Malware Analysis Report

2025-01-22 08:43

Sample ID 241027-r453gszapn
Target https://github.com/tbodt/widevine-l3-decryptor
Tags
adware discovery persistence privilege_escalation spyware stealer
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file https://github.com/tbodt/widevine-l3-decryptor was found to be: Likely malicious.

Malicious Activity Summary

adware discovery persistence privilege_escalation spyware stealer

Drops file in Drivers directory

Downloads MZ/PE file

Checks computer location settings

Loads dropped DLL

Executes dropped EXE

Event Triggered Execution: Component Object Model Hijacking

Reads user/profile data of web browsers

Checks installed software on the system

Installs/modifies Browser Helper Object

Adds Run key to start application

Enumerates connected drives

Suspicious use of NtSetInformationThreadHideFromDebugger

Drops file in System32 directory

Drops file in Program Files directory

Drops file in Windows directory

System Location Discovery: System Language Discovery

Enumerates physical storage devices

Browser Information Discovery

NSIS installer

Enumerates system info in registry

Suspicious use of FindShellTrayWindow

Modifies registry class

Runs net.exe

Suspicious behavior: EnumeratesProcesses

Suspicious use of AdjustPrivilegeToken

Suspicious use of SendNotifyMessage

Suspicious behavior: LoadsDriver

Suspicious behavior: GetForegroundWindowSpam

Uses Task Scheduler COM API

Checks processor information in registry

Suspicious use of WriteProcessMemory

Suspicious behavior: AddClipboardFormatListener

Modifies system certificate store

Kills process with taskkill

Modifies data under HKEY_USERS

Suspicious use of SetWindowsHookEx

Modifies Internet Explorer settings

Checks SCSI registry key(s)

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-10-27 14:45

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-10-27 14:45

Reported

2024-10-27 15:08

Platform

win10v2004-20241007-en

Max time kernel

1368s

Max time network

1353s

Command Line

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/tbodt/widevine-l3-decryptor

Signatures

Downloads MZ/PE file

Drops file in Drivers directory

Description Indicator Process Target
File opened for modification C:\Windows\System32\drivers\idmwfp.sys C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\drivers\idmwfp.sys C:\Windows\system32\DrvInst.exe N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Internet Download Manager\Uninstall.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Desktop\StreamFab 6.2.0.1 (x64) Multilingual\streamfab_x64_6201.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Internet Download Manager\Uninstall.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Control Panel\International\Geo\Nation C:\Program Files\DVDFab\StreamFab\QCef.exe N/A

Event Triggered Execution: Component Object Model Hijacking

persistence privilege_escalation

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\idman642build23.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\idmBroker.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\Uninstall.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\MediumILStart.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\Uninstall.exe N/A
N/A N/A C:\Users\Admin\Desktop\StreamFab 6.2.0.1 (x64) Multilingual\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Process.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\devcon.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Process.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\devcon.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Service.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Service.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Process.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Process.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\devcon.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\devcon.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Service.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Service.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\RegOp.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\system32\regsvr32.exe N/A
N/A N/A C:\Windows\system32\regsvr32.exe N/A
N/A N/A C:\Windows\system32\regsvr32.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\system32\regsvr32.exe N/A
N/A N/A C:\Windows\system32\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\system32\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\system32\regsvr32.exe N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\system32\regsvr32.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\system32\regsvr32.exe N/A
N/A N/A C:\Windows\SysWOW64\regsvr32.exe N/A
N/A N/A C:\Windows\system32\regsvr32.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe N/A

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\GrpConv = "grpconv -o" C:\Windows\system32\RUNDLL32.EXE N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\IDMan = "C:\\Program Files (x86)\\Internet Download Manager\\IDMan.exe /onboot" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\GrpConv = "grpconv -o" C:\Windows\system32\RUNDLL32.EXE N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\2a2c81702d7d866ba36cf033ec0cfe68 = "\"C:\\Program Files\\DVDFab\\StreamFab\\StreamUpdate.exe\" --run_mode=background_check" C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\YouTubeToMP3 = "\"C:\\Program Files\\DVDFab\\StreamFab\\StreamFab64.exe\" mode=StartWhenPowerUp" C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A

Checks installed software on the system

discovery

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\B: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\W: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\O: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\Y: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\L: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\P: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\B: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\A: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\P: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\T: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\N: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\A: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\K: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\V: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\L: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\P: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\S: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\Y: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\Z: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\N: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\K: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\N: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\X: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\G: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\R: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\L: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\H: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\T: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\M: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\Z: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\V: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\O: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\U: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\X: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\E: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\U: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\J: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\Q: C:\Users\Admin\Downloads\UrbanVPN.exe N/A
File opened (read-only) \??\R: C:\Users\Admin\Downloads\UrbanVPN.exe N/A

Installs/modifies Browser Helper Object

stealer adware
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8} C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}\ = "IDM Helper" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}\NoExplorer = "1" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8} C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}\ = "IDM Helper" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}\NoExplorer = "1" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\System32\DriverStore\Temp\{22738a85-a955-924c-a733-929a88be9fe0}\SET5257.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{22738a85-a955-924c-a733-929a88be9fe0}\idmwfp64.sys C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{22738a85-a955-924c-a733-929a88be9fe0}\idmwfp.inf C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\idmwfp.inf_amd64_8b0ebbc2b4585464\idmwfp64.sys C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\drvstore.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\idmwfp.inf_amd64_8b0ebbc2b4585464\idmwfp64.sys C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\idmwfp.inf_amd64_8b0ebbc2b4585464\idmwfp.cat C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\CatRoot2\dberr.txt C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{22738a85-a955-924c-a733-929a88be9fe0}\SET5257.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{22738a85-a955-924c-a733-929a88be9fe0}\SET5268.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{22738a85-a955-924c-a733-929a88be9fe0}\idmwfp.cat C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{22738a85-a955-924c-a733-929a88be9fe0}\SET5269.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\Temp\{22738a85-a955-924c-a733-929a88be9fe0} C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\Temp\{22738a85-a955-924c-a733-929a88be9fe0}\SET5268.tmp C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\System32\DriverStore\Temp\{22738a85-a955-924c-a733-929a88be9fe0}\SET5269.tmp C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\System32\DriverStore\FileRepository\idmwfp.inf_amd64_8b0ebbc2b4585464\idmwfp.inf C:\Windows\system32\DrvInst.exe N/A

Suspicious use of NtSetInformationThreadHideFromDebugger

Description Indicator Process Target
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files\DVDFab\StreamFab\PYthon37\Tools\scripts\find_recursionlimit.py C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\QtQuick\Controls.2\Imagine\SwipeView.qml C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\fileinput.py C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\lib2to3\fixes\fix_funcattrs.py C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\tcl\tcl8.6\tzdata\Asia\Jerusalem C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\test\test_email\data\msg_28.txt C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\PYthon37\tcl\tcl8.6\tzdata\Australia\NSW C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\tcl\tix8.4.3\pref\TK.fs C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\QtQuick\Controls.2\Imagine\RadioButton.qml C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\functools.py C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\lib2to3\fixes\fix_ne.py C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\site-packages\urllib3-1.26.4.dist-info\metadata.json C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\PYthon37\tcl\reg1.3\tclreg13.dll C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\test\test_asyncio\echo3.py C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\test\test_linecache.py C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\QtQuick\Controls.2\Imagine\TextArea.qml C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\test\test_importlib\import_\test_caching.py C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\test\test_string_literals.py C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\api-ms-win-core-synch-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\asyncio\base_events.py C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\distutils\dist.py C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\site-packages\pip\_internal\utils\models.py C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\site-packages\setuptools\command\test.py C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\test\decimaltestdata\dqRotate.decTest C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\tcl\tcl8.6\tzdata\CET C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\tcl\tk8.6\demos\ctext.tcl C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\QtQuick\Controls.2\Material\RoundButton.qml C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\PYthon37\tcl\tcl8.6\tzdata\America\Indiana C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\PYthon37\DLLs\pyc.ico C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\encodings\cp850.py C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\tcl\tcl8.6\encoding\cp860.enc C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\tcl\tix8.4.3\demos\samples\STList3.tcl C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\test\test_syntax.py C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\QtQuick\Controls\Private\MenuItemSubControls.qmlc C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\api-ms-win-core-util-l1-1-0.dll C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\QtQuick\Controls.2\Fusion\RadioButton.qml C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\QtQuick\Controls.2\Imagine\Menu.qml C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\QtQuick\Controls\Styles\Desktop\TreeViewStyle.qml C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\test\test_importlib\frozen\test_finder.py C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\tcl\tcl8.6\msgs\gl.msg C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\PYthon37\tcl\tcl8.6\tzdata\Pacific\Galapagos C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\test\decimaltestdata\dqEncode.decTest C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\test\test_asyncio\test_streams.py C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\test\test_site.py C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\script\text\Mp4TtmlParser.py C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\PYthon37\DLLs\select.pyd C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\PYthon37\include\listobject.h C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\encodings\mac_turkish.py C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\PYthon37\tcl\tk8.6\demos\ttknote.tcl C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\QtQuick\Controls.2\Universal\Label.qml C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\QtQuick\Controls\Styles C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\site-packages\pip\_vendor\urllib3\util\url.py C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\PYthon37\tcl\tcl8.6\tzdata\Europe\Gibraltar C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\my_resource\website_home\white\imgs\website\XVIDEOS.png C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\tcl\tcl8.6\encoding\cp1256.enc C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\PYthon37\tcl\tcl8.6\tzdata\America\St_Kitts C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\QtQuick\Extras\designer\images\statusindicator-icon.png C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\site-packages\pip\_vendor\urllib3\packages C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\QtQuick\LocalStorage C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\include\cellobject.h C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\tkinter\test\test_tkinter\test_font.py C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File created C:\Program Files\DVDFab\StreamFab\PYthon37\tcl\tcl8.6\tzdata\Asia\Samarkand C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\PYthon37\tcl\tcl8.6\word.tcl C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
File opened for modification C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\distutils\command\clean.py C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Windows\system32\RUNDLL32.EXE N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Windows\system32\RUNDLL32.EXE N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Windows\system32\svchost.exe N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\inf\oem3.inf C:\Windows\system32\DrvInst.exe N/A
File created C:\Windows\inf\oem3.inf C:\Windows\system32\DrvInst.exe N/A
File opened for modification C:\Windows\INF\setupapi.dev.log C:\Windows\system32\DrvInst.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\DVDFab\StreamFab\devcon.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\idman642build23.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Internet Download Manager\Uninstall.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regsvr32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regsvr32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regsvr32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regsvr32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regsvr32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Desktop\StreamFab 6.2.0.1 (x64) Multilingual\streamfab_x64_6201.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regsvr32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regsvr32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Internet Download Manager\idmBroker.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net1.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\DVDFab\StreamFab\devcon.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regsvr32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\DVDFab\StreamFab\devcon.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\UrbanVPN.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\syswow64\MsiExec.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regsvr32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Internet Download Manager\Uninstall.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Internet Download Manager\MediumILStart.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\UrbanVPN.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\syswow64\MsiExec.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files\DVDFab\StreamFab\devcon.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\regsvr32.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\net.exe N/A

NSIS installer

installer
Description Indicator Process Target
N/A N/A N/A N/A

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Phantom C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Phantom C:\Windows\system32\DrvInst.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\CompatibleIDs C:\Windows\system32\DrvInst.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\system32\runonce.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\system32\runonce.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\system32\runonce.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\system32\runonce.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4}\AppName = "IDMan.exe" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4}\AppPath = "C:\\Program Files (x86)\\Internet Download Manager" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4}\AppName = "IDMan.exe" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\Low Rights C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1902485B-CE75-42C1-BA2D-57E660793D9A} C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1902485B-CE75-42C1-BA2D-57E660793D9A}\AppPath = "C:\\Program Files (x86)\\Internet Download Manager" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\MenuExt\Download with IDM\ = "C:\\Program Files (x86)\\Internet Download Manager\\IEExt.htm" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{15B851AF-A4B9-43EF-97D3-28E1B4A5DB9B}\AppPath = "C:\\Program Files (x86)\\Internet Download Manager" C:\Program Files (x86)\Internet Download Manager\idmBroker.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\DragDrop\{19129CDA-AFC0-4330-99BC-C5A834F89006}\AppPath = "C:\\Program Files (x86)\\Internet Download Manager" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\DragDrop\{19129CDA-AFC0-4330-99BC-C5A834F89006}\AppPath = "C:\\Program Files (x86)\\Internet Download Manager" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Software\Microsoft\Internet Explorer\Low Rights\DragDrop\{19129CDA-AFC0-4330-99BC-C5A834F89006} C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\MenuExt\Se&nd to OneNote C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\Low Rights\DragDrop\{F6E1B27E-F2DA-4919-9DBD-CAB90A1D662B} C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1902485B-CE75-42C1-BA2D-57E660793D9A}\AppName = "IEMonitor.exe" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4}\AppPath = "C:\\Program Files (x86)\\Internet Download Manager" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Software\Microsoft\Internet Explorer\Low Rights\DragDrop C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\DragDrop\{19129CDA-AFC0-4330-99BC-C5A834F89006}\AppName = "IDMan.exe" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1902485B-CE75-42C1-BA2D-57E660793D9A}\Policy = "3" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\Low Rights\DragDrop C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\MenuExt\E&xport to Microsoft Excel C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1902485B-CE75-42C1-BA2D-57E660793D9A}\AppPath = "C:\\Program Files (x86)\\Internet Download Manager" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\DownloadUI = "{7D11E719-FF90-479C-B0D7-96EB43EE55D7}" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1902485B-CE75-42C1-BA2D-57E660793D9A} C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4}\AppPath = "C:\\Program Files (x86)\\Internet Download Manager" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1902485B-CE75-42C1-BA2D-57E660793D9A} C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1902485B-CE75-42C1-BA2D-57E660793D9A}\Policy = "3" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\DragDrop\{19129CDA-AFC0-4330-99BC-C5A834F89006}\Policy = "3" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4}\Policy = "3" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{15B851AF-A4B9-43EF-97D3-28E1B4A5DB9B}\AppName = "idmBroker.exe" C:\Program Files (x86)\Internet Download Manager\idmBroker.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\MenuExt\Download with IDM\contexts = "243" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4}\Policy = "3" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1902485B-CE75-42C1-BA2D-57E660793D9A}\AppName = "IEMonitor.exe" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Internet Download Manager\idmBroker.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4}\AppName = "IDMan.exe" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\DragDrop\{19129CDA-AFC0-4330-99BC-C5A834F89006}\AppName = "IDMan.exe" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1902485B-CE75-42C1-BA2D-57E660793D9A} C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Software\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Internet Download Manager\idmBroker.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\MenuExt\Se&nd to OneNote C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\MenuExt\Download with IDM C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\DragDrop\{F6E1B27E-F2DA-4919-9DBD-CAB90A1D662B}\AppName = "IDMan.exe" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{15B851AF-A4B9-43EF-97D3-28E1B4A5DB9B}\Policy = "3" C:\Program Files (x86)\Internet Download Manager\idmBroker.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1902485B-CE75-42C1-BA2D-57E660793D9A}\AppPath = "C:\\Program Files (x86)\\Internet Download Manager" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1902485B-CE75-42C1-BA2D-57E660793D9A}\Policy = "3" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\DragDrop\{F6E1B27E-F2DA-4919-9DBD-CAB90A1D662B}\AppPath = "C:\\Program Files (x86)\\Internet Download Manager" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Software\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4} C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4}\Policy = "3" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4} C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Software\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1902485B-CE75-42C1-BA2D-57E660793D9A}\AppName = "IEMonitor.exe" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\DragDrop\{F6E1B27E-F2DA-4919-9DBD-CAB90A1D662B}\Policy = "3" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\MenuExt\Download with IDM C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\DownloadUI = "{7D11E719-FF90-479C-B0D7-96EB43EE55D7}" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{15B851AF-A4B9-43EF-97D3-28E1B4A5DB9B} C:\Program Files (x86)\Internet Download Manager\idmBroker.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\Low Rights\DragDrop\{19129CDA-AFC0-4330-99BC-C5A834F89006}\Policy = "3" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\SOFTWARE\Microsoft\Internet Explorer\MenuExt\E&xport to Microsoft Excel C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4} C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Software\Microsoft\Internet Explorer\Low Rights\DragDrop C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000\Software\Microsoft\Internet Explorer\Low Rights\DragDrop\{19129CDA-AFC0-4330-99BC-C5A834F89006} C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Windows\system32\DrvInst.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133745139617474087" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Windows\system32\DrvInst.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\IDMGetAll.IDMAllLinksProcessor\CurVer\ = "IDMGetAll.IDMAllLinksProcessor.1" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4764030F-2733-45B9-AE62-3D1F4F6F2861}\ProgID\ = "DownlWithIDM.V2LinkProcessor.1" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{72B7361C-3568-4392-BCCD-D912CD5C1169}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\IDMGetAll.IDMAllLinksProcessor.1\CLSID\ = "{5312C54E-A385-46B7-B200-ABAF81B03935}" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7D11E719-FF90-479C-B0D7-96EB43EE55D7}\InprocServer32 C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{52F6F7BD-DF73-44B3-AE13-89E1E1FB8F6A}\TypeLib C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CDD67718-A430-4AB9-A939-83D9074B0038}\ProgID\ = "DownlWithIDM.VLinkProcessor.1" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{D0FB58BB-2C07-492F-8BD0-A587E4874B4E}\ProgID\ = "idmBroker.OptionsReader.1" C:\Program Files (x86)\Internet Download Manager\idmBroker.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4764030F-2733-45B9-AE62-3D1F4F6F2861}\ProgID C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6B9EB066-DA1F-4C0A-AC62-01AC892EF175}\ProxyStubClsid32 C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{52F6F7BD-DF73-44B3-AE13-89E1E1FB8F6A}\TypeLib\ = "{6A89524B-E1B6-4D71-972A-8FD53F240936}" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{42FD0451-B21A-4EE0-8B4F-6F2DA05F6FD1}\NumMethods\ = "18" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{BC69364C-34D7-4225-B16F-8595C743C775}\TypeLib\Version = "1.0" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{52F6F7BD-DF73-44B3-AE13-89E1E1FB8F6A}\InprocServer32\ThreadingModel = "Apartment" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5312C54E-A385-46B7-B200-ABAF81B03935}\TypeLib C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DownlWithIDM.VLinkProcessor.1\ = "VLinkProcessor Class" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0F947660-8606-420A-BAC6-51B84DD22A47}\Elevation\Enabled = "1" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{436D67E1-2FB3-4A6C-B3CD-FF8A41B0664D}\TypeLib C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5312C54E-A385-46B7-B200-ABAF81B03935} C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CDD67718-A430-4AB9-A939-83D9074B0038}\TypeLib C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{0F947660-8606-420A-BAC6-51B84DD22A47}\DllSurrogate C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6EDC7F8E-EB3D-4F9A-B693-216F07C94D74}\TypeLib\ = "{5518B636-6884-48CA-A9A7-1CFD3F3BA916}" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{42FD0451-B21A-4EE0-8B4F-6F2DA05F6FD1}\NumMethods\ = "18" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0F947660-8606-420A-BAC6-51B84DD22A47}\ = "IDMEFSAgent Class" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5312C54E-A385-46B7-B200-ABAF81B03935}\TypeLib\ = "{37294E01-DB54-43AF-9D50-93FF7267DF5D}" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\NodeSlot = "2" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\LogicalViewMode = "1" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{13D4E387-BAB7-47E7-B3D7-3F01ABC463EA}\1.0\FLAGS C:\Program Files (x86)\Internet Download Manager\idmBroker.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\IDMIECC.IDMIEHlprObj\CLSID\ = "{0055C089-8582-441B-A0BF-17B458C2A3A8}" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{436D67E1-2FB3-4A6C-B3CD-FF8A41B0664D}\ProgID\ = "IDMIECC.IDMHelperLinksStorage.1" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7D11E719-FF90-479C-B0D7-96EB43EE55D7}\InprocServer32 C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{7D11E719-FF90-479C-B0D7-96EB43EE55D7} C:\Windows\system32\regsvr32.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{7D11E719-FF90-479C-B0D7-96EB43EE55D7}\InprocServer32 C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0055C089-8582-441B-A0BF-17B458C2A3A8}\VersionIndependentProgID\ = "IDMIECC.IDMIEHlprObj" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{52F6F7BD-DF73-44B3-AE13-89E1E1FB8F6A}\Programmable C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DownlWithIDM.VLinkProcessor C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6B9EB066-DA1F-4C0A-AC62-01AC892EF175}\ = "IIDMEFSAgent2" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0055C089-8582-441B-A0BF-17B458C2A3A8}\Implemented Categories C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{5312C54E-A385-46B7-B200-ABAF81B03935}\ = "IDMAllLinksProcessor Class" C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Idmfsa.IDMEFSAgent\CurVer\ = "Idmfsa.IDMEFSAgent.1" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{4BD46AAE-C51F-4BF7-8BC0-2E86E33D1873}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\IDMIECC.IDMIEHlprObj C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4764030F-2733-45B9-AE62-3D1F4F6F2861}\ = "V2LinkProcessor Class" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{28670AE0-CAF4-4836-8418-0F456023EBF7} C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{28670AE0-CAF4-4836-8418-0F456023EBF7}\ProxyStubClsid32\ = "{C950922F-897A-4E13-BA38-66C8AF2E0BF7}" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{52F6F7BD-DF73-44B3-AE13-89E1E1FB8F6A}\Insertable C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4764030F-2733-45B9-AE62-3D1F4F6F2861}\VersionIndependentProgID\ = "DownlWithIDM.V2LinkProcessor" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DownlWithIDM.IDMDwnlMgr\CLSID\ = "{7D11E719-FF90-479C-B0D7-96EB43EE55D7}" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5312C54E-A385-46B7-B200-ABAF81B03935}\ProgID C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DownlWithIDM.LinkProcessor\ = "LinkProcessor Class" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CDD67718-A430-4AB9-A939-83D9074B0038}\ProgID C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DownlWithIDM.IDMDwnlMgr\CLSID C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7D11E719-FF90-479C-B0D7-96EB43EE55D7}\Programmable C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{42FD0451-B21A-4EE0-8B4F-6F2DA05F6FD1} C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{3BDFC55C-ED33-43BB-9A77-57C2AF4B56EF}\1.0\FLAGS\ = "0" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{98D060EC-53AF-4F61-8180-43C507C9FF94}\TypeLib C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{6A89524B-E1B6-4D71-972A-8FD53F240936}\1.0\0\win32\ = "C:\\Program Files (x86)\\Internet Download Manager\\downlWithIDM.dll" C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0F947660-8606-420A-BAC6-51B84DD22A47}\Programmable C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{5312C54E-A385-46B7-B200-ABAF81B03935}\InprocServer32 C:\Windows\system32\regsvr32.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5312C54E-A385-46B7-B200-ABAF81B03935}\ = "IDMAllLinksProcessor Class" C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\IDMGetAll.IDMAllLinksProcessor.1\CLSID\ = "{5312C54E-A385-46B7-B200-ABAF81B03935}" C:\Windows\system32\regsvr32.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4089630652-1596403869-279772308-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1 C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\DownlWithIDM.IDMDwnlMgr.1 C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3E2BF7F2031B96F38CE6C4D8A85D3E2D58476A0F C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3E2BF7F2031B96F38CE6C4D8A85D3E2D58476A0F\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8CF427FD790C3AD166068DE81E57EFBB932272D4\Blob = 190000000100000010000000fa46ce7cbb85cfb4310075313a09ee050300000001000000140000008cf427fd790c3ad166068de81e57efbb932272d47e000000010000000800000000c001b39667d6011d0000000100000010000000521b5f4582c1dcaae381b05e37ca2d341400000001000000140000006a72267ad01eef7de73b6951d46c8d9f901266ab0b000000010000001800000045006e00740072007500730074002e006e0065007400000062000000010000002000000043df5774b03e7fef5fe40d931a7bedf1bb2e6b42738c4e6d3841103d3aa7f3397f000000010000002c000000302a060a2b0601040182370a030406082b0601050507030506082b0601050507030606082b06010505070307530000000100000041000000303f3020060a6086480186fa6c0a010230123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b060105050703080f0000000100000020000000fde5f2d9ce2026e1e10064c0a468c9f355b90acf85baf5ce6f52d4016837fd942000000001000000420400003082043e30820326a00302010202044a538c28300d06092a864886f70d01010b05003081be310b300906035504061302555331163014060355040a130d456e74727573742c20496e632e31283026060355040b131f536565207777772e656e74727573742e6e65742f6c6567616c2d7465726d7331393037060355040b1330286329203230303920456e74727573742c20496e632e202d20666f7220617574686f72697a656420757365206f6e6c793132303006035504031329456e747275737420526f6f742043657274696669636174696f6e20417574686f72697479202d204732301e170d3039303730373137323535345a170d3330313230373137353535345a3081be310b300906035504061302555331163014060355040a130d456e74727573742c20496e632e31283026060355040b131f536565207777772e656e74727573742e6e65742f6c6567616c2d7465726d7331393037060355040b1330286329203230303920456e74727573742c20496e632e202d20666f7220617574686f72697a656420757365206f6e6c793132303006035504031329456e747275737420526f6f742043657274696669636174696f6e20417574686f72697479202d20473230820122300d06092a864886f70d01010105000382010f003082010a0282010100ba84b672db9e0c6be299e93001a776ea32b895411ac9da614e5872cffef68279bf7361060aa527d8b35fd3454e1c72d64e32f2728a0ff78319d06a808000451eb0c7e79abf1257271ca3682f0a87bd6a6b0e5e65f31c77d5d4858d7021b4b332e78ba2d5863902b1b8d247cee4c949c43ba7defb547d57bef0e86ec279b23a0b55e250981632135c2f7856c1c294b3f25ae4279a9f24d7c6ecd09b2582e3ccc2c445c58c977a066b2a119fa90a6e483b6fdbd4111942f78f07bff5535f9c3ef4172ce669ac4e324c6277eab7e8e5bb34bc198bae9c51e7b77eb553b13322e56dcf703c1afae29b67b683f48da5af624c4de058ac64341203f8b68d946324a4710203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e041604146a72267ad01eef7de73b6951d46c8d9f901266ab300d06092a864886f70d01010b05000382010100799f1d96c6b6793f228d87d3870304606a6b9a2e59897311ac43d1f513ff8d392bc0f2bd4f708ca92fea17c40b549ed41b9698333ca8ad62a20076ab59696e061d7ec4b9448d98af12d461db0a194647f3ebf763c1400540a5d2b7f4b59a36bfa98876880455042b9c877f1a373c7e2da51ad8d4895ecabdac3d6cd86dafd5f3760fcd3b8838229d6c939ac43dbf821b653fa60f5daafce5b215cab5adc6bc3dd084e8ea0672b04d393278bf3e119c0ba49d9a21f3f09b0b3078dbc1dc8743febc639acac5c21cc9c78dff3b125808e6b63dec7a2c4efb8396ce0c3c69875473a473c293ff5110ac155401d8fc05b189a17f74839a49d7dc4e7b8a486f8b45f6 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8CF427FD790C3AD166068DE81E57EFBB932272D4\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 190000000100000010000000d0fd3c9c380d7b65e26b9a3fedd39b8f0f00000001000000200000005229ba15b31b0c6f4cca89c2985177974327d1b689a3b935a0bd975532af22ab090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b06010505070308530000000100000040000000303e301f06092b06010401a032010130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00b000000010000003000000047006c006f00620061006c005300690067006e00200052006f006f00740020004300410020002d002000520033000000620000000100000020000000cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b1400000001000000140000008ff04b7fa82e4524ae4d50fa639a8bdee2dd1bbc1d000000010000001000000001728e1ecf7a9d86fb3cec8948aba953030000000100000014000000d69b561148f01c77c54578c10926df5b856976ad040000000100000010000000c5dfb849ca051355ee2dba1ac33eb0282000000001000000630300003082035f30820247a003020102020b04000000000121585308a2300d06092a864886f70d01010b0500304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523331133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e301e170d3039303331383130303030305a170d3239303331383130303030305a304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523331133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e30820122300d06092a864886f70d01010105000382010f003082010a0282010100cc2576907906782216f5c083b684ca289efd057611c5ad8872fc460243c7b28a9d045f24cb2e4be1608246e152ab0c8147706cdd64d1ebf52ca30f823d0c2bae97d7b614861079bb3b1380778c08e149d26a622f1f5efa9668df892795389f06d73ec9cb26590d73deb0c8e9260e8315c6ef5b8bd20460ca49a628f6693bf6cbc82891e59d8a615737ac7414dc74e03aee722f2e9cfbd0bbbff53d00e10633e8822bae53a63a16738cdd410e203ac0b4a7a1e9b24f902e3260e957cbb904926868e538266075b29f77ff9114efae2049fcad401548d1023161195eb897efad77b7649a7abf5fc113ef9b62fb0d6ce0546916a903da6ee983937176c6698582170203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e041604148ff04b7fa82e4524ae4d50fa639a8bdee2dd1bbc300d06092a864886f70d01010b050003820101004b40dbc050aafec80ceff796544549bb96000941acb3138686280733ca6be674b9ba002daea40ad3f5f1f10f8abf73674a83c7447b78e0af6e6c6f03298e333945c38ee4b9576caafc1296ec53c62de4246cb99463fbdc536867563e83b8cf3521c3c968fecedac253aacc908ae9f05d468c95dd7a58281a2f1ddecd0037418fed446dd75328977ef367041e15d78a96b4d3de4c27a44c1b737376f41799c21f7a0ee32d08ad0a1c2cff3cab550e0f917e36ebc35749bee12e2d7c608bc3415113239dcef7326b9401a899e72c331f3a3b25d28640ce3b2c8678c9612f14baeedb556fdf84ee05094dbd28d872ced36250651eeb92978331d9b3b5ca47583f5f C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B7AB3308D1EA4477BA1480125A6FBDA936490CBB C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3E2BF7F2031B96F38CE6C4D8A85D3E2D58476A0F\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8CF427FD790C3AD166068DE81E57EFBB932272D4 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8CF427FD790C3AD166068DE81E57EFBB932272D4\Blob = 0f0000000100000020000000fde5f2d9ce2026e1e10064c0a468c9f355b90acf85baf5ce6f52d4016837fd94090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b06010505070308530000000100000041000000303f3020060a6086480186fa6c0a010230123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c07f000000010000002c000000302a060a2b0601040182370a030406082b0601050507030506082b0601050507030606082b0601050507030762000000010000002000000043df5774b03e7fef5fe40d931a7bedf1bb2e6b42738c4e6d3841103d3aa7f3390b000000010000001800000045006e00740072007500730074002e006e006500740000001400000001000000140000006a72267ad01eef7de73b6951d46c8d9f901266ab1d0000000100000010000000521b5f4582c1dcaae381b05e37ca2d347e000000010000000800000000c001b39667d6010300000001000000140000008cf427fd790c3ad166068de81e57efbb932272d42000000001000000420400003082043e30820326a00302010202044a538c28300d06092a864886f70d01010b05003081be310b300906035504061302555331163014060355040a130d456e74727573742c20496e632e31283026060355040b131f536565207777772e656e74727573742e6e65742f6c6567616c2d7465726d7331393037060355040b1330286329203230303920456e74727573742c20496e632e202d20666f7220617574686f72697a656420757365206f6e6c793132303006035504031329456e747275737420526f6f742043657274696669636174696f6e20417574686f72697479202d204732301e170d3039303730373137323535345a170d3330313230373137353535345a3081be310b300906035504061302555331163014060355040a130d456e74727573742c20496e632e31283026060355040b131f536565207777772e656e74727573742e6e65742f6c6567616c2d7465726d7331393037060355040b1330286329203230303920456e74727573742c20496e632e202d20666f7220617574686f72697a656420757365206f6e6c793132303006035504031329456e747275737420526f6f742043657274696669636174696f6e20417574686f72697479202d20473230820122300d06092a864886f70d01010105000382010f003082010a0282010100ba84b672db9e0c6be299e93001a776ea32b895411ac9da614e5872cffef68279bf7361060aa527d8b35fd3454e1c72d64e32f2728a0ff78319d06a808000451eb0c7e79abf1257271ca3682f0a87bd6a6b0e5e65f31c77d5d4858d7021b4b332e78ba2d5863902b1b8d247cee4c949c43ba7defb547d57bef0e86ec279b23a0b55e250981632135c2f7856c1c294b3f25ae4279a9f24d7c6ecd09b2582e3ccc2c445c58c977a066b2a119fa90a6e483b6fdbd4111942f78f07bff5535f9c3ef4172ce669ac4e324c6277eab7e8e5bb34bc198bae9c51e7b77eb553b13322e56dcf703c1afae29b67b683f48da5af624c4de058ac64341203f8b68d946324a4710203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e041604146a72267ad01eef7de73b6951d46c8d9f901266ab300d06092a864886f70d01010b05000382010100799f1d96c6b6793f228d87d3870304606a6b9a2e59897311ac43d1f513ff8d392bc0f2bd4f708ca92fea17c40b549ed41b9698333ca8ad62a20076ab59696e061d7ec4b9448d98af12d461db0a194647f3ebf763c1400540a5d2b7f4b59a36bfa98876880455042b9c877f1a373c7e2da51ad8d4895ecabdac3d6cd86dafd5f3760fcd3b8838229d6c939ac43dbf821b653fa60f5daafce5b215cab5adc6bc3dd084e8ea0672b04d393278bf3e119c0ba49d9a21f3f09b0b3078dbc1dc8743febc639acac5c21cc9c78dff3b125808e6b63dec7a2c4efb8396ce0c3c69875473a473c293ff5110ac155401d8fc05b189a17f74839a49d7dc4e7b8a486f8b45f6 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob = 19000000010000001000000091fad483f14848a8a69b18b805cdbb3a030000000100000014000000503006091d97d4f5ae39f7cbe7927d7d652d34317e000000010000000800000000c001b39667d6011d0000000100000010000000e871723e266f38af5d49cda2a502669c14000000010000001400000055e481d11180bed889b908a331f9a1240916b9700b000000010000001e00000045006e0074007200750073007400200028003200300034003800290000006200000001000000200000006dc47172e01cbcb0bf62580d895fe2b8ac9ad4f873801e0c10b9c837d21eb1777f000000010000002c000000302a060a2b0601040182370a030406082b0601050507030506082b0601050507030606082b06010505070307530000000100000041000000303f3020060a6086480186fa6c0a010230123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b060105050703080f0000000100000014000000327fc447408de9bf596f83d4b2fa4b8e3e7097d820000000010000002e0400003082042a30820312a00302010202043863def8300d06092a864886f70d01010505003081b431143012060355040a130b456e74727573742e6e65743140303e060355040b14377777772e656e74727573742e6e65742f4350535f3230343820696e636f72702e206279207265662e20286c696d697473206c6961622e2931253023060355040b131c286329203139393920456e74727573742e6e6574204c696d69746564313330310603550403132a456e74727573742e6e65742043657274696669636174696f6e20417574686f7269747920283230343829301e170d3939313232343137353035315a170d3239303732343134313531325a3081b431143012060355040a130b456e74727573742e6e65743140303e060355040b14377777772e656e74727573742e6e65742f4350535f3230343820696e636f72702e206279207265662e20286c696d697473206c6961622e2931253023060355040b131c286329203139393920456e74727573742e6e6574204c696d69746564313330310603550403132a456e74727573742e6e65742043657274696669636174696f6e20417574686f726974792028323034382930820122300d06092a864886f70d01010105000382010f003082010a0282010100ad4d4ba91286b2eaa320071516642a2b4bd1bf0b4a4d8eed8076a567b77840c07342c868c0db532bdd5eb8769835938b1a9d7c133a0e1f5bb71ecfe524141eb181a98d7db8cc6b4b03f1020cdcaba54024007f7494a19d0829b3880bf587779d55cde4c37ed76a64ab851486955b9732506f3dc8ba660ce3fcbdb849c176894919fdc0a8bd89a3672fc69fbc711960b82de92cc99076667b94e2af78d665535d3cd69cb2cf2903f92fa450b2d448ce0532558afdb2644c0ee4980775db7fdfb9085560853029f97b48a46986e3353f1e865d7a7a15bdef008e1522541700902693bc0e496891bff847d39d9542c10e4ddf6f26cfc3182162664370d6d5c007e10203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e0416041455e481d11180bed889b908a331f9a1240916b970300d06092a864886f70d010105050003820101003b9b8f569b30e753997c7a79a74d97d7199590fb061fca337c46638f966624fa401b2127cae67273f24ffe3199fdc80c4c6853c680821398fab6adda5d3df1ce6ef6151194820cee3f95af11ab0fd72fde1f038f572c1ec9bb9a1a4495eb184fa61fcd7d57102f9b04095a84b56ed81d3ae1d69ed16c795e791c14c5e3d04c933b653ceddf3dbea6e5951ac3b519c3bd5e5bbbff23ef6819cb1293275c032d6f30d01eb61aacde5af7d1aaa827a6fe7981c479993357ba12b0a9e0426c93ca56defe6d840b088b7e8dead79821c6f3e73c792f5e9cd14c158de1ec2237cc9a430b97dc80908db3679b6f48081556cfbff12b7c5e9a76e95990c57c8335116551 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8CF427FD790C3AD166068DE81E57EFBB932272D4\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B7AB3308D1EA4477BA1480125A6FBDA936490CBB\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B7AB3308D1EA4477BA1480125A6FBDA936490CBB\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1\Blob = 190000000100000010000000cb9dd0fceaaa492f75ce292c21bbfbdd0300000001000000140000008094640eb5a7a1ca119c1fddd59f810263a7fbd17e00000001000000080000000080c82b6886d7017a000000010000000c000000300a06082b060105050703091d0000000100000010000000521f5c98970d19a8e515ef6eeb6d48ef140000000100000014000000ae6c05a39313e2a2e7e2d71cd6c7f07fc86753a07f0000000100000016000000301406082b0601050507030306082b060105050703096200000001000000200000002cabeafe37d06ca22aba7391c0033d25982952c453647349763a3ab5ad6ccf690b000000010000003000000047006c006f00620061006c005300690067006e00200052006f006f00740020004300410020002d002000520036000000090000000100000056000000305406082b0601050507030206082b06010505070303060a2b0601040182370a030c060a2b0601040182370a030406082b0601050507030406082b0601050507030906082b0601050507030106082b0601050507030853000000010000007e000000307c301f06092b06010401a032010130123010060a2b0601040182373c0101030200c0301f06092b06010401a032010230123010060a2b0601040182373c0101030200c0301b060567810c010130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00f0000000100000030000000ea09c51d4c3a334ce4acd2bc08c6a9be352e334f45c4fccfcab63edb9f82dc87d4bd2ed2fadae11163fb954809984ff1200000000100000087050000308205833082036ba003020102020e45e6bb038333c3856548e6ff4551300d06092a864886f70d01010c0500304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523631133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e301e170d3134313231303030303030305a170d3334313231303030303030305a304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523631133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e30820222300d06092a864886f70d01010105000382020f003082020a02820201009507e873ca66f9ec14ca7b3cf70d08f1b4450b2c82b448c6eb5b3cae83b841923314a46f7fe92accc6b0886bc5b689d1c6b2ff14ce511421ec4add1b5ac6d687ee4d3a1506ed64660b9280ca44de73944ef3a7897f4f786308c812506d42662f4db979284d521a8a1a80b719810e7ec48abc644c211c4368d73d3c8ac5b266d5909ab73106c5bee26d3206a61ef9b9ebaaa3b8bfbe826350d0f01889dfe40f79f5eaa21f2ad2702e7be7bc93bb6d53e2487c8c100738ff66b277617ee0ea8c3caab4a4f6f3954a12076dfd8cb289cfd0a06177c85874b0d4233af75d3acaa2db9d09de5d442d90f181cd5792fa7ebc50046334df6b9318be6b36b239e4ac2436b7f0efb61c135793b6deb2f8e285b773a2b835aa45f2e09d36a16f548af172566e2e88c55142441594eea3c538969b4e4e5a0b47f30636497730bc7137e5a6ec210875fce661163f77d5d99197840a6cd4024d74c014edfd39fb83f25e14a104b00be9feee8fe16e0bb208b36166096ab1063a659659c0f035fdc9da288d1a118770810aa89a751d9e3a8605009edb80d625f9dc059e27594c76395beaf9a5a1d8830fd1ffdf3011f985cf3348f5ca6d64142c7a584fd34b0849c595641a630e793df5b38cca58ad9c4245796e0e87195c54b165b6bf8c9bdc13e90d6fb82edc676ec98b11b584148a0019708379919791d41a27bf371e3207d814633c284caf0203010001a3633061300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e04160414ae6c05a39313e2a2e7e2d71cd6c7f07fc86753a0301f0603551d23041830168014ae6c05a39313e2a2e7e2d71cd6c7f07fc86753a0300d06092a864886f70d01010c050003820201008325ede8d1fd9552cd9ec004a09169e65cd084dedcada24fe84778d66598a95ba83c877c028ad16eb71673e65fc05498d574bec1cde21191ad23183ddde1724496b4955ec07b8e99781643135657b3a2b33bb577dc4072aca3eb9b353eb10821a1e7c443377932beb5e79c2c4cbc4329998e30d3ac21e0e31dfad80733765400222ab94d202e7068dae553fc835cd39df2ff440c4466f2d2e3bd46001a6d02ba255d8da13151dd54461c4ddb9996ef1a1c045ca615ef78e079fe5ddb3eaa4c55fd9a15a96fe1a6fbdf7030e9c3ee4246edc2930589fa7d637b3fd071817c00e898ae0e7834c325fbaf0a9f206bdd3b138f128ce2411a487a73a07769c7b65c7f82c81efe581b282ba86cad5e6dc005d27bb7eb80fe2537fe029b68ac425dc3eef5ccdcf05075d236699ce67b04df6e0669b6de0a09485987eb7b14607a64aa6943ef91c74cec18dd6cef532d8c99e15ef2723ecf54c8bd67eca40f4c45ffd3b93023074c8f10bf8696d9995ab499571ca4ccbb158953ba2c050fe4c49e19b11834d54c9dbaedf71faf24950478a803bbee81e5da5f7c8b4aa1907425a7b33e4bc82c56bdc7c8ef38e25c92f079f79c84ba742d6101207e7ed1f24f07595f8b2d4352eb460c94e1f566477977d5545b1fad2437cb455a4ea04448c8d8b099c5158409f6d64949c065b8e61a716ea0a8f182e8453e6cd602d70a6783055ac9a410 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3E2BF7F2031B96F38CE6C4D8A85D3E2D58476A0F\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 5c0000000100000004000000001000001900000001000000100000002fe1f70bb05d7c92335bc5e05b984da60f00000001000000200000003f0411ede9c4477057d57e57883b1f205b20cdc0f3263129b1ee0269a2678f63030000000100000014000000cabd2a79a1076a31f21d253635cb039d4329a5e814000000010000001400000079b459e67bb6e5e40173800888c81a58f6e99b6e0400000001000000100000000cd2f9e0da1773e9ed864da5e370e74e20000000010000006f0500003082056b30820353a0030201020211008210cfb0d240e3594463e0bb63828b00300d06092a864886f70d01010b0500304f310b300906035504061302555331293027060355040a1320496e7465726e65742053656375726974792052657365617263682047726f7570311530130603550403130c4953524720526f6f74205831301e170d3135303630343131303433385a170d3335303630343131303433385a304f310b300906035504061302555331293027060355040a1320496e7465726e65742053656375726974792052657365617263682047726f7570311530130603550403130c4953524720526f6f7420583130820222300d06092a864886f70d01010105000382020f003082020a0282020100ade82473f41437f39b9e2b57281c87bedcb7df38908c6e3ce657a078f775c2a2fef56a6ef6004f28dbde68866c4493b6b163fd14126bbf1fd2ea319b217ed1333cba48f5dd79dfb3b8ff12f1219a4bc18a8671694a66666c8f7e3c70bfad292206f3e4c0e680aee24b8fb7997e94039fd347977c99482353e838ae4f0a6f832ed149578c8074b6da2fd0388d7b0370211b75f2303cfa8faeddda63abeb164fc28e114b7ecf0be8ffb5772ef4b27b4ae04c12250c708d0329a0e15324ec13d9ee19bf10b34a8c3f89a36151deac870794f46371ec2ee26f5b9881e1895c34796c76ef3b906279e6dba49a2f26c5d010e10eded9108e16fbb7f7a8f7c7e50207988f360895e7e237960d36759efb0e72b11d9bbc03f94905d881dd05b42ad641e9ac0176950a0fd8dfd5bd121f352f28176cd298c1a80964776e4737baceac595e689d7f72d689c50641293e593edd26f524c911a75aa34c401f46a199b5a73a516e863b9e7d72a712057859ed3e5178150b038f8dd02f05b23e7b4a1c4b730512fcc6eae050137c439374b3ca74e78e1f0108d030d45b7136b407bac130305c48b7823b98a67d608aa2a32982ccbabd83041ba2830341a1d605f11bc2b6f0a87c863b46a8482a88dc769a76bf1f6aa53d198feb38f364dec82b0d0a28fff7dbe21542d422d0275de179fe18e77088ad4ee6d98b3ac6dd27516effbc64f533434f0203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e0416041479b459e67bb6e5e40173800888c81a58f6e99b6e300d06092a864886f70d01010b05000382020100551f58a9bcb2a850d00cb1d81a6920272908ac61755c8a6ef882e5692fd5f6564bb9b8731059d321977ee74c71fbb2d260ad39a80bea17215685f1500e59ebcee059e9bac915ef869d8f8480f6e4e99190dc179b621b45f06695d27c6fc2ea3bef1fcfcbd6ae27f1a9b0c8aefd7d7e9afa2204ebffd97fea912b22b1170e8ff28a345b58d8fc01c954b9b826cc8a8833894c2d843c82dfee965705ba2cbbf7c4b7c74e3b82be31c822737392d1c280a43939103323824c3c9f86b255981dbe29868c229b9ee26b3b573a82704ddc09c789cb0a074d6ce85d8ec9efceabc7bbb52b4e45d64ad026cce572ca086aa595e315a1f7a4edc92c5fa5fbffac28022ebed77bbbe3717b9016d3075e46537c3707428cd3c4969cd599b52ae0951a8048ae4c3907cecc47a452952bbab8fbadd233537de51d4d6dd5a1b1c7426fe64027355ca328b7078de78d3390e7239ffb509c796c46d5b415b3966e7e9b0c963ab8522d3fd65be1fb08c284fe24a8a389daac6ae1182ab1a843615bd31fdc3b8d76f22de88d75df17336c3d53fb7bcb415fffdca2d06138e196b8ac5d8b37d775d533c09911ae9d41c1727584be0241425f67244894d19b27be073fb9b84f817451e17ab7ed9d23e2bee0d52804133c31039edd7a6c8fc60718c67fde478e3f289e0406cfa5543477bdec899be91743df5bdb5ffe8e1e57a2cd409d7e6222dade1827 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3E2BF7F2031B96F38CE6C4D8A85D3E2D58476A0F\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B7AB3308D1EA4477BA1480125A6FBDA936490CBB\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B7AB3308D1EA4477BA1480125A6FBDA936490CBB C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B7AB3308D1EA4477BA1480125A6FBDA936490CBB\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 040000000100000010000000d474de575c39b2d39c8583c5c065498a0f0000000100000014000000e35ef08d884f0a0ade2f75e96301ce6230f213a8530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b060105050703086200000001000000200000007431e5f4c3c1ce4690774f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf140000000100000014000000b13ec36903f8bf4701d498261a0802ef63642bc30b00000001000000120000004400690067006900430065007200740000001d00000001000000100000008f76b981d528ad4770088245e2031b630300000001000000140000005fb7ee0633e259dbad0c4c9ae6d38f1a61c7dc25190000000100000010000000ba4f3972e7aed9dccdc210db59da13c92000000001000000c9030000308203c5308202ada003020102021002ac5c266a0b409b8f0b79f2ae462577300d06092a864886f70d0101050500306c310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312b30290603550403132244696769436572742048696768204173737572616e636520455620526f6f74204341301e170d3036313131303030303030305a170d3331313131303030303030305a306c310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312b30290603550403132244696769436572742048696768204173737572616e636520455620526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100c6cce573e6fbd4bbe52d2d32a6dfe5813fc9cd2549b6712ac3d5943467a20a1cb05f69a640b1c4b7b28fd098a4a941593ad3dc94d63cdb7438a44acc4d2582f74aa5531238eef3496d71917e63b6aba65fc3a484f84f6251bef8c5ecdb3892e306e508910cc4284155fbcb5a89157e71e835bf4d72093dbe3a38505b77311b8db3c724459aa7ac6d00145a04b7ba13eb510a984141224e656187814150a6795c89de194a57d52ee65d1c532c7e98cd1a0616a46873d03404135ca171d35a7c55db5e64e13787305604e511b4298012f1793988a202117c2766b788b778f2ca0aa838ab0a64c2bf665d9584c1a1251e875d1a500b2012cc41bb6e0b5138b84bcb0203010001a3633061300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff301d0603551d0e04160414b13ec36903f8bf4701d498261a0802ef63642bc3301f0603551d23041830168014b13ec36903f8bf4701d498261a0802ef63642bc3300d06092a864886f70d010105050003820101001c1a0697dcd79c9f3c886606085721db2147f82a67aabf183276401057c18af37ad911658e35fa9efc45b59ed94c314bb891e8432c8eb378cedbe3537971d6e5219401da55879a2464f68a66ccde9c37cda834b1699b23c89e78222b7043e35547316119ef58c5852f4e30f6a0311623c8e7e2651633cbbf1a1ba03df8ca5e8b318b6008892d0c065c52b7c4f90a98d1155f9f12be7c366338bd44a47fe4262b0ac497690de98ce2c01057b8c876129155f24869d8bc2a025b0f44d42031dbf4ba70265d90609ebc4b17092fb4cb1e4368c90727c1d25cf7ea21b968129c3c9cbf9efc805c9b63cdec47aa252767a037f300827d54d7a9f8e92e13a377e81f4a C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 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 C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A

Runs net.exe

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A

Suspicious behavior: LoadsDriver

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\7-Zip\7zFM.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Users\Admin\Downloads\idman642build23.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\idmBroker.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\Uninstall.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\MediumILStart.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\Uninstall.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Program Files (x86)\Internet Download Manager\IDMan.exe N/A
N/A N/A C:\Users\Admin\Desktop\StreamFab 6.2.0.1 (x64) Multilingual\streamfab_x64_6201.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\StreamFab64.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A
N/A N/A C:\Program Files\DVDFab\StreamFab\QCef.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3124 wrote to memory of 536 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 536 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 1952 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 2524 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 2524 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3124 wrote to memory of 4732 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/tbodt/widevine-l3-decryptor

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff83b12cc40,0x7ff83b12cc4c,0x7ff83b12cc58

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2068,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2064 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1768,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2100 /prefetch:3

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2240,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2252 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3108,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3140 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3116,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3188 /prefetch:1

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4568,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4600 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4604,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3700 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4836,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4848 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4840,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4984 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4864,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5156 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=5112,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5012 /prefetch:1

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=3260,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3284 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=5276,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4616 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=5448,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4652 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=5572,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5560 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=5480,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5456 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=5964,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5972 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=6048,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4548 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=6056,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6092 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=5460,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5824 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=5720,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5532 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=5816,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6428 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=6436,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6484 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=6236,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6232 /prefetch:1

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files\7-Zip\7zFM.exe

"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\Downloads\widevine-l3-decryptor-master.zip"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=4356,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6372 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=6624,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6608 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=5436,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6352 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=5444,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5212 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4820,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6900 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=4712,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4768 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=5808,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5824 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=5968,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5132 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=6528,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4668 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5528,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5476 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5580,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5220 /prefetch:8

C:\Users\Admin\Downloads\idman642build23.exe

"C:\Users\Admin\Downloads\idman642build23.exe"

C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp

"C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp" -d "C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\"

C:\Windows\SysWOW64\regsvr32.exe

"C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll"

C:\Windows\SysWOW64\regsvr32.exe

"C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\Internet Download Manager\IDMGetAll64.dll"

C:\Windows\SysWOW64\regsvr32.exe

"C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\Internet Download Manager\downlWithIDM64.dll"

C:\Windows\system32\regsvr32.exe

/s "C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll"

C:\Windows\system32\regsvr32.exe

/s "C:\Program Files (x86)\Internet Download Manager\IDMGetAll64.dll"

C:\Program Files (x86)\Internet Download Manager\idmBroker.exe

"C:\Program Files (x86)\Internet Download Manager\idmBroker.exe" -RegServer

C:\Windows\system32\regsvr32.exe

/s "C:\Program Files (x86)\Internet Download Manager\downlWithIDM64.dll"

C:\Program Files (x86)\Internet Download Manager\IDMan.exe

"C:\Program Files (x86)\Internet Download Manager\IDMan.exe" /rtr

C:\Windows\SysWOW64\regsvr32.exe

"C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll"

C:\Windows\SysWOW64\regsvr32.exe

"C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll"

C:\Windows\system32\regsvr32.exe

/s "C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll"

C:\Windows\SysWOW64\regsvr32.exe

"C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\Internet Download Manager\IDMGetAll64.dll"

C:\Windows\system32\regsvr32.exe

/s "C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll"

C:\Windows\system32\regsvr32.exe

/s "C:\Program Files (x86)\Internet Download Manager\IDMGetAll64.dll"

C:\Windows\SysWOW64\regsvr32.exe

"C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\Internet Download Manager\downlWithIDM64.dll"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=3808,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2768 /prefetch:8

C:\Windows\system32\regsvr32.exe

/s "C:\Program Files (x86)\Internet Download Manager\downlWithIDM64.dll"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=3820,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=724 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=1044,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5504 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5788,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6040 /prefetch:8

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" https://www.internetdownloadmanager.com/support/installffextfrommozillasite.html

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" https://www.internetdownloadmanager.com/support/installffextfrommozillasite.html

C:\Program Files (x86)\Internet Download Manager\Uninstall.exe

"C:\Program Files (x86)\Internet Download Manager\Uninstall.exe" -instdriv

C:\Windows\system32\RUNDLL32.EXE

"C:\Windows\Sysnative\RUNDLL32.EXE" SETUPAPI.DLL,InstallHinfSection DefaultInstall 128 C:\Program Files (x86)\Internet Download Manager\idmwfp.inf

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1952 -parentBuildID 20240401114208 -prefsHandle 1864 -prefMapHandle 1860 -prefsLen 23680 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {1a8f2208-3d80-428c-a83c-b1c19203e83e} 4528 "\\.\pipe\gecko-crash-server-pipe.4528" gpu

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall

C:\Windows\system32\DrvInst.exe

DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{5e31af0a-5e34-cd4f-9e10-02881a77330f}\idmwfp.inf" "9" "4fc2928b3" "00000000000000E8" "WinSta0\Default" "0000000000000158" "208" "C:\Program Files (x86)\Internet Download Manager"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2428 -parentBuildID 20240401114208 -prefsHandle 2404 -prefMapHandle 2400 -prefsLen 24600 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a7469edc-7243-47ff-b425-d99eef989acf} 4528 "\\.\pipe\gecko-crash-server-pipe.4528" socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3164 -childID 1 -isForBrowser -prefsHandle 3104 -prefMapHandle 2984 -prefsLen 22652 -prefMapSize 244658 -jsInitHandle 944 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {11d7b119-c753-4083-b154-ba7d8f2175bd} 4528 "\\.\pipe\gecko-crash-server-pipe.4528" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1244 -childID 2 -isForBrowser -prefsHandle 3668 -prefMapHandle 3664 -prefsLen 29090 -prefMapSize 244658 -jsInitHandle 944 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {33eadf3c-6bd5-49e9-a99d-f6d838b4e316} 4528 "\\.\pipe\gecko-crash-server-pipe.4528" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4144 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4368 -prefMapHandle 4572 -prefsLen 29090 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {bca4894d-1b4f-46fc-b6da-d61294722fed} 4528 "\\.\pipe\gecko-crash-server-pipe.4528" utility

C:\Windows\system32\DrvInst.exe

DrvInst.exe "8" "4" "C:\Windows\System32\DriverStore\FileRepository\idmwfp.inf_amd64_8b0ebbc2b4585464\idmwfp.inf" "0" "4fc2928b3" "0000000000000164" "WinSta0\Default"

C:\Windows\system32\runonce.exe

"C:\Windows\system32\runonce.exe" -r

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5184 -childID 3 -isForBrowser -prefsHandle 5192 -prefMapHandle 5196 -prefsLen 26944 -prefMapSize 244658 -jsInitHandle 944 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {30423072-1e56-4d4b-9e4f-6bf7d20a89ad} 4528 "\\.\pipe\gecko-crash-server-pipe.4528" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5364 -childID 4 -isForBrowser -prefsHandle 5152 -prefMapHandle 5176 -prefsLen 26944 -prefMapSize 244658 -jsInitHandle 944 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a9303312-a92d-4904-b712-a759e64fcd40} 4528 "\\.\pipe\gecko-crash-server-pipe.4528" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5516 -childID 5 -isForBrowser -prefsHandle 5524 -prefMapHandle 5528 -prefsLen 26944 -prefMapSize 244658 -jsInitHandle 944 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b2660d0c-c956-4983-9765-b2a992bbc6fa} 4528 "\\.\pipe\gecko-crash-server-pipe.4528" tab

C:\Windows\System32\grpconv.exe

"C:\Windows\System32\grpconv.exe" -o

C:\Windows\SysWOW64\net.exe

"C:\Windows\System32\net.exe" start IDMWFP

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 start IDMWFP

C:\Windows\SysWOW64\net.exe

"C:\Windows\System32\net.exe" start IDMWFP

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 start IDMWFP

C:\Windows\SysWOW64\net.exe

"C:\Windows\System32\net.exe" start IDMWFP

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 start IDMWFP

C:\Windows\SysWOW64\net.exe

"C:\Windows\System32\net.exe" start IDMWFP

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 start IDMWFP

C:\Windows\SysWOW64\net.exe

"C:\Windows\System32\net.exe" start IDMWFP

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 start IDMWFP

C:\Windows\SysWOW64\net.exe

"C:\Windows\System32\net.exe" start IDMWFP

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 start IDMWFP

C:\Windows\SysWOW64\regsvr32.exe

"C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll"

C:\Windows\system32\regsvr32.exe

/s "C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll"

C:\Program Files (x86)\Internet Download Manager\MediumILStart.exe

"C:\Program Files (x86)\Internet Download Manager\MediumILStart.exe"

C:\Program Files (x86)\Internet Download Manager\IDMan.exe

"C:\Program Files (x86)\Internet Download Manager\IDMan.exe" -Embedding

C:\Windows\SysWOW64\regsvr32.exe

"C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll"

C:\Windows\system32\regsvr32.exe

/s "C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll"

C:\Program Files (x86)\Internet Download Manager\Uninstall.exe

"C:\Program Files (x86)\Internet Download Manager\Uninstall.exe" -instdriv

C:\Windows\system32\RUNDLL32.EXE

"C:\Windows\Sysnative\RUNDLL32.EXE" SETUPAPI.DLL,InstallHinfSection DefaultInstall 128 C:\Program Files (x86)\Internet Download Manager\idmwfp.inf

C:\Windows\system32\DrvInst.exe

DrvInst.exe "8" "4" "C:\Windows\System32\DriverStore\FileRepository\idmwfp.inf_amd64_8b0ebbc2b4585464\idmwfp.inf" "0" "4fc2928b3" "000000000000014C" "WinSta0\Default"

C:\Windows\system32\runonce.exe

"C:\Windows\system32\runonce.exe" -r

C:\Windows\System32\grpconv.exe

"C:\Windows\System32\grpconv.exe" -o

C:\Windows\SysWOW64\net.exe

"C:\Windows\System32\net.exe" start IDMWFP

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 start IDMWFP

C:\Windows\SysWOW64\net.exe

"C:\Windows\System32\net.exe" start IDMWFP

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 start IDMWFP

C:\Windows\SysWOW64\net.exe

"C:\Windows\System32\net.exe" start IDMWFP

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 start IDMWFP

C:\Windows\SysWOW64\net.exe

"C:\Windows\System32\net.exe" start IDMWFP

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 start IDMWFP

C:\Windows\SysWOW64\net.exe

"C:\Windows\System32\net.exe" start IDMWFP

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 start IDMWFP

C:\Windows\SysWOW64\net.exe

"C:\Windows\System32\net.exe" start IDMWFP

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 start IDMWFP

C:\Windows\SysWOW64\regsvr32.exe

"C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll"

C:\Windows\system32\regsvr32.exe

/s "C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --field-trial-handle=3276,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1452 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --field-trial-handle=5108,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4608 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4764,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4560 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6708,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3224 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --field-trial-handle=4036,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1452 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6508,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6844 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=1448,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4576 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5408,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5732 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6876,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5980 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --field-trial-handle=1436,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6300 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --field-trial-handle=6564,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6560 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --field-trial-handle=5328,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6156 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --field-trial-handle=6888,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6300 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --field-trial-handle=5564,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5988 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --field-trial-handle=4676,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6276 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --field-trial-handle=5292,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5044 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --field-trial-handle=5288,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3268 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --field-trial-handle=6980,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3236 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --field-trial-handle=4416,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4672 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --field-trial-handle=3192,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4640 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=6976,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6264 /prefetch:8

C:\Program Files\7-Zip\7zFM.exe

"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\Downloads\StreamFab 6.2.0.1 (x64) Multilingual [FileCR].zip"

C:\Users\Admin\Desktop\StreamFab 6.2.0.1 (x64) Multilingual\streamfab_x64_6201.exe

"C:\Users\Admin\Desktop\StreamFab 6.2.0.1 (x64) Multilingual\streamfab_x64_6201.exe"

C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe

"C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe" /install /file"C:\Users\Admin\Desktop\StreamFab 6.2.0.1 (x64) Multilingual\streamfab_x64_6201.exe" /option:x64

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\StreamFab 6.2.0.1 (x64) Multilingual\readme.txt

C:\Program Files\7-Zip\7zFM.exe

"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\Desktop\StreamFab 6.2.0.1 (x64) Multilingual\streamfab_x64_6201.rar"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.dvdfab.cn/thankyou.htm?c_app_from=official&c_bm=dvdfab&c_app=streamfab&c_sys=x64&c_dt=popup&c_wh=install&c_ad=dvdfab_streamfab_thankyou&c_ver=6201&client_m=ZDItYmQtN2UtNzEtZGEtMDU%3D&s=streamfab&ad=streamfab_client_thankyou&v=6.2.0.1

C:\Program Files\DVDFab\StreamFab\StreamFab64.exe

"C:\Program Files\DVDFab\StreamFab\StreamFab64.exe" /install /add_plan /ID:2bcabe577ad22e751a998b7955129e57 /new --app-from official /option:x64 /uimodule=x64 --module=x64 --ui-module=x64

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ff8364946f8,0x7ff836494708,0x7ff836494718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2216,16414157677243534279,16900801571667695662,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2224 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2216,16414157677243534279,16900801571667695662,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2216,16414157677243534279,16900801571667695662,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2720 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2216,16414157677243534279,16900801571667695662,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3428 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2216,16414157677243534279,16900801571667695662,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=2216,16414157677243534279,16900801571667695662,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3972 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2216,16414157677243534279,16900801571667695662,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2852 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=2216,16414157677243534279,16900801571667695662,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4888 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2216,16414157677243534279,16900801571667695662,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5176 /prefetch:8

C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe

"C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe" --install

C:\Windows\SYSTEM32\TASKKILL.exe

TASKKILL /IM YoutubeToMP3Service.exe /F

C:\Windows\SYSTEM32\TASKKILL.exe

TASKKILL /IM YoutubeToMP3Service.exe /F

C:\Windows\SYSTEM32\TASKKILL.exe

TASKKILL /IM YoutubeToMP3Process.exe /F

C:\Windows\SYSTEM32\TASKKILL.exe

TASKKILL /IM YoutubeToMP3Process.exe /F

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2216,16414157677243534279,16900801571667695662,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5136 /prefetch:1

C:\Program Files\DVDFab\StreamFab\StreamFab64.exe

"C:\Program Files\DVDFab\StreamFab\StreamFab64.exe" --installmode --runapp --module="x64"

C:\Windows\system32\TASKKILL.exe

TASKKILL /IM YoutubeToMP3Service.exe /F

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=gpu-process --no-sandbox --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --mojo-platform-channel-handle=1896 --field-trial-handle=2060,i,15895563880838955994,17041837384395568897,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2

C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Process.exe

"C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Process.exe" --only-get-ie-key --always-input-url ""

C:\Program Files\DVDFab\StreamFab\devcon.exe

"C:\Program Files\DVDFab\StreamFab\devcon.exe" "C:/Users/Admin/AppData/Local/Temp/e6683bd/899e0178-77a1-4319-8571-8422e4bc4811"

C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Process.exe

"C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Process.exe" --only-get-ie-key --always-input-url ""

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c "ver"

C:\Program Files\DVDFab\StreamFab\devcon.exe

"C:\Program Files\DVDFab\StreamFab\devcon.exe" "C:/Users/Admin/AppData/Local/Temp/e6683bd/899e0178-77a1-4319-8571-8422e4bc4811"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c "ver"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c "ver"

C:\Windows\System32\Wbem\wmic.exe

wmic csproduct get UUID

C:\Windows\System32\Wbem\wmic.exe

wmic BaseBoard get SerialNumber

C:\Windows\System32\Wbem\wmic.exe

wmic csproduct get UUID

C:\Windows\System32\Wbem\wmic.exe

wmic BaseBoard get SerialNumber

C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe

"C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe" --config_file C:/Users/Admin/Documents/DVDFab/StreamFab/Temp/update/update_config.xml --url_suffix=clientusertype=try --user_type try

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --no-sandbox --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --mojo-platform-channel-handle=4036 --field-trial-handle=2060,i,15895563880838955994,17041837384395568897,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --mojo-platform-channel-handle=4044 --field-trial-handle=2060,i,15895563880838955994,17041837384395568897,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8

C:\Windows\system32\TASKKILL.exe

TASKKILL /IM YoutubeToMP3Service.exe /F

C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Service.exe

"C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Service.exe"

C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Service.exe

"C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Service.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c "ver"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.dvdfab.cn/streamfab-promotion.htm?soft=streamfab_client&ad=streamfab_client_promotion_try_exit&c_bm=dvdfab&c_app=streamfab&c_id=49&c_sys=x64&c_ver=6201&client_m=ZDItYmQtN2UtNzEtZGEtMDU%3D&c_ut=try&c_app_from=official&c_rec=0&c_dt=click&c_wh=exit&c_ad=dvdfab_streamfab_exit_try

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8364946f8,0x7ff836494708,0x7ff836494718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2216,12614514199959552491,16500485282663022058,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2228 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2216,12614514199959552491,16500485282663022058,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2216,12614514199959552491,16500485282663022058,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2972 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2216,12614514199959552491,16500485282663022058,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3348 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2216,12614514199959552491,16500485282663022058,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\system32\TASKKILL.exe

TASKKILL /IM YoutubeToMP3Service.exe /F

C:\Windows\system32\TASKKILL.exe

TASKKILL /IM YoutubeToMP3Process.exe /F

C:\Program Files\DVDFab\StreamFab\StreamFab64.exe

"C:\Program Files\DVDFab\StreamFab\StreamFab64.exe"

C:\Windows\SYSTEM32\TASKKILL.exe

TASKKILL /IM YoutubeToMP3Service.exe /F

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=gpu-process --no-sandbox --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --mojo-platform-channel-handle=2060 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2

C:\Windows\System32\Wbem\wmic.exe

wmic csproduct get UUID

C:\Windows\System32\Wbem\wmic.exe

wmic BaseBoard get SerialNumber

C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Process.exe

"C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Process.exe" --only-get-ie-key --always-input-url ""

C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Process.exe

"C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Process.exe" --only-get-ie-key --always-input-url ""

C:\Program Files\DVDFab\StreamFab\devcon.exe

"C:\Program Files\DVDFab\StreamFab\devcon.exe" "C:/Users/Admin/AppData/Local/Temp/e6792ad/a29d0758-456b-48e0-ad7c-0a2792d63e00"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c "ver"

C:\Program Files\DVDFab\StreamFab\devcon.exe

"C:\Program Files\DVDFab\StreamFab\devcon.exe" "C:/Users/Admin/AppData/Local/Temp/e6792ad/a29d0758-456b-48e0-ad7c-0a2792d63e00"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c "ver"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c "ver"

C:\Windows\System32\Wbem\wmic.exe

wmic csproduct get UUID

C:\Windows\System32\Wbem\wmic.exe

wmic BaseBoard get SerialNumber

C:\Windows\System32\Wbem\wmic.exe

wmic csproduct get UUID

C:\Windows\System32\Wbem\wmic.exe

wmic BaseBoard get SerialNumber

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --no-sandbox --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --mojo-platform-channel-handle=3776 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --mojo-platform-channel-handle=3784 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.dvdfab.cn/streamfab6.htm?c_bm=dvdfab&c_app=streamfab&c_id=49&c_sys=x64&c_ver=6201&client_m=ZDItYmQtN2UtNzEtZGEtMDU%3D&c_ut=365&c_app_from=official&c_rec=0&c_dt=click&c_wh=mainpage&client_t=1730041336_UT0AZlqnxGuQ&c_ad=dvdfab_streamfab_mainpage_365

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ff8364946f8,0x7ff836494708,0x7ff836494718

C:\Windows\SYSTEM32\TASKKILL.exe

TASKKILL /IM YoutubeToMP3Service.exe /F

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2160,15751557944492649878,11611096617914630935,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2172 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2160,15751557944492649878,11611096617914630935,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2160,15751557944492649878,11611096617914630935,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2920 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,15751557944492649878,11611096617914630935,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,15751557944492649878,11611096617914630935,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3336 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Service.exe

"C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Service.exe"

C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe

"C:\Program Files\DVDFab\StreamFab\StreamUpdate.exe" --config_file C:/Users/Admin/Documents/DVDFab/StreamFab/Temp/update/update_config.xml --url_suffix=clientusertype=365 --user_type 365

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Service.exe

"C:\Program Files\DVDFab\StreamFab\YoutubeDL\YoutubeToMP3Service.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c "ver"

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --no-sandbox --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --mojo-platform-channel-handle=4492 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --mojo-platform-channel-handle=4564 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=4688 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=4684 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=3700 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4684 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-sandbox --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --mojo-platform-channel-handle=5004 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-sandbox --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --mojo-platform-channel-handle=5072 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x424 0x394

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4916 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --field-trial-handle=6544,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6264 /prefetch:1

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-sandbox --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --mojo-platform-channel-handle=5056 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2

C:\Windows\System32\Wbem\wmic.exe

wmic csproduct get UUID

C:\Windows\System32\Wbem\wmic.exe

wmic BaseBoard get SerialNumber

C:\Program Files\DVDFab\StreamFab\RegOp.exe

"C:\Program Files\DVDFab\StreamFab\RegOp.exe" C:\Users\Admin\AppData\Local\Temp\OP_RegList.dat

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=5396 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=3508 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=5580 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=5276 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=5576 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=5636 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=5128 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=5504 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=5216 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=3868 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=5680 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=4984 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=1320 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=5456 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=5292 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=5460 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=5412 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=5384 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Program Files\DVDFab\StreamFab\QCef.exe

"C:/Program Files/DVDFab/StreamFab/QCef.exe" --type=renderer --log-severity=info --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --no-sandbox --autoplay-policy=no-user-gesture-required --log-file=C:/Users/Admin/Documents/DVDFab/StreamFab/log/qef.log --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=5220 --field-trial-handle=2120,i,9934485040797156235,13412491830050662181,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1

C:\Windows\SYSTEM32\TASKKILL.exe

TASKKILL /IM YoutubeToMP3Service.exe /F

C:\Windows\SYSTEM32\TASKKILL.exe

TASKKILL /IM YoutubeToMP3Process.exe /F

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --field-trial-handle=6776,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6496 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --field-trial-handle=6988,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7212 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --field-trial-handle=7196,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7112 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7268,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7352 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7384,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7368 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --field-trial-handle=6720,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7380 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=7376,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6852 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=7500,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7400 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=6908,i,3928001563956941712,6249043492396689780,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7640 /prefetch:8

C:\Users\Admin\Downloads\UrbanVPN.exe

"C:\Users\Admin\Downloads\UrbanVPN.exe"

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Windows\syswow64\MsiExec.exe

C:\Windows\syswow64\MsiExec.exe -Embedding 617A39160A10C7A8DEC63C61DA0EB5CC C

C:\Windows\SysWOW64\werfault.exe

werfault.exe /h /shared Global\52c68fb772ae4c5c899f01a01c422e3e /t 1924 /p 884

C:\Users\Admin\Downloads\UrbanVPN.exe

"C:\Users\Admin\Downloads\UrbanVPN.exe"

C:\Windows\syswow64\MsiExec.exe

C:\Windows\syswow64\MsiExec.exe -Embedding D16060A8D2AD12913D76E6CD01B5AF09 C

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 75.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 79.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 217.106.137.52.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 10.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 185.199.110.133:443 avatars.githubusercontent.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 185.199.111.154:443 github.githubassets.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.110.133:443 user-images.githubusercontent.com tcp
US 185.199.110.133:443 user-images.githubusercontent.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 133.110.199.185.in-addr.arpa udp
US 8.8.8.8:53 154.111.199.185.in-addr.arpa udp
GB 172.217.169.36:443 www.google.com udp
GB 172.217.169.36:443 www.google.com tcp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
US 8.8.8.8:53 apis.google.com udp
GB 142.250.180.10:443 ogads-pa.googleapis.com udp
GB 142.250.200.46:443 apis.google.com udp
GB 142.250.180.10:443 ogads-pa.googleapis.com tcp
US 8.8.8.8:53 36.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 3.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 10.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 46.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
GB 172.217.169.42:443 content-autofill.googleapis.com tcp
US 8.8.8.8:53 collector.github.com udp
US 140.82.114.22:443 collector.github.com tcp
US 140.82.114.22:443 collector.github.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 8.8.8.8:53 api.github.com udp
GB 172.217.169.42:443 content-autofill.googleapis.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 play.google.com udp
GB 142.250.187.206:443 play.google.com udp
GB 142.250.187.206:443 play.google.com tcp
US 8.8.8.8:53 13.86.106.20.in-addr.arpa udp
US 8.8.8.8:53 42.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 22.114.82.140.in-addr.arpa udp
US 8.8.8.8:53 210.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 206.187.250.142.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 55.36.223.20.in-addr.arpa udp
US 8.8.8.8:53 dns-tunnel-check.googlezip.net udp
US 8.8.8.8:53 tunnel.googlezip.net udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 8.8.8.8:53 227.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 157.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 34.169.217.172.in-addr.arpa udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 142.250.187.206:443 play.google.com tcp
US 8.8.8.8:53 consent.google.com udp
US 8.8.8.8:53 id.google.com udp
GB 172.217.16.227:443 id.google.com tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.187.214:443 i.ytimg.com tcp
US 8.8.8.8:53 227.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 214.187.250.142.in-addr.arpa udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 8.8.8.8:53 www.youtube.com udp
GB 172.217.16.238:443 www.youtube.com udp
GB 172.217.16.238:443 www.youtube.com tcp
GB 172.217.16.238:443 www.youtube.com udp
GB 142.250.187.214:443 i.ytimg.com tcp
GB 142.250.187.206:443 www.youtube.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 static.doubleclick.net udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 142.250.180.2:443 googleads.g.doubleclick.net tcp
GB 216.58.212.230:443 static.doubleclick.net tcp
GB 172.217.16.234:443 jnn-pa.googleapis.com tcp
US 8.8.8.8:53 2.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 238.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 230.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 234.16.217.172.in-addr.arpa udp
GB 142.250.180.2:443 googleads.g.doubleclick.net udp
GB 172.217.16.234:443 jnn-pa.googleapis.com udp
GB 142.250.187.206:443 www.youtube.com tcp
GB 142.250.187.206:443 www.youtube.com tcp
GB 142.250.187.206:443 www.youtube.com udp
US 8.8.8.8:53 lh5.googleusercontent.com udp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
GB 142.250.187.238:443 encrypted-tbn0.gstatic.com tcp
GB 142.250.187.238:443 encrypted-tbn0.gstatic.com tcp
GB 142.250.187.238:443 encrypted-tbn0.gstatic.com tcp
GB 142.250.187.238:443 encrypted-tbn0.gstatic.com tcp
GB 142.250.200.1:443 lh5.googleusercontent.com tcp
GB 142.250.187.238:443 encrypted-tbn0.gstatic.com tcp
GB 142.250.200.1:443 lh5.googleusercontent.com udp
US 8.8.8.8:53 1.200.250.142.in-addr.arpa udp
GB 142.250.187.238:443 encrypted-tbn0.gstatic.com udp
GB 172.217.16.227:443 id.google.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 8.8.8.8:53 www.discoveryplus.com udp
NL 18.65.39.68:443 www.discoveryplus.com tcp
US 8.8.8.8:53 68.39.65.18.in-addr.arpa udp
US 8.8.8.8:53 232.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.google.co.uk udp
US 216.239.34.36:443 region1.analytics.google.com tcp
GB 142.250.200.3:443 www.google.co.uk tcp
BE 74.125.133.156:443 stats.g.doubleclick.net tcp
US 8.8.8.8:53 global-prod.disco-api.com udp
IE 54.77.187.24:443 global-prod.disco-api.com tcp
US 8.8.8.8:53 10.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 3.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 156.133.125.74.in-addr.arpa udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 js-agent.newrelic.com udp
US 162.247.243.39:443 js-agent.newrelic.com tcp
US 8.8.8.8:53 eu1-prod-direct.discoveryplus.com udp
US 8.8.8.8:53 edigitalsurvey.com udp
US 8.8.8.8:53 bam.nr-data.net udp
US 104.22.13.151:443 edigitalsurvey.com tcp
US 162.247.243.29:443 bam.nr-data.net tcp
IE 54.73.45.104:443 eu1-prod-direct.discoveryplus.com tcp
US 8.8.8.8:53 cdn.cookielaw.org udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 24.187.77.54.in-addr.arpa udp
US 8.8.8.8:53 39.243.247.162.in-addr.arpa udp
US 8.8.8.8:53 151.13.22.104.in-addr.arpa udp
US 8.8.8.8:53 29.243.247.162.in-addr.arpa udp
US 8.8.8.8:53 104.45.73.54.in-addr.arpa udp
US 104.18.87.42:443 cdn.cookielaw.org tcp
US 104.18.87.42:443 cdn.cookielaw.org tcp
NL 18.239.83.126:443 sb.scorecardresearch.com tcp
US 8.8.8.8:53 app.link udp
NL 18.239.18.88:443 app.link tcp
GB 172.217.169.36:443 www.google.com tcp
GB 142.250.180.2:443 googleads.g.doubleclick.net tcp
GB 142.250.180.2:443 googleads.g.doubleclick.net tcp
US 104.18.87.42:443 cdn.cookielaw.org tcp
US 8.8.8.8:53 geolocation.onetrust.com udp
US 104.18.32.137:443 geolocation.onetrust.com tcp
US 216.239.34.36:443 region1.analytics.google.com udp
GB 172.217.169.36:443 www.google.com udp
US 8.8.8.8:53 42.87.18.104.in-addr.arpa udp
US 8.8.8.8:53 126.83.239.18.in-addr.arpa udp
US 8.8.8.8:53 88.18.239.18.in-addr.arpa udp
US 8.8.8.8:53 137.32.18.104.in-addr.arpa udp
GB 142.250.180.2:443 googleads.g.doubleclick.net udp
GB 142.250.200.3:443 www.google.co.uk udp
US 104.18.32.137:443 geolocation.onetrust.com tcp
US 8.8.8.8:53 eu1-prod-images.disco-api.com udp
BE 18.239.208.55:443 eu1-prod-images.disco-api.com tcp
BE 18.239.208.55:443 eu1-prod-images.disco-api.com tcp
BE 18.239.208.55:443 eu1-prod-images.disco-api.com tcp
BE 18.239.208.55:443 eu1-prod-images.disco-api.com tcp
BE 18.239.208.55:443 eu1-prod-images.disco-api.com tcp
BE 18.239.208.55:443 eu1-prod-images.disco-api.com tcp
US 8.8.8.8:53 api2.branch.io udp
NL 108.156.60.57:443 api2.branch.io tcp
GB 172.217.169.42:443 jnn-pa.googleapis.com tcp
US 8.8.8.8:53 55.208.239.18.in-addr.arpa udp
US 8.8.8.8:53 57.60.156.108.in-addr.arpa udp
US 8.8.8.8:53 50.23.12.20.in-addr.arpa udp
US 8.8.8.8:53 171.39.242.20.in-addr.arpa udp
US 8.8.8.8:53 privacyportal.onetrust.com udp
US 104.18.32.137:443 privacyportal.onetrust.com tcp
US 162.247.243.29:443 bam.nr-data.net tcp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
GB 172.217.169.42:443 jnn-pa.googleapis.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 codeload.github.com udp
GB 20.26.156.216:443 codeload.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 216.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 static.hotjar.com udp
US 8.8.8.8:53 bmetricpublisher.com udp
US 8.8.8.8:53 sc-static.net udp
US 8.8.8.8:53 sak.userreport.com udp
US 8.8.8.8:53 analytics.tiktok.com udp
US 104.18.32.137:443 privacyportal.onetrust.com tcp
US 8.8.8.8:53 d.agkn.com udp
US 8.8.8.8:53 audex.userreport.com udp
US 8.8.8.8:53 dpm.demdex.net udp
DK 217.63.97.217:443 bmetricpublisher.com tcp
US 8.8.8.8:53 9232428.fls.doubleclick.net udp
IE 34.254.132.151:443 dpm.demdex.net tcp
US 3.163.248.4:443 sc-static.net tcp
NL 18.239.94.100:443 audex.userreport.com tcp
IE 108.128.18.132:443 d.agkn.com tcp
NL 18.239.94.35:443 static.hotjar.com tcp
GB 2.19.248.85:443 analytics.tiktok.com tcp
NL 18.239.83.97:443 sak.userreport.com tcp
GB 172.217.16.230:443 9232428.fls.doubleclick.net tcp
US 8.8.8.8:53 217.97.63.217.in-addr.arpa udp
DK 217.63.97.217:443 bmetricpublisher.com tcp
DK 217.63.97.217:443 bmetricpublisher.com tcp
US 8.8.8.8:53 script.hotjar.com udp
GB 172.217.16.230:443 9232428.fls.doubleclick.net udp
US 8.8.8.8:53 cdn.userreport.com udp
US 8.8.8.8:53 discovery.demdex.net udp
US 8.8.8.8:53 cm.everesttech.net udp
NL 13.227.219.71:443 script.hotjar.com tcp
US 8.8.8.8:53 tr.snapchat.com udp
US 8.8.8.8:53 visitanalytics.userreport.com udp
IE 52.213.88.80:443 discovery.demdex.net tcp
NL 18.239.50.52:443 cdn.userreport.com tcp
US 35.190.43.134:443 tr.snapchat.com tcp
IE 54.154.185.216:443 cm.everesttech.net tcp
US 35.190.43.134:443 tr.snapchat.com tcp
NL 18.238.243.125:443 visitanalytics.userreport.com tcp
US 35.190.43.134:443 tr.snapchat.com tcp
US 8.8.8.8:53 vc.hotjar.io udp
NL 18.239.36.44:443 vc.hotjar.io tcp
US 8.8.8.8:53 token.rubiconproject.com udp
NL 69.173.156.149:443 token.rubiconproject.com tcp
US 8.8.8.8:53 tr6.snapchat.com udp
US 8.8.8.8:53 track.adform.net udp
DK 37.157.2.230:443 track.adform.net tcp
US 8.8.8.8:53 insight.bellmetric.net udp
DK 212.98.110.145:443 insight.bellmetric.net tcp
US 35.190.43.134:443 tr6.snapchat.com udp
US 8.8.8.8:53 api.getblueshift.com udp
US 35.83.172.61:443 api.getblueshift.com tcp
US 8.8.8.8:53 85.248.19.2.in-addr.arpa udp
US 8.8.8.8:53 100.94.239.18.in-addr.arpa udp
US 8.8.8.8:53 35.94.239.18.in-addr.arpa udp
US 8.8.8.8:53 97.83.239.18.in-addr.arpa udp
US 8.8.8.8:53 132.18.128.108.in-addr.arpa udp
US 8.8.8.8:53 4.248.163.3.in-addr.arpa udp
US 8.8.8.8:53 151.132.254.34.in-addr.arpa udp
US 8.8.8.8:53 71.219.227.13.in-addr.arpa udp
US 8.8.8.8:53 230.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 52.50.239.18.in-addr.arpa udp
US 8.8.8.8:53 134.43.190.35.in-addr.arpa udp
US 8.8.8.8:53 80.88.213.52.in-addr.arpa udp
US 8.8.8.8:53 216.185.154.54.in-addr.arpa udp
US 8.8.8.8:53 125.243.238.18.in-addr.arpa udp
US 8.8.8.8:53 226.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 44.36.239.18.in-addr.arpa udp
US 8.8.8.8:53 149.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 230.2.157.37.in-addr.arpa udp
US 8.8.8.8:53 145.110.98.212.in-addr.arpa udp
US 8.8.8.8:53 cm.g.doubleclick.net udp
GB 142.250.187.226:443 cm.g.doubleclick.net tcp
US 8.8.8.8:53 pixel.advertising.com udp
US 8.8.8.8:53 226.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 61.172.83.35.in-addr.arpa udp
US 8.8.8.8:53 image5.pubmatic.com udp
GB 184.26.56.245:443 image5.pubmatic.com tcp
US 8.8.8.8:53 metrics.hotjar.io udp
IE 52.30.225.204:443 metrics.hotjar.io tcp
US 8.8.8.8:53 ps.eyeota.net udp
DE 3.124.210.90:443 ps.eyeota.net tcp
US 8.8.8.8:53 245.56.26.184.in-addr.arpa udp
US 8.8.8.8:53 204.225.30.52.in-addr.arpa udp
US 8.8.8.8:53 90.210.124.3.in-addr.arpa udp
US 8.8.8.8:53 cms.analytics.yahoo.com udp
GB 87.248.114.11:443 cms.analytics.yahoo.com tcp
US 8.8.8.8:53 ups.analytics.yahoo.com udp
US 8.8.8.8:53 11.114.248.87.in-addr.arpa udp
US 8.8.8.8:53 usermatch.krxd.net udp
US 8.8.8.8:53 sync.crwdcntrl.net udp
IE 52.208.115.114:443 sync.crwdcntrl.net tcp
US 8.8.8.8:53 dmp.v.fwmrm.net udp
US 3.231.143.9:443 dmp.v.fwmrm.net tcp
US 162.247.243.29:443 bam.nr-data.net tcp
US 8.8.8.8:53 114.115.208.52.in-addr.arpa udp
US 8.8.8.8:53 9.143.231.3.in-addr.arpa udp
US 162.247.243.29:443 bam.nr-data.net tcp
US 162.247.243.29:443 bam.nr-data.net tcp
US 8.8.8.8:53 www.redditstatic.com udp
US 8.8.8.8:53 c5.adalyser.com udp
US 8.8.8.8:53 static.ads-twitter.com udp
US 8.8.8.8:53 try.abtasty.com udp
US 8.8.8.8:53 bat.bing.com udp
US 8.8.8.8:53 eu-js.adstk.io udp
GB 151.101.188.157:443 static.ads-twitter.com tcp
NL 18.238.243.103:443 try.abtasty.com tcp
BE 104.199.8.242:443 eu-js.adstk.io tcp
US 151.101.129.140:443 www.redditstatic.com tcp
IE 52.213.9.208:443 c5.adalyser.com tcp
US 150.171.28.10:443 bat.bing.com tcp
DK 217.63.97.217:443 bmetricpublisher.com tcp
US 35.190.43.134:443 tr6.snapchat.com udp
US 35.190.43.134:443 tr6.snapchat.com udp
IE 52.213.88.80:443 discovery.demdex.net tcp
US 8.8.8.8:53 t.co udp
US 8.8.8.8:53 analytics.twitter.com udp
NL 18.238.243.103:443 try.abtasty.com udp
US 151.101.129.140:443 www.redditstatic.com tcp
US 8.8.8.8:53 pixel-config.reddit.com udp
US 8.8.8.8:53 alb.reddit.com udp
US 162.159.140.229:443 t.co tcp
US 104.244.42.195:443 analytics.twitter.com tcp
US 151.101.129.140:443 alb.reddit.com tcp
US 8.8.8.8:53 googleads4.g.doubleclick.net udp
US 151.101.193.140:443 alb.reddit.com tcp
US 8.8.8.8:53 eu-conv-pix.adstk.io udp
BE 104.199.8.242:443 eu-conv-pix.adstk.io tcp
DK 217.63.97.217:443 bmetricpublisher.com tcp
US 8.8.8.8:53 ariane.abtasty.com udp
DK 217.63.97.217:443 bmetricpublisher.com tcp
US 8.8.8.8:53 dcinfos-cache.abtasty.com udp
US 34.36.178.232:443 dcinfos-cache.abtasty.com tcp
US 34.36.178.232:443 dcinfos-cache.abtasty.com tcp
US 34.36.178.232:443 dcinfos-cache.abtasty.com tcp
US 8.8.8.8:53 230.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 157.188.101.151.in-addr.arpa udp
US 8.8.8.8:53 140.129.101.151.in-addr.arpa udp
US 8.8.8.8:53 103.243.238.18.in-addr.arpa udp
US 8.8.8.8:53 242.8.199.104.in-addr.arpa udp
US 8.8.8.8:53 10.28.171.150.in-addr.arpa udp
US 8.8.8.8:53 208.9.213.52.in-addr.arpa udp
US 8.8.8.8:53 229.140.159.162.in-addr.arpa udp
US 8.8.8.8:53 140.193.101.151.in-addr.arpa udp
US 8.8.8.8:53 195.42.244.104.in-addr.arpa udp
US 8.8.8.8:53 66.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 232.178.36.34.in-addr.arpa udp
US 8.8.8.8:53 240.221.184.93.in-addr.arpa udp
US 34.36.178.232:443 dcinfos-cache.abtasty.com udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 3.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 88.156.103.20.in-addr.arpa udp
US 8.8.8.8:53 app.link udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 e2c16.gcp.gvt2.com udp
US 8.8.8.8:53 e2c46.gcp.gvt2.com udp
DE 34.89.141.94:443 e2c16.gcp.gvt2.com tcp
BR 35.215.235.162:443 e2c46.gcp.gvt2.com tcp
US 8.8.8.8:53 beacons.gvt2.com udp
GB 172.217.169.35:443 beacons.gvt2.com tcp
GB 172.217.169.35:443 beacons.gvt2.com tcp
US 8.8.8.8:53 94.141.89.34.in-addr.arpa udp
US 8.8.8.8:53 162.235.215.35.in-addr.arpa udp
US 8.8.8.8:53 35.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 eu1-prod-direct.discoveryplus.com udp
US 8.8.8.8:53 43.229.111.52.in-addr.arpa udp
US 8.8.8.8:53 www.discoveryplus.com udp
US 34.36.178.232:443 dcinfos-cache.abtasty.com udp
US 8.8.8.8:53 cdn-media.brightline.tv udp
GB 2.18.27.71:443 cdn-media.brightline.tv tcp
US 8.8.8.8:53 services.brightline.tv udp
US 52.223.18.66:443 services.brightline.tv tcp
US 8.8.8.8:53 out053a3bejgh7t0phqa0csou.litix.io udp
US 54.196.227.84:443 out053a3bejgh7t0phqa0csou.litix.io tcp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 216.58.204.65:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 eu1-prod-images.disco-api.com udp
US 8.8.8.8:53 66.18.223.52.in-addr.arpa udp
US 8.8.8.8:53 84.227.196.54.in-addr.arpa udp
US 8.8.8.8:53 71.27.18.2.in-addr.arpa udp
US 8.8.8.8:53 65.204.58.216.in-addr.arpa udp
GB 216.58.204.65:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 events.brightline.tv udp
US 3.33.250.219:443 events.brightline.tv tcp
US 3.33.250.219:443 events.brightline.tv tcp
US 8.8.8.8:53 219.250.33.3.in-addr.arpa udp
US 8.8.8.8:53 analytics.tiktok.com udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 tr.snapchat.com udp
US 35.190.43.134:443 tr.snapchat.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
US 162.247.243.29:443 bam.nr-data.net tcp
US 8.8.8.8:53 region1.analytics.google.com udp
GB 142.250.200.3:443 www.google.co.uk udp
US 8.8.8.8:53 bat.bing.com udp
US 216.239.34.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 global-prod.disco-api.com udp
US 8.8.8.8:53 sb.scorecardresearch.com udp
US 8.8.8.8:53 geolocation.onetrust.com udp
US 8.8.8.8:53 api2.branch.io udp
US 8.8.8.8:53 use.fontawesome.com udp
US 8.8.8.8:53 uk01.maru-cdn.com udp
US 172.67.142.245:443 use.fontawesome.com tcp
US 104.26.14.127:443 uk01.maru-cdn.com tcp
GB 142.250.180.2:443 googleads.g.doubleclick.net udp
GB 172.217.169.36:443 www.google.com udp
US 8.8.8.8:53 245.142.67.172.in-addr.arpa udp
US 8.8.8.8:53 127.14.26.104.in-addr.arpa udp
US 8.8.8.8:53 bam.nr-data.net udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 eu1-prod-direct.discoveryplus.com udp
GB 172.217.169.36:443 www.google.com udp
GB 172.217.16.227:443 id.google.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 172.217.169.42:443 jnn-pa.googleapis.com tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 142.250.187.206:443 www.youtube.com udp
US 8.8.8.8:53 www.internetdownloadmanager.com udp
US 169.61.27.133:443 www.internetdownloadmanager.com tcp
US 169.61.27.133:443 www.internetdownloadmanager.com tcp
US 169.61.27.133:443 www.internetdownloadmanager.com tcp
US 169.61.27.133:443 www.internetdownloadmanager.com tcp
US 8.8.8.8:53 mirror2.internetdownloadmanager.com udp
US 174.127.113.77:443 mirror2.internetdownloadmanager.com tcp
US 174.127.113.77:443 mirror2.internetdownloadmanager.com tcp
US 8.8.8.8:53 77.113.127.174.in-addr.arpa udp
US 8.8.8.8:53 www.internetdownloadmanager.com udp
US 8.8.8.8:53 spocs.getpocket.com udp
US 8.8.8.8:53 firefox-api-proxy.cdn.mozilla.net udp
US 169.61.27.133:443 www.internetdownloadmanager.com tcp
US 169.61.27.133:443 www.internetdownloadmanager.com tcp
US 8.8.8.8:53 www.internetdownloadmanager.com udp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 34.149.97.1:443 firefox-api-proxy.cdn.mozilla.net tcp
US 8.8.8.8:53 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.ads.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 44.129.237.44.in-addr.arpa udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 app.link udp
N/A 127.0.0.1:58405 tcp
N/A 127.0.0.1:58453 tcp
US 8.8.8.8:53 test.internetdownloadmanager.com udp
US 8.8.8.8:53 secure.internetdownloadmanager.com udp
US 8.8.8.8:53 mirror3.internetdownloadmanager.com udp
US 8.8.8.8:53 mirror5.internetdownloadmanager.com udp
US 8.8.8.8:53 registeridm.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 www.discoveryplus.com udp
IE 54.77.187.24:443 eu1-prod-direct.discoveryplus.com tcp
US 8.8.8.8:53 eu1-prod-images.disco-api.com udp
US 169.61.27.133:443 registeridm.com tcp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 28.73.42.20.in-addr.arpa udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 bam.nr-data.net udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
GB 172.217.169.35:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 privacyportal.onetrust.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 172.217.169.36:443 www.google.com udp
GB 142.250.200.2:443 googleads.g.doubleclick.net udp
US 104.18.32.137:443 privacyportal.onetrust.com tcp
US 8.8.8.8:53 region1.analytics.google.com udp
US 8.8.8.8:53 www.google.co.uk udp
US 162.247.243.29:443 bam.nr-data.net tcp
US 216.239.34.36:443 region1.analytics.google.com udp
GB 142.250.200.3:443 www.google.co.uk udp
US 8.8.8.8:53 2.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 chromewebstore.google.com udp
GB 172.217.169.78:443 chromewebstore.google.com tcp
GB 172.217.169.78:443 chromewebstore.google.com tcp
US 8.8.8.8:53 78.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 142.250.187.206:443 play.google.com udp
US 8.8.8.8:53 lh3.googleusercontent.com udp
GB 142.250.200.1:443 lh3.googleusercontent.com udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
US 8.8.8.8:53 apis.google.com udp
GB 172.217.169.74:443 ogads-pa.googleapis.com tcp
GB 142.250.200.46:443 apis.google.com tcp
GB 142.250.187.206:443 play.google.com udp
GB 142.250.187.206:443 play.google.com tcp
GB 142.250.200.46:443 apis.google.com udp
US 8.8.8.8:53 scone-pa.clients6.google.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 8.8.8.8:53 8.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 74.169.217.172.in-addr.arpa udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 ssl.gstatic.com udp
GB 142.250.187.195:443 ssl.gstatic.com tcp
US 8.8.8.8:53 195.187.250.142.in-addr.arpa udp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 172.217.169.78:443 chromewebstore.google.com udp
GB 142.250.200.1:443 lh3.googleusercontent.com udp
US 8.8.8.8:53 234.179.250.142.in-addr.arpa udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 google.com udp
GB 172.217.169.35:443 beacons.gcp.gvt2.com udp
GB 172.217.16.238:443 google.com tcp
US 8.8.8.8:53 www.google.com udp
GB 172.217.169.36:443 www.google.com udp
GB 172.217.16.238:443 google.com udp
GB 172.217.169.35:443 beacons.gcp.gvt2.com udp
GB 142.250.200.46:443 apis.google.com udp
GB 142.250.200.46:443 apis.google.com tcp
US 8.8.8.8:53 filecr-com.webpkgcache.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
GB 216.58.212.193:443 filecr-com.webpkgcache.com tcp
GB 216.58.212.193:443 filecr-com.webpkgcache.com udp
GB 216.58.212.193:443 filecr-com.webpkgcache.com tcp
GB 216.58.212.193:443 filecr-com.webpkgcache.com tcp
GB 216.58.212.193:443 filecr-com.webpkgcache.com tcp
GB 216.58.212.193:443 filecr-com.webpkgcache.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 8.8.8.8:53 193.212.58.216.in-addr.arpa udp
GB 142.250.187.206:443 play.google.com udp
GB 216.58.212.193:443 filecr-com.webpkgcache.com udp
US 8.8.8.8:53 filecr.com udp
US 8.8.8.8:53 dash.zintrack.com udp
US 172.67.190.231:443 filecr.com tcp
US 172.67.190.231:443 filecr.com tcp
US 172.67.190.231:443 filecr.com tcp
US 172.67.190.231:443 filecr.com tcp
US 172.67.190.231:443 filecr.com tcp
US 172.67.190.231:443 filecr.com tcp
US 172.67.221.181:443 dash.zintrack.com tcp
US 172.67.190.231:443 filecr.com udp
US 8.8.8.8:53 231.190.67.172.in-addr.arpa udp
US 8.8.8.8:53 181.221.67.172.in-addr.arpa udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 8.8.8.8:53 zintrack.com udp
GB 216.58.204.74:443 content-autofill.googleapis.com tcp
US 8.8.8.8:53 webcrx.io udp
US 104.21.95.207:443 webcrx.io tcp
US 104.21.94.97:443 zintrack.com udp
US 8.8.8.8:53 74.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 207.95.21.104.in-addr.arpa udp
US 8.8.8.8:53 97.94.21.104.in-addr.arpa udp
GB 216.58.204.74:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 anygame.net udp
US 104.21.93.243:443 anygame.net tcp
US 104.21.93.243:443 anygame.net tcp
US 104.21.93.243:443 anygame.net udp
US 104.21.94.97:443 zintrack.com tcp
GB 216.58.204.74:443 content-autofill.googleapis.com tcp
US 104.21.94.97:443 zintrack.com udp
GB 142.250.200.2:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 243.93.21.104.in-addr.arpa udp
US 8.8.8.8:53 226.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
GB 142.250.178.14:443 fundingchoicesmessages.google.com tcp
GB 142.250.178.14:443 fundingchoicesmessages.google.com udp
GB 142.250.200.1:443 lh3.googleusercontent.com tcp
GB 142.250.178.14:443 fundingchoicesmessages.google.com udp
GB 142.250.200.2:443 googleads.g.doubleclick.net tcp
GB 142.250.200.2:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
GB 142.250.200.34:443 ep1.adtrafficquality.google tcp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
GB 172.217.169.1:443 ep2.adtrafficquality.google tcp
US 8.8.8.8:53 www.google.com udp
GB 172.217.169.1:443 ep2.adtrafficquality.google tcp
GB 172.217.169.36:443 www.google.com tcp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 1.169.217.172.in-addr.arpa udp
GB 172.217.169.1:443 ep2.adtrafficquality.google udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 172.217.169.36:443 www.google.com udp
GB 142.250.200.34:443 ep1.adtrafficquality.google udp
GB 216.58.204.65:443 tpc.googlesyndication.com tcp
GB 216.58.204.65:443 tpc.googlesyndication.com tcp
GB 216.58.204.65:443 tpc.googlesyndication.com tcp
GB 216.58.204.65:443 tpc.googlesyndication.com tcp
GB 216.58.204.65:443 tpc.googlesyndication.com tcp
GB 216.58.204.65:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 s1-filecr.xyz udp
DE 51.195.6.135:443 s1-filecr.xyz tcp
DE 51.195.6.135:443 s1-filecr.xyz tcp
GB 216.58.204.65:443 tpc.googlesyndication.com udp
GB 142.250.200.2:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 135.6.195.51.in-addr.arpa udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 apis.google.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
GB 142.250.200.46:443 apis.google.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 user-profile.dvdfab.cn udp
HK 64.120.114.160:443 user-profile.dvdfab.cn tcp
US 8.8.8.8:53 160.114.120.64.in-addr.arpa udp
US 8.8.8.8:53 app-api-c2.dvdfab.cn udp
US 104.26.3.54:443 app-api-c2.dvdfab.cn tcp
US 8.8.8.8:53 54.3.26.104.in-addr.arpa udp
US 8.8.8.8:53 www.dvdfab.cn udp
US 104.26.3.54:443 www.dvdfab.cn tcp
US 104.26.3.54:443 www.dvdfab.cn tcp
US 8.8.8.8:53 71.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 c.dvdfab.cn udp
US 8.8.8.8:53 c1.dvdfab.cn udp
US 8.8.8.8:53 c2.dvdfab.cn udp
NL 108.156.60.35:443 c1.dvdfab.cn tcp
US 8.8.8.8:53 c6.dvdfab.cn udp
NL 18.239.36.85:443 c.dvdfab.cn tcp
NL 18.239.36.85:443 c.dvdfab.cn tcp
NL 18.239.36.85:443 c.dvdfab.cn tcp
NL 18.239.36.85:443 c.dvdfab.cn tcp
NL 18.239.36.85:443 c.dvdfab.cn tcp
NL 18.239.36.85:443 c.dvdfab.cn tcp
US 8.8.8.8:53 c5.dvdfab.cn udp
NL 108.156.60.25:443 c2.dvdfab.cn tcp
US 8.8.8.8:53 c4.dvdfab.cn udp
NL 18.239.69.129:443 c6.dvdfab.cn tcp
US 8.8.8.8:53 blog.dvdfab.cn udp
NL 18.239.18.55:443 c5.dvdfab.cn tcp
US 8.8.8.8:53 c3.dvdfab.cn udp
NL 18.239.36.83:443 c4.dvdfab.cn tcp
US 8.8.8.8:53 dvdfab.at udp
US 8.8.8.8:53 crt.rootg2.amazontrust.com udp
NL 18.239.36.103:80 crt.rootg2.amazontrust.com tcp
NL 18.239.36.103:80 crt.rootg2.amazontrust.com tcp
NL 18.239.36.103:80 crt.rootg2.amazontrust.com tcp
NL 18.239.36.103:80 crt.rootg2.amazontrust.com tcp
NL 18.239.36.103:80 crt.rootg2.amazontrust.com tcp
NL 18.239.36.103:80 crt.rootg2.amazontrust.com tcp
NL 18.239.36.103:80 crt.rootg2.amazontrust.com tcp
NL 18.239.50.19:443 c3.dvdfab.cn tcp
US 8.8.8.8:53 dvdfab.fr udp
US 8.8.8.8:53 forum.dvdfab.cn udp
US 8.8.8.8:53 dvdfab.org udp
US 8.8.8.8:53 zh.dvdfab.cn udp
US 8.8.8.8:53 35.60.156.108.in-addr.arpa udp
US 8.8.8.8:53 85.36.239.18.in-addr.arpa udp
US 8.8.8.8:53 25.60.156.108.in-addr.arpa udp
US 8.8.8.8:53 129.69.239.18.in-addr.arpa udp
US 8.8.8.8:53 55.18.239.18.in-addr.arpa udp
US 8.8.8.8:53 83.36.239.18.in-addr.arpa udp
US 8.8.8.8:53 103.36.239.18.in-addr.arpa udp
US 8.8.8.8:53 15.39.65.18.in-addr.arpa udp
US 8.8.8.8:53 19.50.239.18.in-addr.arpa udp
US 8.8.8.8:53 region1.analytics.google.com udp
US 216.239.32.36:443 region1.analytics.google.com tcp
US 8.8.8.8:53 14.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
US 216.239.32.36:443 region1.analytics.google.com udp
US 8.8.8.8:53 stats.g.doubleclick.net udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
BE 74.125.133.154:443 stats.g.doubleclick.net tcp
BE 74.125.133.154:443 stats.g.doubleclick.net tcp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
GB 142.250.200.3:443 www.google.co.uk tcp
GB 142.250.200.3:443 www.google.co.uk tcp
GB 172.217.169.36:443 www.google.com tcp
US 8.8.8.8:53 154.133.125.74.in-addr.arpa udp
US 8.8.8.8:53 98.201.58.216.in-addr.arpa udp
US 104.26.3.54:443 zh.dvdfab.cn tcp
US 8.8.8.8:53 servo-slave-us.dvdfab.cn udp
US 162.210.194.39:443 servo-slave-us.dvdfab.cn tcp
US 8.8.8.8:53 39.194.210.162.in-addr.arpa udp
US 8.8.8.8:53 ssl.dvdfab.cn udp
DE 3.69.85.86:80 ssl.dvdfab.cn tcp
US 8.8.8.8:53 www.dvdfabstore.com udp
DE 3.69.85.86:80 www.dvdfabstore.com tcp
US 8.8.8.8:53 d18.dvdfab.cn udp
NL 85.17.26.18:80 d18.dvdfab.cn tcp
US 8.8.8.8:53 86.85.69.3.in-addr.arpa udp
US 8.8.8.8:53 18.26.17.85.in-addr.arpa udp
US 8.8.8.8:53 app-api-c2.dvdfab.cn udp
US 8.8.8.8:53 ssl.dvdfab.cn udp
US 172.67.69.59:443 app-api-c2.dvdfab.cn tcp
DE 3.69.85.86:443 ssl.dvdfab.cn tcp
US 8.8.8.8:53 dl.dvdfab.cn udp
US 104.26.2.54:443 dl.dvdfab.cn tcp
US 104.26.2.54:443 dl.dvdfab.cn tcp
US 104.26.2.54:443 dl.dvdfab.cn tcp
US 104.26.2.54:443 dl.dvdfab.cn tcp
DE 3.69.85.86:443 ssl.dvdfab.cn tcp
US 104.26.2.54:443 dl.dvdfab.cn tcp
US 8.8.8.8:53 59.69.67.172.in-addr.arpa udp
US 8.8.8.8:53 54.2.26.104.in-addr.arpa udp
US 104.26.2.54:443 dl.dvdfab.cn tcp
US 104.26.2.54:443 dl.dvdfab.cn tcp
US 104.26.2.54:443 dl.dvdfab.cn tcp
US 8.8.8.8:53 web-backend-us.dvdfab.cn udp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 172.67.69.59:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 104.26.2.54:443 web-backend-us.dvdfab.cn tcp
US 162.210.194.39:443 servo-slave-us.dvdfab.cn tcp
DE 3.69.85.86:443 ssl.dvdfab.cn tcp
US 8.8.8.8:53 www.dvdfabstore.com udp
US 8.8.8.8:53 www.dvdfab.cn udp
US 8.8.8.8:53 app-api-c1.dvdfab.cn udp
DE 3.69.85.86:80 www.dvdfabstore.com tcp
US 172.67.69.59:443 app-api-c1.dvdfab.cn tcp
US 104.26.2.54:443 app-api-c1.dvdfab.cn tcp
US 172.67.69.59:443 app-api-c1.dvdfab.cn tcp
DE 3.69.85.86:443 www.dvdfabstore.com tcp
US 104.26.3.54:443 app-api-c1.dvdfab.cn tcp
US 8.8.8.8:53 assets.dvdfab.cn udp
NL 18.238.243.115:443 assets.dvdfab.cn tcp
US 162.210.194.39:443 servo-slave-us.dvdfab.cn tcp
NL 18.238.243.115:443 assets.dvdfab.cn tcp
US 8.8.8.8:53 dl.dvdfab.cn udp
NL 18.238.243.115:443 assets.dvdfab.cn tcp
NL 18.238.243.115:443 assets.dvdfab.cn tcp
NL 18.238.243.115:443 assets.dvdfab.cn tcp
US 172.67.69.59:443 dl.dvdfab.cn tcp
US 8.8.8.8:53 115.243.238.18.in-addr.arpa udp
NL 18.238.243.115:443 assets.dvdfab.cn tcp
US 8.8.8.8:53 aia.startssl.com udp
NL 18.238.243.115:443 assets.dvdfab.cn tcp
GB 2.18.190.70:80 aia.startssl.com tcp
US 172.67.69.59:443 dl.dvdfab.cn tcp
US 8.8.8.8:53 app-api-c1.dvdfab.cn udp
US 8.8.8.8:53 ocsp.startssl.com udp
US 104.26.3.54:443 app-api-c1.dvdfab.cn tcp
GB 2.18.190.81:80 ocsp.startssl.com tcp
NL 18.238.243.115:443 assets.dvdfab.cn tcp
NL 18.238.243.115:443 assets.dvdfab.cn tcp
GB 2.18.190.74:80 crl.startssl.com tcp
US 172.67.69.59:443 app-api-c1.dvdfab.cn tcp
US 8.8.8.8:53 226.21.18.104.in-addr.arpa udp
US 8.8.8.8:53 70.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 81.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 74.190.18.2.in-addr.arpa udp
US 8.8.8.8:53 2.45.26.184.in-addr.arpa udp
US 8.8.8.8:53 user-profile.dvdfab.cn udp
HK 64.120.114.160:443 user-profile.dvdfab.cn tcp
US 104.26.3.54:443 app-api-c1.dvdfab.cn tcp
US 8.8.8.8:53 crl.globalsign.com udp
US 104.18.20.226:80 crl.globalsign.com tcp
US 8.8.8.8:53 226.20.18.104.in-addr.arpa udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:53 crls.ssl.com udp
NL 18.239.36.9:80 crls.ssl.com tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:53 135.223.24.100.in-addr.arpa udp
US 8.8.8.8:53 9.36.239.18.in-addr.arpa udp
NL 18.239.36.85:443 crls.ssl.com tcp
NL 108.156.60.35:443 c1.dvdfab.cn tcp
NL 108.156.60.25:443 c2.dvdfab.cn tcp
NL 18.239.69.129:443 c6.dvdfab.cn tcp
NL 18.239.36.83:443 c4.dvdfab.cn tcp
NL 18.239.50.19:443 c3.dvdfab.cn tcp
NL 18.239.18.55:443 c5.dvdfab.cn tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:53 233.38.18.104.in-addr.arpa udp
US 8.8.8.8:53 23.149.64.172.in-addr.arpa udp
US 8.8.8.8:443 dns.google tcp
US 172.67.69.59:443 app-api-c1.dvdfab.cn tcp
US 8.8.8.8:443 dns.google tcp
US 172.67.69.59:443 app-api-c1.dvdfab.cn tcp
US 8.8.8.8:443 dns.google tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com tcp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
US 162.210.194.39:443 servo-slave-us.dvdfab.cn tcp
DE 3.69.85.86:80 www.dvdfabstore.com tcp
DE 3.69.85.86:80 www.dvdfabstore.com tcp
DE 3.69.85.86:443 www.dvdfabstore.com tcp
US 104.26.2.54:443 app-api-c1.dvdfab.cn tcp
DE 3.69.85.86:443 www.dvdfabstore.com tcp
US 172.67.69.59:443 app-api-c1.dvdfab.cn tcp
US 172.67.69.59:443 app-api-c1.dvdfab.cn tcp
US 104.26.2.54:443 app-api-c1.dvdfab.cn tcp
US 104.26.3.54:443 app-api-c1.dvdfab.cn tcp
US 162.210.194.39:443 servo-slave-us.dvdfab.cn tcp
US 172.67.69.59:443 app-api-c1.dvdfab.cn tcp
US 8.8.8.8:53 ocsp.startssl.com udp
GB 2.18.190.83:80 ocsp.startssl.com tcp
US 8.8.8.8:53 assets.dvdfab.cn udp
US 172.67.69.59:443 app-api-c1.dvdfab.cn tcp
NL 18.238.243.115:443 assets.dvdfab.cn tcp
NL 18.238.243.115:443 assets.dvdfab.cn tcp
US 172.67.69.59:443 app-api-c1.dvdfab.cn tcp
NL 18.238.243.115:443 assets.dvdfab.cn tcp
NL 18.238.243.115:443 assets.dvdfab.cn tcp
US 172.67.69.59:443 app-api-c1.dvdfab.cn tcp
US 8.8.8.8:53 crl.startssl.com udp
GB 2.18.190.74:80 crl.startssl.com tcp
NL 18.238.243.115:443 assets.dvdfab.cn tcp
NL 18.238.243.115:443 assets.dvdfab.cn tcp
US 8.8.8.8:53 83.190.18.2.in-addr.arpa udp
US 104.26.3.54:443 app-api-c1.dvdfab.cn tcp
US 172.67.69.59:443 app-api-c1.dvdfab.cn tcp
US 8.8.8.8:53 c2.dvdfab.cn udp
US 8.8.8.8:53 c1.dvdfab.cn udp
US 8.8.8.8:53 c.dvdfab.cn udp
NL 108.156.60.25:443 c2.dvdfab.cn tcp
US 8.8.8.8:53 c6.dvdfab.cn udp
NL 18.239.36.94:443 c.dvdfab.cn tcp
NL 18.239.36.94:443 c.dvdfab.cn tcp
NL 108.156.60.24:443 c1.dvdfab.cn tcp
US 8.8.8.8:53 c4.dvdfab.cn udp
US 8.8.8.8:53 c5.dvdfab.cn udp
NL 18.239.69.20:443 c6.dvdfab.cn tcp
NL 18.239.18.55:443 c5.dvdfab.cn tcp
US 8.8.8.8:53 c3.dvdfab.cn udp
NL 18.239.36.46:443 c4.dvdfab.cn tcp
NL 18.239.50.56:443 c3.dvdfab.cn tcp
NL 18.239.36.94:443 c.dvdfab.cn udp
US 172.67.69.59:443 app-api-c1.dvdfab.cn tcp
US 8.8.8.8:53 24.60.156.108.in-addr.arpa udp
US 8.8.8.8:53 94.36.239.18.in-addr.arpa udp
US 8.8.8.8:53 20.69.239.18.in-addr.arpa udp
US 8.8.8.8:53 46.36.239.18.in-addr.arpa udp
US 8.8.8.8:53 56.50.239.18.in-addr.arpa udp
US 104.18.21.226:80 crl.globalsign.com tcp
US 162.210.194.39:443 servo-slave-us.dvdfab.cn tcp
DE 3.69.85.86:443 www.dvdfabstore.com tcp
US 104.18.20.226:80 crl.globalsign.com tcp
NL 18.238.243.115:443 assets.dvdfab.cn tcp
DE 3.69.85.86:80 www.dvdfabstore.com tcp
DE 3.69.85.86:443 www.dvdfabstore.com tcp
NL 18.238.243.115:443 assets.dvdfab.cn tcp
NL 18.238.243.115:443 assets.dvdfab.cn tcp
US 104.26.3.54:443 app-api-c1.dvdfab.cn tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
HK 64.120.114.160:443 user-profile.dvdfab.cn tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:53 ssl-ca.dvdfab.cn udp
CA 155.138.128.252:443 ssl-ca.dvdfab.cn tcp
US 172.67.69.59:443 app-api-c1.dvdfab.cn tcp
US 8.8.8.8:53 drm-u1.dvdfab.cn udp
US 104.26.2.54:443 drm-u1.dvdfab.cn tcp
US 8.8.8.8:53 252.128.138.155.in-addr.arpa udp
US 104.26.2.54:443 drm-u1.dvdfab.cn tcp
US 8.8.8.8:53 www.youtube.com udp
GB 172.217.169.14:443 www.youtube.com tcp
US 8.8.8.8:53 14.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 i.ytimg.com udp
GB 172.217.169.14:443 www.youtube.com udp
GB 142.250.200.54:443 i.ytimg.com tcp
US 8.8.8.8:53 54.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 accounts.google.com udp
NL 173.194.69.84:443 accounts.google.com tcp
US 8.8.8.8:53 84.69.194.173.in-addr.arpa udp
NL 173.194.69.84:443 accounts.google.com udp
GB 142.250.200.54:443 i.ytimg.com udp
US 8.8.8.8:53 yt3.ggpht.com udp
US 8.8.8.8:53 lh6.googleusercontent.com udp
US 8.8.8.8:53 lh5.googleusercontent.com udp
GB 216.58.201.97:443 yt3.ggpht.com tcp
GB 216.58.201.97:443 yt3.ggpht.com tcp
GB 142.250.200.1:443 lh6.googleusercontent.com tcp
GB 142.250.179.225:443 lh5.googleusercontent.com tcp
GB 172.217.169.36:443 www.google.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:53 97.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 225.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 142.250.187.206:443 play.google.com tcp
GB 142.250.187.206:443 play.google.com udp
GB 172.217.169.14:443 www.youtube.com tcp
US 8.8.4.4:443 dns.google tcp
GB 216.58.212.206:443 youtube.com tcp
US 8.8.8.8:53 4.4.8.8.in-addr.arpa udp
US 8.8.4.4:443 dns.google udp
US 8.8.8.8:53 206.212.58.216.in-addr.arpa udp
GB 142.250.200.34:443 ep1.adtrafficquality.google tcp
GB 142.250.200.34:443 ep1.adtrafficquality.google udp
GB 142.250.200.1:443 lh6.googleusercontent.com udp
GB 216.58.212.206:443 youtube.com udp
GB 172.217.169.14:443 www.youtube.com tcp
GB 216.58.212.230:443 static.doubleclick.net tcp
GB 216.58.212.230:443 static.doubleclick.net tcp
US 8.8.4.4:443 dns.google udp
GB 142.250.187.206:443 play.google.com udp
US 8.8.4.4:443 dns.google udp
GB 216.58.204.67:443 tcp
US 8.8.8.8:53 67.204.58.216.in-addr.arpa udp
GB 172.217.169.36:443 www.google.com udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 194.212.58.216.in-addr.arpa udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 8.8.8.8:53 play.google.com udp
GB 142.250.187.206:443 play.google.com udp
US 8.8.8.8:53 servo-slave-us.www.dvdfab.cn udp
US 172.67.69.59:443 drm-u1.dvdfab.cn tcp
US 8.8.8.8:53 servo-slave-fr.www.dvdfab.cn udp
US 8.8.8.8:53 servo-slave-de.www.dvdfab.cn udp
US 8.8.8.8:53 servo-slave-ja.www.dvdfab.cn udp
US 8.8.4.4:443 dns.google udp
DE 3.69.85.86:443 www.dvdfabstore.com tcp
NL 18.65.39.46:443 www.discoveryplus.com tcp
GB 216.58.213.10:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 46.39.65.18.in-addr.arpa udp
US 8.8.8.8:53 10.213.58.216.in-addr.arpa udp
IE 54.73.45.104:443 eu1-prod-direct.discoveryplus.com tcp
GB 173.194.76.154:443 tcp
GB 142.250.200.3:443 www.google.co.uk tcp
US 216.239.34.36:443 region1.analytics.google.com tcp
US 8.8.8.8:53 www.discoveryplus.com udp
US 162.247.243.39:443 js-agent.newrelic.com tcp
NL 18.65.39.100:443 www.discoveryplus.com tcp
IE 54.73.45.104:443 eu1-prod-direct.discoveryplus.com tcp
US 172.67.9.169:443 edigitalsurvey.com tcp
US 8.8.8.8:53 154.76.194.173.in-addr.arpa udp
US 8.8.8.8:53 100.39.65.18.in-addr.arpa udp
US 162.247.243.29:443 bam.nr-data.net tcp
US 104.18.87.42:443 cdn.cookielaw.org tcp
US 104.18.87.42:443 cdn.cookielaw.org tcp
NL 18.239.83.98:443 sb.scorecardresearch.com tcp
GB 142.250.200.34:443 ep1.adtrafficquality.google udp
NL 18.239.18.118:443 app.link tcp
US 8.8.8.8:53 169.9.67.172.in-addr.arpa udp
US 8.8.8.8:53 98.83.239.18.in-addr.arpa udp
GB 216.58.212.196:443 udp
US 162.247.243.29:443 bam.nr-data.net tcp
NL 18.65.39.100:443 www.discoveryplus.com tcp
US 104.18.87.42:443 cdn.cookielaw.org tcp
GB 142.250.200.3:443 www.google.co.uk udp
US 104.18.32.137:443 privacyportal.onetrust.com tcp
BE 18.239.208.33:443 eu1-prod-images.disco-api.com tcp
BE 18.239.208.33:443 eu1-prod-images.disco-api.com tcp
BE 18.239.208.33:443 eu1-prod-images.disco-api.com tcp
BE 18.239.208.33:443 eu1-prod-images.disco-api.com tcp
BE 18.239.208.33:443 eu1-prod-images.disco-api.com tcp
NL 18.65.39.100:443 www.discoveryplus.com tcp
US 8.8.8.8:53 118.18.239.18.in-addr.arpa udp
US 8.8.8.8:53 196.212.58.216.in-addr.arpa udp
BE 18.239.208.33:443 eu1-prod-images.disco-api.com tcp
US 104.18.32.137:443 privacyportal.onetrust.com tcp
NL 108.156.60.103:443 api2.branch.io tcp
US 8.8.8.8:53 33.208.239.18.in-addr.arpa udp
US 8.8.8.8:53 103.60.156.108.in-addr.arpa udp
US 172.67.69.59:443 drm-u1.dvdfab.cn tcp
US 104.18.32.137:443 privacyportal.onetrust.com tcp
GB 172.217.169.22:443 i.ytimg.com udp
NL 172.217.132.200:443 tcp
NL 172.217.132.200:443 tcp
US 8.8.8.8:53 22.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 www.youtube.com udp
GB 216.58.204.78:443 www.youtube.com tcp
NL 172.217.132.200:443 tcp
NL 172.217.132.200:443 tcp
GB 142.250.179.225:443 lh5.googleusercontent.com udp
NL 172.217.132.200:443 tcp
NL 172.217.132.200:443 tcp
US 8.8.8.8:53 200.132.217.172.in-addr.arpa udp
US 8.8.8.8:53 78.204.58.216.in-addr.arpa udp
GB 216.58.212.206:443 www.youtube.com udp
NL 18.65.39.100:443 www.discoveryplus.com tcp
NL 18.65.39.100:443 www.discoveryplus.com tcp
US 104.18.32.137:443 privacyportal.onetrust.com tcp
NL 18.239.94.113:443 static.hotjar.com tcp
DK 217.63.97.217:443 bmetricpublisher.com tcp
IE 108.128.18.132:443 d.agkn.com tcp
US 3.163.248.4:443 sc-static.net tcp
GB 2.19.248.85:443 analytics.tiktok.com tcp
NL 18.239.83.71:443 sak.userreport.com tcp
NL 18.239.94.122:443 audex.userreport.com tcp
IE 52.17.240.122:443 tcp
GB 172.217.16.230:443 9232428.fls.doubleclick.net tcp
NL 13.227.219.71:443 script.hotjar.com tcp
DK 217.63.97.217:443 bmetricpublisher.com tcp
DK 217.63.97.217:443 bmetricpublisher.com tcp
IE 54.154.229.188:443 discovery.demdex.net tcp
IE 52.30.233.14:443 cm.everesttech.net tcp
NL 18.239.50.15:443 cdn.userreport.com tcp
NL 18.238.243.129:443 visitanalytics.userreport.com tcp
GB 172.217.16.230:443 9232428.fls.doubleclick.net udp
NL 18.239.36.61:443 vc.hotjar.io tcp
US 8.8.8.8:53 113.94.239.18.in-addr.arpa udp
US 8.8.8.8:53 71.83.239.18.in-addr.arpa udp
US 8.8.8.8:53 122.94.239.18.in-addr.arpa udp
US 8.8.8.8:53 122.240.17.52.in-addr.arpa udp
US 8.8.8.8:53 14.233.30.52.in-addr.arpa udp
US 8.8.8.8:53 188.229.154.54.in-addr.arpa udp
US 8.8.8.8:53 15.50.239.18.in-addr.arpa udp
US 8.8.8.8:53 129.243.238.18.in-addr.arpa udp
DK 37.157.5.84:443 tcp
DK 212.98.110.145:443 insight.bellmetric.net tcp
US 216.239.34.36:443 region1.analytics.google.com udp
US 44.225.104.26:443 api.getblueshift.com tcp
US 8.8.8.8:53 61.36.239.18.in-addr.arpa udp
US 8.8.8.8:53 84.5.157.37.in-addr.arpa udp
NL 69.173.156.148:443 token.rubiconproject.com tcp
GB 216.58.212.226:443 tcp
US 8.8.8.8:53 26.104.225.44.in-addr.arpa udp
US 8.8.8.8:53 2.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 148.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 226.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 pixel.advertising.com udp
GB 184.26.56.245:443 image5.pubmatic.com tcp
DE 3.127.178.105:443 tcp
GB 87.248.114.12:443 ups.analytics.yahoo.com tcp
US 8.8.8.8:53 usermatch.krxd.net udp
JP 180.222.119.247:443 tcp
IE 99.80.212.73:443 sync.crwdcntrl.net tcp
US 3.231.143.14:443 tcp
JP 180.222.119.247:443 tcp
US 8.8.8.8:53 105.178.127.3.in-addr.arpa udp
US 8.8.8.8:53 73.212.80.99.in-addr.arpa udp
US 8.8.8.8:53 12.114.248.87.in-addr.arpa udp
US 8.8.8.8:53 247.119.222.180.in-addr.arpa udp
US 8.8.8.8:53 14.143.231.3.in-addr.arpa udp
NL 18.65.39.100:443 www.discoveryplus.com tcp
US 8.8.8.8:53 ssl-jp.dvdfab.cn udp
JP 45.32.27.88:443 ssl-jp.dvdfab.cn tcp
US 8.8.8.8:53 eu1-prod-images.disco-api.com udp
DK 217.63.97.217:443 bmetricpublisher.com tcp
NL 18.65.39.100:443 www.discoveryplus.com tcp
BE 18.239.208.33:443 eu1-prod-images.disco-api.com tcp
US 151.101.193.140:443 alb.reddit.com tcp
IE 52.213.9.208:443 c5.adalyser.com tcp
GB 146.75.72.157:443 tcp
US 150.171.27.10:443 bat.bing.com tcp
BE 104.199.8.242:443 eu-conv-pix.adstk.io tcp
NL 18.238.243.97:443 try.abtasty.com tcp
US 8.8.8.8:53 88.27.32.45.in-addr.arpa udp
US 8.8.8.8:53 157.72.75.146.in-addr.arpa udp
US 8.8.8.8:53 97.243.238.18.in-addr.arpa udp
NL 18.65.39.100:443 www.discoveryplus.com tcp
US 151.101.193.140:443 alb.reddit.com tcp
NL 18.238.243.97:443 try.abtasty.com udp
US 172.66.0.227:443 tcp
US 172.66.0.227:443 tcp
US 104.244.42.67:443 tcp
US 104.244.42.67:443 tcp
US 151.101.1.140:443 alb.reddit.com tcp
US 151.101.65.140:443 alb.reddit.com tcp
US 151.101.65.140:443 alb.reddit.com tcp
BE 104.199.8.242:443 eu-conv-pix.adstk.io tcp
BE 104.199.8.242:443 eu-conv-pix.adstk.io tcp
US 34.36.178.232:443 dcinfos-cache.abtasty.com tcp
US 34.36.178.232:443 dcinfos-cache.abtasty.com tcp
US 34.36.178.232:443 dcinfos-cache.abtasty.com tcp
US 34.36.178.232:443 dcinfos-cache.abtasty.com tcp
US 8.8.8.8:53 227.0.66.172.in-addr.arpa udp
US 8.8.8.8:53 67.42.244.104.in-addr.arpa udp
US 8.8.8.8:53 140.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 140.65.101.151.in-addr.arpa udp
US 104.26.3.54:443 drm-u1.dvdfab.cn tcp
US 172.67.69.59:443 drm-u1.dvdfab.cn tcp
US 216.239.34.36:443 region1.analytics.google.com udp
NL 18.65.39.100:443 www.discoveryplus.com tcp
NL 18.65.39.100:443 www.discoveryplus.com tcp
NL 18.65.39.100:443 www.discoveryplus.com tcp
US 34.36.178.232:443 dcinfos-cache.abtasty.com udp
DK 217.63.97.217:443 bmetricpublisher.com tcp
DK 217.63.97.217:443 bmetricpublisher.com tcp
DK 217.63.97.217:443 bmetricpublisher.com tcp
US 35.190.43.134:443 tr.snapchat.com tcp
US 35.190.43.134:443 tr.snapchat.com tcp
US 35.190.43.134:443 tr.snapchat.com tcp
US 35.190.43.134:443 tr.snapchat.com udp
US 8.8.8.8:53 www.google.com udp
GB 172.217.169.36:443 www.google.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
GB 216.58.213.3:443 beacons.gcp.gvt2.com udp
US 172.67.69.59:443 drm-u1.dvdfab.cn tcp
US 172.67.69.59:443 drm-u1.dvdfab.cn tcp
US 216.239.34.157:443 tunnel.googlezip.net tcp
US 8.8.8.8:53 www.urban-vpn.com udp
GB 142.250.187.206:443 www.youtube.com udp
US 8.8.8.8:53 connect.facebook.net udp
NL 18.239.69.106:443 www.urban-vpn.com tcp
NL 18.239.69.106:443 www.urban-vpn.com tcp
NL 18.239.69.106:443 www.urban-vpn.com tcp
NL 18.239.69.106:443 www.urban-vpn.com tcp
NL 18.239.69.106:443 www.urban-vpn.com tcp
NL 18.239.69.106:443 www.urban-vpn.com tcp
GB 163.70.151.21:443 connect.facebook.net tcp
US 8.8.8.8:53 assets.urban-vpn.com udp
US 8.8.8.8:53 region1.analytics.google.com udp
BE 74.125.133.154:443 stats.g.doubleclick.net tcp
GB 142.250.200.3:443 www.google.co.uk tcp
NL 18.239.83.18:443 assets.urban-vpn.com tcp
US 216.239.34.36:443 region1.analytics.google.com tcp
NL 18.239.83.18:443 assets.urban-vpn.com tcp
NL 18.239.83.18:443 assets.urban-vpn.com tcp
NL 18.239.83.18:443 assets.urban-vpn.com tcp
NL 18.239.83.18:443 assets.urban-vpn.com tcp
NL 18.239.83.18:443 assets.urban-vpn.com tcp
US 8.8.8.8:53 bat.bing.com udp
US 8.8.8.8:53 106.69.239.18.in-addr.arpa udp
US 8.8.8.8:53 21.151.70.163.in-addr.arpa udp
US 8.8.8.8:53 37165035.adoric-om.com udp
US 150.171.28.10:443 bat.bing.com tcp
US 172.67.179.63:443 37165035.adoric-om.com tcp
US 8.8.8.8:53 app.adoric-om.com udp
US 172.67.135.197:443 static.adoric.com tcp
US 34.120.218.58:443 app.adoric-om.com tcp
US 8.8.8.8:53 18.83.239.18.in-addr.arpa udp
US 8.8.8.8:53 63.179.67.172.in-addr.arpa udp
US 8.8.8.8:53 197.135.67.172.in-addr.arpa udp
US 8.8.8.8:53 58.218.120.34.in-addr.arpa udp
US 34.120.218.58:443 app.adoric-om.com udp
US 8.8.8.8:53 geo.geosurf.io udp
US 8.8.8.8:53 gcpstatic.adoric.com udp
US 172.67.135.197:443 gcpstatic.adoric.com udp
CA 67.43.236.170:443 geo.geosurf.io tcp
US 8.8.8.8:53 analytics.urban-vpn.com udp
US 8.8.8.8:53 170.236.43.67.in-addr.arpa udp
US 148.72.165.78:443 analytics.urban-vpn.com tcp
US 8.8.8.8:53 chrome.google.com udp
GB 142.250.178.14:443 chrome.google.com tcp
GB 142.250.178.14:443 chrome.google.com tcp
US 148.72.165.78:443 analytics.urban-vpn.com tcp
US 8.8.8.8:53 chromewebstore.google.com udp
GB 216.58.204.78:443 chromewebstore.google.com udp
US 8.8.8.8:53 lh3.googleusercontent.com udp
GB 142.250.179.225:443 lh3.googleusercontent.com udp
US 8.8.8.8:53 78.165.72.148.in-addr.arpa udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
GB 142.250.200.42:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 ogads-pa.googleapis.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.32.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 scone-pa.clients6.google.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
NL 18.239.83.18:443 assets.urban-vpn.com udp
US 8.8.8.8:53 install.urban-vpn.com udp
NL 13.227.219.69:443 install.urban-vpn.com tcp
NL 13.227.219.69:443 install.urban-vpn.com tcp
US 8.8.8.8:53 69.219.227.13.in-addr.arpa udp
US 150.171.28.10:443 bat.bing.com tcp
US 150.171.28.10:443 bat.bing.com tcp

Files

\??\pipe\crashpad_3124_EOEZTPQZOQPSGWJS

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\21d6527a-511d-4191-8bfd-bf97fcfd382a.tmp

MD5 0c85bed7638b474ec2264cfc2d5cea38
SHA1 8afafd22dc3eab7602e1bad7cc334e2cc0f870fb
SHA256 4792317308602cc995af4183035806377c03b960e82722634e4ebfc5d3ded4b7
SHA512 e0f51f512e8771659e2a4f8818a4769c87d35982d30ed3a0f9bece297058e6801fb2ed6f58b9f71b71db26426882632107766af07bd8fcf99e9b9e04d093d16d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 626dac1dbd07403e206827face973878
SHA1 c92c9ae9adb56fdcf25c14440acf9e6d485a80b3
SHA256 74f1197e44b193728fe7536b291701ed93111f9ab8c19e76663a0ea246b7b951
SHA512 7ae481ebcb640387bc7cf89ba73f9b179c23c3f24c390b89a81b032765abec15d2361db0d89948b23c2bf2074bad7be47fab83609f97e2cc06325435ad61d654

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a13ba91b1c5719f46ba2412670e6fcc3
SHA1 c010c47902c556477bf67771a9f516c2f0c7b449
SHA256 064001a89a2ce301ef15289ca9b12806f73e413f6fad68b2a199b0c95c69393a
SHA512 be5d76a4f4a5a060822c5e17931d672fc7e0d0ada8d0b43e1258a7eba159c0032a4aba7e6eddea8ef548ca7b1679b997c6cb44b5ec11c087c2526f093e41293f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 36fa390d516d61e3544a01711d55f36f
SHA1 73ffdc8c7975e23d862a27d698f8b71699de7b53
SHA256 dae03569275d8db38462b339baf9d49cba2f380a1b08979edf62ff81de3a2db4
SHA512 ae19d9d94eeb8cc71336d48118b18376cd14b549ccc6357a14491ae31ab52c9f433dde607a74bbd9218c7ae9925d1adb6af7576d5c96d1d5c12380cc7c5170aa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt

MD5 a7a2f6dbe4e14a9267f786d0d5e06097
SHA1 5513aebb0bda58551acacbfc338d903316851a7b
SHA256 dd9045ea2f3beaf0282320db70fdf395854071bf212ad747e8765837ec390cbc
SHA512 aa5d81e7ee3a646afec55aee5435dc84fe06d84d3e7e1c45c934f258292c0c4dc2f2853a13d2f2b37a98fe2f1dcc7639eacf51b09e7dcccb2e29c2cbd3ba1835

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe57c2c3.TMP

MD5 5547ae08d22d090f50d225a5edd84a2d
SHA1 66f9d12edca61205e9cde0514a4cdb9f2bea9045
SHA256 e368644ec6615a77ef5f10f4decc32a5e19d758e325c33c921061285feb6bebb
SHA512 7792465757c060f529da3ddc02b4bf23d8b90cc40adc670426d7101d4e00d8cb63cb60019c0059bc212c3d8287a54e7410089f405d7131a9f10df31882945344

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000018

MD5 62ad006750effd3ebdc571863d92ee07
SHA1 8eb0a8bccfe8f20c4637c58ad46e059b9d603caf
SHA256 ab1619799076f197d6e5d0948d672668d2755831b3d8c38f6cb2579671af22ae
SHA512 d4e914c4cafc25087bf9f8560d21f3dcba4a167db705bd25379faa57b6c5aaf48d60796e69970333e6e02272da9353d2e967eabfeefad0199ca910173866732a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000019

MD5 6f94a45e08e251da846d6c39e1469a36
SHA1 405d40a49cbcced654eac774711a3c3744b25ff3
SHA256 89eeb7a0db37c2c41ca49009f5bf4149cf0151f6d950bd8ce057fe470098a87e
SHA512 fd11c63102f5400d728ce71a88b194415f2173633862a2145d5815f62b7a9e988e544d3e495c8a4e40e1fdbe237b84ada6ce108c792f639fa30d3ad15585755f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.discoveryplus.com_0.indexeddb.leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 17ddf4a3ed9853fb6e03905d1c6df36b
SHA1 e03165f6f68f6f6f63b9ffd25b3151529d77b05c
SHA256 d2172297b82c25b0467c1c430befe2e8b650fa96fca0cff48115e1ec78e26150
SHA512 c8164c2fc6eb0517758a432a8e4e0532c323a9212c959a9445866273d7901c6827f31793fb8f8fff6c90edd46c22f6f7f8ba00c762591cf61b2585fc3c2a2833

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 c7d3ce48b9ca48da536b423ab20f416e
SHA1 a8b49a2f8543b15a281b9399ad20bd954121fa01
SHA256 78f937b2d7b6d893e6103e986780485289e592c61094c3ddc7da424aafcada2d
SHA512 a726ba5b6f0954fcae2c018ac5641dc190a3c0db904b4efda9de489614c997d26bd8eb6987f4f1480e95c3ee7a9f8c8375e11f51bae00d7e499b890466cbc9e1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 8d21f14cf55fea1f913622b399310a56
SHA1 9eb779265b9b9aadf9e71d25f3c0a15fc9383a52
SHA256 bd824f05e4828b1aa7087d76158b87c58c845b720fefbd65375873baa0af3e43
SHA512 cae00ea73a4fe76c620c59f52c5e4fefec40f8abbb9a8e5b10129631fa7738a8f2d7393b01bd0f70d70fbaa80445f98e17de5dc7b9c7e9f0bb2dee6f271fe14d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000031

MD5 903cfbbd1c1fbe6586a945daee28f81f
SHA1 f8a3ff24d75865763b937a96e675d0828cde9fbe
SHA256 cd9b5b77cb8d0c5737f4be24d5eb787443eda076d6c5ae7b44fab781d27455ad
SHA512 d5e4b90385e3869ed2752d458b4e51ee1e8285a456c55f517e97a448bf0ff0315f1b005521a29ad8b78aac55068826634593c4a96d7af0dec42cc7ab077203d9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000033

MD5 e7c4350471e0f0d3871cfab94d000ee0
SHA1 d2445937a2d2019891e0997b08d269a5712a6887
SHA256 361d4c4579d808c2104ff46b1e009748fd308e0539c0541644ca2ec03eb63aa0
SHA512 ecd32453d436a53e12e4254b1f611f424e77fc4f679e1b32811ad75290413719a2921f386088744ca4c25c8494bc6946e03715c9174274d61049e44ccdca4950

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000032

MD5 e341910de738b3fdc8196a41b236e02a
SHA1 91770a8193cfbeea7ce000d6d8790a6ef7f82e9b
SHA256 1e39d93ebf2a2e4e2fbd42858443db2fe4a98704b2936693225d7ced208b573f
SHA512 bd1ad59244d37fb3072db6f20bf6d05ab349dfc033c89aefe5d9c6fc94c621c1200c93f3167d9022780f0fe867a53c8e7b2cad60801045b804bcf7bfb1686e76

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000034

MD5 6a29dfe585508b7b6c0478337edae630
SHA1 5416a8ed7baf63034316c255c857fa6772343b03
SHA256 11d3f9714ef7e9c907d6eb9af71e64c5b91bee83ce0503ef9e8c35bdc678b93e
SHA512 ae6008b67d6ea37ee427a5e1d9eca78d8879e3fea42bea2d4cbac748da62fd2e3d08b517191043506882e28a36ca11c1bbc4f5b24ea2ff8f31a28505f8d7c5c7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000037

MD5 47a939d826c77c92a7e4e1284fe5e0f6
SHA1 bf9e2bd89b70038a4d9fae43c69e67c12fab5dfc
SHA256 ea15414520276daeff9a683aa038b8d6873b2468beda120534c64931fbc53a00
SHA512 0daad89a1f21421717eaa62b589af3cd530b90c95389aa7d90c154fa2744874f528e1169e8e177834a0d6205d2796201390dd9cd90da02bf31de0b865fd46e36

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003b

MD5 4603c601cea912afa265b85054feba52
SHA1 b5454679ffc0dcaf3b4db6da11a69039ff33c5e2
SHA256 dc798eeab508c41e0c5f88577144fc0a210a7cd708ad82963b662578e6fe7c19
SHA512 4769179dd22ddf9cbadd17763c4fa766d04ac4550f3841d6155ee3cf4549856d3fdab9bcd464ccdf85007e547deca2926fc94824c989c78d8057b524a7f057aa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3991261d8274929ef9a931f1704d6141
SHA1 714efb71fed55b982b2c579603ebd3b25d885f4e
SHA256 033143bd53ef2db20981b0f97d6d0a42124bb7cfd4f62f880fa88115b5d15ff6
SHA512 de6d95209769b5c4de649ec6657dc1a5deea716b934f6e01255cb7bfa33a64730f483cd6ecca20f5da39a7d9ba7fed6e14f830e6d3f704b39df2fbbc85b2d0d0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 598152f292fe2b6a62d8d0380326785b
SHA1 26778384330f621321979217860f86cf0085d52f
SHA256 70033ab5a19b298382f541ec79be80af9f945cf03f7e5055c359ccfe96fe7bd1
SHA512 52fde2392d148d9c8686a366193117afb98fa40850bf55623ea0f160fc9957bd1b65bc7d68da7f0a252469b6d2a3ca67069ee9a4225b90686af4f51b2c0c5961

C:\Users\Admin\Downloads\widevine-l3-decryptor-master.zip.crdownload

MD5 d4192bd7b1ef49482a5bbb5e766afdf6
SHA1 b2eac9362bb1def57051a0374730d145db851e28
SHA256 d705c49baf3a3589a03bc4954da6e1b91789c06720ff708171f5dddbfdb636a1
SHA512 f1131bf97edcfbff1a7dc341485c4b674a14f50831ea672510854bc01087a41ef62467b937d872914c7e3678e4cc6d97cbbb1e53a63f3299996df7e4c40940d4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b46fd57cfadfd8ee6f93077b5193ecd2
SHA1 b7cfba23f9a62b3b1382d83e327f9ffb9d5f9a15
SHA256 735004d2fc74e220614a7bede611f670eacf3570c55f4d833d5766743bd44319
SHA512 a6377dcbf62a6c7fc68d7949768be7bfa9a4a5d2a842ac06b6e2a36981d87a74cc12423f7e7c1d3381dd9a03b74e135bf0a875f7370fd549f02aa4cecfcb6550

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 1355188fd1c00ccce83009abd080b481
SHA1 4a618aa130d99dc56b2e6ba37981341f198efe9f
SHA256 6bb88a44baa8c9ca307c219572e1d989c435bfcd8caf55cfda2090e2d0b0136a
SHA512 4e173f61ad2b4693aca47bad551b9d4efac2d4e571aaf5f320d95e9759d20b4585d23c12c0804150f8c98833a632cf5d47f1a180d4c22fe0a4724d0d9030a73b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 566e293b7cef3cccc3f9a45b799455a4
SHA1 a30c12547996ba37404da9e1a31a7e42653b3462
SHA256 9740ccd8902592574adac1e96deb175ae678c5aae8755c1cd625917e62f2d67d
SHA512 0f994c79e98103a6e143be9d8924f75aae765e7b4581ed6edadcc9566dba7d29dd90f2664bc474a07762d955686c43e526807431df2ae75bd88a888ea0b9aec9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000035

MD5 3083c09381531bb8c985565794d95ac3
SHA1 ec45215029c2666ac6669cecfeb6f4c5de62db02
SHA256 66e853d27d0df8dbdaaa161fcb674b16a2b0760ca2f3e93b445854ae6947c8d8
SHA512 a0d654d8908d809efc9c9d45920cd67be7cc6bba358326d0a139cf8a933bc90eab6b3d3f061a951aa9c27cce3c9e80a48c1774d38c801408385519b9f883a857

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000038

MD5 272a9e4c961152eb2a346e561240f629
SHA1 412e68c254ecb1122174d594e8fbfab4dca41f3f
SHA256 71fc36aa9d1c2824705bbe8e52e60ff85472107ec22a62332cdaf55b73fda3cc
SHA512 f6b86385ea6ffaee7d78c69744ddb4472e2158325256f8400ce99210b86e695fdbdbc0456b345b366e1fd3bc508d6a07be742b6a504cc348b688c3f5ee4ff353

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000039

MD5 53141dac5c5b0a4f6c074edf250bf558
SHA1 2f9b06ef637b2bb001109216300df23ab3537991
SHA256 ec65cdead9dbaedb1251fe54612ad9962a0cf9aff397b466e808668514a199e9
SHA512 66b1379d04240ca33e5151cd1c2dd0ae2fc2b44246f1c4ee5cdabd487621818083f5f721b01bc3d2bed3add6e0922d7dbeed6f77313d52431119392e4a36740f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003a

MD5 119c9a0b8b202f1b795c6ad53521f4e0
SHA1 4987e72ae25a26ee8ca40e8af5af8c769a0d7cc4
SHA256 3d12c764a14a46a834c47df5a41d419b93917d2f85832b9b8bd3a6621c4ec0ea
SHA512 00ea41d3e5b7f7650724d5da452ed7fc378bb7112c0eb517c505ab3be889553c08577467bee7e94376ba57ab82fe778738b8db319d578e8d457327d59ef5817f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2c82b8576b85f9fd_0

MD5 9c1f9153c745d58e0b340a90f3a5a14c
SHA1 64cf8a207bcc9dbd04254bd375c76ad01624f10e
SHA256 1d1bfd3f0d8bf92e8abaf6407b850fb9aa14f65a8d8e437a7ca7d25e0f1f76bf
SHA512 937aaa587d3a718cd9fb9dfe92488dbcb688e6d8e22534177fbc6075ff78aa148816735e5a4f465e2076a972cd3f215c14e49dbca514671f6092123f791a9676

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d1fa452daa5375f8_0

MD5 cca8ad57c472cfbdef58b05e7e6bea61
SHA1 c3e988ee6914f5876ae854a8910522aeaa5f997f
SHA256 e3dda485d27a4dff49b8fbc3891bc6ca4b1b9b03866383ad92765badabf6b522
SHA512 cdf1f4910dcc47fe7856faaaff169a464904b67c953b83e4a1bed7b364f341e759dc30db6f7635e8ba0937eac336b6a043761d96f358593b0370842d45b693d1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000040

MD5 7ca901375878d9a9a6c4efac654fe904
SHA1 2e7428f004bbe1917e1bddfe730b5529df3a519d
SHA256 8cb11ec407d6758627ec4dc894481110f5f8f7eb14b332d84632696281938259
SHA512 39889a951339ebadc8158567372aaabb43234a68661e2c9d4eac5896f69622d8ab58220b8ea8f9741366a904c385ffc28cfc2a25cd7d02ea49e307b7c923a0b2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000042

MD5 ce3f84a1ba7104d7ead92f227cf9c683
SHA1 8bbb23a52eae71e65fbb4d72ac135f1f45cb7a12
SHA256 1c4a0984332e6d082773a18a4fbdf3b8bee161f45607016982213b8bae4dd2ac
SHA512 664e71d4a2470dcd53e9ec100f1fb3c04fd95554c5c5fa7e8a66fa0fe82211a88544bd771637d964d87ade6cf3819476880f38436a22f4ae149fc9f48f564236

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000043

MD5 cac632f71e79f2eb809f8f7cdf2e4f60
SHA1 427dcc3c5b3539dcda98a7c1e9f54439e05d6d03
SHA256 996313afa827477208ed50e94a2083cacc84cc7b58326255c04e7d29341afe73
SHA512 0afb0041866d12269a7362de5038e8fa2ca70d966c07a375a051f34a84d1b0e39f832c2edf119e4a176366e153f518854b74a6c4c7061ebcdc1adad8c063ad56

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1f2c7bee9a077780837342a0c5608b5f
SHA1 b727ec8e147c0d0fa863c95978c955f0f83cf30b
SHA256 b47cc082591ccd4c46292c39ea54da0ff0cd26c08d436ef67318064221e88eb3
SHA512 b4c3ce425a673741d9046dae0a527252265d25c4ad7aeeb94352600fa7d484f5d0051b0626799b5b658eb4c57c5ec5992c2c538b45fd59033a5fdaf54498948e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 0148e00fd54536db3b444d624d6b440f
SHA1 eda646781282451ca91d61de523905b3107fb19e
SHA256 9e470e7a71a5efc9abaf2a0a2c158aaf4bdbe071d8199cbbe838958926aa738e
SHA512 8496c0d95a8bd8f78625884172594b8bc5a588bc6bc4e1163639242400cf5de47ea252cce4effb3c6bc6f973174b7b8a89bbfc7d7bc893c33d26137d32c61886

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 2a365d49229f415d8ded50293837599e
SHA1 7d23da0ea62a1938d4410abc16c83be1e6ff7474
SHA256 1eaf8a6659c4f2a37c19eddbe996bf735ffdb61384ad626fe7744195392d93ee
SHA512 38ccbbbc20f863a00725c5b0f1b9e9972366e78367ca320ed5142544b2b04e6c8424663c77f08de8d2d10391ef95308e0c62a1bf2d918a4a8d96389aa07e56b2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 53440f70e4aafc69a7205e21a9936fbd
SHA1 8a61ad403c4b4af8a9d282c01708218b5b9e2660
SHA256 6cd184e30e0389e6fb750dd6819c9fec0dac67306dc031602bacaee57540f0f7
SHA512 515dbdbf0ec166f22e04153f598967f4e14bedcda41051e3dd5c22c1fa3b9688665f6a7ed4425ec2e797a629ff0fedb2f8036ab8773d47bd8be1a66de6836cb6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 a0b8f94eb42c019acfbb37f8977c061f
SHA1 d463c1b92e67e4e085098324178dfedcae457d32
SHA256 982f8bc24bf71130096b50c846378d9d07856ebb13f16e03d0222fde8454e1f4
SHA512 6513c832909594c78647af9bd635dd7c6ec9c3696ba8ad7f927c8c877558462005920fce62901ba15729d76babba5c7a66d6a0458c641bf6bbd74191a25c235f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 7debab900ab84745ece3932e0bdeb921
SHA1 1e6260eaed2b04f80429ea533b823a982ed742b8
SHA256 c46cb2437e77ba8c770cac603605bc4f3d5b67d2967fc463317eeac588f490f3
SHA512 db3208ea0b2d8953ef2915599d4c6c9cb132d03d142c1acce46b2b1bdfadb136816ba579b509240d653f5c576fec1bed2df20ae643236bd66df9955c49825a00

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 fb94da3229444d224cf454d3c908d202
SHA1 1134079761d97f139a8ee1ed674e1f1698be9e03
SHA256 75f4f70bdd68a360f7966559056d547e7fec9012435232498b7a16f32dab400f
SHA512 16e18cc8122f5c091498de01c406c27686b27b550edcd3ca2b646717aaa032785b9e6b0c77941dacf4806d947e1db3d78341d45e96e6abbe52ed034621088ad3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 683e92183276a2ed7f47920f7bdb0d98
SHA1 141586cea33e7267066aa4bb55e5bcd67fe8ebc1
SHA256 8733b2b1400895f41e7945ac221c124aa4df94d6dd089db2ba220a4863712ebd
SHA512 ae0bb0ad17340c9ef0da52108d7b0b0c0887e90ca9556e445d6fde25780d0d94c1ec7b506c03ff28e32be0553991644f0a1ad9daa00c1e682e1c8faaae4e28ec

C:\Users\Admin\Downloads\widevine-l3-decryptor-master\content_script.js

MD5 222ef7ebab5dd94565e577f5c958e8d9
SHA1 f3391e4f91c1321b116ea90a645b858c1a737a3e
SHA256 a647ebb0d6b1b597b0bc0335a0479cf8fcaad613f6664d2c0dd7650c58793182
SHA512 2666c49f8a9c2f3c74d0be11f460cf4bfde14f9da201765f43f2b07fd6fc7028cb2dad12691b0ced7ffe8cbf1a2d9d524e0afd5abb54ac63eda774ca046d732e

C:\Users\Admin\Downloads\widevine-l3-decryptor-master\manifest.json

MD5 3ec8a49498c655e6d628a6f9ede7a35c
SHA1 1060060116507b34395b6377e48a3b3a25ac845d
SHA256 6ccadf3535f68f6952fa27d021deead15e9b4039c19020f96145f2d458a34757
SHA512 13a68c16161d84c921949435a77a4ff32b560c3b8d92be1b4fd23789bc8f9fd2e4b69ca27b857ada447caba69f8811edc99c903e9763364837e3413f44d755b1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 c1ea7f70fe9f69dfdfff939af9462945
SHA1 5e57c1dcd0e8b6f617751eb7898676ee4f347c97
SHA256 4e1286b56bdd11cc7928193926f606cc6e9c039a3050568d5577209a82b05c1e
SHA512 465b735997f1439b779f9861c1a374747e9ec379ff91660c092923c6cd53be136fa1bd51e59104855613f5d11be34110a4fada0caf845f4de45d0d2712434af0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 b78ca0c9a069fa06e4b714d3c920ff7b
SHA1 98aeebbac00b8833dd9fd03c9dca014a149999fd
SHA256 4b6510c9f02618552dfe339e9a45b55e4eb779858a149b7f08c6b22d9a65aed1
SHA512 bd8148ffa983732632dec39710ec0e692edc5d374d34b943d0c2e89f65c0a4ff69addccedcb1ad9d526cdbff2e0815ef633cce25578a40a20b65e9319fd028eb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3f2da45e4ab13829ce3801353230ca1e
SHA1 d006b12359bdc68730912f17b70d58f246f83535
SHA256 297acc3a30c03da798134fcc239d1e11bae8ca412123fc2bf4215162ce1d8424
SHA512 dda5284cc5be2335f3fbb44ddbd0f65b22ecfc88de6c3d45f673a904244b8c48966f729e6c73e75f20a627a829e2a268ba9b7494c5ae35acc9bff63711b375c3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 ac6c0d9397cc03514635c22915cef92e
SHA1 144eabcf0800333c21223e563ecedfee69f435da
SHA256 2d5245e176955859479dfe0a93c25c0ae3cf275e27bc82ecb83850d3818aff16
SHA512 6c43ab83b80c646c03902b63a045ad45d7c3fd95a7d1b70a8622a8bc97c3231607a11b5e83acdea9120962990faa669e627ceba74b0c512780f3dd39a1b55721

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a7072f37bfb76ce3bba0091ee369104e
SHA1 92c8266f83c9ccbc2ec41376f45322ae490d42ad
SHA256 81f83b24f58319c9f7a8b7d23f7d6a5e9217ca81ea4c16bcbbb63b04c3c2f3fc
SHA512 d4e639d9eda8ea89a67999c08fb82243e397068bd81b0e4234c923bc8f199110b50694bd75b6839a35320fd603973c21bfa1a921fa2b355c09fdc07f59e2282a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c75c4337b34b4fb363e1ed3f5b471e34
SHA1 55c089e1eb7ee6711f27d2e00e485a3a6fbe4be0
SHA256 1920f9ada449d8be1a00256ba1c8fa916a9e92e915024d4bd603ccd3ab04b93c
SHA512 33b28b007f08f1c74a943ef916ddd6c8f9f527b6864deab8117cd48ee0c27ea312f7f5ad59eb4b207267300543bbfe0da3fc2ad3a6afcecc4777586ac2ac224d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 8e47aae20b0cb4ba3bca9c48d9a5c7d9
SHA1 703fba246915e394d1e71b30cf24c3ab73ffa47c
SHA256 7c74b7c463dbd25fb25e090a58830a88371ee80aa59a268a99e1630ce4989bc3
SHA512 de95bc08a59a1c8d5799ecf67f65c7ec635e815664d1980398718040f2dfa56e7809de5d6a5aec2cc98e6c2812c50eee766f1b062453069a901521d7db8ef3b6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 4993ccd927daf174214b02ba6efd24d5
SHA1 53939da627da0985168ea0bc8c7b4dbb6b953888
SHA256 e3aa3fb56511699e8bed30ec0889e0f1d824a8c34e3a9f7a4583b89eed22534b
SHA512 97a291243b4653cef880b942bdcf862a0a7b81d55157320b83d0ffdb41f816ee3a36dc4775e73f6ffe33226058a5a06734ed85b34b50175d65dc991a0b52ed8b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7f835d2f1a41fb96_0

MD5 08123d6566e448990808016d223a9830
SHA1 22dc590b74bc4dc72682b852e1cff101ad3f934d
SHA256 f036c6019ec80356a03ec724b17431f52dc3362cc101de12ad592446fd1f34fc
SHA512 a0c5427d1facb03fcfc2c2f39dcfe63d46bf59505bb573029443f8e8fc31687016189903f8b5bef17143c32f137221f08f545bc256f1a42c4a000ae9b6f59a76

C:\Users\Admin\Downloads\widevine-l3-decryptor-master\lib\pbf.3.0.5.min.js

MD5 120b067f54426691261ec85897012722
SHA1 b522677f21f1166aad8a34440791d173ce281870
SHA256 a85b043874a1a6f9ac91fc3024c9f99107bfed849d5569cb5f6c4ae665f55de1
SHA512 9c79b6b9bd9c5d3db3082fca7309d4b4f6987f993196e5a6aa4136f110243683614f891e3560afe67c08e28b90c89ef7e7a8727111ca9489caab2797385cffb3

C:\Users\Admin\Downloads\widevine-l3-decryptor-master\lib\cryptojs-aes_0.2.0.min.js

MD5 557e1b4f152ae57b266ea4a1eb3ed560
SHA1 bd36c67a2fb779d4d984e35bfc7da6989fae69f7
SHA256 f6692b59650ce48d8328443d4d527df5f25c0ff2e49a7e85f1c807a49dbc37e4
SHA512 91830589bd6c25de79c7ebbfee7439ab3ea754ad30fce0b02e01d95b7017d70353bddcf53d403cfd4033a720e06b9cb1f871f566e17dfdc2a68b0ba2b65753f0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\44fabf732278f4f2_0

MD5 2671f74340d4b3b3782b1843312a67c5
SHA1 755f38a8d0874854c58f54e669427204acb8d63c
SHA256 c3408580312edf52d250bb63bdac09be0c5682c591536abd706bf7a215b9f48c
SHA512 b3da44486bbb18ed9b167011d67a14d207a5742642ed324ae8c4c70a2742a09010579f7558d6e825d0d0af10f9f4f4c6384e264a9c01c128868fbda7669b1e89

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003f

MD5 71298d78cc8392f4a27964704851ee01
SHA1 521eb671aec66a7609050d6fa1c311afd4cf1689
SHA256 55d66c2f3d74716979f5da818c1c94fce301abec1d6a4ee709a028fabdf800cf
SHA512 6182ed9c2e7bae6f02416f7279d08a4f93cc5ed9b8fb069f325a7647546a1287b708ec7c6925e2962f4d697eaab3736f0137666794c6a7e5c927a3d89977d1fd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000041

MD5 5b613b76ba316d331372d3bf65505d23
SHA1 dc3e78cb404fdc3bef11949623df17a0f94d9f7d
SHA256 e0c4beddba54412e9e07ba9e52bb1c09d853d2d0e137cbeceb27b9338d95de8e
SHA512 436b081210a2fc54a2e79ff5f972e3d467f734afbb63cc1d8185e1262bdf0a07b50b9ae15b1bebdf59fa0bc1086f34660e343648a17104018e49ff8b389341a2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8c031bd8e28575af_0

MD5 2b35b2b21e20372de1aeb76a3177e965
SHA1 7065dd49abd57c8d891354fb5e02d245bdc0789f
SHA256 c3605202a15e7a3ad092c577e4e90f1bdc83e3b62caa23c17b11ae1833cef753
SHA512 e3401d61eca3225a26fe0554e42541ddc08540dda5bb6b048fa5e26dc618072c272c8be00d19f142b75099de5b7223c85e88ad6403aed70987cb9cce11668d68

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b8f91394aed44f86_0

MD5 d1584afea10b20b670b976adb704aee4
SHA1 52d90151696d1fdbb681b8d8937be8c57b4f3a64
SHA256 8dd16892a5d41894bfdb6efc74dbb1a0bfa6417b0dbe099161ab25370501a574
SHA512 d421a86c5ef08b053f6c7d43d383d3a55fa73a94052920419469ae199dd7ca6a400eb2ec223c9c71eefb8535cd25710cacf90f5c77796488850b2894320eb023

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\96c7cdf6dfd9168d_0

MD5 654aad45b0b47b2d22b48efe33fca7b5
SHA1 9514ac4a0e0693942cb2c00255ebbce65aaf2c32
SHA256 86a193cc9f7bbbd3c2659f18873409ecaf4a741a55dbeade960fb2a27a661fcf
SHA512 235971fb9792ef4c99f183523268166d900aa80db5435e6d279c09702e37ab4fda81aeff4a51684b739fce4248d75d8f585b5485ab3744c4949488b94b7c435b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\e528fcf8dbd70243_0

MD5 338638b6a572aeaf7ecc3bcee2efc541
SHA1 fbbfaed7fbdc580fa9762b6ec428074ffdb7dc0e
SHA256 31808eefeba54fd46304b16e5ca4a558e19f668330928ba7f66321a3a930ec8e
SHA512 036bac3af14259b925fa521b960b4f37f8fb48fd6d9050ab5a94bd38d027272df18a66601aac4663b08455fb71d552da7a4e791507da531d6f36934f1f2eb56b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\033fb128ac20086b_0

MD5 d0c99ff4a5fb45faea1cf875161c42bb
SHA1 45016ef79ea0be6a54ed8aeebf472f89ebec035d
SHA256 4643b5b8bed0a5b2b61d8bc10bff1bfbe625ec538335d8d27a4828d7dd9b64a4
SHA512 a9045b5ebadd90bd8b7d4aa14711f216eda8dc471c314e1ef30f6c28738377c77a879632ff3df1c67f047f13d04b7e7e541f15d3d08606abb643f247665d4672

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2a00eee09a57dbd6_0

MD5 d8a3ebaf31bc812e3e14faba7c4ac2c8
SHA1 00c92d7956ee3072806d742395b0e04b0a869380
SHA256 408648e638595a35505a20c9759a8939782948edcafb3de5d68602524406a7b6
SHA512 0f05a8ac205d97aae512f185a4a4342216ab74028d6a9f2bc37eb1d06ee178b349e8842e8749d918e972ee5b4ba0a07304bb83d9cce8f16f22d6fe8b49dad033

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c496a47d50bf1fa3_0

MD5 52ae9ad09799694617cc66887fcd31b1
SHA1 03e7217a532511da9f590abeab7d6f5fe35ef0da
SHA256 18672ff17c6e02e73f8e6bec97f992db93db48146a9c4781952edf5a10dbfd30
SHA512 fa02d1af3816699fa59c6f79c885c7eff22fc0fa592789ae857938824f8a5e854910ea4dd0690918a50eea43d49371f7525af89efe6aea2fb3e74163bc5c9e98

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\eb146643365d20aa_0

MD5 fb6990cc208a1a5376c0cf65ffa16821
SHA1 4dc94e605af92269a1f4fa36a1bb07f5d601b5b3
SHA256 4294ff9e1777f792fa4d46d349336b3b200b9d3641e66a73b0e6099b7e843ef3
SHA512 59665fbbaf9be3a0543254fd91679bebf98295c898deb6d563e7a1d50a404c357adc1fb4e88a8266cd18590bfeae2d0c8fd71e059c922a09318f6ea12ab929c2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b07ca9f0d9d62a69_0

MD5 9d797d1cf665d4eebb74b135d7e0744a
SHA1 43d6116b1df68f48cd94f9562555ef3b4a5b3eb1
SHA256 2e92778ab8f9f159eb4aa9512a0e63b0984a88daf9c48f5281748ab5e989665f
SHA512 e6ba41acec82e911b3f0565fa4258721b9db4d3697c313905d6398834e68c6c419820d580b4184200db0b49c5779d684c3b60aeb614f3aa9bae188a6ec504d56

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\299b965b16b4ba1f_0

MD5 89fc9033bd3d3d6292255b38c11e30a8
SHA1 a940a9a855ad391d9b187f595e511d9ad3190417
SHA256 3b87e14255cc1f3743928c7a5d62b8bbe4c0e55444b24b698ada2f35f12d839c
SHA512 e937626f0fb6054ec2cbc11bb74a7e693d1710e5b6743948b6fc2ff7daffeedfbc5f6e62fd2b74074a9ae8c80d4fb075fdcf3655413b3dc85998426382a84b60

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9ade16102094b2a980f49c6423e3781c
SHA1 8027652600b6e43e6de79f8583221aa9d3cc12be
SHA256 a92f792b4080a4ff78dea9493e5535c1c485554e023bebd65fdfae62e4d70713
SHA512 23dd733b2c88695afcfe2971415115968e34ab7ef0ca5ed92656e4a144114efd4ad269fcc76c837dda67ae1479fc3f89967d621ae4b88154dd49699e22b79369

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_0

MD5 0bea0cda6d7729ff2152004ce50b6163
SHA1 24f72a4616109b6221f648a7d3b5daf4452edc31
SHA256 8f0ba10c3c79633c171c757acc46e8fb9ce79395a553abd4d6ee23c7ed3a1263
SHA512 8cb542449d52e53b2f00d685ffca18bc6cfd39505a9b54323265a7fcb360fbc249fdc485bfb384ef22a19cb4d7ef514ab6eae6bf5dae8f89f008c4cda481aeae

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a885e975777d6594623085d13276124c
SHA1 342210303551f45e5f978ab8928be9126c5edb3e
SHA256 a96bb4a02fe4f20ad21fc5d2d234a2abc6246cac36b1a07e2263180f5696bf81
SHA512 355fd63f1b169ef11471600e27314e7f2059c8c32df863653ffc4a806eebdad7c71bb6f0d09c154877aa782df91d51eb84ccff947b276ce587027dab435e63fa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c63158e0ea8f65e14060e7c56bcab9d5
SHA1 a575b0180fb55c8f4652a99d197568caf96c2417
SHA256 6a96835e4e1d93111c6135ff5c623b48c403f04333d22ddc87c420fa9322d0a7
SHA512 db2c12e798589d488c028ddfe9ab85d070007a2cb7f865a4829b16a1a6ecac03cf1e56762d5058116aef3f88640abdf25638a27034fd772659306b6bcb1265a9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0b4e8e1d15be196f386aed3f28459591
SHA1 88336420aad18c8c6b573892ca7894289a3333b5
SHA256 5f0e3917639191fc9dc7d824319f75615fb106bbbf00568a6062860e91decce0
SHA512 d93964cf6c13c6c1d12f637859125ff9e3fad3634b14208ef379e690358fab967d885dd79cbf7c25c9233b39447ad0f3311f4aa725ba1dcb2268383664813abc

C:\Users\Admin\Downloads\Unconfirmed 711844.crdownload

MD5 1d4170878199111b6398a5a1d476e272
SHA1 bc7dcf056b6be9aa7f3ee9922d08ad3ccf9b39ad
SHA256 dd0d8aa84d52d176ed315c24ef0ca96134367da12488eff4abd85f098521b9f0
SHA512 42353a26afd051cc9865e90e532f1c217f520f6a90ce74ef1e428c619d42559265a91cfa61aa7a9f32209cf47a7e0fefdc227a217dd3160d58cb8b745019d6b8

C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDM1.tmp

MD5 1c734d0ded634d8e17a87aba3d44f41d
SHA1 4974769d1b1442c48dd6b6fb8b3741df36f21425
SHA256 645ee6e64ed04825b25964d992d0205963498bb9d61f5a52be7e76ddb2074003
SHA512 20239782f4e30157fdfc02a3793ac7bde7ed74400de4cffa812805d680789ea7be5c2c765924d32f74807d80100cccc14b453d3d7e006dd4aeee60dec98af4c9

memory/3908-1389-0x0000000000400000-0x000000000042B000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\IDM_Setup_Temp\IDMSetup2.log

MD5 95603374b9eb7270e9e6beca6f474427
SHA1 2448e71bcdf4fdbe42558745a62f25ed0007ce62
SHA256 4ff66e3c1e781d92abb757f537af13b1fb3fa167b86d330b7ed302728c7da53a
SHA512 d3987f207ad05e142d864b3ffe4ff6758d22b56f75d60ebcd79e0c760cf27106d7ff74bfbc7569389710e50602d3359b4ab20ddc14fbafcf526478dc85bfe593

C:\Program Files (x86)\Internet Download Manager\IDMGetAll.dll

MD5 d04845fab1c667c04458d0a981f3898e
SHA1 f30267bb7037a11669605c614fb92734be998677
SHA256 33a8a6b9413d60a38237bafc4c331dfebf0bf64f8057abc335b4a6a6b95c9381
SHA512 ccd166dbe9aaba3795963af7d63b1a561de90153c2eaefb12f3e9f9ddebd9b1f7861ee76f45b4ef19d41ca514f3796e98b3c3660596730be8d8eb9e1048ef59e

C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll

MD5 23efcfffee040fdc1786add815ccdf0a
SHA1 0d535387c904eba74e3cb83745cb4a230c6e0944
SHA256 9a9989644213043f2cfff177b907ef2bdd496c2f65803d8f158eae9034918878
SHA512 cf69ed7af446a83c084b3bd4b0a3dbb5f013d93013cd7f2369fc8a075fe05db511cfe6b6afdef78026f551b53ad0cb7c786193c579b7f868dd0840b53dbb5e9f

C:\Program Files (x86)\Internet Download Manager\downlWithIDM.dll

MD5 b94d0711637b322b8aa1fb96250c86b6
SHA1 4f555862896014b856763f3d667bce14ce137c8b
SHA256 38ac192d707f3ec697dd5fe01a0c6fc424184793df729f427c0cf5dfab6705fe
SHA512 72cdb05b4f45e9053ae2d12334dae412e415aebd018568c522fa5fe0f94dd26c7fe7bb81ccd8d6c7b5b42c795b3207dffa6345b8db24ce17beb601829e37a369

C:\Program Files (x86)\Internet Download Manager\idmfsa.dll

MD5 79fef25169ac0a6c61e1ed17409f8c1e
SHA1 c19f836fca8845adf9ae21fb7866eedb8c576eb8
SHA256 801d3a802a641212b54c9f0ef0d762b08bcca9ab4f2c8603d823a1c1bc38c75a
SHA512 49bf489d6836b4327c6ebad722f733f66722aadb89c4eac038231e0f340d48bb8c4fe7ce70437213a54e21bce40a4a564a72a717f67e32af09b3f9aa59050aab

C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll

MD5 e032a50d2cf9c5bf6ff602c1855d5a08
SHA1 f1292134eaad69b611a3d7e99c5a317c191468aa
SHA256 d0c6d455d067e8717efe2cfb9bdcbeae27b48830fe77e9d45c351fbfb164716d
SHA512 77099b44e4822b4a556b4ea6417cf0a131ffb5ee65c3f7537ab4cdc9939f806b15d21972ea4d14a0d95cf946013b9997a9127d798016f68bcd957bbffdab6c11

C:\Program Files (x86)\Internet Download Manager\IDMGetAll64.dll

MD5 597164da15b26114e7f1136965533d72
SHA1 9eeaa7f7de2d04415b8c435a82ee7eea7bbf5c8a
SHA256 117abaeb27451944c72ffee804e674046c58d769bd2e940c71e66edec0725bd1
SHA512 7a2d31a1342286e1164f80c6da3a9c07418ebeafb9b4d5b702c0f03065ee26949da22193eb403c8aeec012b6f1c5ff21179104943943302972492fcdccc850d9

C:\Program Files (x86)\Internet Download Manager\idmBroker.exe

MD5 e2f17e16e2b1888a64398900999e9663
SHA1 688d39cb8700ceb724f0fe2a11b8abb4c681ad41
SHA256 97810e0b3838a7dca94d73a8b9e170107642b064713c084c231de6632cb68a9c
SHA512 8bde415db03463398e5e546a89c73fff9378f34f5c2854a7c24d7e6e58d5cdf7c52218cb3fc8f1b4052ce473bb522a2e7e2677781bcdec3216284f22d65fc40b

C:\Program Files (x86)\Internet Download Manager\downlWithIDM64.dll

MD5 13c99cbf0e66d5a8003a650c5642ca30
SHA1 70f161151cd768a45509aff91996046e04e1ac2d
SHA256 8a51ece1c4c8bcb8c56ca10cb9d97bff0dfe75052412a8d8d970a5eb6933427b
SHA512 f3733ef2074f97768c196ad662565b28e9463c2c8cf768166fed95350b21c2eb6845d945778c251093c00c65d7a879186843eb334a8321b9956738d9257ce432

C:\Program Files (x86)\Internet Download Manager\IDMan.exe

MD5 a3044c3f2cf05db83a2e9eaee1ffe6a6
SHA1 67757f3f14db416151b2dea12e6a2bf4f566f5fd
SHA256 e8ce2dabc9045a9cf0c58c86306fe34ba7a134152e41c6caa28ccdef770f4a26
SHA512 8c3061c20e8f6ab8b77adee274505ef30940b7b7970a2264d8c602ef52f54b9b245d1ca6362b396b7002a889cf4ad09d51729937c337c5d89ace56d73f687212

memory/3908-1822-0x0000000000400000-0x000000000042B000-memory.dmp

C:\Program Files (x86)\Internet Download Manager\idmvs.dll

MD5 2fd83129ffd76bb7440d645c9c677970
SHA1 b5eb8bc65de1fd9d77cc6a79b7d37a3e478e7a8d
SHA256 e8ab4ef3beff09ba46f5f32c64b392df7e3c4d44f80938726c4a163b1ae4199c
SHA512 9fc5e9a6d98a2e544019ab4831edc57e41e8b106510415950a7b1d33ca0f04312d1f60af5e35e5575117023b6501b823d01326241b846feb1950c1c18d0f9136

C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll

MD5 a3c44204992e307d121df09dd6a1577c
SHA1 9482d8ffda34904b1dfd0226b374d1db41ca093d
SHA256 48e5c5916f100880e68c9e667c4457eb0065c5c7ab40fb6d85028fd23d3e4838
SHA512 f700cf7accab0333bc412f68cdcfb25d68c693a27829bc38a655d52cb313552b59f9243fc51357e9dccd92863deecb529cc68adbc40387aad1437d625fd577f1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 8ca87fffa650d24249f71e87378adaa4
SHA1 23f81ca830970eb773590bf2dc4722b3f36ba0e1
SHA256 83d1d16628ebc34cbae745749bd1ec42507bcd21cc4a1a93848aae43e3461489
SHA512 057e99daa84a5536b433f56c6467abbaefa390ec456f818a49e6753927fa438a27c81bba00afd9ba6f29d150362e686d78aae1fda465db9ecb20ccb5add49648

C:\Users\Admin\AppData\Local\Temp\scoped_dir3124_965537502\CRX_INSTALL\content.js

MD5 49ff14e2bb0a069821af232386344ef6
SHA1 2ec250f3c2ddb8998b3d5ac92d728f46deba7ac8
SHA256 772f2450ea1c0bf858691344aba4909cb63281fe9d51f5406a3b46220aa02eb4
SHA512 a166455292bc8a4b06b1dd7efa76744aa182839432a34c5ec573740b27f99a7fc7b25192ab62f4e7adef5d28cadd39dcb035d143e694e3ebfa061bb467d3207f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek\6.42.18.3_0\_locales\en\messages.json

MD5 b8e6bcbcf876da1bb693d8dfe401034a
SHA1 1d23b94d68d06be519579fcf21b19e77f3b8218e
SHA256 4bde9375572bea04b287d9811d02ab5cc93ae8f2118f6b803275899644bb5dc4
SHA512 598bf44814f4a8edc8de7402c81e7aa0e92e3922c92deea913035974f573ccaa2b192b412c3fd0cf78d2f03e916aa3929421837b09ee2e2fc45b366e2319be5e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek\6.42.18.3_0\manifest.json

MD5 7bf62c9cd18fdb23f7fb200c4232b9f2
SHA1 9821596d849f6a66c372d4f4c3e6d965fdf47b31
SHA256 600b65f5b01b6081bd65585d97aece92ca967f16d92b11920ade64b7bfbcf218
SHA512 fe875c783560a3a02cd47cb93ca7cabea8c2cb0567866c84bcd4a3a1453e6749689204c986139c68451fd2a864a63dfd8138e6ed3eff3d918e946b9969543d29

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek\6.42.18.3_0\images\logo48.png

MD5 6428039b339b3cd50f92887703571296
SHA1 53ee41fb6a2119931b69b58f7fe9b228fc707bbc
SHA256 dc3a19631b2ae4f35713ad12e4a74cf8782b77cc1373dbfa8f845e0bc14dd0a7
SHA512 6312ceed6cd7bd9e2121bbaf7f2894323043c423657e91863023d1efb5b6a3a4811b9c5e563d9265ab3aec0d06b9aba1eef7cc4500ea8b4760a650242b679ccf

C:\Windows\System32\DriverStore\Temp\{22738a85-a955-924c-a733-929a88be9fe0}\SET5257.tmp

MD5 7d55ad6b428320f191ed8529701ac2fa
SHA1 515c36115e6eba2699afbf196ae929f56dc8fe4c
SHA256 753a1386e7b37ee313db908183afe7238f1a2aec5e6c1e59e9c11d471b6aaa8d
SHA512 a260aae4ff4f064b10388d88bb0cb9ea547ed0bc02c88dc1770935207e0429471d8cd60fcc5f9ee51ecd34767bf7d44c75ea6fbe427c39cc4114aad25100f40d

C:\Windows\System32\DriverStore\Temp\{22738a85-a955-924c-a733-929a88be9fe0}\SET5269.tmp

MD5 f8f346d967dcb225c417c4cf3ab217a0
SHA1 daca3954f2a882f220b862993b0d5ddf0f207e34
SHA256 a54e0ac05254a464180e30f21a6b26651e7495427353bba9c246ba1d2388e7cc
SHA512 760c2914f3e937a2a3443a032cf74b68b6d24d082d0f50d65058a0fd87d8eeab229fb8d3105e442f0b3b0b2f3824439981951266425512e51e7ff36669a652fa

C:\Windows\System32\DriverStore\Temp\{22738a85-a955-924c-a733-929a88be9fe0}\SET5268.tmp

MD5 d5e0819228c5c2fbee1130b39f5908f3
SHA1 ce83de8e675bfbca775a45030518c2cf6315e175
SHA256 52818c67be219bc3b05c58b40e51b99a65c2f4bcafe38a995610b4ec10928def
SHA512 bb397004f2256db781385de3e7e7b7993be8fbb2cb701ead99a7878c2bcca6c9ae4a7aa61c329aeeb6711c8c74081e971e85af38af6b32b58888c932fd51d218

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\n4zftpal.default-release\datareporting\glean\pending_pings\7a69315c-e4d7-41e2-b1ef-d33d068836b1

MD5 eb647e4292066cd277f8d25df58e9237
SHA1 b2fb62d87b0c7fb498906aeb01e20692ee31b769
SHA256 0c07b1280139073567a201debc561072e5064e79a2aa8ea5a131ec2e0218237e
SHA512 ee9c69a921265de17fb1ae04578eef77b512e623ced9e97bdcf3b2af55cc0e99f260c8ea465d1b7ef63ed6211912cbfab01d27b47659e2255c854366d1d4c2ab

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\n4zftpal.default-release\datareporting\glean\pending_pings\41c62c1f-9a6d-4bd9-bc31-83ea6ad735db

MD5 28855d145f5956ce169b9d9a5f98830d
SHA1 f1ccee7421884d386d1a050efc6505c08e0aef46
SHA256 f78373c8da2a5eb0e6add015a83f1877e859d43bebc23e4f1f5dfb0b7923273c
SHA512 787adbec6ca11a535ff5c571589ec29096a0338dce2400231998eee93b0a7895e639d88733c41b5f64667b25f3c451ce608c58b0989d34f07950352f800226b6

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\n4zftpal.default-release\datareporting\glean\pending_pings\3cdbacec-084f-4e4c-a4fb-58f943c461ad

MD5 2cc236979742124a6a191fd7e8c47ac5
SHA1 c2db2c039c7f3cef8658cddac671cb5e57a8fb83
SHA256 620c047e4fde8dcae39ef60f57daa1f6f08547b648cd5296289725fb3bb809fe
SHA512 1dcf9883fcdd0f309810b40a1e820784c6a6e2b28f748717aaacadde7ce6ce43768aecc5070fd53fd306b6e9d30e49e530ed3dd747f5f3481f01122f69cc6a91

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\n4zftpal.default-release\datareporting\glean\db\data.safe.tmp

MD5 0caf1a66b7d131141256c21eeb78ce78
SHA1 022916e51467faebdff89e16d583b63857082b4a
SHA256 940aaa4c2abfacbcab831054f5aabd971503e6d531861dbc54e5089394274a0c
SHA512 8956c30222ac5ce7b8b4c4ed4e154d95f11825112ecb039eb65a30c47977eec5033f59287a34f0cd53227323d495072313104b03af4ab13b6df8d5794e39580c

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\n4zftpal.default-release\activity-stream.discovery_stream.json

MD5 e3ee6378ea8ae18c81e85059bf6a3815
SHA1 e823f98532d5b09059ea9d8bef0eb61a45751fbd
SHA256 81f082f489afbab92a4ae69079145606a492c66d6f2529864ba7548081925f69
SHA512 83987b13a805adfca22aff873284496a2907b62b32412eda8b13352b72e4eb4cc032605c80a04567c92322006ff2f11239a78e00e293722fd0309c68e989f5ca

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\n4zftpal.default-release\datareporting\glean\db\data.safe.tmp

MD5 3b200eed4f210a54ac5255b793687af4
SHA1 61f9da5a791d0e7e3caa9ca53034d6ae19799c5c
SHA256 80ceca117f3359784ffa01013e8b31c9040be75036b4288b7fd8c58162877a59
SHA512 61e59a8d8e09a91687aa1a725870abc45b62e4e734e9c4e11278a3c58c5e7cd43bd317295e87499c15bdb7cd7b1328aba096977f158b7bec877806a317cae564

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\n4zftpal.default-release\prefs.js

MD5 445c5a84b83bfa27bac4f2cc5e67dbb1
SHA1 203021f7477772d93b576aa4714de26d3a241316
SHA256 5fdb56fcbfb2c2bba2a21e9e244906cb57c265f008854cf8699d91767100321b
SHA512 c64819de4e212869c931e5af27c4262cf43ee889caebff2c09974d2ddaab3584f2a4e0bc1d6232819b5a8299cff52dc6510f3a09417265a2c61af659cb58923b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c271ee73c3e5f35f637cc031f0fd3248
SHA1 b81b800798574b98391c2dc1617af3d8effdda62
SHA256 b460a6b2de66121bc7509cccb84146d99cff64a5843aff37292f74941028caaf
SHA512 071c5bc2b75dad1f41dfd2d07a2af3a3f6b89e540c365de0ca272072ca575b70a47af8b39ff87ac380d6b01840fd041fd78a760039357850588224481adce339

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\n4zftpal.default-release\prefs-1.js

MD5 ea4d731f755e58198c34bf61cd88c8bf
SHA1 70168f00acc0997d67c52308df2c801612af0745
SHA256 002ffec3929a0cebc3158042ee0e9116f3e6d95aa5a02278ee8b3ae262b21fa2
SHA512 55e78d56e47d11d52146860b1d332d6557f8cafafca6195f0989c5dbd2d59c964d66ac9c33fffd1b9f056a6dbf4e8975f225416f15085cdccdbec4b11ea9f304

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\n4zftpal.default-release\sessionCheckpoints.json

MD5 2d87ba02e79c11351c1d478b06ca9b29
SHA1 4b0fb1927ca869256e9e2e2d480c3feb8e67e6f1
SHA256 16b7be97c92e0b75b9f8a3c22e90177941c7e6e3fbb97c8d46432554429f3524
SHA512 be7e128c140a88348c3676afc49a143227c013056007406c66a3cae16aae170543ca8a0749136702411f502f2c933891d7dcdde0db81c5733415c818f1668185

memory/3336-2541-0x0000000000400000-0x000000000042B000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8fa60199b6f9beac2a2a4c880d494fae
SHA1 f3e6e484434b1c61132303fcde97f4a8b079301e
SHA256 6d531c8b91bc09812e030aadf046f1580971085286d60c616e35735a153ab4dd
SHA512 a1d7b69126337039f629cbcfbde42f2ab5d714bcac9bf1e3f7b1728f0401f704f44033f2995ab745451e5bfc468ab7a57c8240546b86a74c18472d6d589c9db2

memory/5536-2573-0x0000000000400000-0x000000000042B000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 7a454d33c720378664b447f3a4be5958
SHA1 82953ea1de231562e8ec82e5944b912ef16820ca
SHA256 133d0c649e7d00b16dcd2ea7cb5744bd956e0dfb55b58aba41bf35214308e47e
SHA512 647648b741d280d8401cc9dbdf594317573e68dcbb30a082c55d945eed15955b4493e33e05a054dffaf04fea787cf1198142e7c72c205d13127186034c10fd51

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 fd3a22abeca2a2d0b19f0f105f5d4bc7
SHA1 8efbcfe18177e4f82a5fbb2137e94e5cf0cfdb91
SHA256 07ec87f31e7d05c11e8e453866c6d0affdfd9f8cdea220b53f9170c673239201
SHA512 863948217743099abacd794c8e30eb1d40ac6f17499ea8717e338b997db3909e4bab4012d55d6a5f50d7ea934648d62f7de0ac28f99a77fa1d9cd211e5474ec3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 aa61f544b6f7ab93f6055ea70386ca09
SHA1 9cf4c8a011264c17bd1eb1a2abe10ad8f68082d3
SHA256 5f5b8b8dbd01442d1973eebcf8ca1d85c3fa3844f4d557606ee2cc6898d1ce0a
SHA512 5b6601b4d71c19ebb2fc78b4bdae8fe7c7e3009ea68219052e49c3012074caca0142cd6b99ee9a76b1a39385317016e94dda9cfd0778f814055eb20782dc10b0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 27ecd9a40aef72a5d6bb1d1baea8c146
SHA1 df46d39b44b6c58d5d524305d33dd9fe62ebf7d8
SHA256 859472e5b849ae2c597ad6d8ed22bd15165325124ec024108d26e771734c1d38
SHA512 fe72b45292379715f4bf779d39a057961a6ec60c66595371d0925fb11b32a5083cec4951f684f1f022abd3a522fce571b0869d8495b3eb67c37a2332fb2ee8b3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a6364937e316339ffb3e1ec67011488b
SHA1 aca1dc40ffbdf6a0b8e65e81f22b8c0500f5aca8
SHA256 3c7835be0941b8844a675430b935c0324046bb70f020cc6eafab215d43064d57
SHA512 f87b06645470d32f31ab069665bce797c4fdd917f52e231e561e7f195c252f382c6a1c9caad78829f13d5bb11a6c23a431fe2bee24aa5b84a0738285151a3bff

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ee768c78f8e0b9069fce71b42ecf2e0b
SHA1 141f5c67d2b77dfb9a04efec6f4dc2df21867019
SHA256 e5d5d6b88bba4307a8d629920dcaad320762f73c5533d2bb624a206cc1279c63
SHA512 1a2ad663a1dfbf197202651b28e444b35850f5e473a782fc2854dbae23712b925997828564712affe3dbc313844a6c22ce71bb2c3522308d40e6731f8c8f7895

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 42356d416b6f5974af550ae8bf39fa3f
SHA1 912fae71942b62ba027f18d2f058dceafa5c49e7
SHA256 e7bba6a530017ea3a62412a7ab08c3a249cf5c67d1c6e63cbd7adf0fd867bef7
SHA512 20981c1f485448bd30eb0c1f1e95a25d2ca533d716a6675abdd96d3bd64e6899b726cacec8c610da49e6c38a54e654e2fb10e66b1c94ee8b9f17a42ae23627f8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d8963fde799934ec7d9e0ac6a928e3e7
SHA1 70456b0b22c02193ecb08a6d5de44d8d25c20c01
SHA256 ffa778a4d41bea935990ec4288489335e42bfc39bff390f7c9d544b9aae1f24f
SHA512 311162b8bccfb47b0b9d4238877493c5bf4915a765496389779a48ded4b12f8d80fcc71f517b9de4b12f2d610fbf018888956c5ed2184902ac91da878f153251

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9f4c61417db0d510d803b5679a2d0ee3
SHA1 13124d932377537add70faa0ef096ddb723aafd2
SHA256 a29d47811e65853f42e1243c6ed4da79812f7d547b74a48d2fc578dcf1952d21
SHA512 e5a9d233ab06b7c03fd43265de79c3899cdf23f9bad3dea9490a3f5375cc99553ef489f9d7e0c9c5718549fcda224ce51f802e2372b52726e227386725669ed1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 57a3a0ff151f6ce44e38b030355e37d6
SHA1 0dc9ca9203abfce2f9fd2715070e68b893c24b57
SHA256 b95b7550e4370d5f2be67a74d1e2fb49cfd3abeac3a1d4e029fcd8f6e1f977e0
SHA512 2148732361a9abe53d92b651ce64904b460927a9404ae0edf0cc98cb2100af9f70458dd0e46961cbbe14aa5271c252ac1bf2a7a8451b7ff52fdeb44ed26cfc3c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2b7f9af306d499c684b5e6d6dc16fa21
SHA1 19b0974385bbaa43a11a2c378c10a1fbc24b9cf9
SHA256 607608628972bbb2bd0146244a40fe590479a726cafb2dc23d4c18e4770d8251
SHA512 eabc4bcba5649a2e815f018d8d3712ad417454d7fb3bd60fbeea362e52eaedff2f263a929f5a1f7a08d64cdcfad4fb975e0d69e7c1508064935f1450056bff3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 66864c7c9bb5866598f08993787518d3
SHA1 0b4bd785844ca02f314ec1271f5493a5c55c1d34
SHA256 954315c11709b3e0a7ddcf9f057b4e535b5fd3688b86c8ef83cc09be9e74ccb2
SHA512 2875dfdbdefbc03a465fc72ce0a199586b28f57cf15adc3c4d68a27130200fbafac71988d300650dbb08c10630f07d484c7ed2672ee03a1faa19dcfb996faf85

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 4d9f899d6a2017f371d66e2bbdf4ac05
SHA1 ba226e4842cd0d2bf3c8c9f0649d0fb1141a0c74
SHA256 36dd183abf2ee44b5aa9bcb126a028aec69c1393fd8be88434bef04fdd7c2e5d
SHA512 53370a1c6bd4141eee9336cf6e9a4e572645c0bafbc424fd65665ef192197bdfb293e85577eece84c317762293632bcd9bd39b85d24847cbee293ce8d16e1cd7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 baf7b0535275f7ab057f1563f0f7a07a
SHA1 3ed2a201bb180baa726a51c1f62c213eda992e52
SHA256 8300500448701155cb2ffd35002071c7bde7e63531e8a8d599159cf78b86953c
SHA512 8dbb6f2c2fa445cd0235c75eac9e4bcc096ec5ac5b957a7ca1fffb6c58ea40f3efb56f47d758d9210b82d2a06f64334811e92cbd086a94f44502d3621898a20c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b8c0883ee2d8c1a1f9edf7cc8ae1e760
SHA1 0e854bdcf6a5bc3f13212ee3fda3ccd4a49f2730
SHA256 8baefe1e27f874bf17be3c383923925c7a78261d7d876e295daba78ecc18f8b7
SHA512 292df671082a027347def354c493acafdbbd2abe1bda0a0cab561a980ea7b6113f83d6678d6aad6f7641742dc07682e6b1e03e2f0fa66856eb51de3c4d6669b5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fb4e3274da28d83dd36f6bd0cce53601
SHA1 170e3fa4d77d909dfa9885189f1cf2ac6386ae51
SHA256 3b52c59edaf8bea4b0657a7e8068503416ef6ebcf6cb0808132071a9a70eb7a5
SHA512 c9675aa0eb3dd62c8423944ecbbc1b436781c02b0f4e910f7a162e37a6e34cd3e65a9082524dbb43c1bab9669fecc032d9e66fe7d0a3df6e3141fd1dda04c009

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 92ec5b690792d05f9281b8c46ebd071d
SHA1 31264adca15364e6266b03f18399dffc2324c2a1
SHA256 ed9eff75a4f653dd036a83d959c5bd33115066f9a6606603553180e7ad73f97f
SHA512 172de6c7208e9459773a4e6e7a22333b5fb3e8371d3e4e7020fdaed0583f4ef4c4eb75ae52b52189ef51c0843ef55f52fe34baec0cfb3fdb19aac27456b754f6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e35b2dc902bea01433786d4cef787592
SHA1 bda78799d46d15fa1efa931b0943d04c45a62b53
SHA256 b9c22c16aaf686657c35e3b4a3b274961f3fcad3731ff5a86e205ef502d9e4fd
SHA512 971f428507255271f8480e344cd89e2aaea1950fbc36407ddd6319961ad7a46b3defd0d87e184219b18288a1965edc322d3d4c3a94c85705e99e2fae74b364eb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000016

MD5 87c2b09a983584b04a63f3ff44064d64
SHA1 8796d5ef1ad1196309ef582cecef3ab95db27043
SHA256 d4a4a801c412a8324a19f21511a7880815b373628e66016bc1785a5a85e0afb0
SHA512 df1f0d6f5f53306887b0b16364651bda9cdc28b8ea74b2d46b2530c6772a724422b33bbdcd7c33d724d2fd4a973e1e9dbc4b654c9c53981386c341620c337067

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e

MD5 68e539f36be240a0db5684abe2767015
SHA1 1e03f57e1af37c292d51ca71fe810a14f6fea8bf
SHA256 1fd2b804b3562ae906a46f3b5bfde0a15ea47459b9c59e27372d682004be132e
SHA512 b2a62a421c18da31f9bbc38918fef22528289958f705e7d73750298d949bc2c543afa861b333b89720faecbe5c89c59c18fd94bb4a47c2b1fcdf06332e7506bb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f

MD5 2106d2c4ebadc5cc04316b33cba2bd01
SHA1 f091720f7fdda9dd040df7dcfaa05bd86826f3d1
SHA256 262f0b606a5f7e764812e4d61c0e053821e98ad18d4e21b2e9b4e14a0700a5f9
SHA512 fd00f47f4aa37e61bee53d8543fdbf967630522c7c6d10a71daf64a7e5331fcfb453c3833e8c8470e1b0172a2f3c521e36f12946a0a22c358ca32c1a7edc15f6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020

MD5 38b9cc631f164a5b607655e5a7ba6773
SHA1 e961726835ff78f19f29753af280727977d0caa0
SHA256 21bdfb5b53932390c8f0f8bdff707b7d6d9a3ecb82967faa5c9d1b3c8c964689
SHA512 2263e83b7e1fc93c25ca8028b5e3dad89a126ddfb62749c265d7e5c4005b4d161fe524e83adbd3708bf9126951dde6375894d83e5d91a578ce7ebb9b71332f99

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a4

MD5 9222217ea98c35e71acd00dfe056b030
SHA1 42fc786d7b865bdba84117ff15357fada69d3b35
SHA256 1bbd4cf227b3645dccb3d9e3e03736d4e7612326ef09126cf18fccf00b1aac4f
SHA512 7aaaa2031579bdbc89a31201613e26f4a1b67998cafc0d2372438beb22f11ba0bcc13d41c6d6e074b3e5a8d87a15dee42747b796c92d619549e83bb117362780

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 474f9ee00b7b655766df28a4443a755a
SHA1 00fab2a6cde7af30efa92e0c91517d9fe66bbf7e
SHA256 8abbf36504c01060bb26079e0cbb465c828880f1cf54583587cbb7922ee24cfb
SHA512 6e48856442d1a0bd5f9e23fc654e2eba9258d4cd986bb4316ab2bfcae7c5e7c06a6c0d017eb37f3a39847706bb7f624fabbce2caaa9396cf62a0b0e8b0eb3f13

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b227a00997a688a0c51597d4f0666659
SHA1 e16ebdec09fae9048e2f15e09667a180f51e7f65
SHA256 5a60fec984f2c407ce97570b62ca694d096e158399c96ebbaed1d1030e200a85
SHA512 15b2ee9798a5bac8df49568fd9e0175914f35af4d90ebda7a0aea016922a2f82f3e41ee6bfed90edd8fc7af9974473bb21e6db319e9476b882bfe070444a4c73

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 106650249041454109e39ba63d718763
SHA1 0db440e13229606143a6d6f4de35f6cf9bd8276f
SHA256 e13a7eaabefb8fb997bf817dcf9c0d4c488c228a829816ed8dfcf3e8845bef31
SHA512 ebcfdb6ba0b3a0756e1b7a0b7382586a4887df991b592695e895b230b5fda7acedc824d6b6c7a016c535c744416a8493ef6d60b77e0b28f6dc425e20845382b8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9ba3ad1e769d96f34c751ab476d6c1e8
SHA1 0d9798b57102e327e61e9467ea70b6ba0b61c9cd
SHA256 13a63a6cc3290257f46e6ac28caecc7c674f74da663dfffe6db45409992101d3
SHA512 65fb0f964f4b14be5412efb9bd984eba6287d6792c4b1a8880587e9cd6c62d6e93ad72f9ce4aba14f830bbc6b46f678a7107da5636dc9f16c03c6dcdf0be4cc6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 16d581bdb32f4b347b8b7225f827fdd4
SHA1 7853454c74a88b505ec68fc5fb68d006ed6c9d2e
SHA256 db47fee55517d6d9b4dcdc1b346c72b8d4a1ad08121d29da7f1ef4c83941fb19
SHA512 75bfa22448d92c5df9b6fb554661b5e514fa289c62866191b399ca2e03e5076d8400af2c1a7721575a209815b41b8596b58afffb6c6e43fcce131d9364bda72f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a5b93debbd6cc6bfe9c7396c797cc2fb
SHA1 40ed419abed7632f58f94271c96d78a3ca4b785b
SHA256 b306af274a39916a6d44672201d0b8bfe96be986614e2e67b6c36b3b060a5d10
SHA512 7254a14e811d75472913df75d71e3c84cfed00956f1bd6cd55c0fee8ec9ec3c1992d31b340ff8be70dc2db06e358789921ae9d7e169aa1d31c92bad3a8612696

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1818d34f4281ced747d24f775a19715b
SHA1 fade19f7c873e7b94bc1cd1956a551a775306cfe
SHA256 3573323dee5392eedc736a235ff1cb73740992b00a299a844a2b0d36cefdc88a
SHA512 f5c3957db9c0da7ea16605f8f7abb8ea609c5112bff6577c6289bbf6cdb2783968dd27ba5e9ea0147744ac6f76f23c9746e6ab4f3c2b72afc8bf71f10bdf9e83

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 4ed14e15b877628363e07af0976b30d4
SHA1 5d4ce1d23c92b9bdbf8860bbdeaa4c83ae223b3a
SHA256 a957c96a41e99f042306a3ecfe8947a4986be42ef081e14e76a2d958b4629981
SHA512 b851a6a6e5f7b68460e4c650070d3785e2bc0ef7a5506ea02a483139f8f021b63a7fff2a41a927e65416f2993afaf0df99ebd2b3023931cf0a754e6490de2299

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 0784b317898735ce8455268262f78146
SHA1 80530a40eef57faacf24094b8b101577f6c3668a
SHA256 482a6944c60b5155d18d5fcb83a452f31ae00404c7c665519be4d923ce855617
SHA512 9d4b1257bf893dfacb0c5b04dec96d524f48c01447ea7d5f0b73e9a3ba1a63fbc5914df8dd877759e69b09515f4b4095b8158773e8207a20098e83a7170619a2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 306fc3131d6d6b2d6c5a4f14d98572af
SHA1 37cc791b6dde8e9ef1a57a21d87bfb43c1c04d97
SHA256 0a4d0a86cb663448b5bd756fb41196f4687165d6c4b0acecbc7daf4ed2818395
SHA512 e8a25b4d60f181e329df169830399ef32bd96a1939eb0c167bc11c5822bdb82c5983f8123ea55734fceb1d6634a5a7b520901159665db9404c1d1a061e19fff4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fc1f61d273cb3545b3355af1dbdde920
SHA1 3e278d701c9141771c7aaec9df1f3524f6c546ae
SHA256 c9fa49ed6c79659bc65afc5a89d42d206abe9fb94881abdf5f6b5f4c6ded9ea9
SHA512 1d0e76ed3b6bb7abbe99188ece7de7240eeb77357c3f701071ffeeef3f38fdbffaa7c8ea10ae6d282d7ce48c53390fc669af9a223349f230e6a88c43ee4ff074

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8e0c60813a968f7988df4c39471f22f8
SHA1 472877f736fce0d17c3756fc52b0bb82ede7dc05
SHA256 1c9438b7dac8385b943e413e2f95f12c0bdae6384f7e654fd0ec954f135092ca
SHA512 3585057dd940d853eade0f6f0db9f04bb170d90be3e1c06c9f2193a447d9b8640ac67d12df1e911bfc9aa0e21f16ff56f7cfef2dc9fb6dc6ba976db648d35fec

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fc4b4bada4c5ebf0462270996381ff39
SHA1 3bee999a8cf147e8841fa48d1001caf7fbea341c
SHA256 9494b6187decce998045a878c6f95b6ee6d0c56030e6dae7fc0ff53f35bfc523
SHA512 ae03af6e78146a7134e48aa9851bcadeb6cddf177caaebb50433d30bd6c57a31d2ccfaac180e8d1caf9fac214186a8e36ffc185176c7afbfd4df50cbcff5aad9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\04bdf968a9b0718f_0

MD5 b15e7352cc25cabd36d18820417d46c0
SHA1 c93f7ff4744652cf2f3e84ae2193e6a88d997da5
SHA256 6fe50bbeef8c585771e0bbfd40e332c3cbf2490d3b909190b1313e0c64496c06
SHA512 322bfad046057d7e57bc16b76b8a65678be8f3320673bcc61cc455fb4f2ddc09f554ded7840b0677a33363ed225547741aa0733b205d8008c07d3a6860c6dca3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2518ae90d2d52983_0

MD5 69a8ccb3e2ae4116fdef66f8b58c7d74
SHA1 c0a7164e87ed9b8a7af6eb8ca509c640bb298b2e
SHA256 9296b21acc290d2b90196f2466b87cfe86429e688a8e8cceb073e199dcc56345
SHA512 67f64d5cc5defd936bfd0a8f703b23ee008b8f656011fa5142ef9831953b471e2e4ccd8b8c1d06108ea81e429ae0f4f34d0a9a1395805eb996f8d33551388f3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\721e6e243f5d7363_0

MD5 973b23db51a1245c21fdcd5ac80b4aa8
SHA1 e3342f81d17d2472dd1c4dac8c790f83ef284d4f
SHA256 cce6d139dae3e858221be42593bd45ef186e5f77922c5b665ba02a976778b042
SHA512 4c365fae72f520ef975c388241ebb515e26ccbc9cfd5568b7829bb0c09941ac17c0d341ae131b34a984011bed56e7c923b633e4e24c8df4f47d315188296e000

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7b056c6626a917a0_0

MD5 92ffc7e73c075609cb03397cd4ff5379
SHA1 590932c65c2edb54f5284c0ad7efe6c012600987
SHA256 17e9631caecb284cda19b6d901610814e897a594504c3e580d1eddcdd56b0471
SHA512 2865a4101895dd1594257e28a47f28907f7dcf754fbbc60a99ea1aec4255fac5a595f957573a82bd7c227c417b55098ee4122eb65a3e6e958b6b78ba5403b4d9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9f67cfcd828620bf9688a6c3449970c4
SHA1 e2938db9d7ccd1a0c3276ff4f41418fee63472b3
SHA256 23a00f082286793311c4777ccae58f11a167ae30330d8f94e818e2e0db355389
SHA512 4d9ff9c647e2f2e7b0aa3891e175dbd9604c5acf72d5957305dfde8baa9d3fa695aca4ebcd893132e2239a223bc6b920758c4e59c5b698b8df1f22a5f8e04ec2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 d05faf004a4c4568d8d6f6be9234743e
SHA1 a38c7212d4b26d47b268ed393156645e28d3036c
SHA256 fc543143181185984096fb2f2a349f4acc95022f094563f71a384ff85c20ce9e
SHA512 b4c2e111fc3a4bf5cafd1606c977088c94a977088316e5fe34a8ba07b5e529347bc7f26c5b82633c5c87cf6412169e86bb65978740f8abaa9c6761818ddacf0b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 163ca627e367a1b2ad62a620dd3b1140
SHA1 b4492936e558cc18df87e7fbb47dfaaef9f321d8
SHA256 355682fc03055bfa16c467610b6614a17be3088d7d6434af91138d47c50be4cb
SHA512 b3c0e934f9af68634a5240a0fa5eefeb377c61bd95d7766656c166dd71cf4afe047cf8d5f9352af70466e3a6f4a565f9c862dc9d5d4f12d175256934e11f55ac

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 99f97c40738a6384f816130e0050aa5e
SHA1 7d12706ee6bde71422b2141952d5e0478d98f0ea
SHA256 210fc95e28b2fb4c5aac2c619e83bba4509f2e3273388f24801bbfc9aaa6f13b
SHA512 2ca7d9309f4f915d6f9741d70d49bf7bb25668f78702a2628511b1b1c066e8de68e60de5d2ef00aa586ad85c4f1b1a4b253d699aaa8f124067945d4c76a51a2c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 cc5a6c1f1c54c1313bf1089b4d04d840
SHA1 dada3fc172d6f10332ad11044efa551741840a67
SHA256 5e7af5f07e785676518551892724b7989189cca23deae7db34e4551c386f2660
SHA512 c69729d3cf9359a93366106bc2c35841b0c6f6a0a2a8786fc94f23a02e63dc5fbeb91e7d9c46cd0c6229bed68757271b662582cd962053e6d65721e802130077

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 7c004a8cd0754579f126e334be2feb2e
SHA1 af23da61e3e08b8edf2162972c50e6e126b851c7
SHA256 6962fdf16a6102b81c121a0d7d541a54b92aa91e2447b9978420313ead5cf869
SHA512 c847e819c8119e4ac146a4c909612f40d80392f5f3e368ac86e20849cb5a2d3ed65bc0733aade9fc3c998787471eb41ed2e9eac2da6f68c85b2036009c9ac8d9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 437d593104684e3d10e29bfdaeec811e
SHA1 a15c665ab283bc0bb56e3558be258d7614a582cd
SHA256 bba0de355d4ea4f846618d32a36e63a58450b31ade93b1d1b7f141bc1ad2b13e
SHA512 24299b2a295829ed3b868890073dd7fbacedf494c5c7932387a2346d8839e1a140807a3188900fdb822a41968f42e1ce5aaf8618af0f3e0c6b8acd8966cf63a3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 f495713c204ecfadf16c08fd5aa1d367
SHA1 6c2be652823569cc78c7cfc1755d4b04cb240941
SHA256 f5aa51c423f3389478476e1c5facc0b92cd71ed477a45a5194d370e5d8a47e97
SHA512 b259c41a5b6513dc20cf631c1e4c7d9e3e6723b47b4ab9e5b22e858764e8d0064bf403f27345f3e5ce28100377dc933b898d47272428f301cd4e8a5fcb27acda

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 50c88daf3112c7af07b67657dc775984
SHA1 febcd10786c7b18478fac71a246642bde23c33c3
SHA256 35819a25089f5f73e8ef3faf32eeb27dd51e4b71b3e5403af29024d2a46e9a12
SHA512 62d2400941868252526f36930b6c886a66dcd301935c070c21f29c6a6b8b858195fcbb44da4698e9386064d4a30cd3192acee4a45f9ecd902a63f898f16d733c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8fa859b110eef133b55b2082ad6055d4
SHA1 382cd194d6d540d29fae08edec67829ea3f967ff
SHA256 3df8dae0eff2fbb306e91ab5d5e6fde186b6c7595b3eedc6bed17ab773440212
SHA512 a312249bb7a4f90401caa2270ab835f1dc536b8685a3d5af273623513b421f193ba1e5ab818a0018abc38d82f2d865d12fa9317ebdcbf671a894f1acd8be8904

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 54440c7e72e2eb37a75b3f62d1eca107
SHA1 f7c79466e0129d6467da4f284f2a8b8781a2d26c
SHA256 024d9cccc639c96b8f7a1a8f72e6f0169ab4efa5138fff73c3b93d3147385b12
SHA512 a319b1086ee1c961906e5f907d9347f3a0eafc9f91fb5b80d71cfce6b7911267c24bc98a902aa233ea486b4748bd79255f5d492f95406abc3f0c77002104e32a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2a6a8b6e938dcab2bfcea4a09a82710b
SHA1 3a42d2b669cec6ce214889ca9877b97fdeef81d1
SHA256 a4dc298da7380f186915a2488846b17c3cd2fe36625e22e2bac0d32571eae8e5
SHA512 7cc95ed70c82bad83805908dec3ccd402343291aa799d09b9b1059b32ef8577639b94108a7d30da6096d80c5028955694ef75525b51188b2db3aefa504e02387

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1ead79f9c628120d5c096dc31a397f8c
SHA1 50ad3d3e18cf50aca79168b5272d6029de0db5e7
SHA256 9b160b96e64e1fe15d05b14870de36f95d124d65f182cf0d0c0d7be9895306ff
SHA512 f5648633b81afd19f79611bd21a3716f7666936d06ea5a133e007dd17994b66b5e9f815c8fc8fb72ed164020bce0d660d2d417a425981bcf0845e45df509ff6e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7e999685558fb07cd4befc538556af5b
SHA1 dadaf156996256416a641f117f8ed849980367d0
SHA256 5a51f8be9f610de43fd6324b1692d5f2c730141e6c4270f2eaa7da27c25228ca
SHA512 f10b55313d424831ff5ff8f90c6a0b2a673984127eff099a6cda62cee36dcce9f976f267265466edcaa90c7aa9daee7adc9ff22a043cca21c56536cd9de7a5df

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9c1afb3c0919e923beb771efc284a97b
SHA1 0c9e1f161e1a563c7c478f2a48f776d2dcd8b6bb
SHA256 a41550ff2602d3705ba3964deac13ba7088ca084a87de62be6fd3cc114ec5eae
SHA512 cc9f526c8d9afd93c3cc3423fc204b944f4969b998b235d0f7bf322f9d92883268b891f4bf1eec40b11cfc36422a36e2844d7ad376805517c893dd3aabd3aec6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 01328c8f7f3f83ea0c2ab60782a2c8c4
SHA1 cc2021a849611bf15de52b2694916e3516321749
SHA256 5257722eb5b19835fdb80b0869d7390424b2bf8359084d0c7ec2e187aab96358
SHA512 a2d20c85dbfa8eb7fd0ec0e7cda3bdc304730db0e0abbce2a1cbe7ff131438330d89462c6aba7617b906be2daf2da5b481d5752cf365624e1000ab6ac3cb9cb2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 786e4689f0c687c587a041b7025aa9f3
SHA1 0b428a32dc000333cc8c6e7878bfbe6258fe948f
SHA256 3b26fdbe8be43c2c1d6e5023914b6197fea1485708feb2e445e35d4ff3f74e3c
SHA512 2ce12170e6a42736d2d970dbf59439528d7519c2af7f14a0f1c8960746bc453f7304797608db80a86b343923475388b1272c7d0fccefd485be6512f4d93a79a0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 31bf1fc3c3edd4c6ee507dec08298b53
SHA1 b9ede6a49d2c1925f374877d760d057bcb5ea4eb
SHA256 6a17cb86e897227e111d96bf3d8cc412e7449f4a8e7271955bb18bde9ac00d15
SHA512 e388fcda956fcf82bd21bb62670da2a70f6fe5d6fefbf351d2545781475dca16a71bc675f5e2aeade69e0044a5c8cc99751e3141379552a43b557030ce46894c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 cc7f5905d42ca0d8861c8fcc1e435147
SHA1 684358f9ea1f439bf9f93848f400012546a08f16
SHA256 c2633913ce9eaeae0b59a0407a678f7a560bf6e1c72e2c29adbac610c42c0ce8
SHA512 ff0d58678c9d424aa496090f11a1f81ab4e06f2d23ce71def7ea2fbeac70edebad8f1318a81e020f08d74e9da283be917a9e88a3231e9baa0e6c9f08e32a186a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a48ea8a065893ab66af3b54128df54cb
SHA1 d60e3854806d7e9fe011d0a8a9d354abfa69e6cb
SHA256 7da93424e44e964af1fe9861d4aa170484268c015e31060efe4af96330987821
SHA512 92ae9a258f06e38b27e0a096e759013bd3a992c8f4387705007b7320672d4bc3e8aa8e62a89a3069d4ece65c57bddfd4c32de8522cc376ba66b16fb7e6d4b087

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f4b2c4077c1f67e3016df816caf36b5c
SHA1 2efc359fa7e47b2042d3b1f0903d3f449a30eb26
SHA256 2da5469e1b12f9617a67051d81c9ffe9cab44fbefcabf2143fb58a642084cb7a
SHA512 297ac314451365abbda323bbb11d9086b5da080d80bff077fa881e1c1d3a9af81db1f7c13920e043453179b10cb2d0c43fe6789110932f09c816b8cd76579c57

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f21596b5700c8f11920d2806cbf2d0bf
SHA1 8503d62f2a16a2e13e7a79026e46ee3cf33953e6
SHA256 c2af0db9ddcf274557b84a86e9368cb0e2bb2b6de4406ff49a306bb5c7046ea6
SHA512 4b017febf65f5cbbda8360259a216c01c9dbcfca18e67c8e599038330665d77aedba3f4e6a8abd6100248baae948d617dd19b0c65210bc4c1bb871be2c5af5a5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 90aa89b7febbfa8daffd3bd706ff96bb
SHA1 f60e2dc816866466101113e27137996f5901a2f9
SHA256 5d5b897fddced5d5885d17216e5c18068e8f497be23c703e3bb5bcb8484374f7
SHA512 6860e857a95e4eb78f023702a1025f02c9398c849deca3abe29bf20211b3056a61b43da1ee688e4c76829577ee13571f0cd1025e3986dfeb870ee37afb60e5fa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 eb5233a60d6b330821e09fd707356a25
SHA1 fd6dd275fdbab9b3f95d02ea2e6a06567001f0a6
SHA256 985ced1efda51961f58fe0734a2ac8d5cd93ba6ca9f651c387689ae3c9399e31
SHA512 5d47087cb2739a667abddf7b865884bfa6a34b8660680bd6217aeba9dcf1755ebeed8d22b86260f717d85cdcd16b65f89ba0853af0da23e16bb7c007b1ccf6c6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6626964b9ba1aba7139535b963a211df
SHA1 b13b2a25b3d2fdf72f9d58c82c470dfb31781775
SHA256 00846daba40febc8040bd2fa3891add371a7da846f4dfe453de48e0bbf419dc7
SHA512 b1e702225caf0eb60e826d0d00e80923dbc6e84d3a333ed008fb516253c27b4da283e2ab310ad034231b83e44dd9f608e9db8a0e63f0f10206d733f254c67546

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 49e2a6c77ba62b348fdc0d0134321274
SHA1 ab14ae41a1c5abdf1be49390c441729f4acb0a41
SHA256 f655d8eac883243f4df0b4cc422d4b621dc66555f1f5ca16fed0c1945e2a523b
SHA512 ee7017b01b126c4ff9ffe291a2601b5d1ed8cdca4bb5ff82bb38319bc0e422d1ffd3313206ba564beea5fefdba89996a4f8ddcdb760f042d645a788d241eb308

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 125ba3cada2f84859ae82e78867e8f00
SHA1 d40755ec3c247b2c91192de5d7075e15d4a59376
SHA256 1765406a57b2294a473980b455306ccfb01c9a97e4541158704f95da93f40ec8
SHA512 b1128ac1bacf9be26f971e0fb83b1f93a742176dbc0d47af6f66fed2bdb3037d07184c57eeb745fcbb6c16032dcb0c68d9280c5e02e7c1343bb35b5201546d61

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 13dcfc3dc240bfd628162a026e6f33f2
SHA1 5f153d4541b10b0e2132a4d35127d3392d05ea3d
SHA256 5234b3e24cac54378945e377614f2a05d4a4d7d19f2cedff53c766f38a473873
SHA512 1bf62c249260b12d445fb888a3370c2e7659d33fd30ac2deb89bbcb53647850ad5d5167b60bb22b089180e126a39464fa93c6c92fd27d73ae43fe4e4da5142c2

C:\Users\Admin\AppData\Local\Temp\StreamFab\AF0BC398A09D493EA79800DCD90E82FC\streamfab_x64_6201.exe

MD5 12b461fc3cf7582f63dd7c1861be9315
SHA1 87fc8b0c059c4836fb132eaa2f4bdce773debf3a
SHA256 f1404c0afb90593970505bf32de89b5f374f13c48cc15e77ac9eaeb0d731f778
SHA512 63d2126df2466ce376caab4c8d6ffcc4e0e6ce858375c039916d33c20be14af39edb88cadc372f0d78be64a26598a88c47ba679d876e67a7e2dec625a8e8c9ae

C:\Users\Admin\Documents\DVDFab\StreamFab\Log\install.log

MD5 dc1d8abe8141515da1dea81b5c35da3b
SHA1 79b64d2e24b59f6215e790300a3f076a5f00ef42
SHA256 d7f0c03dc3d80e7725cb40fcf65616eaac5086f621fb153b31fb6b2e981cde5f
SHA512 457eb2999c75b8b779ceb9f2c05e9a6031b06abc3a0e195861c8602818ec267623166c90f9d31c9e9e06ba04211e5747e0dd681d060cfb23d4bc2e31e611eccb

C:\Users\Admin\Documents\DVDFab\StreamFab\Log\install.log

MD5 d8f3457e03c6484fd4f6dc9ce27e7a50
SHA1 92349eca6111476f51007efe2698571696141af5
SHA256 1aba51532e4c3bb87915dfb70a069ffe7f11e81346a5d1171eb5bd33478c781e
SHA512 bba34378e7e50bc1a545e131270c46e41cfdb6e1c5f10df866f03f7abdea9e1ee5dfbb2a1e1bfb45e00dbc7950e62d917a25b5bd470d0427531ca51e91fdb74a

C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\site-packages\chardet-4.0.0.dist-info\INSTALLER

MD5 00305bc1fb89e33403a168e6e3e2ec08
SHA1 a39ca102f6b0e1129e63235bcb0ad802a5572195
SHA256 0b77bdb04e0461147a7c783c200bc11a6591886e59e2509f5d7f6cb7179d01ab
SHA512 db43b091f60de7f8c983f5fc4009db89673215ccd20fd8b2ced4983365a74b36ac371e2e85397cac915c021377e26f2c4290915ea96f9e522e341e512c0fc169

C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\site-packages\setuptools-47.1.0.dist-info\zip-safe

MD5 81051bcc2cf1bedf378224b0a93e2877
SHA1 ba8ab5a0280b953aa97435ff8946cbcbb2755a27
SHA256 7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
SHA512 1b302a2f1e624a5fb5ad94ddc4e5f8bfd74d26fa37512d0e5face303d8c40eee0d0ffa3649f5da43f439914d128166cb6c4774a7caa3b174d7535451eb697b5d

C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\site-packages\six-1.15.0.dist-info\WHEEL

MD5 03651a952a4bd2c51d18bf254403a443
SHA1 0929d52e0e83031940db0cdf5ce9fda37c6749e5
SHA256 e93dd36191386058b61d34b505e647357022f0de763994f83be749ebea267bfe
SHA512 366562571ee6c63e79bbb07674dea6665da4910996611d97f122b10b231868c348f5c556b0d9175beeb461d4eac0770efedeefad57e7040400e5d3d60127945b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0b033eb4132cbf79c4bb699baf6bf23a
SHA1 1aa225198e3c3a49c00b3e3de8bc53e1ddbe559b
SHA256 01d701488eb1dc09dcd9b5864474166357d859f8f40bc8b1bbe140485b0cc2a7
SHA512 8bb90d2ecd099d4c1d190da4d66d3acd5bc06b9514408894726196601b7dd93c204e4526ab474dce4724e6766cf2c96b3e3d2ad1bd560ab9031bd5d502cba472

C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\test\cjkencodings\shift_jis-utf8.txt

MD5 b78c31d234a2c8445cb670a78358d2a8
SHA1 f765a69964677d5ef451254e23a779253b774cdb
SHA256 cfbc5299faf453eb4530a8f8133fb48f20012d8849120db3936e92fee97a16aa
SHA512 e608c9ec39f467f6f5943853c449c6dda28e3670f88db4255e664092f84938a353e1d619c893e479765aa1b4bcff8628009bf01989702708f917868dd2439f84

C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\test\test_importlib\builtin\__main__.py

MD5 47878c074f37661118db4f3525b2b6cb
SHA1 9671e2ef6e3d9fa96e7450bcee03300f8d395533
SHA256 b4dc0b48d375647bcfab52d235abf7968daf57b6bbdf325766f31ce7752d7216
SHA512 13c626ada191848c31321c74eb7f0f1fde5445a82d34282d69e2b086ba6b539d8632c82bba61ff52185f75fec2514dad66139309835e53f5b09a3c5a2ebecff5

C:\Program Files\DVDFab\StreamFab\PYthon37\Lib\test\test_importlib\frozen\__init__.py

MD5 c3239b95575b0ad63408b8e633f9334d
SHA1 7dbb42dfa3ca934fb86b8e0e2268b6b793cbccdc
SHA256 6546a8ef1019da695edeca7c68103a1a8e746d88b89faf7d5297a60753fd1225
SHA512 5685131ad55f43ab73afccbef69652d03bb64e6135beb476bc987f316afe0198157507203b9846728bc7ea25bc88f040e7d2cb557c9480bac72f519d6ba90b25

C:\Program Files\DVDFab\StreamFab\PYthon37\Tools\pynche\__init__.py

MD5 3d02598f327c3159a8be45fd28daac9b
SHA1 78bd4ccb31f7984b68a96a9f2d0d78c27857b091
SHA256 b36ae7da13e8cafa693b64b57c6afc4511da2f9bbc10d0ac03667fca0f288214
SHA512 c59c5b77a0cf85bb9fbf46f9541c399a9f739f84828c311ced6e270854ecce86d266e4c8d5aa07897b48ce995c3da29fea994e8cd017d48e5a4fab7a6b65e903

C:\Program Files\DVDFab\StreamFab\QLanguage\ReportQt_ROM.qm

MD5 b7b73048941afaab96363699f020cda9
SHA1 52b0939b66b79d8fbd6b449cea6a2a4e741fa77a
SHA256 24fe0b52797139431b7035d6f5e6e2e7a24959180a33db567173309df127e366
SHA512 d01e7e31bbaf9c5c60b2986e0b7f4be6592fb06d6d9969726cee5fb01cce7c84b61b51b533ad3f44b0a9de543304f8f25a488e2e050f52f5a502f931e7ac8a8b

C:\Program Files\DVDFab\StreamFab\QtQuick\Controls.2\designer\TabButtonSpecifics.qml

MD5 95806d0bfadf617cdb91b9baacab5429
SHA1 2102999ec25be88f138ea7c8fbf2a1bf4454c766
SHA256 07911dff4b3128de29fb83223a78878f9e972f35a596429861c7ea7956923b2d
SHA512 00d3b1dd1d764859249a5997ec4b2ec68fdf7c245a3ad4276a81370b2f43090f41d32de48d94307703436e661ebaf64ff96332f109b0e611b74521f28c8f8004

C:\Program Files\DVDFab\StreamFab\QtQuick\Controls.2\designer\SwipeDelegateSpecifics.qml

MD5 df7e32b0e18bd35fa8453cb1263886b9
SHA1 f4336c9380a7fbee4dfbc17c545b409364f7f8b3
SHA256 8207c603c9de51d9954302dd9df559a1df70e0a9658af62637229b5a2437eec3
SHA512 21d4e9b1d71c5ea9c7c66e5bacead5d4857ac109f7452d81c6d793f8843dd1d6f9194011e41259cdb9e3faecc04675a1433a2dfcbf0b758ff97cbd068fd95732

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 05ec6ba64706783afbc8fe78872f990c
SHA1 a36ab2be11665adca21197f5daa5d06bf2baac0f
SHA256 9811f6540a6fef03bcc26aeb11d26154561b5c52405e62c4672fe7f3e7b373f6
SHA512 1901a156062dfd2a7f71ee0346673dec56b019ad9e07f4196abb149a6e917651bde4402591a8b70bf4ed15ea6a2d56e3fd6c4340f4187043efcdcf8e588d6bbe

C:\Program Files\DVDFab\StreamFab\PYthon37\Scripts\easy_install-3.7.exe

MD5 1295906c8602a3388a79d1e2fb960793
SHA1 067fc5208147c04bc700e61fdf9aba178c5cfa7c
SHA256 6a5afa93923a63ddd0b5df7568fa1cf5bd87c612527450f39a546ec0d8a0a00d
SHA512 af9db7ffea92077e850729ddc0679b17eaf14180d8bda393042aa77587909101a01bbda04ef561e3d6d28372d1d45cbbcccf4f9f0e370b3adaf9cdea53ccc703

C:\Program Files\DVDFab\StreamFab\widevinecdm.dll

MD5 daf7ef3acccab478aaa7d6dc1c60f865
SHA1 f8246162b97ce4a945feced27b6ea114366ff2ad
SHA256 bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e
SHA512 5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 f426165d1e5f7df1b7a3758c306cd4ae
SHA1 59ef728fbbb5c4197600f61daec48556fec651c1
SHA256 b68dfc21866d0abe5c75d70acc54670421fa9b26baf98af852768676a901b841
SHA512 8d437fcb85acb0705bf080141e7a021740901248985a76299ea8c43e46ad78fb88c738322cf302f6a550caa5e79d85b36827e9b329b1094521b17cf638c015b6

memory/1784-14825-0x00007FF826C10000-0x00007FF827165000-memory.dmp

memory/1784-14826-0x0000000140000000-0x0000000145EB7000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f82f3a57-b4fe-42da-97b4-b9ff58c312f2.tmp

MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 6960857d16aadfa79d36df8ebbf0e423
SHA1 e1db43bd478274366621a8c6497e270d46c6ed4f
SHA256 f40b812ce44e391423eb66602ac0af138a1e948aa8c4116045fef671ef21cd32
SHA512 6deb2a63055a643759dd0ae125fb2f68ec04a443dbf8b066a812b42352bbcfa4517382ed0910c190c986a864559c3453c772e153ee2e9432fb2de2e1e49ca7fe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 29a225144800d938e9b53c0c3adb38aa
SHA1 d941bc7d6882d4bf88d1bc2d5491950f26ae3646
SHA256 60ba848a226da5b768906b91d25f2ae39491731fb29e943e6cecdc929ff5e099
SHA512 225d0114bd17fc55b4ce1c03a8d9f834cb41331f6ccf6be52f23285c33a4e5512dbcc2f730338b8b42d96648d6050d03d0fcdaf49386377bf4f5f6d0ac323de1

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\document.js

MD5 a0736f38adda9919c53fc757b4c31b2c
SHA1 14e5844d74a1e991fc35466be38b7a7043bb49a1
SHA256 86ae414b5cef3a0041ed3f7a4c2b26f79c64550fa3261b60b9400abc61e85eee
SHA512 262c18118067afd7535a39ee4e45064ce282fe911698f544561ba546b1a697c3d5155f0ebf8500e04be9bd762382679074a4e5a11f1e98b61676fb7f962dc963

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\debug.js

MD5 913dc96d901f5f7a9b94c8d5d97e7f17
SHA1 1dfc109d7285c028818ba460b47ac61bdd7709d4
SHA256 842f312d5c68f3d1924229e8b55b1d7738308748d3177f8f71159b86830f01a6
SHA512 85f38b1d97e8ba3056ae7b3a8d079bc305a43ae6f8690f61655fcfdcdb6d3c109cdca43d33d08f6dd6636a1dc9b7fac51b3ac73cd53b1a90c16ed04a4486e9ee

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\captured.html

MD5 f35b53a857b516423ef2411e797fd966
SHA1 3b2261a6c72ab5325b8b6dc644154c0bb9cffcec
SHA256 2c387e39ab78ab8f283d623a16b946285cda96daf1ea86e20bc4baad68cfc49f
SHA512 10b0a8bfc957f6be3c3e54b3672938c7ec00dabe098ff751d4b36424dc76a2dcf1ccc02fc281e6d7d308376ad1288642125c8374cfff9511bc140b687c5dca55

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\background.js

MD5 cbf6653353caf78b54275dc5b40b75b2
SHA1 504eb86e289077cda77b96ed730ad7bd9de189a5
SHA256 8edd8af95ad6055c736aae55ea4f1c6d32eb7da6641a38b635e09e683573525e
SHA512 721950e344d29352757a27280b9af10ef23b2790c58d2433567d70a958f12be8474df2d25e4ec31ff3092b70be4cb3181f97dae2be821b1abaa5ab63c9a38020

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\images\headBkgd.gif

MD5 60a7f0b520cf9984e66fcc2daeaa91d7
SHA1 217b1e8b0238f60ffc498e4d370d9032a4060919
SHA256 a022ded24e2e2b5e8c0388109f4617647b72a9a06540f438b0243985aa3fc43e
SHA512 a5ed7a0b109735610cffbddccabd0a376e26e823a73e4e23269a1b784cc1e0409f4a8ef092292b85ab92dee8c0c0df1158c7082d91653edefe9435c0a3e11654

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\welcome.js

MD5 062a825e6c487370fff1cbf455fe5c3b
SHA1 feca60e69f21b8f5c13ad5cff6812ff211fcfbf9
SHA256 ed9b0f5afa38d5ecf3ad2e4f28adbb37a97219bddebcabee8808d4b4bb91fabf
SHA512 f3086c951f70177d9744426e402d7289208de442ffa233d603bd6ccef5ad54cd1226db9f7d7259921e49d6aea6a9ebefa989076a42fc14dd2701ec87a636b6b2

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\welcome.html

MD5 10c353e38104dca78317ab4ac634032c
SHA1 227cd9d0347d6f0f19462e4291c9c945e06cb441
SHA256 eccb095eb043b1ab896876d293615d086e5fd7c0bbe553791b63761610a154a1
SHA512 28f38aff66b5e3e2b1cb363cbbac4fa46b55c82b09c9e32f763b8c9bfcaf512da602df83e68bba427cd3143b54c0f17afd470e5dbc95a043f4ac391b9d639f9e

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\images\logo32x.png

MD5 db77f12d007d66dc85410708e9322101
SHA1 f9a197b8212607080e8f20c2a19d03aa25a849a0
SHA256 16181b64e00841b68cf605a5e39d7fd56e24499825b404fe4fb3b477e56e84e8
SHA512 b4abc4b6c20b59a12a656d63bd5d0b3cc96f2e152bb143fa913fe667511cdd66382b62b959436d5f5a1511fa3bc1957eb9e4a61729b008ff5aba8286c8a8fde8

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\images\logo16x.png

MD5 d08e20877841e7e4ea062ce36be215f3
SHA1 5cfcdd563622c8e26d6bfbec4d2288a698a78235
SHA256 feb1f8ba850388cde225fc9d9a9bc6f27ce84eb399d3bf8b7422e0cb31ae467a
SHA512 fee0ae9e1c0b4adbd5d2e2bd9581d2df6cb290ff2f29d0f09636bb8fdb0c044d82b5488b3d58169cc2a23282bfb0713e82545da5a9709f39cce6b75d62b53c92

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\images\headTitle.gif

MD5 e9af99a1872673931704fb5f3fb92594
SHA1 7cb8514946c779b1769bb30ec43c7ee67e010053
SHA256 46a531f88a1e5682b4f5f5eab6003a3e12e9bdaeb95e1d0421fc2f4c6553cecf
SHA512 1ef67094db4c3872d581b7de7676cec9749cc9d55f24bbfc97aebfd79c5614c7628d3646eff15e93b6cc186a0877a487583f83bfcea5459d7a8f5ebec9a2d189

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\images\logoTonec.gif

MD5 6e4056f446760596daedaf491677dc79
SHA1 d9feefea1026f3dbd4291c89e8ecacf3063c35f0
SHA256 4a7aa9148bffa220e01ea106dfaec432a42d8d55005ada6b6f47bc058dcc6a50
SHA512 b6e9e7dd8ae7f4f42930897749cb51a3533f3917d833ac5742c55321e1cefede5207065c5f8029a484a5daeab6b1ccb671a86cc637b99c4d0edc0ee82b6552c0

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\_locales\en\messages.json

MD5 f6a1fd7b72acd9e4d6f17063c892abd4
SHA1 e2ce386b03b572a22eb12435fb504101efb07337
SHA256 99aad33d4fe0dd9f54a43eeaa99cf2b7874f2fdde16ba2e98270e6d97680a022
SHA512 394487afa8152aefb960648460e01f87e8f33ac72357c6fee71a22f1dd8059e03416014c1bd912ce8efb4e6c2385110e982dd57f25c704549aee8099dd2ebea1

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\_locales\vn\messages.json

MD5 5ea23e07638b34e63349b05bc9beeab9
SHA1 58fc80e95eea688a1ce7d8102037e9b269f830c7
SHA256 7ea73da3bd6130c6384e3e6fef25254dde6553a2977ab6e2793fc79ba137f672
SHA512 87b5333609446d7c54ddfb54d8de1fe2b46d4b106625c2edcb29589e8bc62d314031d17e7675c0c0f037d33c79a938588b098a63a521b0fe463d986eb8663535

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1176_549155395\CRX_INSTALL\images\logo128.png

MD5 427ccebefe1fb4d54646bf943ad425c8
SHA1 0265f9dc3877e047342e93b82b29f51b41207bc1
SHA256 335ea79ef3140c7d63cd43cd525162bb96191e68001e9cebfa5b697af6b1f371
SHA512 4b605dbc51565b56570f2b9b1821ccdfbcf672def2d358f4a0373cc4d98747d617381c85fbda41b57d67756cd0dada058a4c9013d729990589a568c753de05e4

memory/1784-15234-0x00007FF84A120000-0x00007FF84A122000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1176_549155395\CRX_INSTALL\images\logo48.png

MD5 db62e2d1fd58479a202a2960ec34324d
SHA1 de520c26686c91afcb761affcf86871ad64df325
SHA256 4212312c4f644bea0df9c087b050b1498ce4ba0d6638f17b9fc6de7c6989208a
SHA512 1ad847586ba0b8a2ec8868662f39b9064897f7a0a0713a29fff403b45c07a657f1c91378c6b625ed35e67446da7bb575282292a95e3a773450573d929fcb1935

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1176_549155395\CRX_INSTALL\images\logo32.png

MD5 bb9aea32e19d24434a230266ddfb57a7
SHA1 8415ba204fa39963bae23dd55e92f2189d814b7d
SHA256 10f14189da507005bafa0493783b56a8494782c6accf553edb706a26e771491e
SHA512 d1076f1edee2f9626243297dd3c255d707ca95d81d2fcaccbd43432b9bc3a26712943fdbff1f4f1bdca5a0b66bd9de91867753fda8bd889e6d98df6ef7c445bd

memory/1784-15141-0x00007FF84A110000-0x00007FF84A112000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1176_549155395\CRX_INSTALL\_metadata\verified_contents.json

MD5 52ff8929fe6e9f0446acb4c543ef02b7
SHA1 ce848c02a36bb34eb67c10f5db8b39f831956bc8
SHA256 f742af0147a0a899b541c9ebac430bee81745aa1ef88bc6ee783399b1a9f0636
SHA512 5d57fba6446f86a806931c66fc5cabecb37307d8440d66d68870c4bd85e51614b9894183ac32d00ac02bf44ea19146e3835305a8f9c362c47278a17a5971bdd0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir1176_549155395\CRX_INSTALL\manifest.json

MD5 81be4edb93d70bd786897b0aec799923
SHA1 ed97d14f02180ffd954cf86bbac2eb1472b7ad0e
SHA256 2ea20067fb94a1049847024a7c04464a229de3dc4290b6595acc3a702712b255
SHA512 cb0fb2637ae6c312957bdf17710b1415fdddd5d5884f314e142e1235d95884291091de4a0ef4edbd286266742ec1f6e6c84c01b0540e7af72bb987daaa23e7b0

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\_locales\zh_tw\messages.json

MD5 80edc084829b7dddf5e573df1a786073
SHA1 78bc2089cefa71df213d0dd9ab4959c86ab242a2
SHA256 718af7b40e4238fd2f836a532fcd7e991e15ba4edba7feb6ac3ed851937c7c57
SHA512 485d35cd72cb4d1db095b9e82f1dcdf47026ca6b114c0abff2aa1dd228219679d0090e315b3fe80af25c98e3aafda44f0e3000e4167e50ce8ed91b4b85859014

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\_locales\zh_cn\messages.json

MD5 80cc71a810cb0428522ed833dd77033c
SHA1 8546622a02e78a963e3db81d4d12408ebf1e16a8
SHA256 3b24da8301abaf61b184f29b58d6f6b90191419e7eda40e292bb4594bbd46915
SHA512 e2e1c1aa0ba9a349847a96b745756bfe725e32d17994bba6cdc142c1d990bec19d23b708914bef428f4f11c49f9442c710f3205b7773ddd1b3f212d548aebb3a

memory/1784-15259-0x00007FF83B240000-0x00007FF83B276000-memory.dmp

memory/1784-15261-0x0000000180000000-0x0000000180066000-memory.dmp

memory/1784-15264-0x00007FF826840000-0x00007FF826C01000-memory.dmp

memory/1784-15262-0x00007FFFF5780000-0x00007FFFF6780000-memory.dmp

memory/2780-15343-0x00007FF826C10000-0x00007FF827165000-memory.dmp

memory/2780-15344-0x00007FF6C4070000-0x00007FF6C4875000-memory.dmp

memory/2780-15342-0x00007FF6C4070000-0x00007FF6C4875000-memory.dmp

memory/1784-15260-0x00007FF8393F0000-0x00007FF8394A0000-memory.dmp

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\list.html

MD5 e9372c9bb4c95a7fe6e714558b8b9b2d
SHA1 6ca22e8a7547621df3357a5cbaaf47d3f700028b
SHA256 b7a69eb88987da23c061169686289f1beac5c80e722972d433f951f4b63b36ec
SHA512 796a949443d960b53ee2f1cefa937dfcf5ba52c8dd20ab3646c20c3614dfe91b999652283409d2c0683edbddea700c4d72ff6629a57c7d868f89ca754c7ea884

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\js\qwebchannel.js

MD5 d182acc64d4cf058634cc7ce92d0cf61
SHA1 43d705489d651fb222102f23979e1f36ca0ff9ab
SHA256 1d0b843f06f159572a4cac6ffc9dad1c5aac98ba24aec3e27ce3caca4d3b6e16
SHA512 f51e9220ef3d8748646ebc1335b894ea999df09363f6a6a6af5699364fd4ac004b98a7ccf5dc5cf02142b8e2624e3bd6e2f23b7699ffe8ebf36125d1c2e5bc9a

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\js\jquery-2.0.2.js

MD5 ac8858c702432228b4f72bd7117bb587
SHA1 a41569bb6108109add98e0093858dc9a77737f34
SHA256 86850b0b3aa5ed8f6cfb4733f6c7bf2a809ef5b4c1c3e6475958a7756f960463
SHA512 98dc09ccde6b582e6196855f2450481dd95fd1c37a5068f62670f5e3e5ed737f081e038c96b8549bff3d63295c51d1a9fd835dfb933640b1dfbee4093b629e99

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\js\Bridge.js

MD5 a47d57daedf74fd00583b5f87b4a80af
SHA1 7ac163c66e32595d8b0f7c4a4d67012bcae19f52
SHA256 f0d5e5434c150155b40c7c7837548129c13778748e54141f4dd99ec0d23c6ddb
SHA512 696d0aa61d16f678e9a3dd96bf42214831437230949a322747830c57e2b2608c5eb642428b15a30c219779282f20ed3456a27b876bc8174ce217c68a52c9b41d

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\imgs\youtube.png

MD5 19c19e7365a408c479a0c07e4bd6719e
SHA1 7accca592b6e2386cad19a518bee4d2cb2ff70db
SHA256 c923ed8be1a5600e15ccc283abca4e97dc862c2f17859f9aa79ea6065649552a
SHA512 84646ec63982d92557f4df1a2ff567cf35ec6b5363f1deb1ba6b3616ec79688db400eb33bfb607b2389b0e59528e7961a47d13ed4c6b58b3a74b5195159c4b9f

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\imgs\website\YouPorn.png

MD5 6450b710fd29a2867c38df386a9f68e0
SHA1 810a8d95ea6aabe0c972d0b6508e5f6925380a0d
SHA256 691b97865c0d3a63f2c355c845d19de275df2e423398958bfbeba49c232c7e3e
SHA512 e8f2b9326cbd324722019ed739828cce0c95849aa5d2c476ebc92116205b705fea2e129df271a6762e6d8ffaec53591bd5364dc9989f724ebff4a56d7dcd7e66

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\imgs\website\XVIDEOS.png

MD5 c9ecd7bc83e811c27228318739b714e4
SHA1 c651f8207197a05f929500ad751ee95ae6cbe6d6
SHA256 2a196fb6d3f31d6954b8f14a9155ea1f2510ad8962b1aae0c83f55713e527549
SHA512 397b47e8e3cc9ec0832ab99efaaee5310292f5278871e2f1722b96b23d2d7bd6cf23f3d336fe4b5ba4b1ba04aa1c9c4b176621f9d62d556773d7375aa726d539

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\imgs\website\XNXX.COM.png

MD5 4078dbfe3b8988353e35736215705174
SHA1 4307b53e5b8d2cb05024166528ae6e7ea778a815
SHA256 bce2b9e1ecc71331cb5a01b838864238b82afd0b6b35c883abc80d43d3019ed5
SHA512 c5fe1c1c74adebec05c2c6b733826ccb8057885058cd713d04ad3163e0347936fd37ca360d59fb566f4b881048e4134bee80f0d6baab782c7d431fa313c8b22e

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\imgs\website\XHAMSTER.png

MD5 c5517e355c9a664bc771bfa384c59b5e
SHA1 5e92ec4ee4ec37cff1dde9183939a701a72e5763
SHA256 c37d05b34db93da73ed6b89d34bea4fcd772c8d78436e10f8035bca4127968b4
SHA512 bfd21cc0f332316dc6bc7a53fe003f1602a054d1ff87eccb476689ca11a60567b57309ae2e61fa0d78ad0962ef65df36ef9cab776faa9737565cd7f2b65ab5d5

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\imgs\website\Stayhomehub.png

MD5 51a3bef4a8ed67eb64b53fc80a03cbc3
SHA1 5085c35ff75f4671e4999f8daa7ea6d60d90d3fe
SHA256 c1cb1e630c157ceedc5639ebdd6eb969ecc37058062a07eb3feae5e04e6811fb
SHA512 43c11f9801ac372f4ffbdb84e10bf4a87cd45a82225d2c18a32d8f060446cfebb4bd0f4928600753d9197d6e28bf7bb6ecd0e7d37cb57d1e5c60e2a98c7354b3

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\imgs\website\RedTube.png

MD5 12180eba3992b446fd9e575ed1a1d37d
SHA1 43f8d806bc665c25f9f7615c0a115997ea16e502
SHA256 06709847c9fe6beb0103af1089bdf52a38216c9eef3e2411f461ec026f35ab6f
SHA512 5f523f4dcde8dd82527f6390865bbef67d6c7d8f6844a1b1df99657d349a1dd696f105f2325a981f1ad5b2d6aa8180bd5f8221fb5ea9a4fda3950d2eacda3b21

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\imgs\website\PornTube.png

MD5 c0c14287e49d8500d231a402f852c327
SHA1 6f14d86b16fee4c0b810701be972035843fd869d
SHA256 3312f5c3ccad8c1dd9b157ffb41d44ee3419961e5519defc9dc26d8d56a3a345
SHA512 544536c82e38f0a071b81e285d6d35848fcd8651ace0fe486fef4af66df651cfd4aa178a0e3bbd7a4893ae04ca6e30c1b4c437af66ceb54fc9d9b669acbfc085

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\imgs\website\Pornhub.png

MD5 42c74413c7c00e5b42be43e7c089dd8b
SHA1 980fdd2de05a9416a21945e2f9fdf14a7b39470c
SHA256 e5173778b3adb033fdea3b25b7842e7906e3fce0e629168ddb68068611c8d1c8
SHA512 cb4207c5a91ae0945c0ec6acb25f8e94a9a0727e2ad2f5da759845646f4dc76a480c97a4bce6a6cff84d6b5457650c567fb51bc5383561982b02bf8e263c0763

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\imgs\website\Porn.com.png

MD5 8429135d5d6e5e225d2e811e7a4f312f
SHA1 b91576d484925c4601bc123ca6f8d6fb3fcda12f
SHA256 1168e2c9f2e446cc43deeb645784cd6ac2f70bc6c07d0276736586b8437f3415
SHA512 0997b9f36c46b6536847c23b6c2d905cc28e270be220d44244191145245026a04acaa6394df168412d89335866f35c8c5778113b9f165d69b57de305b77025ac

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\imgs\website\Eporner.com.png

MD5 8174ccc0b2bcb0b854b4efbe5da0df87
SHA1 a882081df1d3b889f9c238922bdd01d68bd6ec9a
SHA256 5527364f0a111be46a9aebe9a4301c5ca9f5bca860da3905eaa759940ef3eb14
SHA512 28878d7fd50900cee876cbe7a1037d966564c82e9d8478cb4cde1487fdfd13df0709ad22815c46cdfd7bef69c1f27d46d9f86d4d9d8bfad80b1be8f07bbdda5a

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\imgs\vimeo.png

MD5 9ca17489938a0300681c6fbc5f5fa099
SHA1 3b7ff87a6152654d2f4bbd9a86c708a4a7751a46
SHA256 5bdb256c6435ba095197bc34b20f7f8908598d5c7dcf138ad511b94988a15c23
SHA512 327993d591491e5cc6b15b6eb305e7febdad7d5b1dcca0bc88055dfd425d61e5128b1da5e2ed15bd555e239cd0e06bb0adb78fe65b88e8a45f0dcd14b1cea297

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\imgs\twitter.png

MD5 215aa704f0832828172a52586b74a045
SHA1 c31ce4e7f0a3c7cd219077c2f0a3d386a439b7b1
SHA256 2b3e237bcca77ecb7e7d4c60de440597db8c6923f063c4a2bddd61e22f782b5f
SHA512 d8fa6fd35f62e7269be9e68a36540b4663c13d670a3a71e6251b6f4fe9ccababe4e6938a9054194a4f3261e1cc6a0eca26024094675bed768d67da128c690cb8

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\DABA17F5E36CBE65640DD2FE24F104E7

MD5 2bb69418639ae52fa1c14cf4c97e0762
SHA1 ed6b4e5f4ffc1d9e9c9a9e72e42bd889dfccaf96
SHA256 a2919b2f598a8f42cb154bd3d103060276b8abf62942ba6f03ec4ddbc0fba921
SHA512 63db2d71edf038f5e9dfd98c8c93ac45ac13001ac58cfe8641540fcb023a9935fa86befd0834b5378b1af593291f29b97646517f62a0befe3519f30931ac4a22

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DABA17F5E36CBE65640DD2FE24F104E7

MD5 c6150925cfea5941ddc7ff2a0a506692
SHA1 9e99a48a9960b14926bb7f3b02e22da2b0ab7280
SHA256 28689b30e4c306aab53b027b29e36ad6dd1dcf4b953994482ca84bdc1ecac996
SHA512 b3bd41385d72148e03f453e76a45fcd2111a22eff3c7f1e78e41f6744735444e058144ed68af88654ee62b0f117949f35739daad6ad765b8cde1cff92ed2d00c

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\imgs\music_youtube.png

MD5 926a08099974a4e5c9168f15e2e72221
SHA1 33f3b18ae6c64f45ae7a88b10a735a25cb9c584f
SHA256 fddc58b4924322f9ef0068b6a0f80bac1e1341bc4ffdc44029c8d5fb77fd5827
SHA512 bcf21e564b8479877124d562d63a308fffec567db01e3bc995299bf7426953851e0a78bafb6d56fd999140c5f7b0c5e62e26447d2d0b12a879f40ed34b235f5f

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\imgs\instragram.png

MD5 c87d815898e27e13f81b5eda1dfb9aa8
SHA1 762be0e8cfffef311f2b67e8d12b80983ffaf410
SHA256 737e935ed5f0377a57d3c8134193c44e7399275f5e18f84b2cb073830f0c6b10
SHA512 6087e6f8d23f264553b51dad0d1c0402b96d5c08a285f891d67c4e519bedebaacf8ad6ad836118968a22edbedc1c94ea1a9fe178847c01c8e1a14ff3eba3d0a5

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\imgs\icon.png

MD5 5ab70ddc4c532aa9286904a2c345e7dc
SHA1 6235fb0f399103f9c885ca741d76d5e26db9d79c
SHA256 33ca4eda1389b09205b624903e86a207dc58133d10a7ba0bbb7a4ba812002eff
SHA512 70256a8cc6cb0283c252ebc2e6e4c4b2291065dacf38f30b7856ddfc18cefcbc0f2c1a4c65f69db1ef79ac5ab55351d8fa3cf589db15e8d97621a4711fde446b

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\imgs\facebook.png

MD5 1b2821fff281e9491c0206f40ffc24e6
SHA1 f940aeaaad604bd72df26b4ddeadfd8801c4f075
SHA256 77e7f26fb48321505ca37e925e0586da2bbcc813f1373f2116f0eb0f2aa2375f
SHA512 e925fdf30752927e769271a9c7431fb06d26b1ee2030d4fb3ec49f134c571a85ed084a132852e5065de7fd5a28ab96eac2d973a7151e10da5e3e6a151b0dccb1

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\imgs\bbc.png

MD5 cefcce763d93d9fcade42c0eb7644498
SHA1 050a96ecdeb8cb8a5dede1126b67f1976476e8da
SHA256 218eb71f8a4b6cd56cc33b4d76fac9ec694ee78cf4a05ce01a73e92895f0b967
SHA512 6a564cdc758127a7b0426bd88c6ce97f1350fefcc70425b3b642ff4db9a7f8570c177fe24f158309304a13af8246a07ed972a3d0c8b9e7b90930caa180acc60a

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\imgs\audible.png

MD5 5471bf64c701620f6338cb53fcbedcd9
SHA1 192b9327fc7616b97be17844be9e7ddb336042af
SHA256 d55ee31c9a022421bd6f0427d150dc94cdaa28d43c077b93fd870064046020dc
SHA512 e7c794d0556d9cb9e991702336f9116bfe879288c0a62efe7e748c1c843ed3b90a4f35483bfc5d39d394ec0d600cb43eaee2a7dc48a02b073ecf7abd0855021a

memory/1784-15242-0x0000000140000000-0x0000000145EB7000-memory.dmp

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

MD5 a0e004af81cf0ab1aba45504c9edba2a
SHA1 9bc7204bbbf769dd9390e2dbca573ac5600e262f
SHA256 55fa1e8b8bc48e557074f6ca24c373534edf2ba0bd1dcc8899be59b3e3d79c3e
SHA512 ed15f56796a3a29375701130400bcda37457887504a3563cd8b3b760737de2fd0c63bbc569632f313247ff75686bbbb44c77df1ac2a67411f1f14bc9aaf75eaf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 bf5af3fad5839d11f2e488453e758dd0
SHA1 f8b85bac3002e71fe63f7d5856fd149700849c4f
SHA256 8ac0a6e22052cdcdcbf0c0c12f6c9cb293b0c44cf68401acdb4d83da486b486a
SHA512 a5cdbda1a6bfdf914d889fc327d59dcec4ac83aace82b4289e5d4619feeec4e1d6ca8d65fecddd49ed9695ffc8c2e308398c6cbeb70cebfa8a1b8f68b3a58591

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

MD5 55540a230bdab55187a841cfe1aa1545
SHA1 363e4734f757bdeb89868efe94907774a327695e
SHA256 d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb
SHA512 c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

memory/1784-15258-0x00007FF8276F0000-0x00007FF827ADA000-memory.dmp

memory/1784-15255-0x00007FF827AE0000-0x00007FF82811D000-memory.dmp

memory/1784-15256-0x00007FF82A120000-0x00007FF82A26B000-memory.dmp

memory/1784-15253-0x00007FF849A30000-0x00007FF849ADC000-memory.dmp

C:\Users\Admin\AppData\Local\CEF\User Data\WidevineCdm\4.10.2710.0\_platform_specific\win_x64\widevinecdm.dll.sig

MD5 36e5ee071a6f2f03c5d3889de80b0f0d
SHA1 cf6e8ddb87660ef1ef84ae36f97548a2351ac604
SHA256 6be809d16e0944386e45cf605eae0cd2cf46f111d1a6fe999fec813d2c378683
SHA512 99b61896659e558a79f0e9be95286ebf01d31d13b71df6db4923406e88b3ba72584ef2b62e073b2f5e06901af2c7d1b92d3d12187fe5b4b29c9dd2678444f34e

C:\Users\Admin\Documents\DVDFab\StreamFab\Log\StreamFab.log

MD5 d2f0ea43faacc0a0c09cbb4a787fb5c9
SHA1 f90b8472df30a9c6622c3a4ce38745b57d2b79b2
SHA256 4074d66bd0db3d5af20c64f201388ae59e31922bb24376b7c3725197fed596ca
SHA512 acf8df7fa631c1cf41b3cdd9f398e617e79e3359cefcd1788de5aef5e76bb74e6068f3655264f9c5cb9cad5d5cbff4fca9017e2c604d4dc68831b238b6a0f1a6

memory/1784-15257-0x00007FF826C10000-0x00007FF827165000-memory.dmp

memory/1784-15254-0x00007FF82A270000-0x00007FF82A30E000-memory.dmp

memory/1784-15252-0x00007FF828E20000-0x00007FF8293DD000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\_locales\tr\messages.json

MD5 ceb790fba4deef44621daf55db59ccca
SHA1 cbebd28e055eb0f6f7dabb43f216da66f7f9126f
SHA256 fc7d9163f43427466fcca3e616a1a79bd0cb106ef4feb351d3d69c3a756d47fd
SHA512 f5920994902b693d5cc702c8f0dba359a6b5a4856e3f6cb46e06bd844f9d7b26e2fbe315abd4b55f873b8e0c3b2ab9ade99bdb3f5c169a5a35642fbf0e051137

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\_locales\th\messages.json

MD5 e83a81a3231e50662ddfef250df24419
SHA1 4a78cbf15b850f666b78b49f530aba05ebfd0d69
SHA256 e306358b32d1211dcbe7cc76768ef253810a97637bb6543b97c8e2a77154afa0
SHA512 16d47906e1403847fe9ceb14352b022f9b8859f65ed25e7198e5efaabb5d41911f2843eb3438128052c434da390118994629c40486975e01c0f9bd6b794a5c50

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\_locales\ru\messages.json

MD5 0ac84c85f1d33150420cd13c867638d2
SHA1 606f4710a91315a624fec867dd610ba367a6ff54
SHA256 140208963c850e7d3d5e4ec7099f56c866e32a16894432f28ff873f431f4f95b
SHA512 a5f8ab879999550fb636bfe8fe36f471108086cafd821d23b944f5ae1974f4a7f0922cb7e25ec1982f86a1d8666ef86862bf7422ef5584bcc2c6541ee560f3c2

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\_locales\pt\messages.json

MD5 d2d89ca6b8ae9de14095638a7bb5420b
SHA1 3218700dc976a1d4b8d573e3cc058e2e17ac7912
SHA256 d1bb1e348b413035ddd754e1dd8fb5fac215ad8bcb6c91bda2e80ff738725e59
SHA512 2582b7af7f486bd9f61eb73d152daac7a95a2f7c1113d6304abf00454225dec8d5dfc5203cab4875dd5d46b67b711d63afe4a7d6cd9d8207f9c917c7fa483153

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\_locales\pl\messages.json

MD5 5fa7badad40df7eb7c06ad09236b5879
SHA1 a34bf283d450b24859c4440cc96845af01775991
SHA256 7162e18acd5f67a3e321fcde0dc75290c7c73c551732d733c74e377bf46fcc75
SHA512 9c5e6a4afbae3a2900e6bb1f1a555ceb9f576609aa7f0355b186038e7c50544f2e165bacf7f192a9ce2629f0bd6ad8b63997317b6050c5af5c023bcde7bb1a03

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\_locales\nl\messages.json

MD5 86b261d778578167451c624dc1059433
SHA1 b7a4733f71798f2dc16d7ccdc1ef8698d6e44ae5
SHA256 8e4959947f9781f8aaf253049b60ee0ba341571a745fd20c6a6c0033ca7991d9
SHA512 82ea33b09bf5753d2f0e8b9f3fccd92d4ac10d6031d485d6b5ff64f5b33f8687eccd24e72afb10b2d4b669f07e8baf8ca37fce7d78865615962864690bc5d69e

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\_locales\it\messages.json

MD5 45d6943781f9e3beccd977a4d38b2933
SHA1 e04edcaee5dd7e37f58460cb59fe92f69e4b440b
SHA256 624bcfd864df9675a08084de664bb73650a88d7e81f9c27208e872bb4ed3605c
SHA512 3d0de76d92cb31d97b1f53715d2bdb42bc3206159de248dc51df75b81f71a1547330e85292af8a73daa48453b8ab39067138a608adb3bff61412c35711921a7c

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\_locales\he\messages.json

MD5 031e9d83ceb124f494825619516a366d
SHA1 4452f54252ba866a0fe967b3993facf878312a19
SHA256 b41d5287c8d6b1bad251235e16ed223ad31fd008990d9359ad50358d77a5991d
SHA512 740027bfc6009acf759f48bd103785b39cdf85d3c0dc42dce21e287d8866fad95ab02a0057fccc5431663cb5024a9ab5ff7456094a78f4d48a2c080720a59840

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\_locales\fr\messages.json

MD5 4c2fd7bd9cb993c04431f837fdbe5625
SHA1 4ba7a6db75aa09463c4ef1f7d3bc99577f536cf0
SHA256 8b1136aa83c0958c70b5a97494be380807a1cf5e45662d2d0c74b7073075bc9f
SHA512 e6f6520f9e00f3278bb0d9fa2df091625d484845abf04fabeecfea53d1fd37e222ec4fceb9591ea0f872fb97ee531256dd09172f898c65997563d0a9a3df5984

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\_locales\fa\messages.json

MD5 124c759a6b544aeaa3ddccaae1f664da
SHA1 b8e862bb661481505f739d6ea9be26ebd323cc5c
SHA256 70145621753a3149757fcc320c567ddccc61f1ceb833720acdadc4fb09c6253c
SHA512 2fcbef0627320765e4d4574732bfa7ce11c3ea16acc25d4940dc1db2a58c0064fc052e7c05c83643f2bc9b7fda6fd140ffd9e6d4228be9ae731a2b54871d2faf

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\_locales\es\messages.json

MD5 ad5865b4f0521ba33c9f1d407206604a
SHA1 8511009ecf4b6ea05c9bbba7b40f2105e5a8792b
SHA256 dfa2def6ebbf1ccf735edafa507bce95ed624ecccd91717949e96f58d40898db
SHA512 f2c3203a4c25a892e8dae509ffd4913600032a45d4e79a4545bd3f3d21da4b9fe87d690af27d96634012cfa6b402f5d7ee1684accd6019f815a144fccf714315

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\_locales\de\messages.json

MD5 a37cdfdbd6e8681688e8881a58450e0d
SHA1 5d4396cc85db229a957cb9f251f307f70b344af0
SHA256 3c3560309e09d5cd91d53a946c943f7e4322e825cb16de27c4d5d1c050319d36
SHA512 9a25b11b53c512b06d57a74a15c62d9099606a805f6408841f542c1c383192f69a980243ba373958528fe713c8f03ec380cd39e47c30a4ed9f11fe6d206953e1

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\_locales\ar\messages.json

MD5 316729234a3ac2cd022c7e14afa21bf2
SHA1 29a4ac4e32d413a7976ba43de7119274f78e9468
SHA256 5973951d6113e9419f006895978465117f0ce04b13bb0a40c97c37c403b9d6d1
SHA512 ccb898b4f7ae09456d3149b0b49ac46eaee34199f99faaf7d76265c815e67f279b6c285304dfbfa4544eea547a1a2c25d7f9241a63abba3dd1aae7e7036a3f2d

C:\Users\Admin\AppData\Local\Temp\scoped_dir1176_757698807\CRX_INSTALL\images\logo16.png

MD5 1d87ff5077134df7cec7aa8e93773348
SHA1 e0273177937d5a5a31c3f7d5b3de67d6b7928fca
SHA256 c44c37dc5c69959f778dae6eb3732bb10b25e2500dcd2a015932b1cce9989de2
SHA512 1961570758e34df0b2e922196b8ec9d19c59d2ec8d1824f581332dbaff4ab2f849be9a9f67062db24553003a234c9b5f9a139bf736d023f6c3f169b10de117e4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 1fbe2a2e8334e5cbc152f145c2e6c0d6
SHA1 6878a994038132d13894c800af1aa03cca7814d1
SHA256 0760c3f82b1cc3b74b96102f901d076d7e5f749def7c953be4b0fff75d32c2a3
SHA512 fd1216814b14a88478b890813184c6fc41aed2e76b3d0d8dc9391699701beb352f94388486ff77b91383591ab55a21fbf909af64f13a53db207a4bc0def26eb2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 68803ed19c3251b7d478b43543d4e983
SHA1 96649d7ca05dd68ebcd632467aac084d967685c3
SHA256 f06b7948b8d264c5196a6fd775a8cbcdb7d47b27af11d636c835b441ce9f3c3b
SHA512 f6dd4ff0b1c44e837656dfc8c83f9f2324688ce165a335a0797f82c8a33b60b1243665de098de0460bbba1e2e9cabd7c7cc65b6dfe90368489b950a527c27bd2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 5a1dce787f0f225f190b732db8f0b156
SHA1 25281a88a6bc5b9ba68f518dce1980918cab5484
SHA256 8a8f7b6b48deb6cb5842c7dc98bc208bac73af2daf37443d877fe59252bbc607
SHA512 2674a68d21fc76b96d3a3fa6f931024c9a9564769b9b543b50206615cced55c6edd0aa77418c391001aa1697b1d62d7c0ab900afbec8635c91f221e47380d560

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

MD5 dd2ef45222dcc9b6b67aa54c645fde10
SHA1 2fd33cb892847c5e543dcac1ba0a0af24cfab911
SHA256 fd52b9551eb2e4c463cbd7ea8728ea0f53769a22918872967f35dedb7a57faf9
SHA512 f2cc582d6d13e283d3d882bbbfee089bb00a52ff6369c72d1afeca3a3a2728096910f204fa34b4a241658443be6cff5a8e66dbeef4ff19f806e6779544bd2860

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 85cd5b322af3f62896251d9a29505098
SHA1 fb60f612b9014ca1d23d46dc260a48a2cd075d3d
SHA256 f9ad5fca231f9d0634f46f3a6d5f9e559099f6ccab00eecfb46d6cbd9354d022
SHA512 6ad802ca049b3a48d82e8992c07507b1581fa763638e48453d38acbd26d5afaf29b03e089da549e67ea81d37220a74402c4e6a8a25cb75a0f8d08d6b14b15458

memory/1784-15610-0x00007FF826840000-0x00007FF826C01000-memory.dmp

memory/1784-15607-0x0000000180000000-0x0000000180066000-memory.dmp

memory/1784-15606-0x00007FF8393F0000-0x00007FF8394A0000-memory.dmp

memory/1784-15603-0x00007FF826C10000-0x00007FF827165000-memory.dmp

memory/1784-15598-0x00007FF828E20000-0x00007FF8293DD000-memory.dmp

memory/1784-15599-0x00007FF849A30000-0x00007FF849ADC000-memory.dmp

memory/1784-15604-0x00007FF8276F0000-0x00007FF827ADA000-memory.dmp

memory/1784-15605-0x00007FF83B240000-0x00007FF83B276000-memory.dmp

memory/1784-15601-0x00007FF827AE0000-0x00007FF82811D000-memory.dmp

memory/1784-15602-0x00007FF82A120000-0x00007FF82A26B000-memory.dmp

memory/1784-15600-0x00007FF82A270000-0x00007FF82A30E000-memory.dmp

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\StreamFab.ini

MD5 7fa051257512da34c45c2edb3e90fbbc
SHA1 7eb40833edc7e2cd853a98b6fb15b003424a08b1
SHA256 cc6b88f288910cd069fc0ab674add2244e8190d3c9740f0a86c1916e6aa1b1c8
SHA512 7115b4fab24b385dcdea90df7680a19bb4604b05d773397d4fa06d0275e1e854c4ccaed0a49a78b121bacfe687e1862ea38ee6d7eec27acd863b8f9cff549ee0

memory/3960-15616-0x00007FF826C10000-0x00007FF827165000-memory.dmp

memory/3960-15632-0x00007FF8393F0000-0x00007FF8394A0000-memory.dmp

memory/3960-15636-0x00007FF826840000-0x00007FF826C01000-memory.dmp

memory/3960-15633-0x0000000180000000-0x0000000180066000-memory.dmp

memory/3960-15634-0x00007FF8011F0000-0x00007FF8021F0000-memory.dmp

memory/3960-15629-0x00007FF826C10000-0x00007FF827165000-memory.dmp

memory/3960-15631-0x00007FF83B240000-0x00007FF83B276000-memory.dmp

memory/3960-15630-0x00007FF8276F0000-0x00007FF827ADA000-memory.dmp

memory/3960-15627-0x00007FF827AE0000-0x00007FF82811D000-memory.dmp

memory/3960-15626-0x00007FF82A120000-0x00007FF82A1BE000-memory.dmp

memory/3960-15625-0x00007FF849A30000-0x00007FF849ADC000-memory.dmp

memory/3960-15628-0x00007FF82A1C0000-0x00007FF82A30B000-memory.dmp

memory/3960-15624-0x00007FF828E20000-0x00007FF8293DD000-memory.dmp

memory/3960-15619-0x0000000140000000-0x0000000145EB7000-memory.dmp

C:\Users\Admin\Documents\DVDFab\StreamFab\Log\utilities.log

MD5 a74a9aa89fc0b13bbbbda59e98899141
SHA1 a9abefcf5b05a3acfe55fe8889a4e57b6bd0eb93
SHA256 c619ce71ef5e911f717a1e2ce776528dd07a1f08d19198931f375c5788c5f40c
SHA512 6e7677561b959a57322e8dd78ac465e43f12ebde17b641bd4281906f0bc4b84f7b780b6abbfcd98d3d8859726cfb57292e9253f5a2d0b46339ea56d23f8cb0a0

memory/2536-15719-0x00007FF826C10000-0x00007FF827165000-memory.dmp

memory/2536-15899-0x00007FF84A110000-0x00007FF84A112000-memory.dmp

memory/2536-15900-0x00007FF84A120000-0x00007FF84A122000-memory.dmp

memory/2536-15901-0x0000000140000000-0x00000001412B9000-memory.dmp

memory/2536-15905-0x00007FF82A1C0000-0x00007FF82A30B000-memory.dmp

memory/2536-15912-0x0000000180000000-0x0000000180066000-memory.dmp

memory/2536-15906-0x00007FF827AE0000-0x00007FF82811D000-memory.dmp

memory/2536-15909-0x00007FF8393F0000-0x00007FF8394A0000-memory.dmp

memory/2536-15907-0x00007FF826C10000-0x00007FF827165000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 684317ac1c4de8751f8285cd07623022
SHA1 5c845397e08f7cc53588e6fbb1e6964b78178787
SHA256 d681ab17e8ec21b69a6a8bdd9bd4947f3176b1df726e8418ad49e01dcd363809
SHA512 0d5e0980412b823375e6a3630d7eeeb94c8354180aff640031148827c296e1b6fc1600134a6f7224ad2b983a48bfc9e9e6213077bace5c0b7cdaf7ac70210272

memory/2536-15904-0x00007FF82A120000-0x00007FF82A1BE000-memory.dmp

memory/2536-15903-0x00007FF849A30000-0x00007FF849ADC000-memory.dmp

memory/2536-15902-0x00007FF828E20000-0x00007FF8293DD000-memory.dmp

memory/2536-15911-0x00007FF826340000-0x00007FF82650E000-memory.dmp

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\regRecord\localTrails.it

MD5 669581637dd335f436bfdba96d634b82
SHA1 2816c0faa5576810365c5707e029033d2ac1f6bc
SHA256 2d44191f544f9b9d665014568916512fce9dea0a995ccdc7ac88820a82965d76
SHA512 39bbd8227ae3fb12f9928364e1772b82de6cfc8ffb436aa6e7238a93eb7fabdd60567211b99f4aeb2e834768ec3a47fc895b924ae38fc6e4d8ce22bbf8cfe457

memory/348-16226-0x00007FF826C10000-0x00007FF827165000-memory.dmp

memory/348-16227-0x00007FF6C4070000-0x00007FF6C4875000-memory.dmp

C:\Users\Admin\AppData\Roaming\DVDFab\ClientLiveUpdate\update_config2a2c81702d7d866ba36cf033ec0cfe68.xml

MD5 a32afd801e1ccc839991254711906716
SHA1 a85a9cf0493b505a6a3052e229426b1760c233ef
SHA256 30af54392b82aeb7ee665b6bcab3cab611deea8324f4c7c62ca294470c03c9af
SHA512 28099a5d47dbcfa1ea74a2c4defba5778384c2024a1b7edd08f5c993a1d0f158d0627c11f6f49262788d149e5ff16d3fcca3fdd2e9246636ba432293e3f49cd4

C:\Users\Admin\Documents\DVDFab\StreamFab\image\eb7700c3-4d41-491e-a802-e6e21a02b88b.png

MD5 ae7d0020a9ad0fabdd374cd13be54d76
SHA1 8011e87787e5303e80526211fefd97965b803af9
SHA256 da0b38b5e0eceae5e836a1e458e4532d97abf21a702bdd8472dc5b24de746fc6
SHA512 8f22702a2c6c330422555b23babdc49887df540f227ff0e6625b520c984f65729b77903098d2ed8cd2f42620b9b285e68c70cf2b90254a416f8304b8b133295d

C:\Users\Admin\Documents\DVDFab\StreamFab\image\9963ede2-1333-44e7-8de7-57d80824acba.png

MD5 a9a253e051313f34d21e7a6b8e68b2fc
SHA1 d3904ace073b67f419a7af08b004b6ea8e7e1a10
SHA256 f45958c75a5e67e573d39cdf38d751db736da45875ff9c611442c4e85bb0543e
SHA512 7b6090fa4302b59f61c21916b7e7182607940e3e4f407ae84e83f6a0723ce5e87cded3b31f1dfaa9077774e6c032e080132e361a184ca654fc588e2762877927

C:\Users\Admin\Documents\DVDFab\StreamFab\image\7b15690a-c3b5-490f-8cff-b161cbc26f4e.png

MD5 11982c577d6f244b5ebc1a2717b0364e
SHA1 af35105b4b33a7c12007145f049df91c1f6c9907
SHA256 7bfcf9c2ed88b2a1746b7e78f83759871891ce353c7146eddcdca64e3cbe82f4
SHA512 b27e4f89874627893ca1863e3e765f6606e583aef9e3eb94f96cfaa1ef78fe73bf035e017d4417785d11f86cda699f69a6a97b1b75e8f0784f634fc041e2c814

C:\Users\Admin\Documents\DVDFab\StreamFab\image\1383bd28-c6f1-4785-81f2-f9f5baf9f4c9.png

MD5 762e4b2cf6c21b44160c35597bc22e00
SHA1 e7c43b5b8853df248b4652634c203aa0e340bd6d
SHA256 11a390e4e43257cfa497f4c293fa38de3a327eb8f0c44b28c5746748691c632b
SHA512 b6fefea54406a0463d99df248bf6fac5cc54007479f72d0ae0cbad9d6cef4c8fdd0a8af9eeb002c9788f43206442efa308c608eed9d4a92b407a10c18f2db433

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\StreamFab.ini.UCqGfM

MD5 2790962a76dc9fbec80c4deba8b597ab
SHA1 43937ea361ae9023209c511dbf5f5f08c09b6094
SHA256 6cbd0b42c0dbd13cccdae0e7dc3a7e74fd0a8b2e3393cf8b378441353b9537d2
SHA512 0f19b9c1ace121b48863110ac4967594bacca5db6fcabf65d88f4934963814095165259a19ca4645528bb53c4254727a07ffb4f39509dffe5c097113a43287dc

C:\Users\Admin\AppData\Local\Temp\Advertise\Advertise_2000\21c63f02-2e27-4fa0-ac96-190baf8c9d1b.png_temp

MD5 e0ab92d17549b16eebe46e3c5bb4fc12
SHA1 e059cf1507b90a13d31271f67256b19dc3e79703
SHA256 8842359dcf4ac69cd90a794ed7bf28cbb0b136c67e1e89843be7dd0203a69254
SHA512 e9cffdc29061c942b0cbcb8745c2a3647c332dec16ae02b8770dacb77769ad7dc6c0b3ba3468d88f88c266538c94a49c6efd9a7b2420bb53b039fa4ab550b60d

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Local Storage\leveldb\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\StreamFab.ini.lock

MD5 869f498d067d0992960a94364f88164d
SHA1 9fc0710200a780a01efcecdf93182bf991de6388
SHA256 e9b2d7e4da83f2801838c51f69c042bd9f4751116665238e097b01075b033e50
SHA512 e70c1e7d1f21084379212abd8cf1fb5f4daf4ac05e89f60189e96f9dc150b4ff538cae82bf0143d8171d7ace11c983daba1ad14a102fc8a33499c87e9e38ff12

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\Advertise\Advertise_3\b9b19d73-892f-46da-86ec-7777a52674f6.png_temp

MD5 40c14380bbda88514d4490d61836ccda
SHA1 4a8ba20ae0cf2a4134e68592c1906534b4472f60
SHA256 1289bde73eff06cd8f6d6404c996cc6c2f2ab8b47c9149eded4ba7d8a273fd61
SHA512 7a731b3824ae64ea82ad38c74bfab5fd636e5247c33b1249449096fc89df8cd6cfb757bc6a2480481da7081720db6d52dac1610fb378ef0caa36f4c4f4eeebba

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\Advertise\Advertise_500\a0fb72b4-67e3-4423-86e0-ec965f4944c9.png

MD5 ebfe1e7a28102199afb6e9c871ef6840
SHA1 733c8b2fccdc41feb8cb45b2a1915359b62f0c38
SHA256 3eb5a78f81d63e510ae2ae49986368b2ec8fe8752562da4c5da40da4a3800496
SHA512 4b85adbcc53deaeb15ee070c8576c767dcfdff3f5d025ba516100d1d4f2989319df8ac9b05a4007b1227b683cf88a70a1d7c39d613c4a9789fcd3b93f6c34fd9

C:\Users\Admin\AppData\Local\Temp\_MEI50362\setuptools-56.0.0.dist-info\INSTALLER

MD5 365c9bfeb7d89244f2ce01c1de44cb85
SHA1 d7a03141d5d6b1e88b6b59ef08b6681df212c599
SHA256 ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
SHA512 d220d322a4053d84130567d626a9f7bb2fb8f0b854da1621f001826dc61b0ed6d3f91793627e6f0ac2ac27aea2b986b6a7a63427f05fe004d8a2adfbdadc13c1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e220bdfcc4c4d7f420a723d93f747e00
SHA1 c3e15e73f9c2a30e4166b55b7186f1f05a6726fa
SHA256 f77cb6c457b2e8341da4a5963b682578996896a4c6d717670fbebfb9d3e64e15
SHA512 3d599a9128d5ccad3b9b48feff79ca2eb3da5a9e2d3f4980d58e4dfd5b700706c87c42dbd0ca8129034b4b301cc0f889604c67872b8a3f728e7c71e8a63d67d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 1041b17fe76b2683ed91e32230a8a8a3
SHA1 3846a20b43edbced681ffa6d64883bce38615682
SHA256 73e546d36485636ad0791fb4eba0871499e09348de3d8d0d3bd8c0ea8140a705
SHA512 0c6437afdb1244f69976f7030c8d293cbe0b4c7a9baa2b3da1255019e1e29996534dac0b1a8f6819e6e979b9e365e387081495b96ad0eff794bd24970d00d211

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 115277819d277d50eedbb6885c3ea329
SHA1 5289a784ed1407718b337425a7ee8f2244ada377
SHA256 fb435a00b429037d6b293b2c197e45fb9d679cf583e484015eb66e14f268bdf1
SHA512 9e4c4568182b5b5d3cb2c444c0dc2dbc735c84830912aa759fcb2f908afef1bacb62ac0765d54fdadb1783e04c1546f2aa35a5254a1189af2e102136ec761e38

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 227dbab02a24b6dde6b8672b9dd102a8
SHA1 60bf0b9fb46fb48f7ac3458460f9416b952fe5f6
SHA256 174f21be2121daa3c5983b3c30fb84de63422950f0962fb53bba3fb1757e9551
SHA512 85d889281f6930dce81f9d8c8def2983bc81f37e94d02eb85c622d7d7d518c4d866af270039ddd9eabd739576fafe9eb81df81cba736356ec8a5a09a064577b0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_1

MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 710098ae5dd48594ea04313bbfeddc3c
SHA1 2df344f01d6b02425a63125b57db64b8a58a03ea
SHA256 99699ba5c27f9b19f6ca244a149388c2325f05d5c0906c71463ebe8d73ae9473
SHA512 5a7719d5e217c91401e89e7b2138b1c681b21ac32107f74a654faca9ac8614cd9b9dad7550e22f975030bc746c42aac0e0b8b8c966f33ebe04b2968181073d5e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0148fb5953353245bb144d5753562552
SHA1 81dadb15f98184053e5e8d56136605e3aa8c602e
SHA256 71cc9e6cc128bb1590a429de9bd5a0e1892754433cd6c9956e044fc2302a8353
SHA512 30da8896987ac0b4f0c6e20d9726af01216ea89b245f9e10c1f15f2a6cb9d46a7663f34440e614ddea941c3558b9769e4e9a5ca1a34e3e5d8323a4c69642a0f8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 a1e85ed642aaecda07b62e24736a81e3
SHA1 d74dccc79e683f6d69fc83afaeb422c7fabe94ca
SHA256 4ef563ff5f94fddbf10f09de975a309bc9f9983d868b8614f270ad4418dfe80a
SHA512 2b1135796a43db2a21f640373a83a7dd7e532b7df34b9da89a0c02da8175aa06590523c863f953a1e28f640250bb7367ada56d91c387fcc19bb42305a53dc1f1

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\StreamFab.ini

MD5 fcdb062d2b489fbe65a9120f9c571ccc
SHA1 860425b6c94be3d773fa7ddfd8d2396f02d8fc00
SHA256 2f33da18f96218ac25645f177e7170e17aa138f67a8e5b4bef3c1d6cbe173741
SHA512 8c8be74555ada0b04627b94f6332c385b056b48a7d1222cee3b8053f8583c86cf078f47e83e478488049f58ba5783f4619482ce76e2d4c027a83219241d0e1a8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e33189dc3daaf70ede1f58e6278068ea
SHA1 7d92131e71a29613646505e633b5acdf98cb2474
SHA256 a4261ec2e65043a39ca6b52fd159ef081528d2f83e9a852b6f754af261b9af89
SHA512 13bb1686826eb7dc2a04111ea6d2b1f89207c393194f378fea3bbc150c4ca856b7b3afdc07459508371867aa21439c8da30818ab0ccaafe383eaf9e8ac836531

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 249d49cb12668de6230f5b49163c437b
SHA1 4667f4a634c5241e7555ab249687fd5fc139c07b
SHA256 2577d3b61773ae549110d0903ea88ae83671bb521a81bd0cb4999e2ff9edd9be
SHA512 43b418d7ba3d968945f540e08da74f2b192d6c80a5db42f230b601c04efc2b8669fdd5e90c3fa1788d65e2349d0fead33091d459f6590f9c1d05b8ba9b945365

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9952c3ca296599ef1f3a843ce1531d4b
SHA1 785bd57fce4652b83f3020a5d5f5d6bfaad30082
SHA256 c9c80ef7f866eec41b3242b687e68b00bc1966fe3729ba6858122f1f3c831ef2
SHA512 5898359e5660ebaf55f5f472eaeac368a32643565acb1cb5abde8fbb592c7a8552a5efbe16c387bd35aa311d5b918c3047781ae4a5f3a167d60adb78fb3fd3ca

memory/4676-17150-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

memory/7112-17252-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

C:\Users\Admin\Documents\DVDFab\StreamFab\Log\utilities.log

MD5 d165a79bd25d8da3c4f12758dc53ea2e
SHA1 046fe42f25747d1615d58de5d247a3076e7c87d5
SHA256 29965e2b9ed17303c72f4f4e0142f1d9f3360c44efb0e03ea25f3073863dac4d
SHA512 861669d89ed6bbf5a400a77909b8220bf4905cda45f51ce66283f3f8ebbe374264d9d8022aea99f8c0f3ecd6d46601fa6bddd379a9ab60a1499392188f00d445

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\my_resource\website_home\white\css\style.css

MD5 7ad2c65254f2500ea603c80c1f33073b
SHA1 f909769560863139b367cb73757dea2a629702f1
SHA256 cf620efb75ea748796708935e81bb0fb898ead3414bdf86ff1ef26403d10e2af
SHA512 33cd606c4045a3767384b9cedc8c7f945dcc9e9c4a7a4930dc4bcb0826242b880d925e2e2a7e9cc1dece0a98c3a1964e61f80fc852ada69b47fe36278fc1fdab

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\StreamFab.ini

MD5 a1de1fdde36ff3d945f82ff5f166761d
SHA1 24f3c107b1af1a3de1ab0807dbc35442d98fbf9e
SHA256 1d9647a0d535edb0e47564a1eab75fde47080ffd0d092625ebf264b7775c525e
SHA512 8fd018c00c7989c3a447d2a132f7da1c21af4046d4207a613ff8199418ea717f7995ba2078996f0cdae3b1584e4bcdb95e4d9752abafd30a8eae4dc3831ea994

C:\Users\Admin\Documents\DVDFab\StreamFab\image\fc287e9c-164f-496f-8904-bf34e2648c4a.png

MD5 771908fb0ff4c602f89d19050fcf44b9
SHA1 4681507c80178715f9c1fe97fe268d8673aa2676
SHA256 848ecebf3150fbed74785dd742dfc015ae83784df721d67762748dd02436ce86
SHA512 5cf6d9302f1050b667f72cea33b71df4339c5a6cd260b3655be6c43373e0f79ff2a0a7cd1e49ec634136b98a434d70c419f9d866c9d892490e8459b6e30e7f49

memory/4676-17638-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 94e1e4fd8837740741d127989b018fd3
SHA1 f339320866f6d87212ea5ee580399290eb51bc9c
SHA256 58a37f24fc789ea88c31b73c778c62fe35ca512d1cc4d37e4b966773e97fb1b9
SHA512 6d9066d2f37f0e9d7695115f05abe0ef35f3101c4c05643d8dd63f6df3d2ba643c688f51d034a7cc00c3c442cc7ebbeb8b456d189354c47a3e98882c24a16fe8

C:\Users\Admin\AppData\Local\Temp\products\Blu-ray After Editor_hover.png

MD5 5aaf1a4c9d47dbab58f8c35868413d4a
SHA1 c0522bfc08f2dcaa23881d3955af2fa8c0e20176
SHA256 e63b557a180602c58a124221466d72c345edae965a81229be8de08d149d9ef7c
SHA512 78b8f8014f2529938455cb05ec7f0fd84710333f9a105e834dd3e88fef9e5f7479be4c883330d6afefddc3871f7c4f05bc09d6e833b66b3f2af880f1d1dde979

C:\Users\Admin\AppData\Local\Temp\products\Blu-ray After Editor.png

MD5 8e8cae71250e7cbc00563fadbfc5444a
SHA1 ca61b98480631ecd64f1ade9212e80add159c6be
SHA256 6797daf131db3bd7e15768a4b7a076b09c290091fdd6aafd998759b603191377
SHA512 e48d8a811d948d20ccc2fc36113d35952cc515fad731236926f6124e80526fea3e8abcce7872b0a94ab2652e02e18069ae85f500363608812f2630099c777ab4

C:\Users\Admin\AppData\Local\Temp\products\Apple Music Converter_hover.png

MD5 f300e1645d5b43f17ce97596d1cf310e
SHA1 36a2cf08a3846cc50ff49430231f1542022ee703
SHA256 74ead1f98d15fbc1b1945db46431418385031d9c46651629a27b802ff5d4c461
SHA512 bf63d34c6a942ecefb189f2974346d71471160b989dea049fff2f4a07af17da9d68350da5767c1e2e7ab18e9a44d67e663faa8d387de53f6270169373b5f0c55

C:\Users\Admin\AppData\Local\Temp\products\Apple Music Converter.png

MD5 f4dd87f07511cdcda753a80d589422af
SHA1 41f0c9eec2bb9c17235e019085fd690353ef3959
SHA256 b177ac42628a0592014de81f9eee25c218e7b5c0dfc78142c900e07977e1d254
SHA512 e357b3b39f7f19f9c0ef8002b156ed76ea68f1eeb5eb8d487a9130ae15742c36b3b8bfb6bce9fa6316189d254f81131ca5774d94a5799d32d97c0359197abeba

C:\Users\Admin\AppData\Local\Temp\products\LINE MUSIC Converter.png

MD5 ea996cd4ed20bb17227afe4152017ed9
SHA1 d95603466e4a7b5e6a314fef771008a98d83d26b
SHA256 175edfb90d5d8264744ad26bca73afea315a8eb71048cd9899feecb67217faaa
SHA512 9bf0a918f8750bfd5d09219bb11945e8e3be1d31f0605fa81fb302f0ca1fb5ec44af7a214c67cf49869f086dd8dce5a80b4c463501b97c5f2d26c4e5385903df

C:\Users\Admin\AppData\Local\Temp\products\TVer Downloader.png

MD5 23407d7e8f0519009ff6d0c198966c56
SHA1 88e32762f886011ec25c8d1d26753a608f4e150d
SHA256 6ebcb33facef0d8e95cdd3e82ebe41b48a24916263f910d9a256d057a9717fe7
SHA512 0b1e19c174f665c1dee812f4a00e2ae9874a91165e794b7376c7d381c50d89e9ff5c44e5c77ee28a37908100435766d9746226bd03eb4cb634e0433659557d3c

C:\Users\Admin\AppData\Local\Temp\products\TIDAL Converter_hover.png

MD5 f9230f858af28de6d5b6523d2673781d
SHA1 47ac446d4050de504f31764dc5b3999952160b22
SHA256 f1d399c892820f1165a8712fb57a798e1fd0d74c68a24d069393ba770ac2710c
SHA512 b359fc404745e7f6f9118a5a1ca27b7e8948b1e6e617a106b962b84cf951fb16892a5adca4920dbfc69eaa8063a7f53f4a8510736237a4dcfcccf862400655bf

C:\Users\Admin\AppData\Local\Temp\products\TIDAL Converter.png

MD5 d975c87d736e04c16ed2fb2a5aba5e27
SHA1 a77580628df08967806dad7307f41dc6af21bdc3
SHA256 ba62172b6ab1f642705f95ac0b208df7410bb79c1d43d585d5982c5859f825ab
SHA512 a8684512ac091c9a6f565a8d08f199a38358cc48242dc9cd2efb8048e279abb0676751717a3eee5aa28b7ca4cc214c9501330eb3d95eb40f12f662b09f2f97bd

C:\Users\Admin\AppData\Local\Temp\products\Screen Recorder_hover.png

MD5 619ec0a6439442a762f0a5f827225cbf
SHA1 24bc357e310f000caf68789c523f394efa35b090
SHA256 6b533985e73d2dd62752fde2c9b7e60d55c9f3803da99cda747a139334b5efae
SHA512 303c0622635329760a72dd095d3f0ac77092ce34387bf81572a4a1d2c4c2ec94277daa73ea1609499e6d8ae358d94e964ffbe3c515e6feb9347b134de371ce7a

C:\Users\Admin\AppData\Local\Temp\products\Screen Recorder.png

MD5 848d88c2ce7ad9e43d5b32715726f555
SHA1 75472a7cb019543aaeededd0eb13edf1ce309740
SHA256 ef1a83c0298b8dcd2eb58506ab789782567dbf129ab27b98b0152a4171b9640e
SHA512 5fadc3032319a44d94b9f6b85e2503b72e1a633aee735f698036b57de7bde27d81e1cb6f57af4559f10bff94963ac86ef9a2d76bf6bb7da9f086312d05b5938b

C:\Users\Admin\AppData\Local\Temp\products\LINE MUSIC Converter_hover.png

MD5 a966de3fe4615502e48f15bc0d2743c8
SHA1 9f61c245d79b0657904ff9b0d795bf5ae1dd1a3e
SHA256 1b7ad559cc55bbead951b2f2497717289709d7fe4d09c5c5bc1fa50b04d257d5
SHA512 13474cafc3ce2e3002497a3dff39fc6af61e3964549bac16de4cc06ed178aa05bc6a63b4b5978f43f506163e9cafad6900da0c96360fc019251b67729672175b

C:\Users\Admin\AppData\Local\Temp\products\WOWOW Downloader.png

MD5 420e755dc759bef33c9ed1a56da4c88d
SHA1 94cc1c5c92888802ca11103589c896867c75726d
SHA256 54ff59873cd5c332d107b147b2d012f5fc1d7de10ae135b3a32d032350cb6336
SHA512 456e5e574316bd8ee0bd4e5402359b8fbf9a721450b35090dcd059b34a9c557baa600209178e946266c662c2c896e996c9173c329dfa1fe1c1cddfc10681db32

C:\Users\Admin\AppData\Local\Temp\products\WOW Downloader_hover.png

MD5 8f760a71a32488dd3f50127f5c48995d
SHA1 fdd7a4cd0f2a04641f4d2a0695262918dccde188
SHA256 642980d1f6439b61fb6097321166e8c5da70c3e5be8097b38fff83e9ad41b4fd
SHA512 90a8e3de43ea27a7122690b4fd56886bf99f9a00502d2238b5ae398a12b2743d920951579cdbabf5255fc4d34b403d5a31bac8b9e2c42a994b4e3c2a933617d0

C:\Users\Admin\AppData\Local\Temp\products\WOW Downloader.png

MD5 f8ae0f53f4d441e50e89e8d30be4611c
SHA1 57aa8ca66ce8b7fdd718a3c088e1b83eaf5fa716
SHA256 3e5225efebdbf98676a83595aee148c2129ae8df2c905c7f844eddf9355baeb3
SHA512 a35e1e0ee2081954ddc9f80a8b6131542f95470138b9e38d6d3e1092bc90159e82b561be067cb459682fa67625dabedf5a6beab8de82fddbc678c671681307c7

C:\Users\Admin\AppData\Local\Temp\products\Vocal Remover_hover.png

MD5 036d09aefa510d9a265f53466d4f335f
SHA1 16a3ffabe548354c0bcbde1fb33888e15ca60dbe
SHA256 3981b0b6e646d86bb3ce97162ecb5428d1b29c2e0fdf27b71ff1b62190257a6b
SHA512 f1ef2399c401012ef60a73ea47d4955d596adf9e1f41e40580533a67cc2efee9644311348834c6842f8060275b6b6dafd05c208698a7fadb19f93fe7ea121350

C:\Users\Admin\AppData\Local\Temp\products\Vocal Remover.png

MD5 389c16247548f7167170580903d67a63
SHA1 be591e81eac676aca644634d727687747308328e
SHA256 8657f232c7a789d38f2251754b09c265fce9857104de1a4c283bf73d33b7d695
SHA512 d356ce3fb09cd5c7ac2fb7a57258dbaf20c622983dc5c6ed6ceffc4fa7993ade35651d4f7b39c15089af9e16a20e1f2a6fcb9a517d7cb2e37a8f7171ea257f47

C:\Users\Admin\AppData\Local\Temp\products\UHD After Editor_hover.png

MD5 3c55024da2942b444c8ab565b6c606f2
SHA1 20d3800ff4659e144d66face4cdd9f0cdeff5fcd
SHA256 cc4a01384a00638a1350a868d5cee51958bee64b6d16639ffcb54eccd1dda1c3
SHA512 7194aa3651f43a78a45e04928e59c696954432d9cd654104f90f08d7334186c5079eaf13050eee277f8c2677865f98adc5b7c61c6ff37898b4704855b8964056

C:\Users\Admin\AppData\Local\Temp\products\UHD After Editor.png

MD5 9cb6b04af69433ded86dde66d952b8c9
SHA1 3cedc44fef8f33b0a44a136e05ab8090c1fb299f
SHA256 a18f17139707e8e852f263858fe5bb92bb894aab6d485f3a7c9b47c1a06c1d03
SHA512 5b32d34288a58e7b2484e2504f8ba9833118061e2b383d5915c93845bd8700288e6a0225acd227645e2160a078dfb6a1a23aff47b16cae3d106d4061814ce1e2

C:\Users\Admin\AppData\Local\Temp\products\TVer Downloader_hover.png

MD5 af8643c38f161405dedec2fd8a774d70
SHA1 3c6af51df924feca9ea55783ffd65c5a3486ebf4
SHA256 420251f0d8214b288a8b6ad5049897b202edbb6d14efaa55587f3c02f66e40dc
SHA512 abb8d565c6c6908cdee0fb5424b38347ee40fe88cde580ae9163fe7f748d6756656c7a50499fc0a7c02a53582df3a0400aa9a9352d2c811b61dc70bd0bc1d8fc

C:\Users\Admin\AppData\Local\Temp\products\WOWOW Downloader_hover.png

MD5 9d483b279b88545e01dd834d70119ea2
SHA1 86bab31eea5d39c0256e10d490ab648972aeaafa
SHA256 94124e86d4d72486facd10b9425adc8979f3a4bb707f387921b109e28c3b0f44
SHA512 802f14117c5d215630713da7955ccd974908eec064cff66ead3982188400be7eec2237d064e507c9ed04014fe528143e1d2b4048249ce0fecdfcc4c6fe9975c0

C:\Users\Admin\AppData\Local\Temp\products\YouTube Music Converter_hover.png

MD5 d3a1676e9e1bef98aee744b561c05847
SHA1 c2b825d7eb8409312a8777ffefc16f495b0b5022
SHA256 a3a06b21bd001dee5f94c6e10616698889f1e32954fe85495eacf84320f2ca7d
SHA512 ad7f9df3e77fad335bea49fd7fc49331026625ec3c84af14e76f44fa75b3100c5cae4fb22e374ab249fb2266cd4ad94cb4548442c35f90d2caec3fc4c74ab52c

C:\Users\Admin\AppData\Local\Temp\products\myfans Downloader_hover.png

MD5 5bc4e44aab3ec3deb31f3af67eda4810
SHA1 aa1fcdb15bdfcc5d7806318025092c75ec44124b
SHA256 4a4e1ac4fb63ff7092d8443eb28e6bb1ec8ca196b5d680c5243a112c8c22e06f
SHA512 b792cd9f01e8e3f1fbf5239334bafde902e5d36d86e6ba87b389d9d4df49fd13502635bfe1060bba262fdc22aaeff774187f2bae779ce28ac1d391f401c58d86

C:\Users\Admin\AppData\Local\Temp\products\myfans Downloader.png

MD5 fd07fcd9b3dfd44ec4b569ae68dbd7ec
SHA1 ab59a81178e9d10d413fed7f0040ded84229b86c
SHA256 c10b99243713e147a5b2bb8f3d52bfbeb952635f9a801961b0346ff64b4fbcca
SHA512 56f4b7bb37bda8cc24cff718bc4fbb01d6499f965a8354b3dc8be999245002573dc677c3b3ca7ce9481651bc8a38a52fe93a15250812cc892f83b1e3b6c11b3d

C:\Users\Admin\AppData\Local\Temp\products\YouTube Music Converter.png

MD5 e6704bba3e6679d088f37d1b5de0c0e1
SHA1 4bd8e1f59bac341942af5e6352290a5536a7adf1
SHA256 8c113d544507827793d0497cfb29e30e43dadcaf4df320b4fe7eb74836e07623
SHA512 600a0a26768a709d4b708a6e9fd0302c2a7b5342ddae3b1cebc2517dee080962e24c536c2c6b84525de2e3c2cf32d39fc3fa2fd7ca531a6ddb1d297e758326d1

memory/5776-17821-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

memory/6856-17822-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\StreamFab.ini

MD5 478975d9a38f12f408546400ff32ca3e
SHA1 d47c3125e43539a0857272486468cfbf1487cd6d
SHA256 51685919af3e992f52f5d208beff0f3f495b1cccbb17fed6b234ee31c3096516
SHA512 be6ab41aced9040897f789c75fdb217c0afbe7794b9a8aaea1125e4a0a27f8d9d9ce893d8d2b7d845aeebdaaeaed0dfc7a1b045335af954f28b354bd71ade714

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\StreamFab.ini.lock

MD5 87b1708ff8115da004aca1e21eb09818
SHA1 fb6d3c275558aa53989ae77d53fde660da1abb96
SHA256 aa506ad90f901beb5cf01f4e8ead76395858f46163738189b019404bb42c735c
SHA512 b78dca0520163289ff3c2b528c649d152eabc26afec611e019eb4bc85e68c05a8036cac641bc114cd6e8e3c9602be33b14057f7adfdd831057b75f16e7f79175

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DABB55AEBD8EE118C20603B589704E10

MD5 4fcc2c33f38f305cc61bfb9cfa49a78b
SHA1 8f9e349e6935d82f8b4f71c15bf7c19eba70abc7
SHA256 cf55fdcb04c2a068c6cc7e08eff8ddbe6ce12cb4133cb2616fe5bfe33c051aed
SHA512 14eb63ca9b3b3d40ad6cad7119421ceb5edb8d535409045eb2440c9ee104eb2c31385805b132ef69f5f8f2191406dadfd103efdf380958ecd3958c1886398b66

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 07627319370273ee0e517feb49ef314d
SHA1 32591a386bcdeaa3a6b57350bed77d6727e85bf5
SHA256 8f2f7279b27a86c92a81ad5ea46c758867430408b48a75802176bbdeb6c62550
SHA512 381838e79a5f44170db180471896d7ee2e4295bb2ebbaedea49f23add1367557564dfb1ec74923d9a2c3ee0e7fe41bbe215336af5a9429e0dee4e0fcc4912a43

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 8ecfe697e7f3aff0410a8318760ff72b
SHA1 611890ec45ac433362a048ff1a42f2bd1fe8ffdd
SHA256 2e05335464e72e32f5d9845d7cbe8ebb294832f358fdb88acd0952a59b0125f9
SHA512 41adc85594e5ec6c9d89318fd921ad17c2f9e1410744f6ae21b5c64c5f60105482a22381f9e83fe9db212cefdb222941b8d57da608762c810d2227e2347261df

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\update\update_config.xml

MD5 f4e5712f83b1230ee56c769790d8747b
SHA1 08593fb5b2c8e905f38ce23f6deca97dc93778cc
SHA256 083157d92ecc8318d6957c03c93437225481c6ac5a0af832995a231f37c7c582
SHA512 e05418ed711ac4288a1c72483f14cd96bd85686ed13096a3e9acda06a44a41461a462ac48920745bc87d279b92eb09d2207518eac9f5a877cbe9176e8055cd90

memory/1448-18009-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 e8af34ae21006100cbd63123ab218eae
SHA1 c77cb4ccc68512e00b751845ed2625973c39f6e0
SHA256 da5a430a793a24bb549e7bf2845ab9afa305490ab05306043365d37bbe00aa95
SHA512 29ed3a88fb4259706dcf7c97faa16708146fa7af5fe98415cce878ca70897de015abaee8af3e81ba00911d429cf17c44b0c0e7ccaef5b3d13f13adcba8dc6da1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 29fc695c38b548bea5b43cb1b570237d
SHA1 841c6a1135ceacc700633444ead569f412ea9273
SHA256 f81983cf2bbdae44277e6338f99c3d00e8b18bf0e9d6a7413cc41ea60be4b4bc
SHA512 c137e665993d530e9a18aad16bbd9bfbe1130dc51bda6d3fc918b6acbedbcb7f4cc0e1baa814ac9f71be64ea84e9fa022d9683d1c678958a15cbae881be4a1c0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 64902a0b6dd4ebdef89c4b7655518810
SHA1 d35dc93aac0cb9dffa1b18241c8c0ee40b50f25e
SHA256 d95c4615db9672078280c030368072026cf070f7740a9dfd8e586624c9bc1445
SHA512 2bb5954a49daef2c29eff0fd72380640037855ef1358aef4fccfbb87d9e44059b256747f52a10832b3b83331df51821001199f492ce42d2ecfaf3e9e884c362f

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\769F85394FB15C375FF89A7488274D5B_7C89BA1C5BBFC810D34882B5999D3C84

MD5 5bfa51f3a417b98e7443eca90fc94703
SHA1 8c015d80b8a23f780bdd215dc842b0f5551f63bd
SHA256 bebe2853a3485d1c2e5c5be4249183e0ddaff9f87de71652371700a89d937128
SHA512 4cd03686254bb28754cbaa635ae1264723e2be80ce1dd0f78d1ab7aee72232f5b285f79e488e9c5c49ff343015bd07bb8433d6cee08ae3cea8c317303e3ac399

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 c58b54102c57797d9795eb406e46e9af
SHA1 0dd8bfe9d59a9334cbde0293a98da1eeb185d1a7
SHA256 7b2898aed3855f1a1b030479f7feaf45d3c0dc8928f8756b184d4cbf5f73c908
SHA512 52021588d2b7c37ac52e7149a9d5e8bbe4876d116f5a4b295d924d0b481efd9856fdf3c6fce51c405e8ae92826a04e5dd7b065d04135f88bdc2cb3c3f55d22ee

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8E55FEB142F566DFBD0ED964FAB94545

MD5 ef742b46ba1e5b67c2c1bc9c60de08a0
SHA1 259f87376b46365c3488ed1d29b7856e650598a1
SHA256 0f2cd52a46c8d23d17680c5cf6d088c4d9d3b9650177a6acef042447109b49a9
SHA512 b053c8076d75de5e7a37fab4c33167eaec9278c37cce6ee2536f818a18ca341c90fa8ea88590a05b112b1dda2f5d81874c1a7c65e52c9c563e743f2b4834988f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_0

MD5 0bc44023c2873495bccbb077e010cbc5
SHA1 9dbbc5bb2e9d04cce884b5f7e92750cb0dcc5468
SHA256 eae42469e7b90eaf5b1d3b7c6f8f74f3f10dd344be7e743dff241c142c7e558d
SHA512 1683daa16b7ccc25b2847c09e9bda5e6ac48759ded8184d8bd0111acd6e6ae9199414e6ce22311628b29d268acd81b8ddb4fdd0d0b3524a7d64d28c3a2fb4a9e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_1

MD5 647a0f65644aba5660d170035465cf46
SHA1 5cce4335b326f6547a3d2d9027896825d0371e66
SHA256 c8a7de5769549a4b9f52a903c47ba89cb210fb67a0914646c99a5e325130936c
SHA512 d6bdd774bae30ed248b8f0503c18bdd4d65e1197433e355e81dc83ab6a6af2ee26bd47f13fe7ae89250540916fe1375d2b9409fae595f4ea241835bc963627f1

memory/5776-18289-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

memory/6856-18290-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 58974e9e718b0c739cc15dbed8e2408e
SHA1 d5be5764bef2d181407597f61eedb0f38cf9ef09
SHA256 d2acf28f215db17d4a3e213ba6ec415683b28fee542655f8c615b902ad94bb55
SHA512 f1423c326d367f49c1482e9864f843091b60a41a468502a040f28387591fd05fdf9aa36e24d09d81637fdc09457b06771937ab889431df5b669ac87df7136a4c

memory/1448-18369-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 bd956695be40d9a6dec4712c57e804ee
SHA1 f76cbe4a7af0b31e2820313cead7544eb82cc98f
SHA256 fe07e9a8290a98a3f91ba2944a673679295f605dabb2cdfbf76fca7bd505a00b
SHA512 d5e192770a4aa868dedc4308c8f1b08caa557cffe27b064c9762de1dc07e579ad2524388a4b48bef38ebee3363287a5233b7d0cd348bdf162d9cf5d95374c57c

memory/3584-18418-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

memory/6100-18419-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

memory/6980-18423-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 03c7d5a6ddefce1eaf73d5f3628afee9
SHA1 518e7480b721e76c8a1718bdfc1a53bc58c88205
SHA256 c2eed32805f105392b215548becf879dfb81526ccd8e7aa6dc556c301b66f995
SHA512 6c4af3b7fc6ea43ba50562ad173889310e4b3073ea9a48296d65b869e200ee16096ea3276f368b4c54da75b4928d1545dac03830f7fd80a2a8d2a19fa6c98d42

memory/1964-18495-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 c3960e85c5d3857e616e2be4b94ab999
SHA1 8f2847ef79716d92e3383e1a8c467d2d84bd4397
SHA256 5784abbb25fe5c0218d0e36168e5d7e0af39a5aee49beab7b4f18ea25fa602eb
SHA512 395ca83049c2fc5e63e2d5ccffaacb8e4022dc313fe32bbc1511615c4342459de04cb3a6390f2d64ae1f1023abc6bd54b1cc6412fd1909f0e2b18042529a0c2d

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe687618.TMP

MD5 2907929f0ba6397d7926c5a6cb432b80
SHA1 696bc9db986cd39361fd200449e12a3f03d67b62
SHA256 caf502458a1e8bc2d24bda11ee74e40b5978d8c3f532205f3483871444b64b33
SHA512 857f03e5cc7ed3f17c705f0f01445a153ba396c9bea9b028fcc49254b86216c0c84cba899097fdaaaa9516b72bf3cc99d71cd467a735165893f827a392b2bd4c

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e214fb17-dd5d-4de3-bd76-5c049ce12252\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 0dc829f75f6903bf65b5a97618932f1a
SHA1 de162d9217918370dbc0e4a0f15fd78409e2080a
SHA256 b56f68ba886d81e1d6b4c6c4e03e240220ea11c2798763e3f530f88c76810780
SHA512 38a93c363fb46f6449652317e796f05c71b387ca41f9b086fe367ea2ffe5b5c3752e47e1c7121db80a8df6df69aa954bf345fa514b814610a2a544af33db7c05

memory/4288-18724-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

memory/3584-18723-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

memory/4724-18767-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

memory/6980-18766-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

memory/1964-18937-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

memory/4396-18977-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Network\Network Persistent State

MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\88449ff8-b2cf-4147-a48d-4fca22f3c6d2\index-dir\the-real-index

MD5 1b90c873babd7cb21c9c11dfd579a2ff
SHA1 4d98fb720e2f5d4d2a6a79e1f58aaa6b1fe19abe
SHA256 5f00a54a26839695d56a76de8fddd5d09bc04592f3fc0b0322f46583fb509625
SHA512 d781570ad2d6965b16fc13a50b40955b4d704dfbb70ea3410748cfa7ef0c6e66803aa54a0fac0b13b3f736a105cb122b5f0efa63bf4d39dc5e048f7cfe97c008

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\88449ff8-b2cf-4147-a48d-4fca22f3c6d2\index-dir\the-real-index~RFe688fe9.TMP

MD5 f904e8b0b8bc2ed860e0436908588956
SHA1 44866e4d91450f861c896b810dc459bc96cb4316
SHA256 10b1db4d4a119c4b9c7cd7fba5bfb28754b040529dafd5b8b2de0fb71ffb113d
SHA512 0195cd70694b27e0ef78cd31bc7bf7d0a6dbedce8982b3503b08efd32cca7600f2f785e4d9e29527e3b63f15365176cd97a4c1b63357e3f283c21b37a893a201

memory/6716-19013-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 3d3e24e480d5b90a81b0822b952db670
SHA1 b1ea6fd9c3168a62de7f2bd9fcd32007f9184e47
SHA256 588fff2de92f7492683e69a3e93451248bedcf464364a5734fb1a600558856e3
SHA512 6a913aceea00025fd8c794a29df34bb95a28155200e9eb3cced9995c4511b9db5153fe501169f4883da437b9ebacbd659d37562e01dfb7e04a932db03d1836ac

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 71a5059f1e9f620023a82324769efbe5
SHA1 ece2c2b74eda96025bc7e62b979225e84acd7db4
SHA256 910a369715edfde394ed93b77eca2c8145ea8d9e7e77f311027151e6513a1c4a
SHA512 a41fc0fb4c51860f9c45a27f3231ef89554d6a49bfeb0bc13e29c98f8c537ae91b89b39db3db25b8494bb7df252cbb89d016082430f8dedce424bf24552ea5ed

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\picture\aHR0cHM6Ly93d3cueW91dHViZS5jb20vcmVzdWx0cz9zZWFyY2hfcXVlcnk9ZGlzY292ZXJ5cGx1cy5jb20vaXQvdmlkZW8vZnVvcmktZGFpLW1hcmdpbmkvL3N0YWdpb25lLTEtZG9jdW1lbnRhcmlv

MD5 f447aa9601c8d56679e2dd915a370f0d
SHA1 7f396b817cf77bd86bd45288b5eb53a565323af1
SHA256 90f283e42a582e8bbd1e7390821f5a2368df705c324a42830d0e85e23ead4667
SHA512 fd6623b96d16ddd431fcfcc1df5e6e5d7228a03f8145d6ff7fa41d8704b798857054f1bbd6109bc291503ca052c32d509926eff5e3721c6f7af7ac3829bf5f52

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 156cea57c010fca2d7ef5979bf75bbec
SHA1 110cc7cf322bc61122bee8ec7a80c354e2eb57e6
SHA256 b6e995e4518e6b1ea49020e41313fd97519891b55f20a71685320e37cc9d7136
SHA512 234261c07c9c2514cea812f23e8cfc3e1788b1c64ca349e2da0585b70cbb746e030843a4bf0ec1dfb48bfaff3d6579a5ddd74f414a4d79591fe8b6f80de755b1

memory/4288-19077-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 2024273a42fc7fc5a5c31c3e92772b50
SHA1 30607850a9348b90e8ec44483b0f47f0e61d98b8
SHA256 f3a417f2e0b73e5f47d973d2c0baf57d4423f06ab2b286508532df93172de81e
SHA512 8f6e5db06627a4312530a8320427963018dc37cb3dc8b9836a23d1fe60e1de702bec183539efe524f47f566a25b1724b6cf44602dc8a9bcc301ced6ac74c406a

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_00000c

MD5 bc2ae26fad1e628d27e06461fa6d33bc
SHA1 8e0a7a19a884ac94a441caa37bfb2ce7244978c4
SHA256 74ec376187f07a60503495a779a67c682dfbe183bf62835896404cfd57bf176d
SHA512 e8c69b29d3e9f14528ccaa24a0f6e1f749a9d562790ceab2b67d6e3bfbdf68e42f278a7a5e9ca0c5f169df605ad49d30e4f3a1405060767b2ed9931a26e2df56

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_00000d

MD5 f2ad3626dc3266239a6dc6dc577adc3d
SHA1 51f048e1e76bae1ee0ceec0ec51dd2accf7e6adc
SHA256 579d47e85073862ca7ca94a72e9b66f1b1c316ca1a2b3584059024719d7bc285
SHA512 591a90bf39df41b6f3ab5cc2713f23ec44d0e0a661fb3512080416042444cf8df98b34a9388b90d81619c516e1014ceb441fbbc1e2f4222f9499c2f3a00ae235

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_000002

MD5 5c623ebddc3fbea46e0f64090c04f9c1
SHA1 5b68d1734bbc41aa26c370251b2892ef71dfd085
SHA256 0a89f6ea0409af6627e965c23c87f06ffd78a9c45135bada5d864e2c5dd9fd50
SHA512 167aec7e8ddb4cebafb0f944ec84ba78a834aa9ae4af1a024aca05c7aec38be0e685f0ca6b95927e118b8a6dd7fccf900f54af14039d44f1062e511347b4009c

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_00000e

MD5 33fff7fb6a016023c955ee8b15e6555b
SHA1 cc9bb7c769f9a4bc6153e49e71ce6992cd053401
SHA256 63bbca6e2eff30a0dd9170127b02028449a9156c53787478bf96b907bab1875b
SHA512 590a5900b0e8729c09137aeae9a15e92058efaf23028ff46a8354edeacba748ad95037d84ff27dc3f035c23d219a1f91034efcffc7aaa6278b280a18198ae40d

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_00000f

MD5 bd9a0ea80362180badfabf5853ac7ed7
SHA1 79380cddbc9ab6107a3d776d924d291a78165611
SHA256 54b047637d7bcef8e2c8cec942a7369d8b5dc68578620950e71fd437551d53b3
SHA512 63005f37be247c5b2ed018579afe21f1eedc6ac80ebed49408002c7e2f15ad3533d00b275ced87af5a33ff4c0845a79a450b181b1b5f4d21f49ad2f655438b9a

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Network\TransportSecurity

MD5 2da6500c6491b815b48a116ffbcb2d97
SHA1 b83ac4bb018d363a2fdf4e9e5b114aade48311e9
SHA256 9a878f989a196327282336072cba1e76e50d81ad1f198e3bb6066f3eddf22653
SHA512 2990fc5f5fb3a35e748acacccaab3b9be0f37173f31fbef8314c5fe08b71fafb563c2c7f0efc16eafb55e32d9ae62fc0735c301317b0d4729dd84e69bec675a2

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Network\TransportSecurity~RFe68b6f9.TMP

MD5 47af56c7773fce05427d984e7fcd3ffd
SHA1 e86204ae11d04700af816f215e332fa89f5e23a1
SHA256 5a12d8abc3f90ef8eb60f0ea338349a7e5f9bae03a5f9e96e5ba3e8368074e3e
SHA512 11af184bb50c90c294935476c4746716f1a782d43f5a6b40af65b6f91ef0a360f6212cb3ad43d1efb625bac95a8f328e4f74b00796da16e39c6eef3b63a951d7

memory/6176-19307-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\StreamFab.ini

MD5 3e74f63f768f26bbdf2d067f44138389
SHA1 94738783706f4fdf4ccee640f3b3abdf5afe4a49
SHA256 2670c7223d41e81a7b897b8ee309d851627857685c92a5e75868845776e56578
SHA512 9763af81bb1a3a2f2b7deeec7163caf425977be881b1b4b7b134aed8a32c65c5ff932a7a16537a8ceb6118df1091f8c104fa0f0796b0effac03ea2b346d1c08a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6d90ab39f2820fa9e4d656f74073cccd
SHA1 29f4f2013872c5b49b85f55b095586cf0ceb2d8e
SHA256 7d0e32a883801ce9073a5074e4b035426098fe745b144b8f6485e24590ddc6b9
SHA512 3ca953c91abc37c7f3366d5a6ddc07898606976558be29e23e83f54a28d059c6b34a6641920ec89cc8648b670b983d3720959d97667c3a02b54c6f9b3cbb549d

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Service Worker\ScriptCache\index-dir\the-real-index

MD5 038b71006e373c3d3c91e4cd7ed2191c
SHA1 91fcfaa2d58a70f3679fbd53f67410daca973295
SHA256 a73fb91abb57f09af32ec0ee45ecf16843c952ad45321867be375795206be71a
SHA512 853a94d42a2cc2c622f7e632613f7a9340ffa0257c5d0dba9240d2cca64b65e890be6fcac6d20f94855f255a28afcddf180fc271d551a352cc2778dfb03db2a6

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Service Worker\ScriptCache\index-dir\the-real-index~RFe68eaf9.TMP

MD5 2bd62b077d9e522800868e0ff92286cc
SHA1 c1991e4f274b100d731a8cca585ad9816e661ece
SHA256 864a1a91729400319c4931edf67717d48a822c967f4c120837e07bfd27d5e2d6
SHA512 7321d5209622a1451e160d132ab633343d9a11bb9438fc219a0d636d734f1918c37636f6823fab623b4457180e74486efa226b59c33e8c458824192b5db33999

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Code Cache\js\index-dir\the-real-index

MD5 e1dc366d16d03e3a0c6fc8e39d666451
SHA1 0f818997925a3ea734f411da285b7b39eecb6d5c
SHA256 da206a31f3bb138287860faef43ee6987a2cfa1783f0270da55d8890c9350370
SHA512 80fbdffa0d9117cfc49e16de81e088572b9c25476927e48c54d045b4926f081185396e4e5f2af29bfb14b4bdf051e8fbc33956f4ac1df5805cdd7b8f6c2fb9fe

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\78ec7bd2-d8f2-46df-a260-dac99bdf435c\index-dir\the-real-index~RFe68f450.TMP

MD5 6edd051520ad567a699ff4492c2767c5
SHA1 53f9084013f8fb9471b5290619940c728cd56eeb
SHA256 250b9d3b7c2efcf0bfc884a892c6bc806b96681c0946a0b3c8bd7aff06c18666
SHA512 f8396be860499f107404ea622676f9a5be56dc3797653cd141c59ca33dda5dd49ad76c519bd12a91a846e99d7896e16f96bd90c091d13d685cbefbec01dce1ba

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\78ec7bd2-d8f2-46df-a260-dac99bdf435c\index-dir\the-real-index

MD5 231c287e7d85008cba31c7098f08f57e
SHA1 36516d143db1afd12f99bb3d5b8deeee351495f6
SHA256 ae61136b68a97612b14f56d3ed1b557d4c39185fc3aebc279eff96c97f63f13e
SHA512 c890b7e9467cde8f3daa4dbc10c9b903c74c68e5ae798dbe69e72334691570b666cdb3265b04d91009917c3172b3e5075f03e73ef153a9adc408c09187cd4cd0

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 a039d21f337bc09f6319f565e18e5e4b
SHA1 e5abe118af7f32d77623d1e764e675bf63781b18
SHA256 a876033b64beb8906346a5cf035f8b9127fdc14f3ab74880e82b24b2aed0594c
SHA512 f82db2a8f7784447ca3ee48745835d236ae09fd451b6677b606ef6fa729adb2c36a9c9bda214a219b70f822a5606666738d550c56e1aa306024638ac5295883e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 73b4ffe06930e01679ed68f2d72f984b
SHA1 227c486ba5bf3d573519b96870f7fb660e9cfc5b
SHA256 b5e59368479da8ac8f622f17408fec62ec1ca7152ee973430868f69a99257d24
SHA512 05014848c2fed023a522d777a327823fb035a339e363b4060c269e7049e020845b86f09c8d4e3b3991b3876c08e9dcda354fe61fcd6b99426d21eecc4a1ea430

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Network\TransportSecurity

MD5 375e49c0184cbf54d20b667ffc6d16f0
SHA1 1a8686a01d02d5d4097934c636ad51c56c136212
SHA256 4460c917a75fb2cc2e8b1a2e4e5bf4e7472ef8ae42b719c1a54716bf7b7b9373
SHA512 f9291d65a8a162b6198824b5a1e0294d4bafb6922cd6ec7ccb1562b7e32f4f92879be2ac7ca57cbecd155c3ef36a99d84585283f70e8927bfcb95715ec7f9b8d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 bd8ce22b25e99285802a6156df3b527d
SHA1 e0fd8585081d2f904de2f1b3b2885820b26b4bcb
SHA256 e8daa3ab935e16cf23d500dc17465ee7058e2304d2c6ad31b53e7b23dfbd7427
SHA512 7acd90cfba6b67cb9fc588f64db1af398ceefe9a935dec607c6cb4df276b56c4253fceeae38846499a25ff09d9a118090c701e1fe49a680ce816bcd80dfce0aa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\970e8c33d41fc21d_0

MD5 159223c1d0c26d25119e0ad3013c3f55
SHA1 fdf163a7841c2d194c5b22750271c7e71278fc3d
SHA256 b7f55070f798b4d63a7d04396fc083809ac18dec0a63dbced1e35896b878bd48
SHA512 fa382c39b0577ca9bd4bb3cd83ddd21c2719bd505445f24a9a2a2b8c640245789718c8490cbc3755c4936bebe2c11478850ca87a1ec8d66225d2b756ac350fac

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\43ccfd06ca0509fc_0

MD5 23c5da1c40dad8f5d9ee1f1e847e6880
SHA1 2395cacb871f7d810b5d1d6334b03fca57b9af89
SHA256 72a76a460c086ed3e6f2308c5476406497d96d5e774f3515730764779af75ed3
SHA512 19f3c50ea19e0900b5a1497ea6a854a38e53de688cba9adc0a1cee3aefea626d8811bf126c20937f00808a38abb686c1b795427954875a2a223c9e4ee5d7c70c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fb939a9f1f0c5b5e_0

MD5 0eba68382a0d10b49ab9a6c8833193bd
SHA1 d4d1b82400556fc4b71fa22c14258f38b94f45b1
SHA256 2b14cd247c05be85b691f0aa590a668f387f4d4f129a960c9210eb42fb1d59ec
SHA512 66b0193bcc44fb66c23405b7b3bc2ee466a6fbdd43713f1adce7a7272219db9981082b50041136bafdc01013cada724e050b982980a4daf5f045dcb37cacd658

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\be5538c2936fd11d_0

MD5 d593e805cc05682ef020c0b2078a303c
SHA1 f99a59ca9a3c8564b60a39bb1ecad2209a452697
SHA256 e9156872b5cc5b9afe8768b22ce3bdec371076ce9b90511f3dfbef7202504d3f
SHA512 b529293a3dabc26004f60f877773c9fbc0474b59f85f3458b7f02273e1711efdce193a9349f1fd44d31b2f689da9859a5362ba0249591f72e60f89dd520015a3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\a3e3928145546e9b_0

MD5 b8098af87de3150fffb599b64c159e92
SHA1 f7a61f8d1260631fda0b70e22b0dfe7cbbf4af87
SHA256 e8d55deb3216d5b2fe90e09fb983d7743fd4327592e15b22af3c3ea055069598
SHA512 375e5d623134e3f067bc635c3c2b052cf725039c82fc17a83b29f6771c6b61760175442502181f3c08ad3cff9d3f26eae0515f5f69a062cee1302a4129ee2bd9

memory/1600-19590-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\LocalPrefs.json

MD5 7d27401e7776ce2a02d74b054c0a1a34
SHA1 4fe0c22d93e6ce55b0cfcd0818ed539f97e63674
SHA256 dc372004c721ca17d388be812636b5c89943feb6e73adbfb98f12ac9ae871a53
SHA512 f805aad4db79388bb85a38299a80627f2093f456d992740920ec3efcac3f8af31daf384086efd4a5e57eb3c3ba7b0a6e7afa62ce923cfbb43ce2cf3fb53778fd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 dbd7360d4cf5cfa71ed7d0f428c5d7af
SHA1 e2145e76fc55613c3cca75040bb285d0ea2cbf18
SHA256 527ed34a3d33a77b4f8d672c81d1e62898ff39df5efa0e73b94587bf636cb743
SHA512 a9d4b0f36eeab17bc90f7a47dc6b16079464996757a7c0540440d837e1011ab3b551bca2a07fed9d585af4469d3a6f828d7cfb810ca8aa9777bc07be6b4766df

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Network\Network Persistent State

MD5 25a86724d0d23547846916f5e14bc44e
SHA1 4e005ece4924c423704cd506af059340fe1921e4
SHA256 cfdc0c193b5879206ea84f790d77626c0f99aae7bfb2f4ee3b3e1b0937ad3c02
SHA512 ebe494dfe5855e1c0d419c9636bfb83ea802e32c412834e94203ba46508a2ece0a82df02ae4f19908e5d47ca1f08cedb4607a0195d4cb2fad04f4668baca2dde

C:\Users\Admin\AppData\Local\Temp\OP_RegList.dat

MD5 936c89440de2e2958a1f8301727cfe5a
SHA1 b32f6daf7102254b4475c7c9076a0d12ed141738
SHA256 810739460ff3785ef1b4c91376a0554508c2c41eae3a8ea7132f3d5ae8766e1d
SHA512 dc50673230d930631b8c1467949925e58b631f6431f4cc11233f86a36c398fbefcac414249f82f9ed6a148276b600e0d42c76a28398077475a9c46276d3c1264

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 b6aacc4fb540eb2b884dcec07907b022
SHA1 6a96ce6d390a3eb3acd4391e2029ac7d3ce32db7
SHA256 5b0109976d25ef6f9dd9caca6759e6acd21303b4762bd41fd59128d3cde873d2
SHA512 28e187673883b91c19e5f51392fcd214c9e1778426260af81d6a862734293a599c35fadf9cd6b39683f4cc9fae0cdcefd5bf5ff07f6d1d19d677ff306e3e136d

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Network\TransportSecurity

MD5 9a061b8c250da1ee75278cb737448622
SHA1 dad58f353101a26ed6eef541359ad9c845709ee8
SHA256 06a68042bf9e54df97166c2865e91ca797418c4b59fe94b94f43c9490e7efcd1
SHA512 be538eb2a0a8a9fc1f46d709abf860cef1ae3f338d23fdde5cd5e11976cddeac061a15575b9819b3e7838d1020fd74c0786fc3f221a7beaddd4691f55fae7701

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 205d44be69bb64da130f57b0c6210527
SHA1 261de00dcb60c3724b696aef269ab0e5d4c55096
SHA256 f4cc1a834c448c55ff9bbd6fba76857250cd9909fdf4d443d362a6eb79b8d164
SHA512 872ca92b2ab354c65960b193c9a4758001765098e2c9f5be7b2840aa68a6377c08e217443787736a8d0f5d065a8289517e03a17fd5049bc2d3be5ab7f8abfbc2

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\StreamFab.ini

MD5 d08168e67f8724e37011a93c9af842c4
SHA1 f244ef2840fa52472ba822928cdc028792cdecb8
SHA256 3277f6dda435a00c7a5276f5ce77156b4695fc87ed0ade993594bdda44a42e8c
SHA512 421fd35d720c0cf58da136a848b893aa3869d9ba957cb6402da4af278cb19caa7c2f9aac24e09ef8095c9115e60301806a29b40ac0dff483e1d54598bc7b28ea

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\StreamFab.ini

MD5 6b0d21bd1c4dc9bb90000458621006f2
SHA1 779d0aa4c52ca7f56841ca68528257d5bfbcf7b2
SHA256 1843a6de6137d591bc5cf59c9a97b09e752d39a50ed167a5e261af8a768da978
SHA512 94cc1007f2418566bb128f7a370138c08c9955c53f3b362411b50d53c51f1fd9155644c479defa276a2f4739105fb80187dbf2e8ba477a84c3b236020420cc96

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\webdata\DiscoveryPlus.png

MD5 fe0a2998ed09923baa033cc1482d0756
SHA1 f010cbff2a5a197fa2d91ea3b4107fdfec6403cd
SHA256 b509f55b3a322294416781c9fbd2c85836475a5a09a90d66ea3d2195341fbb38
SHA512 1098d96df3236c154a0a818749600d01030cde238122d9f01ff79b09caeee66c2782551f80dd4b55db7b0da1d4fd4d153a1ec0980fa80b9234f764c8d50075b0

memory/1484-20010-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_000007

MD5 115c2d84727b41da5e9b4394887a8c40
SHA1 44f495a7f32620e51acca2e78f7e0615cb305781
SHA256 ae0e442895406e9922237108496c2cd60f4947649a826463e2da9860b5c25dd6
SHA512 00402945111722b041f317b082b7103bcc470c2112d86847eac44674053fc0642c5df72015dcb57c65c4ffabb7b03ece7e5f889190f09a45cef1f3e35f830f45

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_000004

MD5 8eff0b8045fd1959e117f85654ae7770
SHA1 227fee13ceb7c410b5c0bb8000258b6643cb6255
SHA256 89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571
SHA512 2e4fb65caab06f02e341e9ba4fb217d682338881daba3518a0df8df724e0496e1af613db8e2f65b42b9e82703ba58916b5f5abb68c807c78a88577030a6c2058

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_000008

MD5 c83e4437a53d7f849f9d32df3d6b68f3
SHA1 fabea5ad92ed3e2431659b02e7624df30d0c6bbc
SHA256 d9bada3a44bb2ffa66dec5cc781cafc9ef17ed876cd9b0c5f7ef18228b63cebb
SHA512 c2ca1630f7229dd2dec37e0722f769dd94fd115eefa8eeba40f9bb09e4fdab7cc7d15f3deea23f50911feae22bae96341a5baca20b59c7982caf7a91a51e152f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ddb95d4603a62a3144abe4300fef7355
SHA1 75277b335b18a56c65c6b9cf4a51a5dc8e6d780f
SHA256 69c24b0833ca844d8e6b99e350987c24d2bfb77706e9519826ee7662a4d6041a
SHA512 da8d828b9b6a993431cc38f4941c45fec79f8bd4a6a778fb6d6ff69155ad81d5ff4f9c099082b721845ef9e772fe02647e1db36ca00cbb413f69afd027f192a9

memory/6664-20186-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 fa399c8e4382b082e9c5824ed8a47cee
SHA1 50efea3e06883fbe2f8319d5fde79a1992bf2d23
SHA256 88e993b8d041966ead157f72508022f343f34abaa7234ad785066d78d3ff66c4
SHA512 fe478a29d1f7749e7676e5139c48b121dfdc055f56e58a47c0fe6d0cdebdcf6b4d065db9070878bfa5f52b85585282a9e501617be46648e7776c38bef8432410

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Network\TransportSecurity

MD5 a3f30256ffaee9d160a21b1e99dc5c00
SHA1 472700240d886a857c892d18d9c8242705c419f1
SHA256 7f5bdd265c7eafc61799dbf2c11bbd19b379956d9d8156999ec4b1ef75bf0604
SHA512 b9e7118f61b9c33899e1a4247bcfe2757ea2b617daa7e7bb4ac9eab460202c4c310e43b5f984f41d5a88b0e7f8a9dae35c4d50fa2b6a79cc6238144a0d93fc94

memory/4812-20484-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

memory/3864-20489-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_000023

MD5 097a0e3ed05107191d038bcbb8aa2f91
SHA1 006e1d15e55c1447e64d05f3b67cb61ab77b93b5
SHA256 c81355929a498b494aee3d7ae66851c359f169d32e0c735e67f7cc3e12067c9d
SHA512 63fb21929cfc8b12e365aceaf78aa9e0dba7c6b610c626b0fd4d024f8895eb46588a1d03bc9d87454ffe7f418703bdb8ad0cb172d500b246382d071b6811b31e

memory/6664-20767-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_000026

MD5 47dc1356a8146de8addba63a56de6763
SHA1 a0dd8eeb8fc2e5b41f91c88529b841b87991e14c
SHA256 c5f2cc2adc76664dda69e6f37ed9ffef0f5d90e31b7d6e851a0b45920935151c
SHA512 954ebc0c3de717c5a4d8976f2a515e4caae202bb7653a48acc0dece07644e6189225274cdc036bc1023761beee0de4c9bb6429bc9d2f91fa05d7ff9bd67867d5

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_000027

MD5 c41460908c4367444f540267d76e3604
SHA1 d8a2fffddecdab9d21d2cf5095f4a8cf5b34dd87
SHA256 fbec7dfd874137abcf888883f8f7341d4fabcd0a63f3b057ab02f62e345e14ed
SHA512 ba0d9603e7bc3eb7329186b97aef1fd844037dfd8a5f675fcbc9011efd9ddf85775cf22924f48209323db46e4af9890cf13d8eba993ff36e3565908a695ac96a

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_000029

MD5 6e5092134a127e6f8514c54f7a9125c5
SHA1 8e992bac3dd1cd350059d3728da1d415b2276d1b
SHA256 153980eafec4a329efdafd8910ac472c98c132bf0a605d8fec91b10ef2ffc4d9
SHA512 907ac23b8177632d8d99351ffae06b16c83d401c6fecc710bc99d8f65b8f04412716a1d0faf39881353f5f5a2e19ff1a154238627e67bb7164f6cc53a61160f4

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_000028

MD5 a3794b7796052285bde7b14e6b0e7e4c
SHA1 0ddb5aad5b5cb9f0e76e90b879c5a80b68cc8e03
SHA256 03d438ef35539da48b56da0593d0a1d99e8f614dd780589ef461642ab37081c8
SHA512 beb494103c23dbc180ae93e1f8c32d65d57edea9d7c7aa153c78ed69bf6cfb032f87f010a9b508b17949657d94cda9a3bc055a4730135f804f636140ab4b9bb3

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_00002b

MD5 c76b6357803c3a5e7871f383ce62c68c
SHA1 b4f3c6d4d850de695741d3a6b602f22443be5f95
SHA256 2ea997178cd955cd0b7d8da6c22d22234b75e2bf6968352c6eb63d446f8dc493
SHA512 61a438beb5a91dcff92a9be3c98f95158ed360e73c6bf49bef818c96ff391109406a7557eec5600c33bd3e1e2f55b0b17181c9bc1a028d8fe4c277b32aa5a7e2

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_00002a

MD5 c9f01668b5bab26392d9e12e8819a473
SHA1 5bb32e72002b5d636b3806eebc0ed6be4f6aa68b
SHA256 7e744987679c1d88e9bdc42e9b450a467724241a8f70c8831a60b0e3870f5703
SHA512 02b93e75d95a9b8e579f9bb074b88da8ced07bed8daf3cb588c2644d732042ed2ddf34c67c4ff4770de28e15eec297f74eef650544f2417676575b1eaccfe189

memory/1916-20914-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ed01b2db49f90bdd9f78e3169d516eb6
SHA1 cfe0aeae770d669691122cd7775a423cc87e9b71
SHA256 5bbabdce99575a30e7fccbb9f5f68198d47f276a9dd32a584cc4095a1af1d2c9
SHA512 cb8d674db91a627a70e1b7c859e6b5c435d27c63de6c5abc43a5e024a7c5f4bf19e72eda28eff0828fd3cf0c8cdf8eb9282245db670b8ab92ee8494bc264d495

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Network\TransportSecurity

MD5 ec7d522c6e0c60a2bc85aa98de63478d
SHA1 6ce44571f7427f40ff8316e69b1273756a6769a0
SHA256 da314149b9737c9388680a6fe5dbbb2badc978cf877d75727912bc48cf8374f2
SHA512 6d366b0a9f908d0dd5db673518b6f87952ada260ae073d73f00bf2b6f8cef847c1afeb7259ba3815cb6982af76344967438c81f2791448c257579ac5912d2509

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_00002d

MD5 1878ef1c0f3290c432d8ddb7cdc06188
SHA1 31b4b0ee79e1d7e58d86eaec4ffb2626439528b8
SHA256 e1d8e76a5fb030ee15158b588dee872689be1f6db77fe9b4b3c6c7eae5824f7c
SHA512 4ed52298cae19fa1cfd0bb4e4ff3592d1c90cf39fc1b35fd6fd76da92c4d8f38a0763c85ed15160b4a5b5c88046512255cb674684310eb6e221cd35728e77398

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_00002e

MD5 39f66bffa70ddd595e0fb8257a6c5673
SHA1 de5af5f75455a03c7fd3af24ffb005582e64e61e
SHA256 f12dc0eef71b0677c9c7dc1b832f389290d0c1d6d0b50492348f162c946ae97e
SHA512 bd57c90a81a92d4c111faf05684600e38ae2a0a1dda89918557232de64283ba63c176a01f501c3fcc2024d72458b5bda2885723438c9d16ace57004263d6c901

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_00002c

MD5 4ab86110badf29655edc9202680fad9a
SHA1 cd28a21e0ee6583ee931340453288e7a87a98d25
SHA256 1af84aac013532f6795992167df8f8cb2dc1ae6273fcd9116d68b130b7b2d167
SHA512 77bb5d71d56821473aa8e86c0cadd580863645de80655fcea6d7fbf687b3a48bcda34f2b3b8e9ba77d39a44048cb9251316faca5c414603e0a1e1d8e25729692

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_000030

MD5 2fb52743807194f757b8b2070a362540
SHA1 d2638f7922d1f0429214d6cbf13a02581f50c99e
SHA256 8710750f4d69b3eafa562b36aa42f78897d750ead07c7ee0dfdaf181ebc0ffae
SHA512 29e01ab12983d1f90fa4c5428759a33424f3a8fd9d932844ac3109ae6bede82fefa3a7e1db83090b2bb8f0ec6d5f8bbcd8e1d3cc2bfcbfbe3ec68a2c9c422724

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_00002f

MD5 c49993c51a35f14e8dcdf1d5f3bf6ed1
SHA1 a4d73df612ba20a6c5e45eac77186c392a4af41b
SHA256 6b18f8e48d80776d5c83e38e574fea8d3ffcacc0838e5d49a342f04c0c3f55f3
SHA512 9a3f5b2f71f6fc6096a330adc42251511bb9d2f7abb28660e6259af823b14597ca6aa4bef951ea5218bf18dcd42c9651dc2cd64421da8b186705c555b7f72b0b

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_000050

MD5 54f20de8a9081fccaa118be5bf3aa347
SHA1 9a6f5952bca06500c4df3f5a26a54955e55ccc14
SHA256 b47847a633f51ffc2135e83796b686532acbb5876025eac6d20a083502315834
SHA512 488522b5d5dc119f11e33f295fc3a2537cfe8360287ba619eae02d70629d6bacf7ea9f8e85a05a1b9d84a0688922e97c7d754c42d5428363253765fee35f6d63

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Network\TransportSecurity

MD5 b07db828963b51ca797a741c1e9af58d
SHA1 f8230982c88be69a39e3950e3d25ec5ada8f1a20
SHA256 a12bd083999051b195fb8d317640b904166bdf1ccaa46d4e372b199dd159f7d3
SHA512 820154b253a2dcfcb975625e7b83131ccece04cdbcc0ab36958b9f1496d145504023158ea67e2af6380d062c3d74b137d9b77088c9a33d7599abe3f9c9e7e0a4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 65c16c3dab7096c767330f104733ec47
SHA1 9cc974d87774a8e755a1f95e1ca6785a60ca95b5
SHA256 1b19509de249cb99dabdb8fec3462ecafc69188d270548afa04716a04d8d851d
SHA512 de1aec26140d54c843dde8b1a005ce2e7434a3dfd7047fa806c83286b9197464240abfb1d2e354ba3dd771c06995b37b04cb2c670d9678718fac1a1d3da202f4

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\78ec7bd2-d8f2-46df-a260-dac99bdf435c\index-dir\the-real-index

MD5 899917e74fee8dd949429e09bd74c372
SHA1 bdbd8371dd7860d9cdb8b31b201863ff68f41592
SHA256 c309e4bd15c5ebe6d6a55e5d76f444646e37acf2cad332ff195f280280acdc1b
SHA512 3dd37d9d623ca253eb6adf40ba27afbc453dce679df35b653351b2ecfdba24784b888fe8b7d2318979efc6966dcf70f42eab43ab7d7ef01d30a4729a4d61d0e4

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 1baca0a011146aea4baa2233d80332a3
SHA1 659b2b3d877ecd274474f62ce56032f55639979e
SHA256 8e0ca3d2898886d7e75696e8eb6e2d34d58785937edad4bf4cdcf5643a9c8500
SHA512 47963c310972daf931ad9a4ea8500c9e1867cd6d0200ffad52e1ac33cb5797e26d41d63df496c934fcaa7e53e1481eba6f202ec800e004dc91b8864c732f67f0

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Service Worker\ScriptCache\index-dir\the-real-index

MD5 749769c50d0598bfed4b11daaf2c692a
SHA1 4f631d9502c7e14e5f99346df687b6a110868d80
SHA256 0774a0feca1caa5229cfe28674c3a15d2d41465a8b1e7fd2f7cb02b9c03f39c7
SHA512 bc0cacde512f0460005d0a9567d7184cb07e9029fe3401d103454020eed264f9238e10914e43505ff3e2ba9a4a4013d302393c20b90463c55359392930bd21ec

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Network\Network Persistent State

MD5 80038a4dfecaf50799e85170ec200792
SHA1 e6a2435937ab2701c2469faabb79d1ac3a73a4c3
SHA256 36f6a13d5c49dff8f70defad1fcc8e2e5c51dea1f69270db5c477af76fc68d68
SHA512 1f0b2cf9353431364551336355427b029cae1f70e3b1844c561dfbe8a738a136dc00498fabb6b766b381e6cb01b7ab891bfd6cb9ce7e0c906b4d771f9acc4cd1

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Code Cache\js\index-dir\the-real-index

MD5 c0d71702598d63ab0feeaeaa1c56c823
SHA1 b28ebea0619d9551a2bb83c41f2c70f1f97b6eb1
SHA256 3656fd5b29d65160e32e14a6ea5ef932d8f3a14997c8a01296d5cd32c38c3daf
SHA512 30e045968d8f6d4c37ece86fdeafb79c955b206a83a59c6b59bace9fa71d5586539af1045317e4a845e451c7d0b48dd14c00b6afd09112a8ddd864eaa5ff5125

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 eda2c211337ceaa291b4e639b5bbf8ba
SHA1 b2b64b1800efc2e2f6afb5ac4f1a1c6299070030
SHA256 f727bbdab8ff2ee3ac4fd783aec33e1c8a73e4eb8b078e0a8d69fde1a8d9576d
SHA512 86581b1013a4b0b32ebd0d90d4619c0cc8e4587e5a0a16314ccfacd5f5af12c0781f01212249bf63440f0e95861aee3f5b235d97bff0b317017363c0db47296b

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_000018

MD5 dd7bd9c56378a49a610037a95e63b226
SHA1 010572fcd9c789382c78c76470efb0afedba781f
SHA256 7034da0ae594f32a2c611cc1234c05c05584a8de45d97960b57a20924dc812a4
SHA512 3daaf3502813233251aa9eb88a961d6b94a5ac7fbc6539a451d7e4884ceffe8eb2b60007991f8fa9b13420c85fd10057a4f407114947c344c2370851016d9f43

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_00001a

MD5 a50ff2acb742630951ff040fe553cf86
SHA1 b521fa5a594546d8fb21021dd628013cc7df3046
SHA256 a38a0a8e9a587f0cb5af740c7165aa49913a2ea8b59d43cdd809381f341b8138
SHA512 bb8b46540d13dbe3d5424f7501614f338cf1126543fdf9005ffc2939cdb10db620c220fc1eb5883b6092986744a0167b354329ccb37b8978555904c8b50f0fd4

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_00001b

MD5 f1088b26d19dc4be7cdc3b5e33ddc31f
SHA1 cfa2502682909812f55996e9920580387b91016b
SHA256 41e1c688cad842fb5b3d683579854982883ded89023777f840e85f16d5750c1c
SHA512 049fd7979f55f28cf7cf67c4a35448a8b505044001342b7554348e7eaf43f299685eb2a662806a8c5e296dd5ddae085d0967451ef6585af8eac0d4166db06d81

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Cache\Cache_Data\f_000054

MD5 51509d44125c8a0ba59f43bd422c4ee4
SHA1 443199bf3e7fd8b9da7f3cfcca80111bbdebb8b8
SHA256 18e33583a679f43eaa0f6a47bf9560ef686ede7591ba8a435ee9f3780642ce39
SHA512 e7a9360e7d57f24744c8fbb4f0831f4fa50c6ef26e6700f246a29129ed6840bce189d1d2a3acb1d6d38a90d6d72febfa0dce1a525329c8c80a56fe5b85757a94

C:\Users\Admin\AppData\Roaming\DVDFab\StreamFab\StreamFab.ini.pTmloO

MD5 3c6a73683c6b3e72471f3538ad7f8743
SHA1 c7f799138475aa0fdde364d7778aa572d52a9cbf
SHA256 a680fe8c8995e289bb3aeafd4a058aad8737e786902f58ec2a83054686b29d6a
SHA512 e966352203d715306c04f0817c1d49003d31128a1b723c594730172cc2737df1531c0066bd0e931bd5c15298b26c7afc92c6fc0f387248a5c37aeb19cdcf063c

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Network\TransportSecurity

MD5 9fb80da3812e6c4e172db3d4af5b2af9
SHA1 84bdb843e37561f76fbbaa14442aaea09721bee9
SHA256 a5b5e8fc7fa7f5dc3d810b4934363de3e1ccb7c7d8a5af48c752a426375149c8
SHA512 5846a8006b12ddea24edfdae80b9a01dfc3b8c4a5cb84764dfa8c5cb4734d2678e5252c34dfbba0e5f3ca03c543e23dfc8846bed13c906733ad9dc48aa7fa688

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f903e25576a3d7af92fb2736d6a0a874
SHA1 97f4f7828f301f53964acc0294cc9cbea976de89
SHA256 13e1e24c0474f2ae4958335364b1683dd0642be8f27bc900584918b30ce8f06b
SHA512 a5e43840ac8b157b8c7e5fa950ddb3ee412660861f0228e9cb0dffe141f852169055dc1ee44639bdebfe0c63986b532273917fd3518fd7d3470125168e8f663f

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Code Cache\js\index-dir\the-real-index

MD5 5ab887a2e723d4218c5e9ba922b48b1d
SHA1 5054ac00ba61e8b2faa4ea3914fbc0ec3d1cd6c6
SHA256 5a88337d42d2fc144fa2e2405a127abddf52d3119234fb31d6c242cf93d437d8
SHA512 c6dd1121136da147788ecd41e058efd3f0e6f0d02a37206bce7678d436be52c30a27fed6914e4dcf519b7c75a48bcb25795d1298c0f3b4f7d43018e6eeb6bd8b

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\Network\Network Persistent State

MD5 e04e5276e5956ca14c4213eab758914a
SHA1 d3dc15f53cc8ab02a40387cc369dcc2074475248
SHA256 8dfa52b90aed62ab807abc262b4746fa697f62e77cdc7c277ce95f7d2e27e8f0
SHA512 11d102206a2eb501e80de223dfcd78a0a751532e03bdf9e351d34f40368b39eff66e30f82411a1b32d563425d6678c0a3758afeb4e96975b4560a71a2b43d91e

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\GPUCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\GPUCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\cache\GPUCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

memory/4676-22315-0x00007FF8262A0000-0x00007FF82670E000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000099

MD5 b75c61ac5162cf76ac7b7fa3798c7090
SHA1 77c58b6df4a8d592c46c763cfc9a65688dca0f4f
SHA256 4c052ff5397d7c835f59a352631826a0efbec85e5cf01abede25e57686a4a03b
SHA512 4e91146a9b6e4e8580c54e51d3c29798750b3ae88b94f8b4b733b55dc15498defab36a1bc8ab1e1a2d991480f466e5e389d4eb20179956bfbca983479f73f148

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00009b

MD5 eb11bfb369775ff0739dabb3a5f379cc
SHA1 2eebaea2f7080c0b256fbfc70ab91473243af0f8
SHA256 2e0bdc192134bb3950a1ba4c1148901e39ebd8d2d01f64ef23106e90a9f771b0
SHA512 59e89752e932aade54d5b2b940e09f3c8b12a836f1c5eb515e82036a97492f42e12a4fb3dc156cb8d969d6cb4e8fd8f18b358715f972e12d4596ad390430cb21

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00009c

MD5 f61f0d4d0f968d5bba39a84c76277e1a
SHA1 aa3693ea140eca418b4b2a30f6a68f6f43b4beb2
SHA256 57147f08949ababe7deef611435ae418475a693e3823769a25c2a39b6ead9ccc
SHA512 6c3bd90f709bcf9151c9ed9ffea55c4f6883e7fda2a4e26bf018c83fe1cfbe4f4aa0db080d6d024070d53b2257472c399c8ac44eefd38b9445640efa85d5c487

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00009a

MD5 00b484ca92c6139923959f3ea6907700
SHA1 70d0462bde6309b43048bf77ad3cc57e95e81b10
SHA256 12de7669e23cdcbe4a7e959144594d9e6f6f6a52d62d4ca119da52bca344e01e
SHA512 be349356b46053f8c3537428f86797cc2569c0cbb6825a1d4c342d72f48ebf280a1bc63bd39f4c42c85a44f63b60f420add7874b52751e2aee5062e55b35ecbb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e5

MD5 c8cde4660af5b386e55505d99f0b6fc7
SHA1 708fa3fb47576a1a1b19eeabcaa4a0a848404b15
SHA256 ec5429ef14865dcea42aca45c0cbc361c526d6ab929d7e484944ea7537887211
SHA512 58bd6569b975973dabfdaab6c6200d29a735bd7e221d85d9a56259763d8c1464033126b93f6cdc995ff225d150a5360083fe319c127bb526ac6580f6c8f42214

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000ef

MD5 e41461e7d4022b6383370bf98c837df7
SHA1 a0ea1d3469a1334275be35d85fb1045b199d1688
SHA256 77f47c338ad17247f259e9145d385acb40ba8a26cc5f56eca37166109e92f9d7
SHA512 f830cc7877331a27fd822b8d7908c876e76d4cddae0bd6f6f3304d084795ce8d33ea991a1498539979d5aee9b801cc719ec1b8ef236fd3567cc3303f1a4a317f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a0

MD5 766bee5e8254917b0b421f5ba5f73c01
SHA1 84659261406eb394f9746c3b5a9f5a6b5b0d0348
SHA256 4532fc63c917a5b609a36b492f00a821fa8bbc30a042f42b90bbf7d87a4aa96a
SHA512 0267c464dde1bb10753dd3dc5c7aa5e04afda1469f15e79954beeddedcce9fcd4c280d64de693bd2bf9e99fca3dfc7a95aa0594361c8679a8bcf44cc0c698f7d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a3

MD5 e598e0ce24af2b23de5d91aad7f3ae56
SHA1 99547a0fd73043657b17d752d2912dc7e67c202c
SHA256 806e309d5ae5a953b6a7bc7b35a1e5f87b84f0746a26bf8d817f64e32cc2e0c3
SHA512 fc19811a78b0f0d6e1128c5450609bea082b78540f564f7ef1afc0f5706df56f61cd072992d101484db34e06c1966a4cbb4f9486264b99254fd8a072e7a6a44d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000f3

MD5 ca3cf8fd0c3422902a9c6e2c87308b77
SHA1 9893bbea9215d704f37b65ceef23bf77fb6f926a
SHA256 9a199605fc47321d49631c165b35bdcce3132059a84b42e2821eb554521a3698
SHA512 14718023a04f14e4f48041da748ec848a9fafcb553520f8236cf2c0c23f2101d2b6c1ffbf61ef0de504bf8db1d1e54cee4f0cf2fc080e85bacbafc561770b980

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a2

MD5 ef2fda268d2f78763011ce3cb3a92bd9
SHA1 7bc579db0afd1d376d39e15af75ae1b8a862795a
SHA256 4247ee8c52aaea7fa69e82b5449642cc525a2916127a2f6f8502bc9b0b3aebd9
SHA512 ac1c0a3c0b9013e7e944545c2d1f912ec934d0b334d0f2e0356c2121bdaadf583f2db6c874f31ef6f129cd219b52d4153e2cbfa3d7df407c4899d96608011929

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 f85830889472f8c2c0f6628b976ab3ea
SHA1 4b3d98805a784753f68f9c025d8c39b6c9aa60a1
SHA256 09b48524bcf56b715a2a44212f9d82ee252ce355626331603e259b965fce74d2
SHA512 d524bca67beccb000e9f7df20286752ce0823d9b375448ac1c2d42c28ca34b74990011d6bdc703112c8c3a2a2c035b27c7f696081b9dc53a5572c6e1e739cb51

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

MD5 6f6858dc26eb30cf078a5623a9b4241e
SHA1 98f36f502782589dda16705e6c95834db8a7adbf
SHA256 494c246f989b24289f7bb9987ccbde4c7dcfc13c357054c70e9e3abf74184e4b
SHA512 a4e66ad75eb29ade1072f23357d3296cddae98206bf726ad200e0ebd5a4bbcbf1199d2d29f5ad4b1e7484daf810ef92233886832fc5a3ccb03a4a3c4f5e66979

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 068d356b58f533ce04852757dd85f98c
SHA1 4dbee88e502980b05d49d5a15537a08dd0743a30
SHA256 b0c3c11672765abec93d9d890a13b3d39d407c2d4845dfaa8a316bce8df0cf76
SHA512 f5f376a75f94caf1ba5c6c1b34d6dc64412539cb2e1846fa1c92f00c33ff36b52af16d6aef8b579006b578472850fdfc98a1eff56c3d637cac0ac23dfcb01b19

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 32899632f6a295e8a330515907f41a2f
SHA1 a237a506805b710cbf744c2553936967b1596820
SHA256 b7a6ed13eb80f8fb9e4ae3e74e453ee9f8ba1f8ae852b789efc2cfb35cf0892a
SHA512 ae043a41ef95f6b796fcc8fe12ff405e91a38f107c1415b7d0c58beee509c917ce7a0526cc8b5f965b5b0ba31dbf60e9ac5bfa921a10a0f853ffbf51b5279216

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d6

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 1c920b8fc67dc5571fe71ca25cef961b
SHA1 dbaaca6d97613fc28d0c95392dea23a01e6128bf
SHA256 94eb71477b52096b826efb11d70295dce17b231f1107f2ae809da1bb6d51f16b
SHA512 27317203436fce8d529a27525e28f7ba4680df75341d4fee00028a3991869b98d5eded201a81ace193ce5818cdc3bea98b3a7728843422e67801ce49334179bb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d2

MD5 1f26d41d686d26f4723af1a967be146d
SHA1 a97c7c254907f1a4d353e2036ad1cb09b3521510
SHA256 c499d1cef1100b3286f3f67de3b5e91a17715654003882ef8e7a6a6552b7a5a7
SHA512 f68b0abcd73f4c0d7083231d273bc3515156c39b0745932c25f75bb0e0b5035b4fe260c69a6147be641ad78d4d7993edf6b03a714aef5ec2524e8751d32ee9ee

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d5

MD5 e86fcc9d586d9e3b88d75ac65eef93c5
SHA1 7a0f42f58ec06446d69810af7356947ceb0f1c7e
SHA256 0a29d423daf1c900da23e8ab932765a179768c6811dbb30a897225264a1c1c5f
SHA512 3b89f5ecfa16498d5f135439c2ab4fb94d8ce8d67c929f42e645d34fdc0b69c3ae84d2384e5160e9f68d6a482c6bdb6e47fb4b5f1e743715300349c4d14944ae

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d4

MD5 606037397abbd3e3e30dc95687bb3873
SHA1 17ce2aa1be10e3bf42799e6beda67d367ac2c021
SHA256 26f122cabd1489982aaa396a7f528ae1f94543a72a181d2a195f58e5b349aa06
SHA512 e79419a44fcdefc72531722d185ec64e152125e0c4f8835fcc8caef8181efabb21d38462d150372bad8a4559475c40f2126da32aed6e91d374d295b027f9ef4b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e2

MD5 ef57537a7c185ce1708e890870175586
SHA1 ac96cd9fa217e487aef1329872889f6b1647883c
SHA256 5ca5b33538eddf115a84ee70710ebc42ad135c843cde648ade2427fc5cabb105
SHA512 617c77d1b4c36bcf9b8fcb2885f071f61d647141ccf52d0504857b3bb8f78436e0d086735fd0616ab5ce6092a32b861d91c0af34527e2fee75924ff836f456d3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000df

MD5 fcb8673fedcbc15071bbdf393e320fc9
SHA1 93f58253e7be29c2b66076ab3009ea747f1540e5
SHA256 0e53c12aaa606da39e929f536f04bb4b4c882c69b3b12d037d02e6ba57124c26
SHA512 ff1c7e8aa351b8192a85d7f00406a19f53d92238904ddcb0177e023a28d33e0244b16ef6b467297d0691bfaac2c6f3326806466c308bcf4cb4eb015d2c33ade6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e3

MD5 7c217bc9433889f55c38ca9d058514d3
SHA1 f1cf9ed15e1ec1db951c401233655dbbd304c732
SHA256 9ae2da663d64342031e59b5fa680dd355171d021b7ebf83774efc7c0330ae7b5
SHA512 6e920e167dd3a87bed08cab52a11e17e7a6f2602a656f1db71189f9d5090e42be7ea2e5418b2681a5c01860e3cef82cd9f5227e24b57e522a76eec11cdd70948

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e1

MD5 b63df9676edd2b960908b0c20620cf87
SHA1 a679ef0f13c5de4b35febf4ae09b98385230e91b
SHA256 dbc8bf34fc09706c61251d309768411aa5a4ad7d5879a084e6ce8eb288622d60
SHA512 81643252f1b4dac0e647f20a8aa3297f0e6a07e2a2c39a57892bf9819159aad8a291bf717a41a5855cd4029d93b97758c36e64781b2977d2911defc8241ddab4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d0

MD5 234ee18d423203a884b2f40554e8cff2
SHA1 9e6bdae00aae3f554bcf407910c1029d77ca547b
SHA256 0d6a2d9e1688dd1edf4c250223bf1f057c7949f3637e67277d312ea18edac411
SHA512 40db3850613bdf572444d7c4378f0d031dec9cf7c8e9d209d64dd4400d4c90355274b09d11b49aa957e5d3ac2011e6af8c2b1750bb70c171675481de8774e632

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d8

MD5 5c884bb01c229880ace6b2e02fd5a9dc
SHA1 3d6252652d23e333ef467d7cba9a9053ae458ba0
SHA256 36210d8de3bca054f8b7c907854a8037f8fbf615b92d1b1428489c1a6de329dd
SHA512 e2cb50293e06b95f76f6a97d0e53b900f2555a68de449940b7ceb2844d713b65e16cd001ef927cab4532911455f14e3a6ac600e71e2d784e3e2ea45b7a00e878

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d7

MD5 7e7b988ddf9edac5c5eb0f293df57b89
SHA1 c9ce3220e2ace3deda375af7658c4a664870a112
SHA256 75fd1d2207a0a435e6d58c41d9ab1e47d7809272593e7175eb7040a35650a145
SHA512 52d10b2245aea3b9af339dc234660343f8b684f34acd3bc467e7b950c95bfb35e4dc2f9f7a0cf0fb23a3298b04f2b9d89412d65a7a47a88ca031ec8f3c650dd1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000e0

MD5 5c4313a488dbcbf680138c2758a955b0
SHA1 abfb13ef1118262d62701d5ee4ed257d4fcdbc8e
SHA256 985c4224e8f2834053e2666e8f7a271763a4cf1c66d4468adbf282f53bbf63aa
SHA512 bc2af7e0a95ff9b5aff1cdf48952317a085838e7bc9274ee98b0c8904ac7b20e35f18ec228823e709aa64282a5cf464659c1520b75cfb3b16014611ebdfdc723

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000d3

MD5 455cc6c3d25e197d9647dd42676644c8
SHA1 7c5d524bc0a529d921eae5dbabd02b0df9c223bd
SHA256 d497d6bc810ed94b71d2e001768c9fc043aa8ca888864b44ce143b695ce01599
SHA512 e8d198f81f73d8daeb351b8330d9791f59d59f511a7fdeba6faffd9e177512f800f8ae142a1d58df97f249f3be7a3bbc8b3139ff0f3a3bfca898d077aa4cd743

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000f7

MD5 cf285c8633a65ad0561a52ad81fb58df
SHA1 939b0faaaf15784b7dfb6d362f0f2f53b81b9a31
SHA256 38d8c833810c381667e27be34f1fcc12ffb58c268fdd654cec60166bb6aaae14
SHA512 e98f834e166ffb36196a460bb4344af800aafd909afaaebf1d57fc344a9ebce074615ab4fbce18061e0452dfa589abcedcdbd9f04f217a096088d28f7e555eda

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\013888a1cda32b90_0

MD5 418ff245ddeec339ce6739414aa6b116
SHA1 ae4565b349642b4bd655c1624824b79cc5cc60f3
SHA256 ae6bf18eaf9f344034ce1c7496fd7c6c16e947b085ec7cbff66ab1e53cc2b4c6
SHA512 480a26a39f5b5ee3a9346ce0f0b6fe8932417c194a9c30982eef8daafd26ca6782a94e33623c1bbf62ed3c6116ffcd8b26e0dce8719dd9a5d7462b3d1efa4417

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 4633f1b6876599d65960138adda105e2
SHA1 bf7afc96c1a3b0a5d81fe26dd646a36946626749
SHA256 45a1482d8c3c1c913392bb2744fd5a7a059dcd2ad376939d1d12585c4d97f3a6
SHA512 63269ddaf4db40e1fcbd0e475df56f9bc716085bc48deef6559d765714975a8cb7333097d5d0c17216f6a50b279995031f401e77352c1a2be3d0ddc96206ea0a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 503976cbfb9ef87389e1b07297418c99
SHA1 9eb162997a65025b0956bca1d9766ac5849b8be8
SHA256 85b7b975ae83e63803d6bd5ae4273b76f9d6c7757a923ebebb7a2931cf9783aa
SHA512 9981cec1829261859dd3cec555d3f094a73705b0c3716d915524e2d013310d212c0bd7886de72d6fb315a07646a863477b44dee8ec988cb35fb62f04990b333e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 6bc16b993cbc8ebc281a250edefacfb9
SHA1 301ca710f54a6289b170628be999691ad107b8c7
SHA256 928972dca0d06e65361e8e9d098e4fd42811bc74c1eb2380821db10a7fbcccd3
SHA512 4e24c3310259c5c3770291dfdbfbbc5dee714c11803417488baf26f4dbc6503a0bf09a30d603e5675afbfde6d102a731a1111dbbfcd5fbcd570d9814cb7f4360

C:\Users\Admin\Downloads\UrbanVPN.exe

MD5 39089b4b80b37ef22a1759321fa6e750
SHA1 b9cecc18cfea029e24f738714e130ea60ac8e667
SHA256 56c0ae02c993971bc1a2fa42abec9b65e9ad0bac1e7d275caf2bc544088c5a10
SHA512 410225daf33cac294479b396ee39988decf0eedcd23d12e9b158e2f56cd42644d53031b38ca105b9401aadd80b707dc109eb2ae411c8c13f3f1ec54efd46a97f

C:\Users\Admin\AppData\Roaming\Urban Security\UrbanVPN 2.3.0.3\install\decoder.dll

MD5 899944fb96ccc34cfbd2ccb9134367c5
SHA1 7c46aa3f84ba5da95ceff39cd49185672f963538
SHA256 780d10eda2b9a0a10bf844a7c8b6b350aa541c5bbd24022ff34f99201f9e9259
SHA512 2c41181f9af540b4637f418fc148d41d7c38202fb691b56650085fe5a9bdba068275ff07e002e1044760754876c62d7b4fc856452af80a02c5f5a9a7dc75b5e0

C:\Users\Admin\AppData\Roaming\Urban Security\UrbanVPN 2.3.0.3\install\A28FC47\urbanvpninstaller.x64.msi

MD5 294de258dc51e42bafb53d624f443750
SHA1 f58b37153659caf3f2993b3c7a901fc93d0f179a
SHA256 d032ccbc60bc15be75a3a22d0d2bfd7920d73b162aff059d6bd3b672978df6c9
SHA512 d9d80018b1ab6a3e0e6634b09c23f91b9543dfc1051101528f30f4b9d12aaaceec31486b7e372156c45fab84d719d14347d72799473ef60139e3806180117e7f

C:\Users\Admin\AppData\Local\Temp\MSI4CFB.tmp

MD5 cfab78ac0d042a1d8ad7085a94328ef6
SHA1 b3070cc847ba2739450dc9bd05040df83e7d85d2
SHA256 17b10df05b4b92735b673914fe2bf0c0d7bbda5b4a8f9a7fc81a0efaa4380168
SHA512 647b909f1e833dd08d99aaa29a3404e64c58356dfa0a3abeb788768d74abb0948d2b612a6da62f2617270cd85110e8aa2b26e5e4558af0d0b84f920c40533438

C:\Users\Admin\AppData\Local\Temp\AI_EXTUI_BIN_884\dialog.jpg

MD5 81b61102f7970a8c83ecd382c4ab6def
SHA1 165795d45b6fa70661d073bb8c791114c0e6748e
SHA256 9a9ab67db52355b3d091e0bd58275e5c6633adbffc300ddb6607db7bbda88a15
SHA512 2b58f4da52cd687073cae64a0f467c3666daaca14bd95e38e544ae76319c3a9e7b5a223db6de2d92848822e23a9028d2cc97c64d7b2133aebbea5876e81e9937

C:\Users\Admin\AppData\Local\Temp\MSI4DBA.tmp

MD5 175d9b039177b405ee04c81f4c9aa4af
SHA1 6b523f7652761f4a24cf12ce08a32479ed03e8cf
SHA256 34a742397244bd2848291f7d1087eb43462a69272f22249e24c2aa71e79d14f3
SHA512 80f39a82a12899601da3dfc3092ba7465554b360a741fe26c0e4fbe3fac9b62ddde1f8c50f972eabf982427ac0b120edd67e8be31161a4ce4e2f8ef0dd53b26a

C:\Users\Admin\AppData\Local\Temp\shi4E01.tmp

MD5 6c7cdd25c2cb0073306eb22aebfc663f
SHA1 a1eba8ab49272b9852fe6a543677e8af36271248
SHA256 58280e3572333f97a7cf9f33e8d31dc26a98b6535965ebd0bde82249fc9bf705
SHA512 17344e07b9e9b2cd6ae4237d7f310732462f9cbb8656883607d7a1a4090e869265f92a6da1718dee50b1375b91583de60c6bd9e7e8db6b6e45e33f4b894365d6

C:\Users\Admin\AppData\Local\Temp\shi4E02.tmp

MD5 125b0f6bf378358e4f9c837ff6682d94
SHA1 8715beb626e0f4bd79a14819cc0f90b81a2e58ad
SHA256 e99eab3c75989b519f7f828373042701329acbd8ceadf4f3ff390f346ac76193
SHA512 b63bb6bfda70d42472868b5a1d3951cf9b2e00a7fadb08c1f599151a1801a19f5a75cfc3ace94c952cfd284eb261c7d6f11be0ebbcaa701b75036d3a6b442db2

C:\Users\Admin\AppData\Local\AdvinstAnalytics\632040a71cb8de62c9f15f5a\2.3.0.3\{195F9BA4-DF83-4A68-9A31-2E952DB05281}.session

MD5 adc7904a3d86672c18a996b55eea125c
SHA1 2a7eab30efb224b10025eca30155931934366e51
SHA256 d2bec7c153b403a9f24b87e1230b7d0f579c0c4ba46f5cf96ca36d956c7bb2cd
SHA512 6e1c0f56b9969d7f18cfc98b61383b2242235ca4a093b06e61e8f08b3cff4e339932b3568fdf56ff67864976e285bd8ab526b80e59f1c10e98a405489e6fc623

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 fa89ead3898578e5c9417abcc536f538
SHA1 25377b4ccd5f2b404db994cd907f73113728b841
SHA256 d39b8120614b641c6583f48adf8c7f527b90031efb0ddd825eb306287f279724
SHA512 7d993d06f33a7485e7cec2da086ed90e2efb0595b28ec4c6332ac9944117729919f7bdd7c8bf086c1826c689fd216e63f7439245865b810dcdf45dd87aff4cbc

C:\Users\Admin\AppData\Local\Temp\AI_EXTUI_BIN_884\banner.jpg

MD5 cc08338efa87c4f5ef6351f2598fc28f
SHA1 bb5cecc5fe4dfbc13165eb9d76c2a7c48fea8af7
SHA256 c14948f437d22f943c3f887ce082cbcc69862cb5f4e0fa6b1e9e18cac22ea038
SHA512 d81a0bd1d179854abef657d3baf9b0b1187f5c6ef3152426fb1ad1029c74eeb5d7cf89801c7d075786a3b49d58a55654cb44ba45876a871fee4b118374cec5c0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 1a3e2e11f02a0bf73cf3527aceb11cef
SHA1 5a37c6186da3a5d7cd1d93d8e1a7ad611e3f964f
SHA256 4a3cf8df25f8705a2fba7eed9cf185559679099f598c2abde6123cfd7faf9fac
SHA512 cd09d8a6a9e933e8e96d967bf3dc37bb81cac89562ed5b425b1a4f1a28f55cc4f423c60da7943eb5e3e60d115a55841111149b5e83593ef9370610278afd62cd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 e51f7e6b45d7cf311f1411d5ecb2b28a
SHA1 33c6b4c3c17b6aaddb8658c93d20dc709c43afd6
SHA256 369c75ec9fd8dcaf2c37c9c9e76ce827d8319152331cb7f5c98d4120654a4561
SHA512 c657378f5b9ec482cbb43f2b75265a18938f37ddb531d0ca9ad3fd3dd00e94201cb029a2fa16d95c700668f150dbf2c35d47cd6fa1f145a08f67e07dd980cdbf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 263c688d131f97a26229c54cafe9af15
SHA1 ab92cd35a7e48b5d715fcc4533aeb1d0478cb532
SHA256 b136dca7a31fa66b427c9a270acf8cd87895429ef36cfa520c1143fce77e76b2
SHA512 15729743256f56017707f0e8d02f16a506643bcbdbaa245fbfb8637646c04ae2c21987b0b8b003c482e6a9a49184c416826ca7fe68877051a2ccbcb19d26c90c

C:\Users\Admin\Documents\DVDFab\StreamFab\Temp\update\updateLog\LiveUpdate.log.lock

MD5 ecd486741c424faee54333e8d3f0824f
SHA1 020c37b2777fdcfac2ae191c8d998d1dc44281f2
SHA256 f16049e786fe0bc107458d4fbd0921f4b85128a155cc76fc364f3d581c405cd5
SHA512 e0984e69d9643a314124743ddf4feac22b429ae33ab9e8a8132962322b9041feab5a9962f75e9f519fbf3c139ef7c78df146119d699f8eb02180227dc4d2e0f8

C:\Users\Admin\AppData\Local\Temp\shi35C0.tmp

MD5 77d6c08c6448071b47f02b41fa18ed37
SHA1 e7fdb62abdb6d4131c00398f92bc72a3b9b34668
SHA256 047e2df9ccf0ce298508ee7f0db0abcb2ff9cff9916b6e8a1fbd806b7a9d064b
SHA512 e1aeb8e8b441d755a119f45a465ca5660678f4131984322252bfb6d2cec52e7ee54d65a64b98429b23915eb5707b04b5cd62a85446c60de8842314130a926dbd

C:\Users\Admin\AppData\Local\Temp\MSI366E.tmp

MD5 b15dbf4b35cd1460ba283795e24878c8
SHA1 327812be4bfdce7a87cb00fab432ecc0d8c38c1e
SHA256 0ac07db6140408e9586d46727eb32af8f8048cad535eca9052b6ef1149e63147
SHA512 95edc60c9658e0e8631604459969a406414902f297b7a14f2be6d3bc18878636167d202530d4ee3b4d7af189a9139a2183929250920196c48c08eda3d6dfdca4

C:\Users\Admin\AppData\Local\AdvinstAnalytics\632040a71cb8de62c9f15f5a\2.3.0.3\{57B62F63-5747-4CBD-BBAC-6026C9F50796}.session

MD5 11de87fd8c025737d53cbf699e79d11b
SHA1 b34091d4650ef060aeb7c7a5f1e04035bc8d4bde
SHA256 278db509b2f0b3d7e4630222e5cc7cc4b136be3d16b0a006de2d07114f4e1a63
SHA512 667b0fb09e2687d98953aa0554bf8199eb848aa4e61cb149e9ee490fc631e13e14e10f9c317c08a72a41a53dd891e7f63b91d7c3a76efb38c6000bd0cfc90483

C:\Users\Admin\AppData\Local\AdvinstAnalytics\632040a71cb8de62c9f15f5a\2.3.0.3\{57B62F63-5747-4CBD-BBAC-6026C9F50796}.session

MD5 860f3d9b744e4fe3f90811b8b64025af
SHA1 1ec9d88734661c88255f17908ccbc9f2beb78c66
SHA256 1784e11485eded2564a127615f19ed6d43c97bd007884cccd9d238ab5efbb8be
SHA512 ac04fc44944c2a2080820359c00313b6b78e217511ff593420ff6472370832507e934b05a38a5ff08489fac7a1c654093d137bda1f79f67ecd21c7e67d7c4482

C:\Users\Admin\AppData\Local\Temp\MSI3919.tmp

MD5 efa1291d4eb0ff2050967dd63bfdbdc8
SHA1 54ba41d5a6fb192267b36127ff573cb112413fd8
SHA256 da78931d835e91c59cadaebc95fbae56020ce5031523a6a175fefa4582334ac4
SHA512 5fcce6422b0ee6827a57c5d0c476e36a5e75a880550b8041a0f3db42b630f483654508a797421ff4316fd84db549c8c78536a25d5da2de9eb60365720517d5e6