3dd084e8ea0672b04d393278bf3e119c0ba49d9a21f3f09b0b3078dbc1dc8743febc639acac5c21cc9c78dff3b125808e6b63dec7a2c4efb8396ce0c3c69875473a473c293ff5110ac155401d8fc05b189a17f74839a49d7dc4e7b8a486f8b45f6 StreamFab64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4 StreamFab64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 5c000000010000000400000000100000190000000100000010000000ffac207997bb2cfe865570179ee037b9030000000100000014000000ddfb16cd4931c973a2037d3fc83a4d7d775d05e41d0000000100000010000000a86dc6a233eb339610f3ed414927c559140000000100000014000000ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f620000000100000020000000552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac899880b00000001000000320000004400690067006900430065007200740020005400720075007300740065006400200052006f006f0074002000470034000000090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b06010505070308530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00f00000001000000300000004ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e199604000000010000001000000078f2fcaa601f2fb4ebc937ba532e75492000000001000000940500003082059030820378a0030201020210059b1b579e8e2132e23907bda777755c300d06092a864886f70d01010c05003062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f74204734301e170d3133303830313132303030305a170d3338303131353132303030305a3062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f7420473430820222300d06092a864886f70d01010105000382020f003082020a0282020100bfe6907368debbe45d4a3c3022306933ecc2a7252ec9213df28ad859c2e129a73d58ab769acdae7b1b840dc4301ff31ba43816eb56c6976d1dabb279f2ca11d2e45fd6053c520f521fc69e15a57ebe9fa95716595572af689370c2b2ba75996a733294d11044102edf82f30784e6743b6d71e22d0c1bee20d5c9201d63292dceec5e4ec893f821619b34eb05c65eec5b1abcebc9cfcdac34405fb17a66ee77c848a86657579f54588e0c2bb74fa730d956eeca7b5de3adc94f5ee535e731cbda935edc8e8f80dab69198409079c378c7b6b1c4b56a183803108dd8d437a42e057d88f5823e109170ab55824132d7db04732a6e91017c214cd4bcae1b03755d7866d93a31449a3340bf08d75a49a4c2e6a9a067dda427bca14f39b5115817f7245c468f64f7c169887698763d595d4276878997697a48f0e0a2121b669a74cade4b1ee70e63aee6d4ef92923a9e3ddc00e4452589b69a44192b7ec094b4d2616deb33d9c5df4b0400cc7d1c95c38ff721b2b211b7bb7ff2d58c702c4160aab1631844951a76627ef680b0fbe864a633d18907e1bdb7e643a418b8a67701e10f940c211db2542925896ce50e52514774be26acb64175de7aac5f8d3fc9bcd34111125be51050eb31c5ca72162209df7c4c753f63ec215fc420516b6fb1ab868b4fc2d6455f9d20fca11ec5c08fa2b17e0a2699f5e4692f981d2df5d9a9b21de51b0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020186301d0603551d0e04160414ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f300d06092a864886f70d01010c05000382020100bb61d97da96cbe17c4911bc3a1a2008de364680f56cf77ae70f9fd9a4a99b9c9785c0c0c5fe4e61429560b36495d4463e0ad9c9618661b230d3d79e96d6bd654f8d23cc14340ae1d50f552fc903bbb9899696bc7c1a7a868a427dc9df927ae3085b9f6674d3a3e8f5939225344ebc85d03caed507a7d62210a80c87366d1a005605fe8a5b4a7afa8f76d359c7c5a8ad6a23899f3788bf44dd2200bde04ee8c9b4781720dc01432ef30592eaee071f256e46a976f92506d968d687a9ab236147a06f224b9091150d708b1b8897a8423614229e5a3cda22041d7d19c64d9ea26a18b14d74c19b25041713d3f4d7023860c4adc81d2cc3294840d0809971c4fc0ee6b207430d2e03934108521150108e85532de7149d92817504de6be4dd175acd0cafb41b843a5aad3c305444f2c369be2fae245b823536c066f67557f46b54c3f6e285a7926d2a4a86297d21ee2ed4a8bbc1bfd474a0ddf67667eb25b41d03be4f43bf40463e9efc2540051a08a2ac9ce78ccd5ea870418b3ceaf4988aff39299b6b3e6610fd28500e7501ae41b959d19a1b99cb19bb1001eefd00f4f426cc90abcee43fa3a71a5c84d26a535fd895dbc85621d32d2a02b54ed9a57c1dbfa10cf19b78b4a1b8f01b6279553e8b6896d5bbc68d423e88b51a256f9f0a680a0d61eb3bc0f0f537529aaea1377e4de8c8121ad07104711ad873d07d175bccff3667e StreamFab64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E StreamFab64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B7AB3308D1EA4477BA1480125A6FBDA936490CBB StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob = 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 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8CF427FD790C3AD166068DE81E57EFBB932272D4\Blob = 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 StreamFab64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431 StreamFab64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B7AB3308D1EA4477BA1480125A6FBDA936490CBB\Blob = 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 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3E2BF7F2031B96F38CE6C4D8A85D3E2D58476A0F\Blob = 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 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 5c000000010000000400000000080000190000000100000010000000d0fd3c9c380d7b65e26b9a3fedd39b8f030000000100000014000000d69b561148f01c77c54578c10926df5b856976ad1d000000010000001000000001728e1ecf7a9d86fb3cec8948aba9531400000001000000140000008ff04b7fa82e4524ae4d50fa639a8bdee2dd1bbc620000000100000020000000cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b0b000000010000003000000047006c006f00620061006c005300690067006e00200052006f006f00740020004300410020002d002000520033000000530000000100000040000000303e301f06092b06010401a032010130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b060105050703080f00000001000000200000005229ba15b31b0c6f4cca89c2985177974327d1b689a3b935a0bd975532af22ab040000000100000010000000c5dfb849ca051355ee2dba1ac33eb0282000000001000000630300003082035f30820247a003020102020b04000000000121585308a2300d06092a864886f70d01010b0500304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523331133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e301e170d3039303331383130303030305a170d3239303331383130303030305a304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523331133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e30820122300d06092a864886f70d01010105000382010f003082010a0282010100cc2576907906782216f5c083b684ca289efd057611c5ad8872fc460243c7b28a9d045f24cb2e4be1608246e152ab0c8147706cdd64d1ebf52ca30f823d0c2bae97d7b614861079bb3b1380778c08e149d26a622f1f5efa9668df892795389f06d73ec9cb26590d73deb0c8e9260e8315c6ef5b8bd20460ca49a628f6693bf6cbc82891e59d8a615737ac7414dc74e03aee722f2e9cfbd0bbbff53d00e10633e8822bae53a63a16738cdd410e203ac0b4a7a1e9b24f902e3260e957cbb904926868e538266075b29f77ff9114efae2049fcad401548d1023161195eb897efad77b7649a7abf5fc113ef9b62fb0d6ce0546916a903da6ee983937176c6698582170203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e041604148ff04b7fa82e4524ae4d50fa639a8bdee2dd1bbc300d06092a864886f70d01010b050003820101004b40dbc050aafec80ceff796544549bb96000941acb3138686280733ca6be674b9ba002daea40ad3f5f1f10f8abf73674a83c7447b78e0af6e6c6f03298e333945c38ee4b9576caafc1296ec53c62de4246cb99463fbdc536867563e83b8cf3521c3c968fecedac253aacc908ae9f05d468c95dd7a58281a2f1ddecd0037418fed446dd75328977ef367041e15d78a96b4d3de4c27a44c1b737376f41799c21f7a0ee32d08ad0a1c2cff3cab550e0f917e36ebc35749bee12e2d7c608bc3415113239dcef7326b9401a899e72c331f3a3b25d28640ce3b2c8678c9612f14baeedb556fdf84ee05094dbd28d872ced36250651eeb92978331d9b3b5ca47583f5f StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 0400000001000000100000001bfe69d191b71933a372a80fe155e5b50300000001000000140000002b8f1b57330dbba2d07a6c51f70ee90ddab9ad8e0b00000001000000100000005300650063007400690067006f0000001d0000000100000010000000885010358d29a38f059b028559c95f901400000001000000140000005379bf5aaa2b4acf5480e1d89bc09df2b20366cb620000000100000020000000e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd253000000010000004300000030413022060c2b06010401b231010201050130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b060105050703080f000000010000003000000066b764a96581128168cf208e374dda479d54e311f32457f4aee0dbd2a6c8d171d531289e1cd22bfdbbd4cfd979625483190000000100000010000000ea6089055218053dd01e37e1d806eedf2000000001000000e2050000308205de308203c6a003020102021001fd6d30fca3ca51a81bbc640e35032d300d06092a864886f70d01010c0500308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f72697479301e170d3130303230313030303030305a170d3338303131383233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374205253412043657274696669636174696f6e20417574686f7269747930820222300d06092a864886f70d01010105000382020f003082020a028202010080126517360ec3db08b3d0ac570d76edcd27d34cad508361e2aa204d092d6409dcce899fcc3da9ecf6cfc1dcf1d3b1d67b3728112b47da39c6bc3a19b45fa6bd7d9da36342b676f2a93b2b91f8e26fd0ec162090093ee2e874c918b491d46264db7fa306f188186a90223cbcfe13f087147bf6e41f8ed4e451c61167460851cb8614543fbc33fe7e6c9cff169d18bd518e35a6a766c87267db2166b1d49b7803c0503ae8ccf0dcbc9e4cfeaf0596351f575ab7ffcef93db72cb6f654ddc8e7123a4dae4c8ab75c9ab4b7203dca7f2234ae7e3b68660144e7014e46539b3360f794be5337907343f332c353efdbaafe744e69c76b8c6093dec4c70cdfe132aecc933b517895678bee3d56fe0cd0690f1b0ff325266b336df76e47fa7343e57e0ea566b1297c3284635589c40dc19354301913acd37d37a7eb5d3a6c355cdb41d712daa9490bdfd8808a0993628eb566cf2588cd84b8b13fa4390fd9029eeb124c957cf36b05a95e1683ccb867e2e8139dcc5b82d34cb3ed5bffdee573ac233b2d00bf3555740949d849581a7f9236e651920ef3267d1c4d17bcc9ec4326d0bf415f40a94444f499e757879e501f5754a83efd74632fb1506509e658422e431a4cb4f0254759fa041e93d426464a5081b2debe78b7fc6715e1c957841e0f63d6e962bad65f552eea5cc62808042539b80e2ba9f24c971c073f0d52f5edef2f820f0203010001a3423040301d0603551d0e041604145379bf5aaa2b4acf5480e1d89bc09df2b20366cb300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff300d06092a864886f70d01010c050003820201005cd47c0dcff7017d4199650c73c5529fcbf8cf99067f1bda43159f9e0255579614f1523c27879428ed1f3a0137a276fc5350c0849bc66b4eba8c214fa28e556291f36915d8bc88e3c4aa0bfdefa8e94b552a06206d55782919ee5f305c4b241155ff249a6e5e2a2bee0b4d9f7ff70138941495430709fb60a9ee1cab128ca09a5ea7986a596d8b3f08fbc8d145af18156490120f73282ec5e2244efc58ecf0f445fe22b3eb2f8ed2d9456105c1976fa876728f8b8c36afbf0d05ce718de6a66f1f6ca67162c5d8d083720cf16711890c9c134c7234dfbcd571dfaa71dde1b96c8c3c125d65dabd5712b6436bffe5de4d661151cf99aeec17b6e871918cde49fedd3571a21527941ccf61e326bb6fa36725215de6dd1d0b2e681b3b82afec836785d4985174b1b9998089ff7f78195c794a602e9240ae4c372a2cc9c762c80e5df7365bcae0252501b4dd1a079c77003fd0dcd5ec3dd4fabb3fcc85d66f7fa92ddfb902f7f5979ab535dac367b0874aa9289e238eff5c276be1b04ff307ee002ed45987cb524195eaf447d7ee6441557c8d590295dd629dc2b9ee5a287484a59bb790c70c07dff589367432d628c1b0b00be09c4cc31cd6fce369b54746812fa282abd3634470c48dff2d33baad8f7bb57088ae3e19cf4028d8fcc890bb5d9922f552e658c51f883143ee881dd7c68e3c436a1da718de7d3d16f162f9ca90a8fd StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 040000000100000010000000410352dc0ff7501b16f0028eba6f45c50f00000001000000140000005bcaa1c2780f0bcb5a90770451d96f38963f012d090000000100000042000000304006082b06010505070302060a2b0601040182370a030c060a2b0601040182370a030406082b0601050507030406082b0601050507030106082b060105050703086200000001000000200000000687260331a72403d909f105e69bcf0d32e1bd2493ffc6d9206d11bcd67707390b000000010000001e000000440053005400200052006f006f0074002000430041002000580033000000140000000100000014000000c4a7b1a47b2c71fadbe14b9075ffc415608589101d00000001000000100000004558d512eecb27464920897de7b660537f000000010000000e000000300c060a2b0601040182370a03047e000000010000000800000000c001b39667d60168000000010000000800000000409120d035d901030000000100000014000000dac9024f54d8f6df94935fb1732638ca6ad77c131900000001000000100000006cf252fec3e8f20996de5d4dd9aef42420000000010000004e0300003082034a30820232a003020102021044afb080d6a327ba893039862ef8406b300d06092a864886f70d0101050500303f31243022060355040a131b4469676974616c205369676e617475726520547275737420436f2e311730150603550403130e44535420526f6f74204341205833301e170d3030303933303231313231395a170d3231303933303134303131355a303f31243022060355040a131b4469676974616c205369676e617475726520547275737420436f2e311730150603550403130e44535420526f6f7420434120583330820122300d06092a864886f70d01010105000382010f003082010a0282010100dfafe99750088357b4cc6265f69082ecc7d32c6b30ca5becd9c37dc740c118148be0e83376492ae33f214993ac4e0eaf3e48cb65eefcd3210f65d22ad9328f8ce5f777b0127bb595c089a3a9baed732e7a0c063283a27e8a1430cd11a0e12a38b9790a31fd50bd8065dfb7516383c8e28861ea4b6181ec526bb9a2e24b1a289f48a39e0cda098e3e172e1edd20df5bc62a8aab2ebd70adc50b1a25907472c57b6aab34d63089ffe568137b540bc8d6aeec5a9c921e3d64b38cc6dfbfc94170ec1672d526ec38553943d0fcfd185c40f197ebd59a9b8d1dbada25b9c6d8dfc115023aabda6ef13e2ef55c089c3cd68369e4109b192ab62957e3e53d9b9ff0025d0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020106301d0603551d0e04160414c4a7b1a47b2c71fadbe14b9075ffc41560858910300d06092a864886f70d01010505000382010100a31a2c9b17005ca91eee2866373abf83c73f4bc309a095205de3d95944d23e0d3ebd8a4ba0741fce10829c741a1d7e981addcb134bb32044e491e9ccfc7da5db6ae5fee6fde04eddb7003ab57049aff2e5eb02f1d1028b19cb943a5e48c4181e58195f1e025af00cf1b1ada9dc59868b6ee991f586cafab96633aa595bcee2a7167347cb2bcc99b03748cfe3564bf5cf0f0c723287c6f044bb53726d43f526489a5267b758abfe67767178db0da256141339243185a2a8025a3047e1dd5007bc02099000eb6463609b16bc88c912e6d27d918bf93d328d65b4e97cb15776eac5b62839bf15651cc8f677966a0a8d770bd8910b048e07db29b60aee9d82353510 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1\Blob = 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 StreamFab64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8CF427FD790C3AD166068DE81E57EFBB932272D4 StreamFab64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob = 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 StreamFab64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob = 19000000010000001000000091fad483f14848a8a69b18b805cdbb3a0f0000000100000014000000327fc447408de9bf596f83d4b2fa4b8e3e7097d8090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b06010505070308530000000100000041000000303f3020060a6086480186fa6c0a010230123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c07f000000010000002c000000302a060a2b0601040182370a030406082b0601050507030506082b0601050507030606082b060105050703076200000001000000200000006dc47172e01cbcb0bf62580d895fe2b8ac9ad4f873801e0c10b9c837d21eb1770b000000010000001e00000045006e00740072007500730074002000280032003000340038002900000014000000010000001400000055e481d11180bed889b908a331f9a1240916b9701d0000000100000010000000e871723e266f38af5d49cda2a502669c7e000000010000000800000000c001b39667d601030000000100000014000000503006091d97d4f5ae39f7cbe7927d7d652d343120000000010000002e0400003082042a30820312a00302010202043863def8300d06092a864886f70d01010505003081b431143012060355040a130b456e74727573742e6e65743140303e060355040b14377777772e656e74727573742e6e65742f4350535f3230343820696e636f72702e206279207265662e20286c696d697473206c6961622e2931253023060355040b131c286329203139393920456e74727573742e6e6574204c696d69746564313330310603550403132a456e74727573742e6e65742043657274696669636174696f6e20417574686f7269747920283230343829301e170d3939313232343137353035315a170d3239303732343134313531325a3081b431143012060355040a130b456e74727573742e6e65743140303e060355040b14377777772e656e74727573742e6e65742f4350535f3230343820696e636f72702e206279207265662e20286c696d697473206c6961622e2931253023060355040b131c286329203139393920456e74727573742e6e6574204c696d69746564313330310603550403132a456e74727573742e6e65742043657274696669636174696f6e20417574686f726974792028323034382930820122300d06092a864886f70d01010105000382010f003082010a0282010100ad4d4ba91286b2eaa320071516642a2b4bd1bf0b4a4d8eed8076a567b77840c07342c868c0db532bdd5eb8769835938b1a9d7c133a0e1f5bb71ecfe524141eb181a98d7db8cc6b4b03f1020cdcaba54024007f7494a19d0829b3880bf587779d55cde4c37ed76a64ab851486955b9732506f3dc8ba660ce3fcbdb849c176894919fdc0a8bd89a3672fc69fbc711960b82de92cc99076667b94e2af78d665535d3cd69cb2cf2903f92fa450b2d448ce0532558afdb2644c0ee4980775db7fdfb9085560853029f97b48a46986e3353f1e865d7a7a15bdef008e1522541700902693bc0e496891bff847d39d9542c10e4ddf6f26cfc3182162664370d6d5c007e10203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e0416041455e481d11180bed889b908a331f9a1240916b970300d06092a864886f70d010105050003820101003b9b8f569b30e753997c7a79a74d97d7199590fb061fca337c46638f966624fa401b2127cae67273f24ffe3199fdc80c4c6853c680821398fab6adda5d3df1ce6ef6151194820cee3f95af11ab0fd72fde1f038f572c1ec9bb9a1a4495eb184fa61fcd7d57102f9b04095a84b56ed81d3ae1d69ed16c795e791c14c5e3d04c933b653ceddf3dbea6e5951ac3b519c3bd5e5bbbff23ef6819cb1293275c032d6f30d01eb61aacde5af7d1aaa827a6fe7981c479993357ba12b0a9e0426c93ca56defe6d840b088b7e8dead79821c6f3e73c792f5e9cd14c158de1ec2237cc9a430b97dc80908db3679b6f48081556cfbff12b7c5e9a76e95990c57c8335116551 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob = 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 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8CF427FD790C3AD166068DE81E57EFBB932272D4\Blob = 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 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 040000000100000010000000c5dfb849ca051355ee2dba1ac33eb0280f00000001000000200000005229ba15b31b0c6f4cca89c2985177974327d1b689a3b935a0bd975532af22ab090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b06010505070308530000000100000040000000303e301f06092b06010401a032010130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00b000000010000003000000047006c006f00620061006c005300690067006e00200052006f006f00740020004300410020002d002000520033000000620000000100000020000000cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b1400000001000000140000008ff04b7fa82e4524ae4d50fa639a8bdee2dd1bbc1d000000010000001000000001728e1ecf7a9d86fb3cec8948aba953030000000100000014000000d69b561148f01c77c54578c10926df5b856976ad190000000100000010000000d0fd3c9c380d7b65e26b9a3fedd39b8f2000000001000000630300003082035f30820247a003020102020b04000000000121585308a2300d06092a864886f70d01010b0500304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523331133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e301e170d3039303331383130303030305a170d3239303331383130303030305a304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523331133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e30820122300d06092a864886f70d01010105000382010f003082010a0282010100cc2576907906782216f5c083b684ca289efd057611c5ad8872fc460243c7b28a9d045f24cb2e4be1608246e152ab0c8147706cdd64d1ebf52ca30f823d0c2bae97d7b614861079bb3b1380778c08e149d26a622f1f5efa9668df892795389f06d73ec9cb26590d73deb0c8e9260e8315c6ef5b8bd20460ca49a628f6693bf6cbc82891e59d8a615737ac7414dc74e03aee722f2e9cfbd0bbbff53d00e10633e8822bae53a63a16738cdd410e203ac0b4a7a1e9b24f902e3260e957cbb904926868e538266075b29f77ff9114efae2049fcad401548d1023161195eb897efad77b7649a7abf5fc113ef9b62fb0d6ce0546916a903da6ee983937176c6698582170203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e041604148ff04b7fa82e4524ae4d50fa639a8bdee2dd1bbc300d06092a864886f70d01010b050003820101004b40dbc050aafec80ceff796544549bb96000941acb3138686280733ca6be674b9ba002daea40ad3f5f1f10f8abf73674a83c7447b78e0af6e6c6f03298e333945c38ee4b9576caafc1296ec53c62de4246cb99463fbdc536867563e83b8cf3521c3c968fecedac253aacc908ae9f05d468c95dd7a58281a2f1ddecd0037418fed446dd75328977ef367041e15d78a96b4d3de4c27a44c1b737376f41799c21f7a0ee32d08ad0a1c2cff3cab550e0f917e36ebc35749bee12e2d7c608bc3415113239dcef7326b9401a899e72c331f3a3b25d28640ce3b2c8678c9612f14baeedb556fdf84ee05094dbd28d872ced36250651eeb92978331d9b3b5ca47583f5f StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob = 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 StreamFab64.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1\Blob = 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 StreamFab64.exe -
Suspicious behavior: AddClipboardFormatListener 25 IoCs
pid Process 652 StreamFab64.exe 2600 StreamUpdate.exe 1952 StreamFab64.exe 5924 QCef.exe 5324 StreamUpdate.exe 5296 QCef.exe 5624 QCef.exe 5560 QCef.exe 6044 QCef.exe 4124 QCef.exe 360 QCef.exe 2980 QCef.exe 1412 QCef.exe 5220 QCef.exe 1912 QCef.exe 1036 QCef.exe 4724 QCef.exe 4772 QCef.exe 3344 QCef.exe 5572 QCef.exe 5460 QCef.exe 5416 QCef.exe 5060 QCef.exe 5236 QCef.exe 560 QCef.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2780 chrome.exe 2780 chrome.exe 3580 StreamFab_Online_6180.exe 3580 StreamFab_Online_6180.exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 5016 StreamFab(6.1.8.0).exe 4344 chrome.exe 4344 chrome.exe 4344 chrome.exe 4344 chrome.exe 652 StreamFab64.exe 652 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1952 StreamFab64.exe -
Suspicious behavior: MapViewOfSection 8 IoCs
pid Process 604 MicrosoftEdgeCP.exe 604 MicrosoftEdgeCP.exe 604 MicrosoftEdgeCP.exe 604 MicrosoftEdgeCP.exe 5848 MicrosoftEdgeCP.exe 5848 MicrosoftEdgeCP.exe 5440 MicrosoftEdgeCP.exe 5440 MicrosoftEdgeCP.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs
pid Process 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe Token: SeShutdownPrivilege 2780 chrome.exe Token: SeCreatePagefilePrivilege 2780 chrome.exe -
Suspicious use of FindShellTrayWindow 44 IoCs
pid Process 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 3580 StreamFab_Online_6180.exe 3580 StreamFab_Online_6180.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe -
Suspicious use of SendNotifyMessage 30 IoCs
pid Process 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 2780 chrome.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe -
Suspicious use of SetWindowsHookEx 44 IoCs
pid Process 652 StreamFab64.exe 652 StreamFab64.exe 2600 StreamUpdate.exe 3468 MicrosoftEdge.exe 604 MicrosoftEdgeCP.exe 3164 MicrosoftEdgeCP.exe 604 MicrosoftEdgeCP.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 5924 QCef.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 5324 StreamUpdate.exe 5572 MicrosoftEdge.exe 5848 MicrosoftEdgeCP.exe 5848 MicrosoftEdgeCP.exe 1952 StreamFab64.exe 4676 MicrosoftEdge.exe 5296 QCef.exe 5624 QCef.exe 1952 StreamFab64.exe 5440 MicrosoftEdgeCP.exe 5440 MicrosoftEdgeCP.exe 5560 QCef.exe 6044 QCef.exe 4124 QCef.exe 360 QCef.exe 2980 QCef.exe 1412 QCef.exe 5220 QCef.exe 1912 QCef.exe 1036 QCef.exe 4724 QCef.exe 4772 QCef.exe 3344 QCef.exe 5572 QCef.exe 5460 QCef.exe 5416 QCef.exe 5060 QCef.exe 5236 QCef.exe 1952 StreamFab64.exe 1952 StreamFab64.exe 560 QCef.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2780 wrote to memory of 2840 2780 chrome.exe 74 PID 2780 wrote to memory of 2840 2780 chrome.exe 74 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 2232 2780 chrome.exe 76 PID 2780 wrote to memory of 516 2780 chrome.exe 77 PID 2780 wrote to memory of 516 2780 chrome.exe 77 PID 2780 wrote to memory of 668 2780 chrome.exe 78 PID 2780 wrote to memory of 668 2780 chrome.exe 78 PID 2780 wrote to memory of 668 2780 chrome.exe 78 PID 2780 wrote to memory of 668 2780 chrome.exe 78 PID 2780 wrote to memory of 668 2780 chrome.exe 78 PID 2780 wrote to memory of 668 2780 chrome.exe 78 PID 2780 wrote to memory of 668 2780 chrome.exe 78 PID 2780 wrote to memory of 668 2780 chrome.exe 78 PID 2780 wrote to memory of 668 2780 chrome.exe 78 PID 2780 wrote to memory of 668 2780 chrome.exe 78 PID 2780 wrote to memory of 668 2780 chrome.exe 78 PID 2780 wrote to memory of 668 2780 chrome.exe 78 PID 2780 wrote to memory of 668 2780 chrome.exe 78 PID 2780 wrote to memory of 668 2780 chrome.exe 78 PID 2780 wrote to memory of 668 2780 chrome.exe 78 PID 2780 wrote to memory of 668 2780 chrome.exe 78 PID 2780 wrote to memory of 668 2780 chrome.exe 78 PID 2780 wrote to memory of 668 2780 chrome.exe 78 PID 2780 wrote to memory of 668 2780 chrome.exe 78 PID 2780 wrote to memory of 668 2780 chrome.exe 78 PID 2780 wrote to memory of 668 2780 chrome.exe 78 PID 2780 wrote to memory of 668 2780 chrome.exe 78
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://streamfab.com1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2780 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffa5f7d9758,0x7ffa5f7d9768,0x7ffa5f7d97782⤵PID:2840
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1616 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:22⤵PID:2232
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1784 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:82⤵PID:516
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1900 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:82⤵PID:668
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2676 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:12⤵PID:2456
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2800 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:12⤵PID:1424
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4428 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:12⤵PID:5068
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5144 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:82⤵PID:4532
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4752 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:82⤵PID:2680
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5508 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:82⤵PID:4276
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5548 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:82⤵PID:4264
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4912 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:82⤵PID:1404
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5496 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:82⤵PID:1416
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5492 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:82⤵PID:3024
-
-
C:\Users\Admin\Downloads\StreamFab_Online_6180.exe"C:\Users\Admin\Downloads\StreamFab_Online_6180.exe"2⤵
- Checks computer location settings
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
PID:3580 -
C:\Users\Admin\Downloads\StreamFab\StreamFab\StreamFab(6.1.8.0).exe"C:\Users\Admin\Downloads\StreamFab\StreamFab\StreamFab(6.1.8.0).exe" /start_mode_online /very_silent /output_progress:27915A3A4181AD0BD1A60A4B1A9F60C8 /desktop /install_path"C:\Program Files\StreamFab\StreamFab" /option:online3⤵
- Executes dropped EXE
PID:4460 -
C:\Users\Admin\AppData\Local\Temp\StreamFab\5681533B8B044FCEAA85038EBA905EBB\StreamFab(6.1.8.0).exe"C:\Users\Admin\AppData\Local\Temp\StreamFab\5681533B8B044FCEAA85038EBA905EBB\StreamFab(6.1.8.0).exe" /install /start_mode_online /very_silent /output_progress:27915A3A4181AD0BD1A60A4B1A9F60C8 /desktop /install_path"C:\Program Files\StreamFab\StreamFab" /option:online /file"C:\Users\Admin\Downloads\StreamFab\StreamFab\StreamFab(6.1.8.0).exe"4⤵
- Executes dropped EXE
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
PID:5016 -
C:\Program Files\StreamFab\StreamFab\StreamFab64.exe"C:\Program Files\StreamFab\StreamFab\StreamFab64.exe" /install /add_plan /new --app-from official /option:online /uimodule=online --module=online --ui-module=online5⤵
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:652 -
C:\Program Files\StreamFab\StreamFab\StreamUpdate.exe"C:\Program Files\StreamFab\StreamFab\StreamUpdate.exe" --install6⤵
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:2600
-
-
C:\Windows\SYSTEM32\TASKKILL.exeTASKKILL /IM YoutubeToMP3Service.exe /F6⤵
- Kills process with taskkill
PID:1708
-
-
C:\Windows\SYSTEM32\TASKKILL.exeTASKKILL /IM YoutubeToMP3Service.exe /F6⤵
- Kills process with taskkill
PID:604
-
-
C:\Windows\SYSTEM32\TASKKILL.exeTASKKILL /IM YoutubeToMP3Process.exe /F6⤵
- Kills process with taskkill
PID:2444
-
-
C:\Windows\SYSTEM32\TASKKILL.exeTASKKILL /IM YoutubeToMP3Process.exe /F6⤵
- Kills process with taskkill
PID:1552
-
-
-
-
-
C:\Program Files\StreamFab\StreamFab\StreamFab64.exe"C:\Program Files\StreamFab\StreamFab\StreamFab64.exe" --installmode --runapp --option online /uimodule=online --module=online --ui-module=online3⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Modifies system certificate store
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1952 -
C:\Windows\system32\TASKKILL.exeTASKKILL /IM YoutubeToMP3Service.exe /F4⤵
- Kills process with taskkill
PID:5264
-
-
C:\Program Files\StreamFab\StreamFab\QCef.exe"C:/Program Files/StreamFab/StreamFab/QCef.exe" --type=gpu-process --no-sandbox --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file=C:/Users/Admin/Documents/StreamFab/StreamFab/Log/qef.log --mojo-platform-channel-handle=1748 --field-trial-handle=1860,i,3040322154183849302,5095519080669213487,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:24⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:5924
-
-
C:\Program Files\StreamFab\StreamFab\YoutubeDL\YoutubeToMP3Process.exe"C:\Program Files\StreamFab\StreamFab\YoutubeDL\YoutubeToMP3Process.exe" --only-get-ie-key --always-input-url ""4⤵
- Executes dropped EXE
PID:5944 -
C:\Program Files\StreamFab\StreamFab\YoutubeDL\YoutubeToMP3Process.exe"C:\Program Files\StreamFab\StreamFab\YoutubeDL\YoutubeToMP3Process.exe" --only-get-ie-key --always-input-url ""5⤵
- Executes dropped EXE
PID:5656 -
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c "ver"6⤵PID:6064
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c "ver"6⤵PID:5232
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c "ver"6⤵PID:5508
-
-
-
-
C:\Program Files\StreamFab\StreamFab\devcon.exe"C:\Program Files\StreamFab\StreamFab\devcon.exe" "C:/Users/Admin/AppData/Local/Temp/e59d807/6d9d4b1c-734f-4346-8a18-23a0f35531da"4⤵
- Executes dropped EXE
PID:5700 -
C:\Program Files\StreamFab\StreamFab\devcon.exe"C:\Program Files\StreamFab\StreamFab\devcon.exe" "C:/Users/Admin/AppData/Local/Temp/e59d807/6d9d4b1c-734f-4346-8a18-23a0f35531da"5⤵
- Executes dropped EXE
PID:4124
-
-
-
C:\Windows\System32\Wbem\wmic.exewmic csproduct get UUID4⤵PID:6008
-
-
C:\Windows\System32\Wbem\wmic.exewmic BaseBoard get SerialNumber4⤵PID:2900
-
-
C:\Windows\System32\Wbem\wmic.exewmic BaseBoard get SerialNumber4⤵PID:5260
-
-
C:\Program Files\StreamFab\StreamFab\StreamUpdate.exe"C:\Program Files\StreamFab\StreamFab\StreamUpdate.exe" --config_file C:/Users/Admin/Documents/StreamFab/StreamFab/Temp/update/update_config.xml --url_suffix=clientusertype=try --user_type try4⤵
- Executes dropped EXE
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:5324
-
-
C:\Program Files\StreamFab\StreamFab\QCef.exe"C:/Program Files/StreamFab/StreamFab/QCef.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --no-sandbox --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --log-file=C:/Users/Admin/Documents/StreamFab/StreamFab/Log/qef.log --mojo-platform-channel-handle=3848 --field-trial-handle=1860,i,3040322154183849302,5095519080669213487,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:84⤵
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:5296
-
-
C:\Program Files\StreamFab\StreamFab\QCef.exe"C:/Program Files/StreamFab/StreamFab/QCef.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --log-file=C:/Users/Admin/Documents/StreamFab/StreamFab/Log/qef.log --mojo-platform-channel-handle=3880 --field-trial-handle=1860,i,3040322154183849302,5095519080669213487,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:84⤵
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:5624
-
-
C:\Windows\system32\TASKKILL.exeTASKKILL /IM YoutubeToMP3Service.exe /F4⤵
- Kills process with taskkill
PID:5484
-
-
C:\Program Files\StreamFab\StreamFab\YoutubeDL\YoutubeToMP3Service.exe"C:\Program Files\StreamFab\StreamFab\YoutubeDL\YoutubeToMP3Service.exe"4⤵
- Executes dropped EXE
PID:1712 -
C:\Program Files\StreamFab\StreamFab\YoutubeDL\YoutubeToMP3Service.exe"C:\Program Files\StreamFab\StreamFab\YoutubeDL\YoutubeToMP3Service.exe"5⤵
- Executes dropped EXE
PID:5588 -
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c "ver"6⤵PID:5140
-
-
-
-
C:\Program Files\StreamFab\StreamFab\QCef.exe"C:/Program Files/StreamFab/StreamFab/QCef.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=6.2.15063.0 --no-sandbox --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file=C:/Users/Admin/Documents/StreamFab/StreamFab/Log/qef.log --mojo-platform-channel-handle=4940 --field-trial-handle=1860,i,3040322154183849302,5095519080669213487,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:24⤵
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:4124
-
-
C:\Program Files\StreamFab\StreamFab\QCef.exe"C:/Program Files/StreamFab/StreamFab/QCef.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --log-file=C:/Users/Admin/Documents/StreamFab/StreamFab/Log/qef.log --mojo-platform-channel-handle=4828 --field-trial-handle=1860,i,3040322154183849302,5095519080669213487,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:84⤵
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:6044
-
-
C:\Program Files\StreamFab\StreamFab\QCef.exe"C:/Program Files/StreamFab/StreamFab/QCef.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --no-sandbox --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --log-file=C:/Users/Admin/Documents/StreamFab/StreamFab/Log/qef.log --mojo-platform-channel-handle=4928 --field-trial-handle=1860,i,3040322154183849302,5095519080669213487,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:84⤵
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:5560
-
-
C:\Program Files\StreamFab\StreamFab\QCef.exe"C:/Program Files/StreamFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/StreamFab/StreamFab/Log/qef.log --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=4884 --field-trial-handle=1860,i,3040322154183849302,5095519080669213487,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:14⤵
- Checks computer location settings
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:2980
-
-
C:\Program Files\StreamFab\StreamFab\QCef.exe"C:/Program Files/StreamFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/StreamFab/StreamFab/Log/qef.log --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=4508 --field-trial-handle=1860,i,3040322154183849302,5095519080669213487,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:14⤵
- Checks computer location settings
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:360
-
-
C:\Program Files\StreamFab\StreamFab\QCef.exe"C:/Program Files/StreamFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/StreamFab/StreamFab/Log/qef.log --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=3904 --field-trial-handle=1860,i,3040322154183849302,5095519080669213487,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:14⤵
- Checks computer location settings
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:1412
-
-
C:\Program Files\StreamFab\StreamFab\QCef.exe"C:/Program Files/StreamFab/StreamFab/QCef.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-sandbox --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --log-file=C:/Users/Admin/Documents/StreamFab/StreamFab/Log/qef.log --mojo-platform-channel-handle=4876 --field-trial-handle=1860,i,3040322154183849302,5095519080669213487,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:84⤵
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:5220
-
-
C:\Program Files\StreamFab\StreamFab\QCef.exe"C:/Program Files/StreamFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/StreamFab/StreamFab/Log/qef.log --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=4972 --field-trial-handle=1860,i,3040322154183849302,5095519080669213487,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:14⤵
- Checks computer location settings
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:1912
-
-
C:\Program Files\StreamFab\StreamFab\QCef.exe"C:/Program Files/StreamFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/StreamFab/StreamFab/Log/qef.log --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=3416 --field-trial-handle=1860,i,3040322154183849302,5095519080669213487,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:14⤵
- Checks computer location settings
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:1036
-
-
C:\Program Files\StreamFab\StreamFab\QCef.exe"C:/Program Files/StreamFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/StreamFab/StreamFab/Log/qef.log --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=5084 --field-trial-handle=1860,i,3040322154183849302,5095519080669213487,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:14⤵
- Checks computer location settings
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:4724
-
-
C:\Program Files\StreamFab\StreamFab\QCef.exe"C:/Program Files/StreamFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/StreamFab/StreamFab/Log/qef.log --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=5004 --field-trial-handle=1860,i,3040322154183849302,5095519080669213487,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:14⤵
- Checks computer location settings
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:4772
-
-
C:\Program Files\StreamFab\StreamFab\QCef.exe"C:/Program Files/StreamFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/StreamFab/StreamFab/Log/qef.log --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=5172 --field-trial-handle=1860,i,3040322154183849302,5095519080669213487,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:14⤵
- Checks computer location settings
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:3344
-
-
C:\Program Files\StreamFab\StreamFab\QCef.exe"C:/Program Files/StreamFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/StreamFab/StreamFab/Log/qef.log --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=2052 --field-trial-handle=1860,i,3040322154183849302,5095519080669213487,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:14⤵
- Checks computer location settings
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:5572
-
-
C:\Program Files\StreamFab\StreamFab\QCef.exe"C:/Program Files/StreamFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/StreamFab/StreamFab/Log/qef.log --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=3932 --field-trial-handle=1860,i,3040322154183849302,5095519080669213487,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:14⤵
- Checks computer location settings
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:5416
-
-
C:\Program Files\StreamFab\StreamFab\QCef.exe"C:/Program Files/StreamFab/StreamFab/QCef.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-sandbox --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --log-file=C:/Users/Admin/Documents/StreamFab/StreamFab/Log/qef.log --mojo-platform-channel-handle=4992 --field-trial-handle=1860,i,3040322154183849302,5095519080669213487,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:84⤵
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:5460
-
-
C:\Program Files\StreamFab\StreamFab\QCef.exe"C:/Program Files/StreamFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/StreamFab/StreamFab/Log/qef.log --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=2428 --field-trial-handle=1860,i,3040322154183849302,5095519080669213487,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:14⤵
- Checks computer location settings
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:5060
-
-
C:\Program Files\StreamFab\StreamFab\QCef.exe"C:/Program Files/StreamFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/StreamFab/StreamFab/Log/qef.log --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=5152 --field-trial-handle=1860,i,3040322154183849302,5095519080669213487,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:14⤵
- Checks computer location settings
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:5236
-
-
C:\Program Files\StreamFab\StreamFab\QCef.exe"C:/Program Files/StreamFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/StreamFab/StreamFab/Log/qef.log --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=4816 --field-trial-handle=1860,i,3040322154183849302,5095519080669213487,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:14⤵
- Checks computer location settings
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:560
-
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=5396 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:12⤵PID:4440
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=4752 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:12⤵PID:2380
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6004 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:82⤵PID:2540
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6148 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:82⤵PID:1880
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6304 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:82⤵PID:392
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6452 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:82⤵PID:4336
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4532 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:4344
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=3912 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:12⤵PID:4504
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=6216 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:12⤵PID:4728
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=3204 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:12⤵PID:3684
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=5992 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:12⤵PID:1892
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=6864 --field-trial-handle=1884,i,12046590500879156575,221745486905476251,131072 /prefetch:12⤵PID:5840
-
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵PID:2920
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca1⤵
- Drops file in Windows directory
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3468
-
C:\Windows\system32\browser_broker.exeC:\Windows\system32\browser_broker.exe -Embedding1⤵
- Modifies Internet Explorer settings
PID:1080
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Modifies registry class
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetWindowsHookEx
PID:604
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3164
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies registry class
PID:2792
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Modifies registry class
PID:2712
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca1⤵
- Drops file in Windows directory
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:5572
-
C:\Windows\system32\browser_broker.exeC:\Windows\system32\browser_broker.exe -Embedding1⤵PID:4536
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Modifies registry class
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetWindowsHookEx
PID:5848
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies registry class
PID:6120
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca1⤵
- Drops file in Windows directory
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4676
-
C:\Windows\system32\browser_broker.exeC:\Windows\system32\browser_broker.exe -Embedding1⤵
- Modifies Internet Explorer settings
PID:4148
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Modifies registry class
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetWindowsHookEx
PID:5440
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies registry class
PID:5056
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Modifies registry class
PID:3384
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x3e41⤵PID:1284
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5B
MD500305bc1fb89e33403a168e6e3e2ec08
SHA1a39ca102f6b0e1129e63235bcb0ad802a5572195
SHA2560b77bdb04e0461147a7c783c200bc11a6591886e59e2509f5d7f6cb7179d01ab
SHA512db43b091f60de7f8c983f5fc4009db89673215ccd20fd8b2ced4983365a74b36ac371e2e85397cac915c021377e26f2c4290915ea96f9e522e341e512c0fc169
-
C:\Program Files\StreamFab\StreamFab\PYthon37\Lib\site-packages\setuptools-47.1.0.dist-info\zip-safe
Filesize2B
MD581051bcc2cf1bedf378224b0a93e2877
SHA1ba8ab5a0280b953aa97435ff8946cbcbb2755a27
SHA2567eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
SHA5121b302a2f1e624a5fb5ad94ddc4e5f8bfd74d26fa37512d0e5face303d8c40eee0d0ffa3649f5da43f439914d128166cb6c4774a7caa3b174d7535451eb697b5d
-
Filesize
116B
MD503651a952a4bd2c51d18bf254403a443
SHA10929d52e0e83031940db0cdf5ce9fda37c6749e5
SHA256e93dd36191386058b61d34b505e647357022f0de763994f83be749ebea267bfe
SHA512366562571ee6c63e79bbb07674dea6665da4910996611d97f122b10b231868c348f5c556b0d9175beeb461d4eac0770efedeefad57e7040400e5d3d60127945b
-
Filesize
1KB
MD5b78c31d234a2c8445cb670a78358d2a8
SHA1f765a69964677d5ef451254e23a779253b774cdb
SHA256cfbc5299faf453eb4530a8f8133fb48f20012d8849120db3936e92fee97a16aa
SHA512e608c9ec39f467f6f5943853c449c6dda28e3670f88db4255e664092f84938a353e1d619c893e479765aa1b4bcff8628009bf01989702708f917868dd2439f84
-
Filesize
62B
MD547878c074f37661118db4f3525b2b6cb
SHA19671e2ef6e3d9fa96e7450bcee03300f8d395533
SHA256b4dc0b48d375647bcfab52d235abf7968daf57b6bbdf325766f31ce7752d7216
SHA51213c626ada191848c31321c74eb7f0f1fde5445a82d34282d69e2b086ba6b539d8632c82bba61ff52185f75fec2514dad66139309835e53f5b09a3c5a2ebecff5
-
Filesize
147B
MD5c3239b95575b0ad63408b8e633f9334d
SHA17dbb42dfa3ca934fb86b8e0e2268b6b793cbccdc
SHA2566546a8ef1019da695edeca7c68103a1a8e746d88b89faf7d5297a60753fd1225
SHA5125685131ad55f43ab73afccbef69652d03bb64e6135beb476bc987f316afe0198157507203b9846728bc7ea25bc88f040e7d2cb557c9480bac72f519d6ba90b25
-
Filesize
103KB
MD51295906c8602a3388a79d1e2fb960793
SHA1067fc5208147c04bc700e61fdf9aba178c5cfa7c
SHA2566a5afa93923a63ddd0b5df7568fa1cf5bd87c612527450f39a546ec0d8a0a00d
SHA512af9db7ffea92077e850729ddc0679b17eaf14180d8bda393042aa77587909101a01bbda04ef561e3d6d28372d1d45cbbcccf4f9f0e370b3adaf9cdea53ccc703
-
Filesize
48B
MD53d02598f327c3159a8be45fd28daac9b
SHA178bd4ccb31f7984b68a96a9f2d0d78c27857b091
SHA256b36ae7da13e8cafa693b64b57c6afc4511da2f9bbc10d0ac03667fca0f288214
SHA512c59c5b77a0cf85bb9fbf46f9541c399a9f739f84828c311ced6e270854ecce86d266e4c8d5aa07897b48ce995c3da29fea994e8cd017d48e5a4fab7a6b65e903
-
Filesize
14KB
MD5b7b73048941afaab96363699f020cda9
SHA152b0939b66b79d8fbd6b449cea6a2a4e741fa77a
SHA25624fe0b52797139431b7035d6f5e6e2e7a24959180a33db567173309df127e366
SHA512d01e7e31bbaf9c5c60b2986e0b7f4be6592fb06d6d9969726cee5fb01cce7c84b61b51b533ad3f44b0a9de543304f8f25a488e2e050f52f5a502f931e7ac8a8b
-
Filesize
31KB
MD5feb5dab114edfbd62359887655c3eaba
SHA18bddedee74cd5017d3f2c31a93e1ff7128bef2ef
SHA25679705c745c387d59f0f8d72a34486e30c67f6c0a4cb29de4befc1b4964ecbbd5
SHA512db2a06086e0b34a2a2defb25d270dec4633f999098ce32706e1db4b786b8929df3f0c8ded7c826185af485ad75fb8f7181b238b376d8aa5ee2a90cd260139fd3
-
Filesize
5.7MB
MD5062f09c9c14c623e7d7b2df1b782cf76
SHA1f8098aea07abf82101b3afcb2294926fddd82c29
SHA256b23960247306c8333c5f3c0c18ca8ef31e7009e02581ad7a2dccb4d8bc93d422
SHA5124f9367d83bb19c8d7abe88fb887cc68b6a5facdd2557affef780027eff18e3553100fc96e3184866d82985d702b206ba3a47e53aee5f230c8b2cb72b477fb8b3
-
Filesize
2KB
MD5df7e32b0e18bd35fa8453cb1263886b9
SHA1f4336c9380a7fbee4dfbc17c545b409364f7f8b3
SHA2568207c603c9de51d9954302dd9df559a1df70e0a9658af62637229b5a2437eec3
SHA51221d4e9b1d71c5ea9c7c66e5bacead5d4857ac109f7452d81c6d793f8843dd1d6f9194011e41259cdb9e3faecc04675a1433a2dfcbf0b758ff97cbd068fd95732
-
Filesize
2KB
MD595806d0bfadf617cdb91b9baacab5429
SHA12102999ec25be88f138ea7c8fbf2a1bf4454c766
SHA25607911dff4b3128de29fb83223a78878f9e972f35a596429861c7ea7956923b2d
SHA51200d3b1dd1d764859249a5997ec4b2ec68fdf7c245a3ad4276a81370b2f43090f41d32de48d94307703436e661ebaf64ff96332f109b0e611b74521f28c8f8004
-
Filesize
1.2MB
MD53a91c24ee4e55a887154616937206783
SHA19c3bbab5fb93355d3ceec2b0caede3fd492a5edc
SHA2563a9ee05cb1e30c4f796ddc34960320a7fade42bca7ce0e098da36706a374e0e2
SHA5121b131017ce531aa758a04a306b5d7d3ad319cad3a4d85488146966d8082416a4a3bf0c439833f9ff716640b2a41b2aa1ce65528d36d9aa0993c455acb6b0042d
-
Filesize
827KB
MD5cf93b19ad203d5e38d28c4ef07276638
SHA12ac0110d507b3047471e483cfbe990093f91fcb6
SHA25637005e9255aa1107a394d7a70c4ccc78f65900e9d16a8d5629f6564d4567ed5b
SHA5129a75b67aa079ea55da332c76f7b5e272fe70c5ab59460bee649f687ca7fb2c4fa32642f5b3de01cc69a2643bf97d05a2e1aeeebf605993dd1b988d8272f8efc6
-
Filesize
735KB
MD5675d1401f1392d8633328c22d63a50b5
SHA1a2cc28fb4cd3140e4c6d52914fa9f57afc272a48
SHA2567eef8e3821d036196ce4e8f0522b4c1c824cebafb32499e3a0d9d64fe79346d7
SHA512189ae2129928db7f4ecaf5287ecf159bdef374948ece5f79ef582e005844b2ca694a36474810c6252c176014d01a3c7e35bc07b299bec2404d16a7eac79242a9
-
Filesize
552KB
MD5d963d8a719807c546dd24dcf6fa0bd93
SHA184fe0c143c3992afcd1791e26975e6d90ff524a5
SHA2560c58e5674a20057da3fca70560222d4f02adc1361618f944be77faf991154875
SHA51278c87c722fc415472d551d7f008457efb0c34e34b7206506ddd55d580fc78d781d5cb08139142e4f8af97fc93b2fabe89933ad2e7fc0f618ddc2d7c7ff2f9e2b
-
Filesize
1.3MB
MD5d00e9c0f003e3121699b657351cc31b2
SHA139c9dd4b51a4dfd1c0a2335031f2d051910ce7a5
SHA256b610ce453cee2f24d245addd73895054125df4e9dd0401d1dd71a39b0ebac58e
SHA5129a972f9c87a83902ff15dc531675e8e45aab0c0503d04395ee7bd21b0bf383cdb8060003bc9910ebbe0a2a8379bb6059032a5801c8946c4b9308dac1d365110c
-
Filesize
17.8MB
MD5daf7ef3acccab478aaa7d6dc1c60f865
SHA1f8246162b97ce4a945feced27b6ea114366ff2ad
SHA256bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e
SHA5125840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75
-
C:\Users\Admin\AppData\Local\CEF\User Data\WidevineCdm\4.10.2710.0\_platform_specific\win_x64\widevinecdm.dll.sig
Filesize1KB
MD536e5ee071a6f2f03c5d3889de80b0f0d
SHA1cf6e8ddb87660ef1ef84ae36f97548a2351ac604
SHA2566be809d16e0944386e45cf605eae0cd2cf46f111d1a6fe999fec813d2c378683
SHA51299b61896659e558a79f0e9be95286ebf01d31d13b71df6db4923406e88b3ba72584ef2b62e073b2f5e06901af2c7d1b92d3d12187fe5b4b29c9dd2678444f34e
-
Filesize
136KB
MD587b4b05584e15ce492832abc303bd13c
SHA186eb06a7b8cd6937c767bff52fb14fd47a1e92cb
SHA256e62666f1c073eefbc84bee2e9f98d62874e7e88670c0508936413a008deb3423
SHA5128929b5455fbcfb59a44d47c8232d2da0b99b9e5d6f2dc914ff9810049cf09b9add577960dad1eb45a7c75d266cc98e33b78798e18af560d8484b7be5356f3f11
-
Filesize
69KB
MD54f9d58547367f284c0fa5c840c00b329
SHA1afdf5a998830ad8bea4d57ad8cb3882ac911b43f
SHA2563104d7911ad5190e95f4bcc647740dcc286325ca7a57f46510cd7970aeced0cd
SHA5127d21bdf059b4cbb5a1203c8c7333ea91118bab3b6d935f59e7e89637eb31d2a28d69033ce8501431dfbcccdb6df1f05d86cc4d99af01c68270a5577b795eb350
-
Filesize
19KB
MD521c6e2bd4712ef5ae850eb353c7cec9c
SHA1421faf243f67485e9be1453b09ca76ecb556ceb6
SHA25606b6623e0e916bbc0cb60bd79ec2751bb35e84f0f620ee25514beff6f3017a35
SHA512a3214dad965fbd42bc90ed51f57cd4e0c5c9f1b36cdc68b6490eab761a308d3367c174e8205e7514a8da5c058d6d67fca781577f8bb754f5d9287947f0edfdcc
-
Filesize
96KB
MD5d19f357145a2ee96291ea0f34504aa36
SHA126ffce889eacbee5c4e96fd8b61c2ebd84cd1730
SHA256f085d23e60e753705381c1861cb512e90305651e4107b9a3db6529367e7ccce6
SHA51225987b8c3d8c56b26039c6f1e46eba6161739c93b81434822b0c85282310b63387e9c2f9af5de6dd7812ddf1eaf1491b10467c8fb1f1c285783ffac2f3496efc
-
Filesize
108KB
MD5a5b93315bf38ff624b1a56302b7c2bdd
SHA13b3b443a51d6c3a323d4ed1ebde21be5b0183d87
SHA2560b1493c3110ffaf49c38eaab4fbe251d35d9dbb5caa2d00a18d02dfebdc5ae5f
SHA51287c3a078cb2f80a6e59dcbcb3a6a1a7a44290fe7b5a7c920f48d63e74da23257534ab73ab380805a7e3c3c093df2451f4ca3c12c599bd460d09150d2b0f6abe2
-
Filesize
16KB
MD5f13e901eaa327377a2e41ad124a7fad2
SHA19a7b986a552251606394465fa5c2ca03d0c72a52
SHA256da7e0616c13035047f17ff3b0464ffb15a1814f579ce92529cb06fd65ce6ed5a
SHA512f3ecf0cdcde1356a25e527dfe57b7d3916ba2b3f4ee37047311287a2b6d9fd073081d3070086226005acd87d61cd5d88ac03daab59e475e7c853808d72a3f605
-
Filesize
16KB
MD5dcc4094709a2dc14af288844556ff9b7
SHA10dd0347c55ca4f5332e11d5b742babf8aebf8d6f
SHA256675dd7b68acf580f893bec532f5b260b8f984b67734a9a6831334b2ff4aad384
SHA5124087f0a11350973c0776955f5a74bdb1c2f26cfe82f06091fb837c1e4f8f2d60167b4df00b1fa83dd0b0c85cc52881800ec83d171efc8b66fe9feff38c74c49e
-
Filesize
600B
MD5c5043f4f1593a655b91f3b05a4f183b2
SHA16fae3824560947288f18789612c1a10ab89d9bc0
SHA256e796310de436771a725907f9dd669d58cb3f84372964ae0aaee49136c0570ec5
SHA512f4084a5186688c47f0307e0af03543331776884102bdae52752dba63f80f93d310857f8295a17706b75f961a2bfd4e7c88046d9fa4ae149de6b6b491815f3f9c
-
Filesize
240B
MD5ccfae94e9f8825cd5cf324902f0616e1
SHA10d0e2a34453375967db5835683c3c69840bea1a6
SHA256264b21e8ca2e87dc3518b636804f13fe4d1f027efaa952e2142afe8f6ded18a9
SHA5129a62b11cac686a5f16831e28a4e925b0d9d569a71255d0476917d5305ac353792949bde8352fbffa54bb4fbb06d89e745a2acd4cba9b430c64dde1ac0b7fb70f
-
Filesize
1KB
MD5540ab3e429bc0eb778fdcd1e73d9ed2b
SHA1cfa37a20002466250069f268b2bd6f751e8c9ef3
SHA25684842d68a1a6a7a783a366e37e307d1cd327c9dcc552821fb42b715365f220b2
SHA512b03b7e128f943ff2000120a15a086bb7a8f15817cc4b9be41b66e8870dda204080d2528bde66fea53c3c7f2aa798a3f6600e51ad7c061e7869423ae81bcb0948
-
Filesize
1KB
MD50515e5aa3d7491d51f62faffb2fdfa50
SHA1b55a188fc6ece07d09fed141e6d59d1c9d26c1f5
SHA256d2ab3db4f430452edcbf5c89a1a7d4aa8e236b2709d4ca1e11e5fc2762a5b308
SHA5126a377a03d4c6ababe5cb3663efe31f1acceddf7a4c3160548c3135aa5470bd59a9f20303ad0ac715077410fb213d051c5450ae5a351277d24fd7140251ba3478
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Filesize23B
MD53fd11ff447c1ee23538dc4d9724427a3
SHA11335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA51210a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
-
Filesize
3KB
MD596d5ac3debc94517c906a3021cbe145b
SHA17b64f7ca6e978993543139796d4a4342aa93b44e
SHA256f8e3557af58c3fa6ef976347aa61d53eef99c8c83bd423723c6b59102479c137
SHA512c8ca5914fc21cd1a7d3eef6b52950c3e718d3ca925810ba54dd6e85d033d928c2185614a5c52b8a77642266ae6342919d0cc2a15c0825bfbb992c35271a92ee9
-
Filesize
5KB
MD54d9ca90c229e34aaecb997a3a0c134f6
SHA103d8fc6f8dc618b2ef37bafc684663d7a5ed7aea
SHA256e1d8787a2cb086b283d1062346a5afbcd0d430fa64edfc92a00219ca856c75a6
SHA512797d6ff09fa877356d65eed9ddac7fbf611935c85c814d8e3fc39330b21fe2a2351dc2c9a9976b51ed3c4574129078484c3e559a814e7f3e9e83fe9a4dc398eb
-
Filesize
3KB
MD50b33a11450d581818480b2cd21f5d5e9
SHA14c04830e9b764c23115e9d10aa03d24000fff170
SHA256ba8bf04824513021c0487d057243762c5942a122fc7f003553c3f3d34602a7e6
SHA51298eeac40c2befefd0b4d509fb054b1d57568ad5a42b6ab2f10c3d776cb6b7ff42d7ec808321db0f1e659ba9765ade6134707ef48a2f8fb28a5757501f692161f
-
Filesize
3KB
MD53ab4bee047279f21c6b7ce3b86936361
SHA16a03a99404b3a0764db7ef5d0d096e80c7670187
SHA2566cb08cc04cd3281839d1fe6324bcf4c88a4edabaafba0d01d991050aad15177f
SHA512a0e29231d064a8b01a7adba255663f4f1ebb4b101289d12fad180f7e15db86fb3b702dff63b697826af095a43205ff234e39e7b770a832eb78b3ae523c08627d
-
Filesize
5KB
MD537dec6a60735a58efb541cfb78652948
SHA1decbd9090f31d81a5b37efee3291167f0b065b93
SHA256f6d2c6840969f8207b7423aa138bc3d02f6c1362974fd9375599d16ef6311d6b
SHA512eff653ae916adec01b3603d25654a5c0e359136736f004055ed210b58556e997419dff724d2ca1982de4d0bf106bd0f9e3f4cc60215b0d13cdebad2ae9dc49ec
-
Filesize
5KB
MD572204d5e99bef8ab4017e5910dad1e3d
SHA1c70c1f191317489851de0abb0b6335aa267bbdfb
SHA256b63bc8e878399368fbfc7cc8ace90283828766f4de9e92140e1556a0a8220c82
SHA51247a94db17f93ce1ef3637bd97c25212da9e8acd332649a9bba4378578b308e4d4bb1f9228f25e9b56d5f5b3f45d753ff625c6a8e94188b58941a8944cdcbce3f
-
Filesize
6KB
MD5a85ec535b9b8101c4b155f3fa21681cb
SHA1261029c54de388855f1e8bdb45ae7bafd5e0056d
SHA256174607cf12efede6c6040313edb489c18b6d6053b61bd88d013ca30c94360edd
SHA51244ee7046f2e55b81ca19bb7e55bb632417eaf5dc77c2efc5c03651929ad30f8ee617aa5a70d33d8dcdb11166052c5c47d7ce7cf1fc2db535911f66227fec08c6
-
Filesize
706B
MD533eb0a4c9999543cc97e3e2aab2ecb82
SHA1e9baddde3a355d5f68fa41c5dd4f841d86259a28
SHA25647f74b0972f980504ae390774f949b8fe44a3ed298d56775906be397e97cb5cf
SHA512607aa7ea4bcbad40cfdcff96c632eca3abb90cfd18319cf2c9f94297aba68c325f2da1e4d975cd22bb9917438b78e78c3dae0dd60973adad2bb0a5cab5bd284d
-
Filesize
706B
MD5132452a59325752fe172b2a573fa8f02
SHA1db3fd33ad1c0690b35117143b3165ca6ee664481
SHA25625aa7b409e95683845cdbf00f002f157bbd79060eb542705810e21d01cfd2939
SHA5128fddcd1a192c431bf223bd4e98a6777e49f214eccad3bd6f6a4b6a9ca2c7608c7a8518b5cc539b905fea89c4168ceed9553143480e7133cb217aa509129ef82f
-
Filesize
1KB
MD56f9f35f37f5beca1698c9b4c74bce48a
SHA148db070d7c0747b61c74584d44e4fb2df765af9c
SHA256b55091b6d329c4887e5f7eb5c6ad2dec658956b17b3e43ba0b4344c35fb2d899
SHA512c06da883cd203b670b1e707a41dd08ca70727db0eac74fbb9eb317f5595bcfb282e345dbfbfe780f5d9448d369bd6e3781b97f35d49c43952f0f861c36530101
-
Filesize
1KB
MD5ba8fae21088bffb5ef1bcdae53af6e89
SHA188f3133fe1fd87b982bbb00b818eaa484c11d920
SHA256594f0942797cffd005680f51bdcb254ca916dd18473532db5d0b2a00fef816c5
SHA512e8e7218ff42eef06bf2c46a9c0b83aa25a30842368a99372e81aef79b78ee5a9834384085ab0a4bc7634d28ce2b381b9819dd77a77cb8ce6795d04a26b596c39
-
Filesize
1KB
MD5a3b7c1f9ee8416a18852d6a314862ef8
SHA1aeace4234b822e021c5dece711658b02c94d59f2
SHA256120a1fc4073a67c41b640e22b1b02649f65f211333cf0a0d289437d8da5ea092
SHA5122b0d3f4586e875d9372114f6a976e5911e8a7fad201fdefd0be73c65d31ab3b6a1f12a910465b63fee186caa469f9075e40cd4dcbff49206d3fc3810e176649a
-
Filesize
1KB
MD53097fbb1fa8d513179a93719f155c4a9
SHA143b0f5393554fe19b4596ec0e6980ac6af252582
SHA256077a1acd86147b04a04ca3cd2d67e37dcb16833c65818d5f7c4d03e43985a4b6
SHA5127f3df9e82826e338b3fa4546739a145240e750258ece7a558a7ce453fcb6209a9efebfd87e21b1a900df81ccf42795d591cfca70dc159ee906f8798a4def47af
-
Filesize
538B
MD59248a490e9a0ca2023481c011d459600
SHA1243d50eef3a6ea429a61cfdad1c9d1f62c2b6be6
SHA256173f331f8be27b8327c5571b688e44f726de7957632e5454a4b8110871b1dd6d
SHA5125655897b3fc40954288d979d726e5ca5328b3f94bd466f974662e2ff389959b6c04da72b5d12092cf7ac9e3eaeeccab7561bb8ea567345f54eaaf8366a226b3f
-
Filesize
538B
MD5d2492b0220312c96888d718284727cdc
SHA1aad33005f7240d4c375d9df83f642bba312f50f7
SHA256d732d28c98e34c7aac085e1b490a6f5f40c79e706ee463a1b9916e53f4b3e27a
SHA512ff11faf3be5a181c308abaf92b3bf695ae982fdd06af49911b9881411821785b4096054e45f0ecdeb6c956c882fcaaabdd87f02ad52e8e4d5b3e5b8940f3cdf7
-
Filesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
7KB
MD54313f610364cabd8adb75e3831c91f11
SHA1a339e20a62bf7265bc2d2ef3c619118bb1917599
SHA25686c96624adb7266bd736300fc0f477ca115b8140cf82eed8a1ae8356bd6d6f59
SHA512c9baf7d3a6972798099bb4c81eb8e4797158ac934f965ffb99fa59bed4361c1499bab6bde39100a4e2706b42815d450326f60544612764823c94d44e1f70a638
-
Filesize
6KB
MD53c2038e2c68d3629391827a3e4500fcf
SHA18f21b1ea7d1e2dc514e092f92672e341e144552e
SHA25606d113955ebe6415b266371ecc0551ddb1c84e2569e664550d872204ea36b746
SHA512bc1bf46f0b60081659b7298e9a6360425ca6a93f869f4951262aa7a5c3593dccbecd631e4e4ba98d3c0954a7988a362ff8e3bd4126c8ded4ddd7bd9279a2c895
-
Filesize
6KB
MD55eae1d12d8adfd558e7b93d07df8b68a
SHA1fa77b493e35c81b68428a57250a303a9e102122d
SHA256c38b2da5d1c2f0c844312c126df2b0b0482fc452365bb830c0bda51dc3cbb824
SHA512d0450886f3a79cb769a0e388e1d78e412d56bd1c9fde8ead827a18f2f4a020d85d40f4bc9d0d05add8ad86de4b5bd8f3cbe351ef95497b637be0ab63893eb5da
-
Filesize
7KB
MD5f9734617847d7739c974668f8475ac3d
SHA1f125364f825c66df7f237b56a44bd2444a7d11ef
SHA256dd4d367f36bbfbfcb6afbcabda119432f94d0e2d37bf6196574521dbefb2f125
SHA512f1ca0815ba824e4343dddfeb93ab4a21d348a05088959b839df263ec3c68aacfb97c157fe7d02c3ad052ac695971978b2e401a8dfb51f89af9345b93e9aec7a0
-
Filesize
7KB
MD5f9c7c0eefe6f23d8cacb01f399b1b2ff
SHA131a5f57304d36c7c7af6cec49c01080c2a49f744
SHA2561a79c5e81cbce6c19be7af0ce92f4f573741c6cb98a38d8362b7d033f7140f58
SHA512ea277c2e503eefc65fa4e7c18b25654fe294bd497daacd1feb19efb699874145ee3d6e28e4c7018413a8f490bbae3dab88a270628ff341225e3c8e023e2e98a4
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize56B
MD594275bde03760c160b707ba8806ef545
SHA1aad8d87b0796de7baca00ab000b2b12a26427859
SHA256c58cb79fa4a9ade48ed821dd9f98957b0adfda7c2d267e3d07951c2d371aa968
SHA5122aabd49bc9f0ed3a5c690773f48a92dbbbd60264090a0db2fe0f166f8c20c767a74d1e1d7cc6a46c34cfbd1587ddb565e791d494cd0d2ca375ab8cc11cd8f930
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize120B
MD57aefc1f3aebd1349fb3f68f6714727f6
SHA128f127cea888883a93972e0a0b0025d96076e424
SHA2567b33a1d7a3568fe5c3c61a83331e6e3cfca1d41bc95d4dbd9503946af2a12825
SHA51295103b40e6dfaf5689b769b84b6b376424913d16fdb4593cfa7034036a5450aabf5cfd29e53304c184211f072fed30864f31f698b1083314ca110fb9aae8b152
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize120B
MD54e71f6ee5d92771552cba918366869f1
SHA18c7ad8635b3ef988748c3185158bf7bf4caaec6f
SHA25643e9dbf8c3a665bfdab488c6136592bfbd866166fd102798c0ab70c2208991ea
SHA5125782c9dca829ea6cea5564e4583e41053d16eda6727a2fbde7cc0a1b8c57ca6938859f80c2193264d1aa96cb59a70ff89b114fb6fbee4e047c3fb0a0b533ee29
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5c2785.TMP
Filesize120B
MD5dc250126e1106ae829de4beb7811b4ff
SHA1034469b28ebe2f46f117155fede5172845a7500c
SHA25629c6fa595522d23a8cce54af95520e1044add1447992dadc792ef6b0df8e619e
SHA512b95c846958dea728a63b2123000a3a1d548b9969737147a94229a7f8cc804b0a8bca9eeb5ec0d2b7b65b9c675da57746efa25b34b34595e7913627b6af6e941b
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Filesize72B
MD5b4aa8f0341af993aadf76f76660231f4
SHA10ff3a764757e4d4d2167182e4cfee2735ab95429
SHA256ff4a57d8e1c27866abcfa5afe90e973498b9eb33d53ac8243be43f9b510395f6
SHA5120b2132d0a8aca12003ecb8a318d1021782284c7524ad0cc2310c0885b31221896d8217c2a6ca12bac1d6f21a2046998e9b954da824fa816a877040c8b596e26d
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57bda3.TMP
Filesize48B
MD5b2a8a3d3e76460205d00a6c90f9d64b6
SHA151dc7544585ff44c49e8f113472f69e1f4eed4a2
SHA256ee1b14d6e47d6cfa17d084ce5607ec6330099388867fb351afe626ced8e9574e
SHA512bcf79a386e8c46c52dabfd68823e255648a82ee5762152344ffd4dd6701a5a8fc0dea6bfa38b7055cb2a0a7f49735b8825ef47dd08f63d0f01640c436d752e5e
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f1946598-2dc1-4639-9ba8-48f75f929214.tmp
Filesize6KB
MD53377d14b417946b97cdd73911f4fe25f
SHA171b4ed316100e97561fbd1e188159d43e6677f7d
SHA2567f43c0eced270afe87fb1dcab3401e21f3f783f76961ee8bb65b138cd42a6559
SHA51223025aa7756bc7c7c1261eaaf8e6e433e38a8c617d60efc49738dc329d8e1bc28fa1c5f37bbd1f57092b912632f71536ecc3c1b15fa934c72916d41e0cab3c55
-
Filesize
136KB
MD505ca370163842bbe721b2ad5f5415e15
SHA19a3752b83f0162da9d2dd2563fec78e5015ded58
SHA256d76f6021115a5874cb6d1d8bd3ff3915c56a07b7a3027bafdf972ea8a98bea76
SHA51287839ef9c0c9c01a4862e9346143cb7580c7809cf40eaebd8b20c7cf8218acf75a56c6e0c8a24a934f300ceaa215ac4b2fa54faeb666ced0ba8df9075228db7d
-
Filesize
136KB
MD52207fa54160b5664d64f8185cae545f1
SHA1a363c9d54b8a07a97c9499e3f2e2c5b651f11a4b
SHA25664044680ee1a9586942f4cf6daab6140efea58833321b62071d48c1f33a2c809
SHA5122540d5b35b46c5949fad8e5301cbcef9a79fda272f55e9dee1cf11cf8daddefd307dc1257324d22f8d6c40d0293c8a3085de70d000f510abc2fd9cfc25fe9ea4
-
Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
-
Filesize
74KB
MD5d4fc49dc14f63895d997fa4940f24378
SHA13efb1437a7c5e46034147cbbc8db017c69d02c31
SHA256853d2f4eb81c9fdcea2ee079f6faf98214b111b77cdf68709b38989d123890f1
SHA512cc60d79b4afe5007634ac21dc4bc92081880be4c0d798a1735b63b27e936c02f399964f744dc73711987f01e8a1064b02a4867dd6cac27538e5fbe275cc61e0a
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\8LRRSGMC\cyrillic400[1].woff2
Filesize25KB
MD54a90976686fcbd8296c7d7fccc04c273
SHA1bcb82e93ac7ad1fa2af6a37009a200f79f4cb4e5
SHA25659bd288e64c57e034672999e33ebda6eb5ad1575945eb563dbfb5b44f226e1e1
SHA512aa84f64d4d90a633d182fae522e6f1071c713a9fa564ee83e2bd26771e5ff4b39d04836fd7ab29fd2e71a624e38d3ab15fb6d319be4740b87937b42ebe01f982
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\8LRRSGMC\greek400[1].woff2
Filesize20KB
MD522c793ce2678cfa2f8c88b123af3bd95
SHA181ac3d0faa06b9dae82faf2f608fa0a329ca1a5a
SHA2560c018fe9d09945d93f6f5aa5f1c53a2975621c3043a22344eaf86d6500c245c6
SHA512d7a52f4f5377d0839bba0c2048e398023110ae516a7e1bcb8061fc5d312cac94ec641e744dc87138602c1bca6a8529ef2d881c41a276dd0d890174e0e531f5d4
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\8LRRSGMC\greek_ext400[1].woff2
Filesize4KB
MD540f457b1846460a2ef2aa67b8ecb318d
SHA1c5895eb030e9c5f21edba495701ed83116aeab9b
SHA256910e0f31e8a51c7042bc1a1e4f7b9f2805f6bf78f872d9fccdc4f4e0b18ad53c
SHA5124bcfe81d025acbe748cca6cbb47ff1e4273bfb25eb12bae4fa1780171b8ec5ca079c6c59f7b4fab08541b075418167bb7bf16392d6f7d72a2afebd5a22d52b55
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\GQK0NEPZ\cyrillic_ext400[1].woff2
Filesize47KB
MD511404ec4a9f0289f2e01719a5f161f14
SHA161d036a0378e03d98a19f2e9f89d37317108fb3e
SHA2567608d58af9b388dd3736f6f3c0004e0c5a9278eacf320e17d5e787c70c28c218
SHA5126cb0b258b4c59b80613e0c09949326c162996b1af7df3f9f983f59bedacb3978f5b91b6ad4ff746a38ead6d260fcf53b78b5a258bd653b7072209fad1300e8a6
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\GQK0NEPZ\hebrew400[1].woff2
Filesize15KB
MD532716a5cfa3f66cf0e1d74d60694c4ad
SHA1ba7958726a7c60abfe42b469c3ce5a7074e4b8fb
SHA256ea1b915d9a1f79eefb62e5c9c1af97e12adacc44deac97601105bdd2d2c46798
SHA5123860a52b5a6c302b8ef293637b3d7ee6ed7fb541b1cbb063dc2f4c081199e96246323521317e1c6d5cb9a2c13f109d2fe2bba2ddda8d016314a7e08a24bd1eb3
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\GQK0NEPZ\latin400[1].woff2
Filesize43KB
MD5565ce506190ad3af920b40baf1794cec
SHA1ad3cba5d06100e09449a864d3b5e58403b478b3d
SHA2568778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
SHA512d18b76a6a173679e0e4f38f75229523fdd3601dfcf632bec2501f7004f842cd5dc4ae899dcd50cd0bfb2f298720732162f5ebcc21d41a8694c1df775a6ebb0f5
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\GQK0NEPZ\vietnamese400[1].woff2
Filesize13KB
MD5eadd44d829d43ddf48870c2073f1a7ca
SHA1fc04b04f37e0988001c81be96bca33c4d866450f
SHA25684197a92671b7b7c8715220cea35354699c6221113c0ff531ff087ab8a8aa9e6
SHA512f050371b44b058e4e9690fa60b333aa87b8d45d48f05ff95a8be85ea62741603d7680bdd225cc045606d5fca5e81ffff7035c315dddfb7fb6b13349480c1dc40
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\MHRBPSRW\latin_ext400[1].woff2
Filesize30KB
MD53fe71527811fbfedd2c07962e1bc49e7
SHA1f63e158a0480c5d711b5e268db0e75e57d87a8a5
SHA25624c0e724005344165ee0a0ff4c96a914e174bb4caa20c8a533fb194d92853e95
SHA5121cab1f4975b689610770c78b733b60c6fa8be872ca1d778ad2034511f787083c8e098da7b06c5025532fa9de6b173def2a05195df927d356939a7812bf02b4b7
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\0YGRKPO3\favicon[1].ico
Filesize1KB
MD5ea1d27966cdb5d5922290d266aca5bd5
SHA15e4c914b5fa87d5702f9444c8eba5f7aa219a950
SHA256e580724e0ab2004e6644e37d7020adaa689c77eaffeeeaf33749e688f8c1d8a2
SHA5120d84fcc8aef1d1f68380ed21d325d3b4b998a2ba76ec49592fb16a617ce318f6b640e29f85f888719ff503f665b688fc714662ec7daeccaba4a98b768a78e122
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\EA1EZLAK\suggestions[1].en-US
Filesize17KB
MD55a34cb996293fde2cb7a4ac89587393a
SHA13c96c993500690d1a77873cd62bc639b3a10653f
SHA256c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad
SHA512e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\DataStore\Data\nouser1\120712-0049\DBStore\LogFiles\edb.log
Filesize512KB
MD5b3b87bd0ea4f64f0de5c53d0af67934c
SHA1e72378f4846dbefc5e2c713827866b61c20a6fcc
SHA256705d1f7cbbb685b0d5d6e1093d068d53fd6f553c1dc0811b443f73206912726c
SHA51293f153ba5d6d42574bc1d380b39cadc03a5c804fe54941ed6727460a6eff92c542ace70f40f418f87614ebd78a740d44856fcc187ed3fd26e9cbcd3e65e8ae8e
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Temp\~DF6DF12B9FAE3427B2.TMP
Filesize16KB
MD535d08bb6de9a1b5bb2a130fb43ebdac2
SHA1fda1a27f9319c71c9801aed92c11078e17b7292d
SHA2562c68c5d7823375c6118b349a7ad53253bc7daef62b58206660b447df3da2d072
SHA5126cd2feff8f0a08aee4624eccf373d91fb63036a6c6352ca7a93f55147c43e3da1faca77e5e0f54e8b563346a2f3e047571abfcffc18c6f4848ee8fd0fe733c7a
-
Filesize
111KB
MD52f2e9a568f60fb3767a63a9134318a5e
SHA18bd1f64851eccbad819b00b2f5a9a1e74ad31042
SHA256e560688c78f6c2dc466ec630f48c189b07ecc699e2e88279d1d5ec544409fdf2
SHA5121ee7406a445ff4fd92fda43ed5a883e88220d242cfe4452936aceb41cd813d7d534857d32bcc6575798cfb19481abcbbc2952f8b7e21bc409233a299901281be
-
Filesize
7.4MB
MD58402ba655bd2f1cff77f2e8459579490
SHA11a664a6cc98577dba495d9b89c9b61b180257e13
SHA256fc1d88c9212eee9166f5d63532850e9ce0e02189fd2d970383c255a70b3771f1
SHA5128ec37ceb05448b2c009cb2c7240338bde62d700affa846dfab0d68e71416b8ed4df3c31780bdcb8023610f4d41153d9728a31e7beab430fe4c6365361819ceeb
-
Filesize
1KB
MD54d98e793c313bffa0a1c10908bf60cbc
SHA1fc0702f8755453f66217a2d812fb108d1528dd3e
SHA256982e7702691a561215f836df346e7c5b7e00bd35e12d613410f52396fed92b27
SHA5126bf1086db6b515c0f7212138929df8e7b613b157bdf0ac78da7e312d0ed902d28724f51d2e66a271abb0fc465532e97233a711f8b7cabb492f2b5ef91ee5ce60
-
C:\Users\Admin\AppData\Roaming\StreamFab\StreamFab\Advertise\Advertise_3\bfce73d1-48cd-4e82-9e61-3704a70a1461.png
Filesize36KB
MD55e289d38c710cb842cef39d3e1dff00a
SHA17a95a982b78ad77c7f6ac89d5c4438c85d752f89
SHA25608fc8ed1cb1287832328a1346152ac3f186bae3c505c48530a27dc4b0c75fb11
SHA512fe7a7ea8c2a13e00a34c6d54c93283e7c0ad8e829665e5af9f0c660046cc075c5b1b3491940ce1f57220557a7e453f917e19cf82334bc5314d2305835918baeb
-
Filesize
1KB
MD56170c6849d5354e8b5d313b75300ae43
SHA14729965973439b86a0f96fc0388e6b70d9d247b2
SHA256d2b072d5398ac6c8aa8f3492af2d3b83df1e0c59f92058075a99d679b472b5ca
SHA5129f3bc549897bed1cfdb37ea76a3948fda20348afc2e87f545668025293c812311a84b118190e08f1709f05852e820fc6823a2f6cf7a3a064bc0c20676d62ac88
-
Filesize
64B
MD5806700f4680ded81bc42f39605d60904
SHA10cc89edc21159656af3a77c54ca667f65e641d70
SHA2566c5a7d7a0b8fa21d60342683b020698f90e0bafb3700333fdfb2e31bd8fa6716
SHA512c13f7883f14759843e121433cc4348f99f0a0f61d6b7270239f145f1aa78a28661fa28a614bfff1c024b7801aa9e12e7279f342e3966c7b08aeba9cc71be1ecd
-
Filesize
731B
MD55471bf64c701620f6338cb53fcbedcd9
SHA1192b9327fc7616b97be17844be9e7ddb336042af
SHA256d55ee31c9a022421bd6f0427d150dc94cdaa28d43c077b93fd870064046020dc
SHA512e7c794d0556d9cb9e991702336f9116bfe879288c0a62efe7e748c1c843ed3b90a4f35483bfc5d39d394ec0d600cb43eaee2a7dc48a02b073ecf7abd0855021a
-
Filesize
503B
MD5cefcce763d93d9fcade42c0eb7644498
SHA1050a96ecdeb8cb8a5dede1126b67f1976476e8da
SHA256218eb71f8a4b6cd56cc33b4d76fac9ec694ee78cf4a05ce01a73e92895f0b967
SHA5126a564cdc758127a7b0426bd88c6ce97f1350fefcc70425b3b642ff4db9a7f8570c177fe24f158309304a13af8246a07ed972a3d0c8b9e7b90930caa180acc60a
-
Filesize
347B
MD51b2821fff281e9491c0206f40ffc24e6
SHA1f940aeaaad604bd72df26b4ddeadfd8801c4f075
SHA25677e7f26fb48321505ca37e925e0586da2bbcc813f1373f2116f0eb0f2aa2375f
SHA512e925fdf30752927e769271a9c7431fb06d26b1ee2030d4fb3ec49f134c571a85ed084a132852e5065de7fd5a28ab96eac2d973a7151e10da5e3e6a151b0dccb1
-
Filesize
3KB
MD55ab70ddc4c532aa9286904a2c345e7dc
SHA16235fb0f399103f9c885ca741d76d5e26db9d79c
SHA25633ca4eda1389b09205b624903e86a207dc58133d10a7ba0bbb7a4ba812002eff
SHA51270256a8cc6cb0283c252ebc2e6e4c4b2291065dacf38f30b7856ddfc18cefcbc0f2c1a4c65f69db1ef79ac5ab55351d8fa3cf589db15e8d97621a4711fde446b
-
C:\Users\Admin\AppData\Roaming\StreamFab\StreamFab\my_resource\website_home\white\imgs\instragram.png
Filesize1KB
MD5c87d815898e27e13f81b5eda1dfb9aa8
SHA1762be0e8cfffef311f2b67e8d12b80983ffaf410
SHA256737e935ed5f0377a57d3c8134193c44e7399275f5e18f84b2cb073830f0c6b10
SHA5126087e6f8d23f264553b51dad0d1c0402b96d5c08a285f891d67c4e519bedebaacf8ad6ad836118968a22edbedc1c94ea1a9fe178847c01c8e1a14ff3eba3d0a5
-
C:\Users\Admin\AppData\Roaming\StreamFab\StreamFab\my_resource\website_home\white\imgs\music_youtube.png
Filesize665B
MD5926a08099974a4e5c9168f15e2e72221
SHA133f3b18ae6c64f45ae7a88b10a735a25cb9c584f
SHA256fddc58b4924322f9ef0068b6a0f80bac1e1341bc4ffdc44029c8d5fb77fd5827
SHA512bcf21e564b8479877124d562d63a308fffec567db01e3bc995299bf7426953851e0a78bafb6d56fd999140c5f7b0c5e62e26447d2d0b12a879f40ed34b235f5f
-
Filesize
544B
MD5215aa704f0832828172a52586b74a045
SHA1c31ce4e7f0a3c7cd219077c2f0a3d386a439b7b1
SHA2562b3e237bcca77ecb7e7d4c60de440597db8c6923f063c4a2bddd61e22f782b5f
SHA512d8fa6fd35f62e7269be9e68a36540b4663c13d670a3a71e6251b6f4fe9ccababe4e6938a9054194a4f3261e1cc6a0eca26024094675bed768d67da128c690cb8
-
Filesize
519B
MD59ca17489938a0300681c6fbc5f5fa099
SHA13b7ff87a6152654d2f4bbd9a86c708a4a7751a46
SHA2565bdb256c6435ba095197bc34b20f7f8908598d5c7dcf138ad511b94988a15c23
SHA512327993d591491e5cc6b15b6eb305e7febdad7d5b1dcca0bc88055dfd425d61e5128b1da5e2ed15bd555e239cd0e06bb0adb78fe65b88e8a45f0dcd14b1cea297
-
C:\Users\Admin\AppData\Roaming\StreamFab\StreamFab\my_resource\website_home\white\imgs\website\Eporner.com.png
Filesize3KB
MD58174ccc0b2bcb0b854b4efbe5da0df87
SHA1a882081df1d3b889f9c238922bdd01d68bd6ec9a
SHA2565527364f0a111be46a9aebe9a4301c5ca9f5bca860da3905eaa759940ef3eb14
SHA51228878d7fd50900cee876cbe7a1037d966564c82e9d8478cb4cde1487fdfd13df0709ad22815c46cdfd7bef69c1f27d46d9f86d4d9d8bfad80b1be8f07bbdda5a
-
C:\Users\Admin\AppData\Roaming\StreamFab\StreamFab\my_resource\website_home\white\imgs\website\Porn.com.png
Filesize2KB
MD58429135d5d6e5e225d2e811e7a4f312f
SHA1b91576d484925c4601bc123ca6f8d6fb3fcda12f
SHA2561168e2c9f2e446cc43deeb645784cd6ac2f70bc6c07d0276736586b8437f3415
SHA5120997b9f36c46b6536847c23b6c2d905cc28e270be220d44244191145245026a04acaa6394df168412d89335866f35c8c5778113b9f165d69b57de305b77025ac
-
C:\Users\Admin\AppData\Roaming\StreamFab\StreamFab\my_resource\website_home\white\imgs\website\PornTube.png
Filesize2KB
MD5c0c14287e49d8500d231a402f852c327
SHA16f14d86b16fee4c0b810701be972035843fd869d
SHA2563312f5c3ccad8c1dd9b157ffb41d44ee3419961e5519defc9dc26d8d56a3a345
SHA512544536c82e38f0a071b81e285d6d35848fcd8651ace0fe486fef4af66df651cfd4aa178a0e3bbd7a4893ae04ca6e30c1b4c437af66ceb54fc9d9b669acbfc085
-
C:\Users\Admin\AppData\Roaming\StreamFab\StreamFab\my_resource\website_home\white\imgs\website\Pornhub.png
Filesize3KB
MD542c74413c7c00e5b42be43e7c089dd8b
SHA1980fdd2de05a9416a21945e2f9fdf14a7b39470c
SHA256e5173778b3adb033fdea3b25b7842e7906e3fce0e629168ddb68068611c8d1c8
SHA512cb4207c5a91ae0945c0ec6acb25f8e94a9a0727e2ad2f5da759845646f4dc76a480c97a4bce6a6cff84d6b5457650c567fb51bc5383561982b02bf8e263c0763
-
C:\Users\Admin\AppData\Roaming\StreamFab\StreamFab\my_resource\website_home\white\imgs\website\RedTube.png
Filesize2KB
MD512180eba3992b446fd9e575ed1a1d37d
SHA143f8d806bc665c25f9f7615c0a115997ea16e502
SHA25606709847c9fe6beb0103af1089bdf52a38216c9eef3e2411f461ec026f35ab6f
SHA5125f523f4dcde8dd82527f6390865bbef67d6c7d8f6844a1b1df99657d349a1dd696f105f2325a981f1ad5b2d6aa8180bd5f8221fb5ea9a4fda3950d2eacda3b21
-
C:\Users\Admin\AppData\Roaming\StreamFab\StreamFab\my_resource\website_home\white\imgs\website\Stayhomehub.png
Filesize3KB
MD551a3bef4a8ed67eb64b53fc80a03cbc3
SHA15085c35ff75f4671e4999f8daa7ea6d60d90d3fe
SHA256c1cb1e630c157ceedc5639ebdd6eb969ecc37058062a07eb3feae5e04e6811fb
SHA51243c11f9801ac372f4ffbdb84e10bf4a87cd45a82225d2c18a32d8f060446cfebb4bd0f4928600753d9197d6e28bf7bb6ecd0e7d37cb57d1e5c60e2a98c7354b3
-
C:\Users\Admin\AppData\Roaming\StreamFab\StreamFab\my_resource\website_home\white\imgs\website\XHAMSTER.png
Filesize3KB
MD5c5517e355c9a664bc771bfa384c59b5e
SHA15e92ec4ee4ec37cff1dde9183939a701a72e5763
SHA256c37d05b34db93da73ed6b89d34bea4fcd772c8d78436e10f8035bca4127968b4
SHA512bfd21cc0f332316dc6bc7a53fe003f1602a054d1ff87eccb476689ca11a60567b57309ae2e61fa0d78ad0962ef65df36ef9cab776faa9737565cd7f2b65ab5d5
-
C:\Users\Admin\AppData\Roaming\StreamFab\StreamFab\my_resource\website_home\white\imgs\website\XNXX.COM.png
Filesize4KB
MD54078dbfe3b8988353e35736215705174
SHA14307b53e5b8d2cb05024166528ae6e7ea778a815
SHA256bce2b9e1ecc71331cb5a01b838864238b82afd0b6b35c883abc80d43d3019ed5
SHA512c5fe1c1c74adebec05c2c6b733826ccb8057885058cd713d04ad3163e0347936fd37ca360d59fb566f4b881048e4134bee80f0d6baab782c7d431fa313c8b22e
-
C:\Users\Admin\AppData\Roaming\StreamFab\StreamFab\my_resource\website_home\white\imgs\website\XVIDEOS.png
Filesize2KB
MD5c9ecd7bc83e811c27228318739b714e4
SHA1c651f8207197a05f929500ad751ee95ae6cbe6d6
SHA2562a196fb6d3f31d6954b8f14a9155ea1f2510ad8962b1aae0c83f55713e527549
SHA512397b47e8e3cc9ec0832ab99efaaee5310292f5278871e2f1722b96b23d2d7bd6cf23f3d336fe4b5ba4b1ba04aa1c9c4b176621f9d62d556773d7375aa726d539
-
C:\Users\Admin\AppData\Roaming\StreamFab\StreamFab\my_resource\website_home\white\imgs\website\YouPorn.png
Filesize2KB
MD56450b710fd29a2867c38df386a9f68e0
SHA1810a8d95ea6aabe0c972d0b6508e5f6925380a0d
SHA256691b97865c0d3a63f2c355c845d19de275df2e423398958bfbeba49c232c7e3e
SHA512e8f2b9326cbd324722019ed739828cce0c95849aa5d2c476ebc92116205b705fea2e129df271a6762e6d8ffaec53591bd5364dc9989f724ebff4a56d7dcd7e66
-
Filesize
371B
MD519c19e7365a408c479a0c07e4bd6719e
SHA17accca592b6e2386cad19a518bee4d2cb2ff70db
SHA256c923ed8be1a5600e15ccc283abca4e97dc862c2f17859f9aa79ea6065649552a
SHA51284646ec63982d92557f4df1a2ff567cf35ec6b5363f1deb1ba6b3616ec79688db400eb33bfb607b2389b0e59528e7961a47d13ed4c6b58b3a74b5195159c4b9f
-
Filesize
1KB
MD5a47d57daedf74fd00583b5f87b4a80af
SHA17ac163c66e32595d8b0f7c4a4d67012bcae19f52
SHA256f0d5e5434c150155b40c7c7837548129c13778748e54141f4dd99ec0d23c6ddb
SHA512696d0aa61d16f678e9a3dd96bf42214831437230949a322747830c57e2b2608c5eb642428b15a30c219779282f20ed3456a27b876bc8174ce217c68a52c9b41d
-
C:\Users\Admin\AppData\Roaming\StreamFab\StreamFab\my_resource\website_home\white\js\jquery-2.0.2.js
Filesize245KB
MD5ac8858c702432228b4f72bd7117bb587
SHA1a41569bb6108109add98e0093858dc9a77737f34
SHA25686850b0b3aa5ed8f6cfb4733f6c7bf2a809ef5b4c1c3e6475958a7756f960463
SHA51298dc09ccde6b582e6196855f2450481dd95fd1c37a5068f62670f5e3e5ed737f081e038c96b8549bff3d63295c51d1a9fd835dfb933640b1dfbee4093b629e99
-
Filesize
15KB
MD5d182acc64d4cf058634cc7ce92d0cf61
SHA143d705489d651fb222102f23979e1f36ca0ff9ab
SHA2561d0b843f06f159572a4cac6ffc9dad1c5aac98ba24aec3e27ce3caca4d3b6e16
SHA512f51e9220ef3d8748646ebc1335b894ea999df09363f6a6a6af5699364fd4ac004b98a7ccf5dc5cf02142b8e2624e3bd6e2f23b7699ffe8ebf36125d1c2e5bc9a
-
Filesize
25KB
MD5e9372c9bb4c95a7fe6e714558b8b9b2d
SHA16ca22e8a7547621df3357a5cbaaf47d3f700028b
SHA256b7a69eb88987da23c061169686289f1beac5c80e722972d433f951f4b63b36ec
SHA512796a949443d960b53ee2f1cefa937dfcf5ba52c8dd20ab3646c20c3614dfe91b999652283409d2c0683edbddea700c4d72ff6629a57c7d868f89ca754c7ea884
-
Filesize
335B
MD554af834ee872041286e8c606db52b036
SHA11deaebe562fcceddc3e89c215b3c92dfd6bbff8d
SHA256bcc030e1ab2a2e6c8eb50909c3adb4eb8df9a92521838911bff3b08ffca0a688
SHA51240d1cdd05445a8a695c166ada2f69719c58bb3b261a142d50a6598f472917f93a499abe2508c191c345dcd6e09915cc1a57ee189c99c6c37a0d80e94dc6510c9
-
Filesize
4KB
MD55c7e3fbb5bf8d371bf7777a596344bb0
SHA1b9e7303492f04c3a8d5e2026370c324c42b29061
SHA256ab2a8a3d631998d6e029dfbf8fc1349fae9f1c764d56c56b03ef40923ae6f677
SHA512d7aac50d2c32f82901e5235376344263554174b9974521aa2a91fc323098670084e42389babd00b22b58f1b80cff4ad61976f054a2eaf464ae4f6a567b0132d8
-
Filesize
4KB
MD552866cd865f56c79bb392c0f77054907
SHA1b67e0fd53458f54ffa8005690e858deaacff3c19
SHA2563a392e4abdfd32185bd14d5b80350fd56e3b226e8a974e294f91f64500f565a3
SHA51288220aefe5a271b2630c7702e90c78618964f225b90cdcf6977a50a5a4f5e56c52be3a88d19c1540aa84e7a376279adbba754fd3169a92688d4b44190bcd1f9e
-
Filesize
11KB
MD5f0a8ef5c1816893ba0b7fbe208ad6c6c
SHA132ca32a94326be31005333e17b79a07e2eac489f
SHA2562b3a8f8f203b259610039721d00ca4522cebc6fe6e9121ba2aa17599acf26eca
SHA5121d54c3b86d6b07b043751d56f4e65dc2b95f547b15f979fd6f83511c80992603f83cf20c1254bef954a813a58ae78b4c547ed7ec79b85c62f2c6e6ac3176cac6
-
Filesize
767B
MD5f0a14486352bb85b1e59f3a86c4d0bcd
SHA1316d57e3a5c2e3ff48f60bcc4e39732bff26776f
SHA2566be83c5a20493851bf7da8f7cb5ae89e3a8510b20a3411d2be62a2cccfa96adb
SHA51258239e4fba20885243913454fddc70f3952ae729c9e61ce87ccc3426450a4de9221eb7708d1e2667ccd2f5afbefa067305c3747fe7db8fe0c3522bc691f8f856
-
Filesize
263KB
MD53cb12db7c672b33735006480a455ec72
SHA1d060e5996b3f7143755496cf2a06de5a59c283ce
SHA2564c7a552d219146985961bf78d9083b7e2c1a82c4ada5d959f48b3e53754c9049
SHA512808598eed329f0bf3ae2800eb9d7346a16e23fb4ee0a4e80f61f7f6d41fff09b76cb33e4d21d5dd6768d010d361ae63760814e4076926093afa8edb21bc52326
-
Filesize
259KB
MD53e55c56205a89c859fed005ae1729faa
SHA1b33bba44ef2d6932707d0eef8e00b0ed534fcbb7
SHA2563eec290a7f7da9abb00b49ca84f5f16e6d45ca33d40fd8ede4380835d6161d71
SHA51208857f23cb9c37e55fafa55d5f2b74ef7894bb54138f6c0db243ec14310e5a47508375da83eb8d6bcbe471abe24fd71ff24040139ec85c0eb6406d3b45341aeb
-
Filesize
805KB
MD5590169a4ec71a93ce3a728a6f02f32a0
SHA131e0f86f34f3863e6e9d76d6f9dfe2e13e5b495f
SHA256898ac97869833e1908fc793d7712f16e9aa543f5e4ff5c95c3cc71d05bc9b978
SHA5125e19ac561b0c959d0d432e7edbcff3a3d720fcb290d5b08d9ab3923211a35831ea0c797d4631b7abde68153cb1858fec33d630c4050c0c9fe8656847038f019c
-
Filesize
32KB
MD52f966b2ba9649b4bc9ca1ee645cdca08
SHA12053343e06f58f5ad2c185f68a0b99d674375578
SHA2564683af1321483200a6f8d541102d425b6af841e7a9f01151499acb2f35bb203f
SHA5120e76ccd92c61cd7794568cb990d0db38b7b9c672a59332ca2b6662cfb97adc78aa33bfc651feab4dd44686fcc4aae91ccc11a1c96f26586a5e4f686cf39c70a0
-
Filesize
46KB
MD509d8c48a30039770adf6aae77a483fa3
SHA17f33770abfc75582ad61b8a990786b383f3ddccd
SHA2566809894b9fca107f00ab417fa4f5b36dff504ca1e03491a74d6be9e89e2112d7
SHA5128ff0e92f11e166a9267b99a14f562f9167432b4233e9853bc08c44c6bcdbf7696639bd4c2554abc69e8411819ba37527335fdd6889e6a3dd23f6a935dbf1f87f
-
Filesize
23KB
MD5aab7809a0c438592a70a37588695fbf9
SHA15e1f3a6e1ebbe067c0282f8cab1029e62dd50810
SHA256d2c67669aa7cc48289d87575efdbe876c7a6d7c8e1cf458661aaf48fb49e00a6
SHA512fb1dcdc5f357230d9404f068f498599426736dbbf0e09cca9f71c52052cd2fdc13295d9e33e47e4ac33e5ae4d897272df99642b8e2ee5c408bc12bb1c2307e2b
-
Filesize
939KB
MD5fb2248844233bfa1f4bed586c8ca41ac
SHA1d16cdfd82e0c3294c5256cb633a8f562243c25fe
SHA256c7a93007ac784a90350dcd84dc5d29dd80e0f9c1dc50647fbefeebdada1f19b2
SHA512504d6ed377cff543c18d1dacbff99cb858b836876b0ba06ec894b0e73b5f07e27c532096a9d8f730656e4cf7ba8d425c2c1506cf34b7957b9be8b625a3ed46db
-
Filesize
56KB
MD5d963b1f16db8e9f96a4e588f39cc1df6
SHA13491075bf855eaab72cfe47aa98bb1bc7298af7a
SHA256eb5b011f84791462c17c07f7409134d54703975976324829b07318c6b9af8c2d
SHA512be2a04a26c91e777df7bd5dbc6f40cf3bb99b8cb2fa43b0fb0ad912f185ce32fda4b987dc46f11485e7f289deccd167330d91ae0481c8169e1fa6b16c9ef179a
-
Filesize
53KB
MD5c01c04837d375115ea21134742c3e78d
SHA1448379a196475f3c4543a07d1cd59bb9b970faa5
SHA25655eb42509703c10572787aefede37086cddec0f084ef2db0068dac3ecc5a7ecd
SHA5123f4b34b2836053ac82d42550074172f930f73c562e4421766ee874f64c2afc7711a118c65d4a0f36498b3622320346ae42bd5afbfe726ca2568117f1deb80d03
-
Filesize
50KB
MD5d978888aeedc7fd843b60c3c77f72b4a
SHA17fee75ecb571ccf848e716faca6cb977d508bffa
SHA256af731df02c4f882cfb300f2ce34e8f5b099e4e1c30756621962d086cd90c048f
SHA512354e6f6bc8df1b80c66b1390937394ea2e540e648698bf91846a71166a353f2b31d237c1e281ccc8af84ff9c6e6f237442f40216c34caf5b185e9deda9e457cf
-
Filesize
56KB
MD5e3805afe6b8250f0c2873ad726a76289
SHA1c0ad1cfbafff11f15631881bcaed74b8f7375bbb
SHA256bfecfdce881c661ed89d7a82d9fd736486d9d03451a781adb87565efe2c68f3f
SHA512990eec0f5e1c78c0ddcfcd2132c0b30b9ae99ded74056f8d79a63f38cfcec8f3c36a1561f3db4f1da3de77ad5a44352ae174e3e52746de9404ea28b16e523942
-
Filesize
85KB
MD567ae4244ee85badcc0bbdc74629343cf
SHA1cd200ea9177253bf02b7ac6aedf37fa5f8d1de04
SHA25611f5585036b6ef801cc22be4233e2132bb47b74cede695be23e5461d0057ca1c
SHA512679bb97df45930cf61bc7d34774f88ac95fbf37f48c5a53db0110fd062d83f55aa445b13fffed89dd62b8a01b986bb224507ed91635a45924eb62bdae314d97d
-
Filesize
67KB
MD5cd0e0a20ee4252f0188792a6010e4e69
SHA188c454df097ec103e22ad7c9622b199fa6e219f6
SHA256e8d7e3965763e990c0636c3e6d5f28bc0ccfbec28ee4590a0d63e24dc01f719a
SHA512e2751b2174dafac17cb6ee6a366840ed887161386ce5269581cee8bfb77858c21e4764399f8b964e612c1b8a0c17612c17074569f678228fe71da08037afdecc
-
Filesize
81KB
MD5c3c51ff5bd70690fffa5e11296dfa526
SHA1f6ac8b9722df98831979b60893c0e1fcfb5a1764
SHA256067065a01765d11903a29c72d7ca3d46c2755c68b21b8b790ed8b102ec97ac91
SHA512d032213b8e7e215c09c3fb56c19f18b327ab4eddd5925444102058f93431e344befb8c49b5e3a009abd46858a91d9fe099e2d119eca43a0a44480b18d2faf1b2
-
Filesize
3KB
MD5ba0e208a31591c121bfd7b29868a2811
SHA183b6f5a3f09d581e168aa679d19d69e025b27a71
SHA256a576dd84031dfbacd16369901349d0b63f8174ae8997ac972deed1dfee10a6ab
SHA5128245bc2ba83d67f3da59c78230999595facc3a73790542dfe0195312ff40109827ef056a31f3e7c42fbe2eef1443e5fe2ec02a8578983d7ec7ffffc8a431db9e
-
Filesize
3KB
MD566fb9792524a52fc69642a5fee7d68cb
SHA1edf3dd0f1f1478bc99236b7991650869417e8a53
SHA256a28891e6ad9642813df8854572b4a50bdfc8c095a93ad4996708954db8fc78ab
SHA51292253eaf8ad1f7b489dc75c55f5e2b8985fef8b171b3f7fa4f0e2cfc72dba01dd6fd04edd877c3e93cd37a2aabbc3087a918754e386c05c5a4a17cf78ebe83f6
-
Filesize
3KB
MD50ff9338442e68c3878f7d2613606590c
SHA1c771db670d97ce90cedef7ff9199879a96041a78
SHA256b5d67852a2acc267bbe57bcc37504a6fbf2c5916915c928d6b21afbcb879163f
SHA512a285c79a5f3aba140290e5983a8fbc5a1cc4ab372adbe850985e235e990ba586ef324457d828cc58cae097de79850e83b21bb87bda696e690bd4e1631e991233
-
C:\Users\Admin\Documents\StreamFab\StreamFab\Temp\cache\Code Cache\js\index-dir\the-real-index~RFe5dc631.TMP
Filesize48B
MD507fe7b3b6b2722f3236dfc9749d8b4cd
SHA1a315f63465d14fc2022082a1f1dbb3c7cb84c343
SHA25699dfc816c8be6f40f0ec3d05798c30b228e2b8f9ec325023c65bfb2465dcb05a
SHA5129dd2a7fd0bf2b7cb0644990a9712716801cdb598432d7a036ff2c568dae982b1d49719c56e7ad0312f82bfdc884751bd8505e2b49c497ec63ad595f4ef3ad69f
-
Filesize
41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
Filesize
638B
MD56f7a7d8f385b220df415c929a4562476
SHA1db30165d5ee716a7c21fcb44c6fc4428ee17942f
SHA2560f54e4c995268a8bd6a94face17cc56f3ca83e81bfa25aa370439b4ffb416e54
SHA51289c260d32d02be880c8fdc42fda547cf72d063ce1e40f7cadf626f5054734c93571a4e070bec5ba9ec38ef080d7b5c8f890d127e521c4a7dbb9ae036944c252e
-
Filesize
484B
MD5eee9fdd434adc7aa8ba40303c2dd01c6
SHA1ae83c9697370b9228a2d5b4b1fb919c60da87307
SHA256bb43a73d5a11055ef437a4db56ea36cb3e4feac634dff1943f9c4a4ec0215f2d
SHA5126efa8221b360db2684bb7a1d3a4d07de4a97daef50b55355fa5fde8891f9137e112716d5305e51687c396509fe8686592f75b4739d0c65e8897d98b1f1030f73
-
Filesize
8KB
MD59863901154c3e049eb5c60aefb2a41dd
SHA1b836af856ba01b1c923d7a084b86af982d16b1bc
SHA2566f71db4fc3b6f99cab0766f09460a415c0d00acb2f8ddff71ed8c431c06d80fe
SHA51296aea988221912c630d5085f82d4f9fc52511426bb627a4e1d23cdb70221a02f36e187ddfe5b2c95398f90b6b7717455f7cff42110477edc29c9a39e34496821
-
Filesize
7KB
MD5a68a5281403aa87bd0b4e93211ef09b8
SHA1b1776475b985bfb6cdefb9a2df762f5675c18353
SHA2566fda6167bac14ba54cf14f0503aa6a599945bff95bf23f9b378882cc0728ea01
SHA512ba39d62bf828d5e34a722f8baac58b4608da32ccce19d70b7ef3068261d267a52f22a673fa6c9fc9e45cc25eac4e573bd131ff9acb4dcfbc345ccfbd0c59f286
-
C:\Users\Admin\Documents\StreamFab\StreamFab\Temp\cache\Network\Network Persistent State~RFe5d5a77.TMP
Filesize59B
MD52800881c775077e1c4b6e06bf4676de4
SHA12873631068c8b3b9495638c865915be822442c8b
SHA256226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
-
Filesize
3KB
MD5ef8f22dc3213a14eba7205fe5955a55a
SHA101cf471f276adad16a068b1b971723f107c017a2
SHA256f2a3c05d6056f6e7b31a7e548525bed45c9e0972ceb442661755c26407f3e719
SHA5128fa3f7488d5ee053bfe63fe5fc4f9f0e3df6223cec9b67d7bd0131b35ef2ab0034db5b6b49d1806a9e65331ad031c46c084167b0e67776aec9648da32b29d785
-
Filesize
4KB
MD54e1482a832679f072a11dc5ed46dce66
SHA1f84066dc558bf5438e0c1c0da548f9d05169bff8
SHA2565ea8685967bbeb52dc5ec87b5354db5df7373aa1b60ac199c8739897f8cfe6b5
SHA5122092e47890d67fadc70a213446e0031fc127969d4ec9adcfc8655a2f061c2251e94df0516443d6b760c9207ae2b08cb0137e189fc876890e4b9165041855ef0c
-
Filesize
5KB
MD5019ef8d9f138f84522ae8f69c2a9f9a2
SHA14369e6504f98ae77cc4f7e95ff236d6e29b87119
SHA256344f15772a47ff1deeaab24ddabdd6e60f74509d3ba4d8a602be17f1fe7cae58
SHA5126e08a705e0ed1ab24e554a2c545ec6acf0a04bea7f4d04540bcf48b937a8637703c16464e8a3661ed9046ee45884f6360cf1717bfb9cb62c421f6be7e1f19ff6
-
Filesize
5KB
MD5dbf7fe9a4b10753b1fb31ec223cc5e92
SHA111db6b0318f61430cf9c775da5cb8eab394745de
SHA256244e440864b742a80407d98404fa89719a532470c8b5f8c0d40b458544ffeb89
SHA512e94bc1017d25faf2f7b9f1af193487bd39406ed5c9b90a12cee3c3223c550a996e6cf505abc3ba02b18f00f18ae65a80369f947ec70e621948522f299a84553e
-
Filesize
5KB
MD5613f422f865b0669f45508b537f1d66e
SHA15ae7f77f0e2bf580d973f8a74efd1392ee9cc151
SHA256b7ca9d9cb834492f5e9b9c2a4bd76918856fd7780636c7d021afc823317f8a5e
SHA5129aa01085d4d9684082e2e198331a1ef53e1e57fd89fc4a25d9bde36572ffca72735e956d8d803ac37685db8c20e2e1028bbc1b134190c123a4bef3bcf67f9c18
-
Filesize
5KB
MD554a26f7117f902821f79a320646e8b69
SHA18afcd4787bc56f0993c47d0090b106dacbdab3d2
SHA25609db29cecd7eeaa04c4e846d7bacd15013c894aeafb8fc24032e252be1cc235d
SHA51286747b3bfb699c36945327a8ad426b6a710a750b4714b19f918e964e37f4c02105c14d91b2748fd9a4bb5febde0acaab666eb293decd6b404641dc9769640aee
-
Filesize
5KB
MD546d689ebf6fe73c5b81d67b96b73bec6
SHA17908bf40433468b6388132993e5ac840357afce4
SHA2560f6541177d06fad1ef7aac999fe47d4d2c74a6a5ab786917cc62dc4a4548755c
SHA512fbd99644ef052589a61391001ee8d794a3ab97079eeca2f29ff8ff61b99df4f2e331164df52c2af9273b029e28e3193c4e473f2828e80272557d00bf32893783
-
Filesize
5KB
MD523f197e8940b2780ee4c0d7eb5d4fc5d
SHA1f8a4bcc484ed36912bba24b95fae791fd09ca056
SHA256b2bfff69159a48c8f74b8e3e9731f03d1770433294bddf2f103d1c28b34fedd5
SHA512dd3130b65ab29a6190ef6bc93ba0a9b0457a0c7886b6ab1c042f1f54628254e36d6cdff7a5d229550cdf5b4dd93c6be9679cc30ac7a04ee486cc4e1ca7c910f7
-
Filesize
5KB
MD5dc336b439e4b0c4185851b3d5cb01c4d
SHA1fd5c4a97dc037bfa3fc1251c743c348f583da6c1
SHA256f6e3a222b36df8dff98bea67301114997ad88a85366f4f9e9ef07c73ff0ceb49
SHA51278f585e52dbd3824251fc87f7a7f42c5a29b619fc44318e7e6af333a4937cec8255a7afb5574d23faa27cff1640e80f17d7184166aa8541cf61ef678e3a67a83
-
Filesize
5KB
MD57aa00c394f99e25b6c7b2c3f124ce82c
SHA12b6910842341210cc119a0b64ba730c897e49123
SHA25620985b03097d67b348260d8a57e47df45a81e67534cfb95051798e7300bd9d74
SHA512fe17ba478a7a5ea0d90d220af778e7838ed98efffbd93b48017fb4225f7b10f3cd3b22812700860edc9fef9967838fffaad5ff066db539dbd7b3f57b64b0e1a4
-
Filesize
3KB
MD581c1d17b7ea3fd24c2cac87339e7eaa8
SHA1892a979deeda42d021a72f16661b45b14132ba33
SHA2567d94ec65fb89f9cf78bc97e8fadfeffbbc45915d05247aed0503f67d8bcec26a
SHA51251066521b4e43a7b1bf51045d4e9c0d3d0b01f94f521cb6fdb03cb714f4ed1fca7160cfa4966992ebf234fa567b10e8661aaf7d4f2043e0a15c788346503f3f6
-
Filesize
5KB
MD51da7b0b8a8bb54aeba1578ce5c81a0d6
SHA1d0ae0e42fd690155c2569e6e36ecb72fceaeb318
SHA256e8f0ec58d4765711ef9ff046686fec0423cd5436558f06d4fcb8bd47e451e0f3
SHA5129b64f88645f2dac2bbb859617a66e8be75cc1cf8c10281955bc4141360e268646900c99092ef5056bea646b510d7173ed7ebaf21b552eaa8cd4d8dd1a3577cad
-
Filesize
5KB
MD52015454ec6151ad62d114012eb6c837c
SHA1d41a1f64e5e45341592124c942066461fe864347
SHA256df730cea1ea8a36fcf839ee6b137aa3faff88f334345cb9d7e547816eb39cfa7
SHA5123b2fd2650623d6436fb86993ce5246e2435b1c504e5e0b1b0f8fb54dabfa9d2708ac159913f2416e99a0e016c878ba3c398c7d91aa36c84074efeac031e283e8
-
Filesize
5KB
MD53cebc88c31c6002354aa61e7e20df79e
SHA1a91f39940789205686e5086066a97b516f4cd6a7
SHA2562d962591084dd764baa331c6ce1cd92e97019e17068171017ddcb1f1b95b5850
SHA512eca15f8ec6be1cdcbda0d67dad9d376ab1ff197b03269a54d4377edd744253a9aa603af3d28da0ca831e7cb0bc7203370ad874fc1cf9001d8ace1d8885452d2a
-
Filesize
5KB
MD50c07a590486fa57094c061e9245aa4dd
SHA1fb421314022b3a9849c2b1dcb63a6a9751ebb7a9
SHA256229dbe10478c5e14b5d77947e9eff445e9dd4a611f689bd9866c47791e1f9357
SHA512eaad1c35753007269de381f2dc39146d11bf06a61899b8b885747ce072544cd48f50eb252c49c872fe16cbfa16000589f9e017cc014541dc6ce760a6bf33d573
-
Filesize
5KB
MD50d29bfb983f5f91ebde36d37fde43fa2
SHA14c903ca0a80e70780967b9fbae0eeb8459f5518a
SHA256d035a1c89b1396a0b911fef021a78977acd56e4c130924f0464b246865d37196
SHA512d750ce1212a075269a730ac5040a186d6afb849da90b6af10f72f0bfb6b944a3e9364961502e1f7b84296df50ca8aa4ba1363c6247e351ffd38a15fb331a43b9
-
Filesize
5KB
MD5cc5774c3d3727fb916146988cb756455
SHA16c74427dbceaf6dcbefef2946952ab4e81ccc66d
SHA256dc76f13e6da2e69a7605867012f63d8cfa84377986cd816e7591ae60d43bc340
SHA512c69abae443efa30a7257e1b952ae0aa55983fcdca9077d6d85e4af7b104ab19bfb77e86bd7f1b8396e1d9ba153606e2a4c08978ae42b551b78e5d540deacc0e5
-
Filesize
5KB
MD5efc73cdf74dfd928b3f83769cc9a637d
SHA1bba1b040f57b22adbfeee43203fef03b0470d7f4
SHA256e97672f6afabef0812728170e88622f6bc3d967ffd5bb3d9ce067df30df9c4d3
SHA51230a368731229dbc5a9bbb54f95d91f99d846c359ea32f8f897ec7286c1cc8c350c45bde9326f35735ea7199294095e72705302ccc7d2a3cdd967c5e9be34d794
-
Filesize
5KB
MD5dce8aa2b3f955d38159324755757f3c1
SHA13ea40ca641a10713ef4933c3f3cdd9e407d2b0a8
SHA256a6e0f4b9c7a2c4126bb02a5b52f97f75acac9c625633c81c54d9483fbe9b6271
SHA5127e2fb1350deb5a146fc13536e08348a9d1c1e9f4ebc13ba5b1fd6214208106276592c88e7cdd9ef54fbf2833f2d79fe0258803c8d086bda34cf3bc10d2ab5b51
-
Filesize
5KB
MD58797e8599b6320c2f860a46ddea9340a
SHA1b950d9b999f52206f788ef419417e383e5efcf7b
SHA256424b4ec192d55feb112a70be127a045c80d60f93ccfe92b17722d531f0a9bc82
SHA51200c83128f1da7aa771f0845be6fdb33e7ceca93fdf64ccdd13d373dae254fdfe2c79aec387710ecc5a9ad9c6b0ac2c2900b8d560e501125549ac3d9f3ddf62b6
-
Filesize
203B
MD589acf4593d9311d056a62dbf956013d9
SHA1c5245fe61ecaa8d8df64bc572035f2ffedc7ece5
SHA2565efe7d2418342b2bcca93af4204b2a024ba945072108439d257b6da3f54fdb82
SHA512b5b558b0fed091b5abb5e41ffcc73b7f8c15a2a58a644a115b8070738bd1d19fc3cf55735b84377f616ae9776eb155c546d411302bbdec1102a8e272881edaa2
-
C:\Users\Admin\Documents\StreamFab\StreamFab\Temp\cache\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\8598b576-c48b-42ca-a32f-7c02c9cfa678\index
Filesize24B
MD554cb446f628b2ea4a5bce5769910512e
SHA1c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA5128f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
-
C:\Users\Admin\Documents\StreamFab\StreamFab\Temp\cache\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f1ca6805-719f-4eb9-b471-907190576462\index-dir\the-real-index
Filesize624B
MD58082addc9a72c6ab0b1c767cd9b0a2b5
SHA11a0d0ee57b483ccab4ed2f105b6c4d030e7ea230
SHA256d797467a9bcc7fb863dbeaf9c8f7d69e889c3951b5180026c3a5a1d8c9149ac4
SHA5123303166982c23bc86a69d31e9645b2d13654f8ccebb33ef594c7d2641365e48c65eca572b2f1e1c5ced400794276abe0ad12bc9d1c84dc114be7449a7a516ee6
-
C:\Users\Admin\Documents\StreamFab\StreamFab\Temp\cache\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\f1ca6805-719f-4eb9-b471-907190576462\index-dir\the-real-index~RFe5e34f8.TMP
Filesize48B
MD51cc0a0c2d06291b0312cee82df09d926
SHA17231bf546c6d6d5d63d6c8678c2eccb6dd6ad787
SHA2567ff5834da7d676e3a480988fe5557afe24d18ff481ca3c75c923e5c9c558fee2
SHA512fa94651dd61167d03da1ef49771822bec8839c4300855db12a4c2fcf04b22c43e77cd4d290af946ceba9d5c7baf0bbbefc337a1d9fd2e8096d71d7cee31ddc6d
-
C:\Users\Admin\Documents\StreamFab\StreamFab\Temp\cache\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize146B
MD52a66f060be1ab7e28c3a4aeaf95f9459
SHA1ec63549dec997dc1f903d515f917cc03c47fec35
SHA2569497052b95235062c6491a2540275f152865add1cc0c8f0430f34fdcb29d6047
SHA512584f54d6cc03e4c90eb3e46a599af5de3d3d15e7d0b3f084e8a3795a50a013895cfd996dda8e845e66bea875f221bcc2bd67c8a46f34faa74dfb1966c56879a3
-
C:\Users\Admin\Documents\StreamFab\StreamFab\Temp\cache\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize82B
MD5e83d66f91718fd23356c33ea061d9165
SHA1e5733d674f3507826393bfbfe1e82396feeda206
SHA256b35a055c2b063cdeee9930ca9a2441470f623548c212fdcdfc7ca113cca6491e
SHA5127bef67271215d1da913a08f1d8e0a9e3c5e843101e9d277112240d22db6f2fb84f45c4f92efd57f27cf4aeff6bd7830983866c7b2edd5ac271776208395ee0d5
-
C:\Users\Admin\Documents\StreamFab\StreamFab\Temp\cache\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize155B
MD58075cce2c582adb3851286c619162996
SHA1a7589d9d8b5f863bc2c74c0fc47161d5fd2ab926
SHA256a45ccd6aa9494a7a5e775cf539079c1c692bbfc29a872da7d4f994c2e3c2a8cc
SHA512ca496d54b30145316c80f8e5947b7d01df16c488cfb7c5d34d331cd6b0ecc2a1267380e321c431641c37c628b012d887506fae8f1cf0c5315b2ed22be262f62c
-
C:\Users\Admin\Documents\StreamFab\StreamFab\Temp\cache\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize151B
MD5b12beaff4790904040f1e22b98314f7c
SHA1f007c208b4dd3bc288ae291c88ef786173f62d55
SHA25676a9ce2f5a1130fde1c145b45ae84220a3b41847aba2c618fb7dd8242c121233
SHA512478ac314adcb1fe9a31fa9975ad692a3aa097bddf8280b462f126361ce2c256de8ba0d76cda05faeccc7b87def2d55583d7ba229c9a0b3304b00fb20738ea15c
-
C:\Users\Admin\Documents\StreamFab\StreamFab\Temp\cache\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5d738d.TMP
Filesize89B
MD5c31af69485a3e6d84027fdaa3b271eb8
SHA1722aebf1f56aead1ff364ee71b45705be147eb6d
SHA2566cab966dd1d6c17f6ebb31ad7d0732f34bc4524c9d664b4be9755fc3b545d2aa
SHA5123cf47da3aac1080ac58c16832283908497bdbe759d4312bb2b78780a00c840823c9d94b7df232923184cdecb1f757d48308ddb70f16d9643196dbceafa8cd0c5
-
C:\Users\Admin\Documents\StreamFab\StreamFab\Temp\cache\Service Worker\ScriptCache\index-dir\the-real-index
Filesize96B
MD5df9efab9adf6ad9d1643a938f75e6fd7
SHA1d929e901966bd5fad9fb6c5dabb3de27aff0680f
SHA2560d716737572350d7ea5275ee6789b5c4e69173c3693dd028e90145d9fa99fb37
SHA512569d9ff3a9c17636793f97b58b6d55896299068592fa62fb722c19ededcfe3812cd6f044e135f70ec87dad6def5a7c1c12217b86b913a3b82e51d88dbdfdd293
-
C:\Users\Admin\Documents\StreamFab\StreamFab\Temp\cache\Service Worker\ScriptCache\index-dir\the-real-index~RFe5de16a.TMP
Filesize48B
MD5f3d31466b36b28ace64a8d5f2a0a2eaa
SHA131ef8e6d9fdb44353e299ec397ddef3144be2f03
SHA25641dd553212d45149bf9b687da1e7892dcb674af72896697431e7d7575e097cb0
SHA5122868a29189a0aed13432a18e47397aa899ff052b353657a4ef85c40174a6a1d97cc771d7700b6ea9327708b3b8f37f03bc79418be5fe91073632927b3156f1d1
-
C:\Users\Admin\Documents\StreamFab\StreamFab\Temp\picture\aHR0cHM6Ly93d3cuZGlzbmV5cGx1cy5jb20vbG9naW4=
Filesize1KB
MD5764861cd81a4950cfad218157764307f
SHA1e4e5cf80b9df038391d1bec2d3a0c260f5ebd633
SHA25688268b16018ea7c4d6f935ebcb1f39c599abbb4b8f51033b1f3bbc1f20ad1e2c
SHA5125ca0faf8e393b5b01f487b56efa6e83334d5e44ff5bbaf019cae9ccec3a62c5e5a80331e0bd0c4cf34754428b4c6fc0bd7bb56479bc168e1cc84b9ce219c60e1
-
C:\Users\Admin\Documents\StreamFab\StreamFab\Temp\picture\aHR0cHM6Ly93d3cubmV0ZmxpeC5jb20vdGl0bGUvODAxNDY3NTg=
Filesize1KB
MD51ae2072ab726edb4d2d0e9deab96e6e7
SHA10071e35319825e5a791e2a78bf69e65e1021596a
SHA256f40613565257f4e0774347868d3d0f1f3110392453f84638a5e54cabfd101941
SHA512c670a3b35d6e2718502d28bddcbc5928d74b444eac0f5b930324129f6f16cc52aab64369f34327ea98679410d7aa112f6061dc44887828e85bc4a10269125a14
-
Filesize
7.7MB
MD56e355f4c4d9ce1cdb7ddd2824438fb11
SHA170fdf48489e3eeeed95eb616dfe067663ef36086
SHA256bb24a0dfa611f614e89454834d210b4fcf6999a0e03f40a85d6296a4546ce7c9
SHA512a85e6e56622fb2cc4025d40e4d50ae23a41806b25b7a1cd8d17719bf7eee3ff15c7817e37d5807e883ace23b0930dced6a43f3e0c979bea2790343a4ebd8172e
-
Filesize
394KB
MD5075e4506e0e6b4bd48b7ae546c7e3cb0
SHA1b8e970eab585cbf80eadb0d905d113a300443c65
SHA256fc2b81b35f3f0dba9e97c542aa87b2a5e3928285d937f8023fe0ce1aa99d51b1
SHA51247f23be8fbf1f36736a316ce0776393114d0677f7b6581da6e0841fa067bbd15fb80e63275c0e80daa9fe004464d28205672865e6facbad887ba7eeec9b16120
-
Filesize
6.2MB
MD51273c387e80db82ee6a96ac4788da8f7
SHA1d0ba5c2c54e535254fb1ac5866c32b4c1398e045
SHA25690b1a7c47965eafcc896b99e9520198c097f60975b74884f1c2bc91a5ce88160
SHA5123356e4da246a05aaa959002463835afc4154077e112acde6531b78bcaf32272f1d81d8b8aa8407d31bee48b1f439b57427874660386147729749efe790a2ada2
-
Filesize
1.3MB
MD520dc922278cd948ce6dbdcb74580f910
SHA11a34d4738955f99c17083fec22945b0d6af76f40
SHA256f7c7a1ea2570d1238287470b479e384f87c39357d1a4b2eeedbf90901d9c3cbc
SHA51290afc14985b51744e2f3ea11a0f6f0edc3c7306bf6e9539c9526adbed0caf47e2b19fa90b38a3269424f109adb80f2bd7394620a35360d5aeb0b3641eb92fb79
-
Filesize
3.8MB
MD5bb53b42e1676fcdb5d5e71664ca592ba
SHA1a781aaf2600658e868ba6950721ad8ced6ffb6d4
SHA256a473856364e00c6fc9c25508089f078665464a64d5b50c8a1b48a853709bcf23
SHA51253e6f72516f71b54179935829d1b425a43e5e65a211759bb2f1ef44815d6cc0e09cc651919436402983b41e51dc683d45c4683ae7131a0aa056244d3508e4e48
-
Filesize
209KB
MD5d780e35d89a9d5389b03e5181832af75
SHA123ffc88e2026871a299065d55eb21d3b67546418
SHA2561b9435197ea13aac313106822d61f36ab107a48341e5d09408918bd0fc3bbe44
SHA512bba506404e85243098aba6a39ad6dceb06669058842b5e0ddc884f95c749a722c4ed15b9f22f3810f73b0605343f39ff82ca71e4da9e8c4d8a95eb42d18cca45
-
Filesize
5.3MB
MD591439f0387898388cb1a3150c5848d73
SHA1d57b3c8bb6ae88f98add39890c9a8c3fdc2a0f55
SHA2569e38324e796eb66200498dbfdcda8ac92f92155a9accdc6c97f92f475ea4c8c2
SHA5128a282440d5b2ba67ef4d9f490c0ef93946b60351b4019cb247eac67da92398b55745f6325fe6ab7f62088132614cc9f6332726e532e692f0b709bdcaa3999bac
-
Filesize
1.8MB
MD5251d9e15e2f53c63ac919d486eb04b99
SHA17e34ee36c1c31a6460eeec30c31de5676abf4d35
SHA25688666833d76b772f0191d5db6e4fcfab4d685fba93ecf14d8b0d10faf61a728b
SHA512f61c29bc26939e1516bc4cb3f9cd5a7c0a5adb7c8c5b997ccc886266e74958025e894bda52038a405996031a43ff8050dc520241681eb17a1ad180ca0fe770fb
-
Filesize
620KB
MD5ab15feb56d735f4589217d02464b1a06
SHA11362b65006aad34031e51ab005ea54b7337c734a
SHA25676c9060fd749d837c92b716a91a190b038f2c03e46da124a36f88075361a9be5
SHA512031a85e5f6973d473641cb84668a3923682b9ab92958a23b3a68f2fb2ccfc79ae0982c7cdef1a28bdfad486c0b411c9eee40188cec6724099e68fa3a2a2543bd
-
Filesize
1.4MB
MD5ac584cbeb327e9d2364873f451e074be
SHA1eb2d7b7f38c880ae4bc4f32c50e10e73ee15c816
SHA2561fa4d2f13d22d9a859503d7b7c87ba39d379d9a14afcea7299d572eabb2bdf57
SHA5124fca1fa9494799f382318d329a3040bc067d55e7cd99be6d768e975fb585f61f8c1360908284bb04c055dcf21a164464305e9255d52b1c57a0cfc49eea003203
-
Filesize
3.6MB
MD5c4709f84e6cf6e082b80c80b87abe551
SHA1c0c55b229722f7f2010d34e26857df640182f796
SHA256ca8e39f2b1d277b0a24a43b5b8eada5baf2de97488f7ef2484014df6e270b3f3
SHA512e04a5832b9f2e1e53ba096e011367d46e6710389967fa7014a0e2d4a6ce6fc8d09d0ce20cee7e7d67d5057d37854eddab48bef7df1767f2ec3a4ab91475b7ce4
-
Filesize
83KB
MD50c583614eb8ffb4c8c2d9e9880220f1d
SHA10b7fca03a971a0d3b0776698b51f62bca5043e4d
SHA2566cadb4fef773c23b511acc8b715a084815c6e41dd8c694bc70090a97b3b03fb9
SHA51279bbf50e38e358e492f24fe0923824d02f4b831336dae9572540af1ae7df162457d08de13e720f180309d537667bc1b108bdd782af84356562cca44d3e9e3b64
-
Filesize
36KB
MD57667b0883de4667ec87c3b75bed84d84
SHA1e6f6df83e813ed8252614a46a5892c4856df1f58
SHA25604e7ccbdcad7cbaf0ed28692fb08eab832c38aad9071749037ee7a58f45e9d7d
SHA512968cbaafe416a9e398c5bfd8c5825fa813462ae207d17072c035f916742517edc42349a72ab6795199d34ccece259d5f2f63587cfaeb0026c0667632b05c5c74