Malware Analysis Report

2025-01-18 21:30

Sample ID 240322-n1n31sdg4v
Target visualg30.exe
SHA256 7b297fb338e2ca7004ed55b42aef215c17a1a1d44b27cff50b6dc9be6dd3becf
Tags
adware discovery evasion persistence stealer trojan
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

7b297fb338e2ca7004ed55b42aef215c17a1a1d44b27cff50b6dc9be6dd3becf

Threat Level: Likely malicious

The file visualg30.exe was found to be: Likely malicious.

Malicious Activity Summary

adware discovery evasion persistence stealer trojan

Modifies Installed Components in the registry

Downloads MZ/PE file

Sets file execution options in registry

Executes dropped EXE

Loads dropped DLL

Registers COM server for autorun

Checks whether UAC is enabled

Adds Run key to start application

Checks installed software on the system

Installs/modifies Browser Helper Object

Suspicious use of NtSetInformationThreadHideFromDebugger

Drops file in System32 directory

Checks system information in the registry

Suspicious use of NtCreateThreadExHideFromDebugger

Drops file in Windows directory

Drops file in Program Files directory

Enumerates physical storage devices

Unsigned PE

Suspicious use of SendNotifyMessage

Uses Task Scheduler COM API

NTFS ADS

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of AdjustPrivilegeToken

Modifies Internet Explorer settings

Suspicious use of WriteProcessMemory

System policy modification

Enumerates system info in registry

Modifies data under HKEY_USERS

Suspicious behavior: EnumeratesProcesses

Suspicious use of UnmapMainImage

Modifies registry class

Suspicious use of FindShellTrayWindow

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-03-22 11:51

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-03-22 11:51

Reported

2024-03-22 12:37

Platform

win11-20240221-en

Max time kernel

2704s

Max time network

2710s

Command Line

"C:\Users\Admin\AppData\Local\Temp\visualg30.exe"

Signatures

Downloads MZ/PE file

Modifies Installed Components in the registry

persistence
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\IsInstalled = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Version = "43,0,0,0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\ = "Microsoft Edge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\StubPath = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\122.0.2365.92\\Installer\\setup.exe\" --configure-user-settings --verbose-logging --system-level --msedge --channel=stable" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Localized Name = "Microsoft Edge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A

Sets file execution options in registry

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EU1DA9.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EU1DA9.tmp\MicrosoftEdgeUpdate.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\MicrosoftEdge_X64_122.0.2365.92.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\EDGEMITMP_A55BB.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\EDGEMITMP_A55BB.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4956AA1C-A919-433A-AD1C-B8A908EA6DBD}\MicrosoftEdgeUpdateSetup_X86_1.3.185.21.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU1DA9.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{894BD6A0-7874-4B54-A508-1D20AA76CAA1}\BGAUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\MicrosoftEdge_X64_122.0.2365.92.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU1DA9.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Registers COM server for autorun

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{983A8821-FE45-462A-919F-41A3B80645B2}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.21\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.21\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.21\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{983A8821-FE45-462A-919F-41A3B80645B2}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.21\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32\ThreadingModel = "Apartment" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32\ServerExecutable = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\122.0.2365.92\\notification_click_helper.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{983A8821-FE45-462A-919F-41A3B80645B2}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.21\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{983A8821-FE45-462A-919F-41A3B80645B2}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.21\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{983A8821-FE45-462A-919F-41A3B80645B2}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\122.0.2365.92\\EBWebView\\x64\\EmbeddedBrowserWebView.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.21\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\INPROCSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.21\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32\ServerExecutable = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\122.0.2365.92\\notification_helper.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\122.0.2365.92\\notification_click_helper.exe\"" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{983A8821-FE45-462A-919F-41A3B80645B2}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\122.0.2365.92\\notification_helper.exe\"" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\INPROCSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{983A8821-FE45-462A-919F-41A3B80645B2}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\!BCILauncher = "\"C:\\Windows\\Temp\\MUBSTemp\\BCILauncher.EXE\" bgaupmi=15BBD8B647E843A2A7C5034206A7AF50" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{894BD6A0-7874-4B54-A508-1D20AA76CAA1}\BGAUpdate.exe N/A

Checks installed software on the system

discovery

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A

Installs/modifies Browser Helper Object

stealer adware
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A

Checks system information in the registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EU1DA9.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EU1DA9.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A

Suspicious use of NtSetInformationThreadHideFromDebugger

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\ui\Settings\Help\ZoomGesture.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\ui\Settings\Players\Unmute.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\ExtraContent\LuaPackages\Packages\_Index\roblox_t\t\t.d.ts C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\ExtraContent\textures\ui\LuaApp\graphic\Auth\DatePickerDivider.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\ExtraContent\textures\ui\LuaChatV2\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\DeveloperFramework\PageNavigation\button_control_next.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\StudioSharedUI\MeatballMenu.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EU1DA9.tmp\msedgeupdateres_az.dll C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4956AA1C-A919-433A-AD1C-B8A908EA6DBD}\MicrosoftEdgeUpdateSetup_X86_1.3.185.21.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.92\identity_proxy\win10\identity_helper.Sparse.Internal.msix C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\EDGEMITMP_A55BB.tmp\setup.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EU1DA9.tmp\msedgeupdateres_te.dll C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4956AA1C-A919-433A-AD1C-B8A908EA6DBD}\MicrosoftEdgeUpdateSetup_X86_1.3.185.21.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.92\Locales\sk.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\EDGEMITMP_A55BB.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\ui\VoiceChat\Misc\Unmute.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\ExtraContent\textures\ui\LuaChat\graphic\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\ui\Settings\Players\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\sky\clouds.dds C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\TerrainTools\mtrl_ice_2022.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\AppImageAtlas\img_set_2x_7.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.92\oneauth.dll C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\EDGEMITMP_A55BB.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\AvatarImporter\fbximportlogo.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\ui\VoiceChat\SpeakerDark\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\StudioToolbox\AudioSoundEffect.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\ExtraContent\textures\ui\LuaApp\graphic\Auth\logo_white_luobu.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdateres_kok.dll C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.92\identity_helper.exe C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\EDGEMITMP_A55BB.tmp\setup.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeWebView\Application\SetupMetrics\06dce1c7-8628-449b-9e82-00da066c701d.tmp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\EDGEMITMP_A55BB.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\fonts\families\PressStart2P.json C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\AnimationEditor\button_hierarchy_opened.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\ExtraContent\textures\ui\LuaApp\ExternalSite\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\ui\Emotes\Large\CircleBackground.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\PlatformContent\pc\textures\brick\normal.dds C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\sky\moon.jpg C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\CollisionGroupsEditor\assign.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\ExtraContent\textures\ui\LuaChat\icons\ic-more.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\DeveloperInspector\Inspect.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\ui\Capture\ShutterPressed.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\PlatformContent\pc\textures\diamondplate\diffuse.dds C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\PlatformContent\pc\textures\marble\diffuse.dds C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\122.0.2365.92\Locales\lt.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\ui\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\ui\Controls\PlayStationController\PS5\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\StudioToolbox\AssetConfig\public.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\StudioToolbox\AssetConfig\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\ui\Controls\DesignSystem\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\ui\InspectMenu\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\ui\Settings\MenuBarAssets\MenuButtonSelected.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\ExtraContent\textures\ui\LuaApp\icons\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\9SliceEditor\GridPattern.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\DeveloperFramework\UIOff_dark.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\122.0.2365.92\Locales\kok.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.92\vk_swiftshader.dll C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\EDGEMITMP_A55BB.tmp\setup.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EU1DA9.tmp\msedgeupdateres_bg.dll C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4956AA1C-A919-433A-AD1C-B8A908EA6DBD}\MicrosoftEdgeUpdateSetup_X86_1.3.185.21.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\avatar\heads\head.mesh C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\122.0.2365.92\Locales\ja.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.92\Locales\ms.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\EDGEMITMP_A55BB.tmp\setup.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EU1DA9.tmp\msedgeupdateres_hu.dll C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4956AA1C-A919-433A-AD1C-B8A908EA6DBD}\MicrosoftEdgeUpdateSetup_X86_1.3.185.21.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\PivotEditor\HoveredPivot.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\ui\scrollbuttonUp_ovr.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\content\textures\ui\VoiceChat\New\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.92\edge_feedback\camera_mf_trace.wprp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\EDGEMITMP_A55BB.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\ExtraContent\textures\ui\LuaChat\icons\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\Temp\EU1DA9.tmp\msedgeupdateres_it.dll C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4956AA1C-A919-433A-AD1C-B8A908EA6DBD}\MicrosoftEdgeUpdateSetup_X86_1.3.185.21.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.92\edge_feedback\camera_mf_trace.wprp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\122.0.2365.92\WidevineCdm\manifest.json C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\EDGEMITMP_A55BB.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\EDGEMITMP_A55BB.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\EDGEMITMP_A55BB.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\EDGEMITMP_A55BB.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\EDGEMITMP_A55BB.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\EDGEMITMP_A55BB.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\EDGEMITMP_A55BB.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\EDGEMITMP_A55BB.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A

Enumerates physical storage devices

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main\EnterpriseMode C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations\C:\Program Files (x86)\Microsoft\Edge\Application = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\EnterpriseMode\MSEdgePath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\122.0.2365.92\\BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\122.0.2365.92\\BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge\WarnOnOpen = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge\WarnOnOpen = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\NumMethods\ = "4" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3805CA06-AC83-4F00-8A02-271DCD89BDEB}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{C9C2B807-7731-4F34-81B7-44FF7779522B}\TypeLib C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7E29BE61-5809-443F-9B5D-CF22156694EB}\NumMethods\ = "12" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\roblox-studio\URL Protocol C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C20433B3-0D4B-49F6-9B6C-6EE0FAE07837}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\.svg C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3A49F783-1C7D-4D35-8F63-5C1C206B9B6E}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{450CF5FF-95C4-4679-BECA-22680389ECB9}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusSvc\CurVer\ = "MicrosoftEdgeUpdate.PolicyStatusSvc.1.0" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0A5F4B64-7FCB-4C1B-8133-CD01DB52BE83}\InprocHandler32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{08D832B9-D2FD-481F-98CF-904D00DF63CC}\VERSIONINDEPENDENTPROGID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FF419FF9-90BE-4D9F-B410-A789F90E5A7C} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A6556DFF-AB15-4DC3-A890-AB54120BEAEC}\ = "IProcessLauncher2" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.ProcessLauncher.1.0\CLSID\ = "{08D832B9-D2FD-481F-98CF-904D00DF63CC}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{6DFFE7FE-3153-4AF1-95D8-F8FCCA97E56B} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497}\ProxyStubClsid32\ = "{983A8821-FE45-462A-919F-41A3B80645B2}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A5135E58-384F-4244-9A5F-30FA9259413C}\NumMethods\ = "6" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusMachineFallback\ = "Google Update Policy Status Class" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0A5F4B64-7FCB-4C1B-8133-CD01DB52BE83}\InprocHandler32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3A49F783-1C7D-4D35-8F63-5C1C206B9B6E}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\.shtml\OpenWithProgids C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\MSEdgeHTM\shell\open C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7B3B7A69-7D88-4847-A6BC-90E246A41F69}\NumMethods\ = "10" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FF419FF9-90BE-4D9F-B410-A789F90E5A7C}\LocalServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E421557C-0628-43FB-BF2B-7C9F8A4D067C}\Elevation C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{77857D02-7A25-4B67-9266-3E122A8F39E4}\ProgID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusSvc\CurVer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\ProxyStubClsid32\ = "{983A8821-FE45-462A-919F-41A3B80645B2}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3WebSvc C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C20433B3-0D4B-49F6-9B6C-6EE0FAE07837}\ = "ICoCreateAsync" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\ = "PDF Preview Handler" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\MSEdgeHTM\shell C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.CoreClass.1\ = "Microsoft Edge Update Core Class" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\NumMethods\ = "11" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{450CF5FF-95C4-4679-BECA-22680389ECB9}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C20433B3-0D4B-49F6-9B6C-6EE0FAE07837}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\ = "IPolicyStatus" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\NumMethods\ = "11" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\ = "IPolicyStatusValue" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8F09CD6C-5964-4573-82E3-EBFF7702865B}\ = "Microsoft Edge Update Core Class" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{983A8821-FE45-462A-919F-41A3B80645B2}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 330759.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU1DA9.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU1DA9.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4024 wrote to memory of 4152 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4152 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1264 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

System policy modification

evasion
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe N/A

Uses Task Scheduler COM API

persistence

Processes

C:\Users\Admin\AppData\Local\Temp\visualg30.exe

"C:\Users\Admin\AppData\Local\Temp\visualg30.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffb4ffc3cb8,0x7ffb4ffc3cc8,0x7ffb4ffc3cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1944 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2532 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3416 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3408 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4868 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4944 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5192 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5316 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5344 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5640 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5396 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5380 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5420 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3860 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=4580 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5316 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5344 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5816 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=media.mojom.MediaService --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --service-sandbox-type=mf_cdm --mojo-platform-channel-handle=6384 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=6076 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6624 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6644 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5256 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6072 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7056 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6644 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7164 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6688 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6852 /prefetch:8

C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe

"C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe"

C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MicrosoftEdgeWebview2Setup.exe /silent /install

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7QUVDQjhGM0YtNkZBMi00RDdBLTg1MEUtNkExMDIxNTREODExfSIgdXNlcmlkPSJ7NkI3QkQ5MjItNjY3MS00Nzg1LTk0NDgtNjMyQzg4MjY4NTVDfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9InsyNTIwQjRCOS04RDU0LTQ3NjItQUYwNy1BMUQxQjMyN0UzNjB9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSJEQURZIiBwcm9kdWN0X25hbWU9IlN0YW5kYXJkIFBDIChRMzUgKyBJQ0g5LCAyMDA5KSIvPjxleHAgZXRhZz0iIi8-PGFwcCBhcHBpZD0ie0YzQzRGRTAwLUVGRDUtNDAzQi05NTY5LTM5OEEyMEYxQkE0QX0iIHZlcnNpb249IjEuMy4xNDMuNTciIG5leHR2ZXJzaW9uPSIxLjMuMTcxLjM5IiBsYW5nPSIiIGJyYW5kPSIiIGNsaWVudD0iIj48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI3MjUwMTIxNjUxIiBpbnN0YWxsX3RpbWVfbXM9IjEyMzMiLz48L2FwcD48L3JlcXVlc3Q-

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{AECB8F3F-6FA2-4D7A-850E-6A102154D811}" /silent

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7QUVDQjhGM0YtNkZBMi00RDdBLTg1MEUtNkExMDIxNTREODExfSIgdXNlcmlkPSJ7NkI3QkQ5MjItNjY3MS00Nzg1LTk0NDgtNjMyQzg4MjY4NTVDfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins1ODRGNzBGNS1EMUNCLTRGN0QtQUI3RC1CNjg2NUFEMjJDMUR9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSJEQURZIiBwcm9kdWN0X25hbWU9IlN0YW5kYXJkIFBDIChRMzUgKyBJQ0g5LCAyMDA5KSIvPjxleHAgZXRhZz0iJnF1b3Q7cjQ1MnQxK2syVGdxL0hYemp2Rk5CUmhvcEJXUjlzYmpYeHFlVURIOXVYMD0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7OEE2OUQzNDUtRDU2NC00NjNjLUFGRjEtQTY5RDlFNTMwRjk2fSIgdmVyc2lvbj0iMTA2LjAuNTI0OS4xMTkiIG5leHR2ZXJzaW9uPSIxMDYuMC41MjQ5LjExOSIgbGFuZz0iZW4iIGJyYW5kPSJHR0xTIiBjbGllbnQ9IiI-PGV2ZW50IGV2ZW50dHlwZT0iMzEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjUiIHN5c3RlbV91cHRpbWVfdGlja3M9IjcyNTgzOTE1MzgiLz48L2FwcD48L3JlcXVlc3Q-

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\MicrosoftEdge_X64_122.0.2365.92.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\MicrosoftEdge_X64_122.0.2365.92.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\EDGEMITMP_A55BB.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\EDGEMITMP_A55BB.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\MicrosoftEdge_X64_122.0.2365.92.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\EDGEMITMP_A55BB.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\EDGEMITMP_A55BB.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.129 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{DF3FEF7F-2259-4AB9-9FF5-33B98817A8D5}\EDGEMITMP_A55BB.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=122.0.2365.92 --initial-client-data=0x240,0x244,0x248,0x21c,0x24c,0x7ff68bd079a8,0x7ff68bd079b4,0x7ff68bd079c0

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5564 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7QUVDQjhGM0YtNkZBMi00RDdBLTg1MEUtNkExMDIxNTREODExfSIgdXNlcmlkPSJ7NkI3QkQ5MjItNjY3MS00Nzg1LTk0NDgtNjMyQzg4MjY4NTVDfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9InszRDJENUQzRi1COTNBLTRGOUMtOUJEMi0yMzZCNjAyMDkwODN9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-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-PGV2ZW50IGV2ZW50dHlwZT0iOSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iNzI3MjY4MTQ5MyIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxldmVudCBldmVudHR5cGU9IjUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjcyNzI4NjE2MTkiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIxIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI3NjAwMjc1MzA1IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiBkb3dubG9hZGVyPSJiaXRzIiB1cmw9Imh0dHA6Ly9tc2VkZ2UuZi50bHUuZGwuZGVsaXZlcnkubXAubWljcm9zb2Z0LmNvbS9maWxlc3RyZWFtaW5nc2VydmljZS9maWxlcy83NGMxNThhZC1kYThmLTRlODYtOWFjMS0wZmRiNDczYTg1YWQ_UDE9MTcxMTcxMzQxMCZhbXA7UDI9NDA0JmFtcDtQMz0yJmFtcDtQND1Pb2F2N3Z6ZDVGQVBKQ2FvUWlKU0dVbXlZQUFpJTJiV2Rrd2JvelZBUEExNlJySVFNNFNOWmRScEZvZUZGalNqcWdZVzlPRDZGcVlYaUF0bHRBNk41dXZBJTNkJTNkIiBzZXJ2ZXJfaXBfaGludD0iIiBjZG5fY2lkPSItMSIgY2RuX2NjYz0iIiBjZG5fbXNlZGdlX3JlZj0iIiBjZG5fYXp1cmVfcmVmX29yaWdpbl9zaGllbGQ9IiIgY2RuX2NhY2hlPSIiIGNkbl9wM3A9IiIgZG93bmxvYWRlZD0iMTcxODQ2MDg4IiB0b3RhbD0iMTcxODQ2MDg4IiBkb3dubG9hZF90aW1lX21zPSIyMzU3NCIvPjxldmVudCBldmVudHR5cGU9IjEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9Ijc2MDA3MTU3NDUiIHNvdXJjZV91cmxfaW5kZXg9IjAiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSI2IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI3NjIxMDI1ODY4IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMTk2NzU3IiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI4Mjc3Njg1MjQ4IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiB1cGRhdGVfY2hlY2tfdGltZV9tcz0iODU2IiBkb3dubG9hZF90aW1lX21zPSIzMjc3OCIgZG93bmxvYWRlZD0iMTcxODQ2MDg4IiB0b3RhbD0iMTcxODQ2MDg4IiBwYWNrYWdlX2NhY2hlX3Jlc3VsdD0iMCIgaW5zdGFsbF90aW1lX21zPSI2NTY2MyIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe" -app -isInstallerLaunch

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6072 /prefetch:1

C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe" roblox-player:1+launchmode:play+gameinfo:1BhBjR6hW52qLe48JhvoK1w2ssp9D_c55_YGMYBl0DpGYlRj5lU0UFV1MlpuBriS-1xB_CxfP_QHFUXYW7zk3CN9sAp0lJYyYOPN_12HCNrkv0CuG7WT9XwwKPjSOxGCrcKafz6_KszATqKDhllllpw3A8FKIi1CU54PsFxeQrnNF00ZEDHRxkUXpYT9KuR-e_ScDyXI2uPTDwGCs_aKbm7TxhKHNiQ6MPpNYQykdR4+launchtime:1711108758067+placelauncherurl:https%3A%2F%2Fassetgame.roblox.com%2Fgame%2FPlaceLauncher.ashx%3Frequest%3DRequestGame%26browserTrackerId%3D221666388861%26placeId%3D1758401491%26isPlayTogetherGame%3Dfalse%26joinAttemptId%3D377d34fc-3fbb-4dd4-a97e-50cddbe4a0cd%26joinAttemptOrigin%3DPlayButton+browsertrackerid:221666388861+robloxLocale:en_us+gameLocale:en_us+channel:+LaunchExp:InApp

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5644 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6412 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7448 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7476 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=7396 /prefetch:8

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\RobloxPlayerBeta.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7756 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7632 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4956AA1C-A919-433A-AD1C-B8A908EA6DBD}\MicrosoftEdgeUpdateSetup_X86_1.3.185.21.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{4956AA1C-A919-433A-AD1C-B8A908EA6DBD}\MicrosoftEdgeUpdateSetup_X86_1.3.185.21.exe" /update /sessionid "{8D218C00-29F3-424B-8407-AC3D9E51AB27}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7OEQyMThDMDAtMjlGMy00MjRCLTg0MDctQUMzRDlFNTFBQjI3fSIgdXNlcmlkPSJ7NkI3QkQ5MjItNjY3MS00Nzg1LTk0NDgtNjMyQzg4MjY4NTVDfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9IntCNzhBNDU0Qy1COUNBLTQ5QjQtOTQxRi0yMEZENzFBNTQ1MjV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSJEQURZIiBwcm9kdWN0X25hbWU9IlN0YW5kYXJkIFBDIChRMzUgKyBJQ0g5LCAyMDA5KSIvPjxleHAgZXRhZz0iJnF1b3Q7cjQ1MnQxK2syVGdxL0hYemp2Rk5CUmhvcEJXUjlzYmpYeHFlVURIOXVYMD0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE3MS4zOSIgbmV4dHZlcnNpb249IjEuMy4xODUuMjEiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSIwIj48dXBkYXRlY2hlY2svPjxldmVudCBldmVudHR5cGU9IjEyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIxMDY3MDQyODc1NCIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxldmVudCBldmVudHR5cGU9IjEzIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIxMDY3MDYzMzk4OSIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxldmVudCBldmVudHR5cGU9IjE0IiBldmVudHJlc3VsdD0iMCIgZXJyb3Jjb2RlPSItMjE0NzAyMzgzOCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iMTA5MzA2OTkyNjYiIHNvdXJjZV91cmxfaW5kZXg9IjAiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiIGRvd25sb2FkZXI9ImRvIiB1cmw9Imh0dHA6Ly9tc2VkZ2UuYi50bHUuZGwuZGVsaXZlcnkubXAubWljcm9zb2Z0LmNvbS9maWxlc3RyZWFtaW5nc2VydmljZS9maWxlcy9mZjVkZTJhMS01ZjRlLTRiMjItYWQ1MS1lMzlkMjE5YzI0YzU_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-PGV2ZW50IGV2ZW50dHlwZT0iMTQiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEwOTMwNzg3Mjc3IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEwOTM2NjE1MzM5IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PHBpbmcgcj0iLTEiIHJkPSItMSIvPjwvYXBwPjxhcHAgYXBwaWQ9Ins1NkVCMThGOC1CMDA4LTRDQkQtQjZEMi04Qzk3RkU3RTkwNjJ9IiB2ZXJzaW9uPSI5MC4wLjgxOC42NiIgbmV4dHZlcnNpb249IiIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGV4cGVyaW1lbnRzPSJjb25zZW50PWZhbHNlIiBsYXN0X2xhdW5jaF90aW1lPSIxMzM1NTU4MTk3NDUwNjM4OTAiPjx1cGRhdGVjaGVjay8-PHBpbmcgYWN0aXZlPSIxIiBhPSItMSIgcj0iLTEiIGFkPSItMSIgcmQ9Ii0xIi8-PC9hcHA-PGFwcCBhcHBpZD0ie0YzMDE3MjI2LUZFMkEtNDI5NS04QkRGLTAwQzNBOUE3RTRDNX0iIHZlcnNpb249IjEyMi4wLjIzNjUuOTIiIG5leHR2ZXJzaW9uPSIiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiB1cGRhdGVfY291bnQ9IjEiPjx1cGRhdGVjaGVjay8-PHBpbmcgcj0iLTEiIHJkPSItMSIgcGluZ19mcmVzaG5lc3M9InsxMDY4RjRDMC03RjU2LTRENkQtQUI3My0zNUJCQkY2MzgxNzd9Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7636 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7796 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8108 /prefetch:1

C:\Program Files (x86)\Microsoft\Temp\EU1DA9.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EU1DA9.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{8D218C00-29F3-424B-8407-AC3D9E51AB27}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.21\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iREFEWSIgcHJvZHVjdF9uYW1lPSJTdGFuZGFyZCBQQyAoUTM1ICsgSUNIOSwgMjAwOSkiLz48ZXhwIGV0YWc9IiZxdW90O3I0NTJ0MStrMlRncS9IWHpqdkZOQlJob3BCV1I5c2JqWHhxZVVESDl1WDA9JnF1b3Q7Ii8-PGFwcCBhcHBpZD0ie0YzQzRGRTAwLUVGRDUtNDAzQi05NTY5LTM5OEEyMEYxQkE0QX0iIHZlcnNpb249IjEuMy4xNzEuMzkiIG5leHR2ZXJzaW9uPSIxLjMuMTg1LjIxIiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgaW5zdGFsbGFnZT0iMCIgaW5zdGFsbGRhdGV0aW1lPSIxNzExMTA4NjA2Ij48ZXZlbnQgZXZlbnR0eXBlPSIzIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIxMDk5MTExMTI3NyIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5972 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7220 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8108 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6652 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7584 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iREFEWSIgcHJvZHVjdF9uYW1lPSJTdGFuZGFyZCBQQyAoUTM1ICsgSUNIOSwgMjAwOSkiLz48ZXhwIGV0YWc9IiZxdW90O0RWMGpJL0tEbHhoSHVlMUw5S1JHR2NxT2hmM0gzaDNhY1NyRWFuUUtmZ1E9JnF1b3Q7Ii8-PGFwcCBhcHBpZD0iezhBNjlEMzQ1LUQ1NjQtNDYzYy1BRkYxLUE2OUQ5RTUzMEY5Nn0iIHZlcnNpb249IjEwNi4wLjUyNDkuMTE5IiBuZXh0dmVyc2lvbj0iIiBsYW5nPSJlbiIgYnJhbmQ9IkdHTFMiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSIyOSIgaW5zdGFsbGRhdGV0aW1lPSIxNzA4NTM1MTk3IiBvb2JlX2luc3RhbGxfdGltZT0iMTMzNTMwMzYyMzgyMTIwMTExIiBmaXJzdF9mcmVfc2Vlbl90aW1lPSIxMzM1NTU4MjA2NDA5MzQxMzkiPjxldmVudCBldmVudHR5cGU9IjMxIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIyMTM1MjMiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEzOTg5MDgwMjc4Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{894BD6A0-7874-4B54-A508-1D20AA76CAA1}\BGAUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{894BD6A0-7874-4B54-A508-1D20AA76CAA1}\BGAUpdate.exe" --edgeupdate-client --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODUuMjEiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MjY3MUE1NTMtMDAzMy00QTE0LTkwQ0QtREVGN0U2QTg2QzVDfSIgdXNlcmlkPSJ7NkI3QkQ5MjItNjY3MS00Nzg1LTk0NDgtNjMyQzg4MjY4NTVDfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9Ins5MUEzQzcxMy04QTZELTRCREQtQkM5RC05RUYxQ0UwOUU4QTd9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-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-PHVwZGF0ZWNoZWNrLz48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIxNDAwMTc0ODYzNiIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxldmVudCBldmVudHR5cGU9IjUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjE0MDAxNzQ4NjM2IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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-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-PGV2ZW50IGV2ZW50dHlwZT0iNiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iMTY0Mjk0NzEyMjIiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIxNjQzMjkwNjIyOCIgc291cmNlX3VybF9pbmRleD0iMCIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIgdXBkYXRlX2NoZWNrX3RpbWVfbXM9IjgyOSIgZG93bmxvYWRfdGltZV9tcz0iMjQyMDg5IiBkb3dubG9hZGVkPSIxODA0ODAzMiIgdG90YWw9IjE4MDQ4MDMyIiBwYWNrYWdlX2NhY2hlX3Jlc3VsdD0iMCIgaW5zdGFsbF90aW1lX21zPSIzNDQiLz48L2FwcD48L3JlcXVlc3Q-

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\MicrosoftEdge_X64_122.0.2365.92.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\MicrosoftEdge_X64_122.0.2365.92.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\MicrosoftEdge_X64_122.0.2365.92.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.129 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=122.0.2365.92 --initial-client-data=0x248,0x24c,0x250,0x224,0x254,0x7ff6480a79a8,0x7ff6480a79b4,0x7ff6480a79c0

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe" --msedge --channel=stable --system-level --verbose-logging --create-shortcuts=3 --install-level=1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.129 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=122.0.2365.92 --initial-client-data=0x248,0x24c,0x250,0x224,0x254,0x7ff6480a79a8,0x7ff6480a79b4,0x7ff6480a79c0

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODUuMjEiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7OTczM0Q3RTQtN0Q2Qy00ODdDLUJEMDgtQTc1OUE2OTczNUMwfSIgdXNlcmlkPSJ7NkI3QkQ5MjItNjY3MS00Nzg1LTk0NDgtNjMyQzg4MjY4NTVDfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9InsyNUY4NTU5MS1FRjQzLTQyN0UtQTdBRC1DN0JFODAyRDY0MkJ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiIGlzX2luX2xvY2tkb3duX21vZGU9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSJEQURZIiBwcm9kdWN0X25hbWU9IlN0YW5kYXJkIFBDIChRMzUgKyBJQ0g5LCAyMDA5KSIvPjxleHAgZXRhZz0iJnF1b3Q7RFYwakkvS0RseGhIdWUxTDlLUkdHY3FPaGYzSDNoM2FjU3JFYW5RS2ZnUT0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE4NS4yMSIgbmV4dHZlcnNpb249IiIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGV4cGVyaW1lbnRzPSJQcm9kdWN0c1RvUmVnaXN0ZXI9JTdCMUZBQjhDRkUtOTg2MC00MTVDLUE2Q0EtQUE3RDEyMDIxOTQwJTdEIiBpbnN0YWxsYWdlPSIwIiBjb2hvcnQ9InJyZkAwLjg5Ij48dXBkYXRlY2hlY2svPjxwaW5nIHJkPSI2MjkwIiBwaW5nX2ZyZXNobmVzcz0iezNENjJDRENBLTY3MDctNDBDNS05RkNCLUI2NjNCQjcwNzE3RH0iLz48L2FwcD48YXBwIGFwcGlkPSJ7NTZFQjE4RjgtQjAwOC00Q0JELUI2RDItOEM5N0ZFN0U5MDYyfSIgdmVyc2lvbj0iOTAuMC44MTguNjYiIG5leHR2ZXJzaW9uPSIxMjIuMC4yMzY1LjkyIiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9ImNvbnNlbnQ9ZmFsc2UiIGlzX3Bpbm5lZF9zeXN0ZW09InRydWUiIGxhc3RfbGF1bmNoX2NvdW50PSIxIiBsYXN0X2xhdW5jaF90aW1lPSIxMzM1NTU4MTk3NDUwNjM4OTAiPjx1cGRhdGVjaGVjay8-PGV2ZW50IGV2ZW50dHlwZT0iMTIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjE2NzM0NTk5NTY0IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTMiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjE2NzM0NTk5NTY0IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTQiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjE2Nzc0Njc4MTQyIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjE2NzkyNDQ4MjA3IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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-PHVwZGF0ZWNoZWNrLz48cGluZyByZD0iNjI5MCIgcGluZ19mcmVzaG5lc3M9Ins3OTlDMTQ3RC1GMzA2LTQyNzMtOUQ2MS02RkYzQUZGMkRDNjF9Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,10379074787028114253,12113156211625182412,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5536 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 browser.pipe.aria.microsoft.com udp
GB 184.25.204.43:443 tcp
IE 20.50.73.11:443 browser.pipe.aria.microsoft.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
US 204.79.197.200:443 bing.com tcp
US 204.79.197.200:443 bing.com tcp
US 204.79.197.200:443 bing.com tcp
US 204.79.197.200:443 bing.com tcp
N/A 224.0.0.251:5353 udp
GB 92.123.128.157:443 www.bing.com tcp
GB 92.123.128.184:443 th.bing.com tcp
GB 92.123.128.155:443 r.bing.com tcp
GB 92.123.128.155:443 r.bing.com tcp
GB 92.123.128.184:443 th.bing.com tcp
US 13.107.21.200:443 bing.com tcp
IE 20.190.159.75:443 login.microsoftonline.com tcp
US 13.107.5.80:443 services.bingapis.com tcp
GB 128.116.119.4:80 trades.roblox.com tcp
GB 128.116.119.4:80 trades.roblox.com tcp
GB 128.116.119.4:443 trades.roblox.com tcp
US 8.8.8.8:53 js.rbxcdn.com udp
US 205.234.175.102:443 setup.rbxcdn.com tcp
US 205.234.175.102:443 setup.rbxcdn.com tcp
US 205.234.175.102:443 setup.rbxcdn.com tcp
US 205.234.175.102:443 setup.rbxcdn.com tcp
US 205.234.175.102:443 setup.rbxcdn.com tcp
US 205.234.175.102:443 setup.rbxcdn.com tcp
US 205.234.175.102:443 setup.rbxcdn.com tcp
US 205.234.175.102:443 setup.rbxcdn.com tcp
US 205.234.175.102:443 setup.rbxcdn.com tcp
US 205.234.175.102:443 setup.rbxcdn.com tcp
US 205.234.175.102:443 setup.rbxcdn.com tcp
US 205.234.175.102:443 setup.rbxcdn.com tcp
US 205.234.175.102:443 setup.rbxcdn.com tcp
US 104.18.33.170:443 roblox-api.arkoselabs.com tcp
GB 128.116.119.4:443 friends.roblox.com tcp
US 205.234.175.102:443 setup.rbxcdn.com tcp
GB 104.77.160.221:443 apis.rbxcdn.com tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
US 205.234.175.102:443 setup.rbxcdn.com tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
GB 88.221.134.48:443 tr.rbxcdn.com tcp
GB 88.221.134.48:443 tr.rbxcdn.com tcp
US 8.8.8.8:53 pulsar.roblox.com udp
US 128.116.101.3:443 ord2-128-116-101-3.roblox.com tcp
US 128.116.45.3:443 mia4-128-116-45-3.roblox.com tcp
US 8.8.8.8:53 gold.roblox.com udp
SG 128.116.50.3:443 sin4-128-116-50-3.roblox.com tcp
DE 128.116.123.3:443 pulsar.roblox.com tcp
AU 128.116.51.3:443 syd1-128-116-51-3.roblox.com tcp
GB 128.116.119.3:443 silver.roblox.com tcp
FR 128.116.122.3:443 gold.roblox.com tcp
PL 128.116.124.3:443 waw1-128-116-124-3.roblox.com tcp
JP 52.198.173.88:443 aws-ap-northeast-1c-lms.rbx.com tcp
GB 3.10.240.89:443 aws-eu-west-2a-lms.rbx.com tcp
AU 128.116.51.3:443 syd1-128-116-51-3.roblox.com tcp
SG 128.116.50.3:443 sin4-128-116-50-3.roblox.com tcp
JP 52.198.173.88:443 aws-ap-northeast-1c-lms.rbx.com tcp
US 8.8.8.8:53 8.39.65.18.in-addr.arpa udp
US 8.8.8.8:53 3.45.116.128.in-addr.arpa udp
US 8.8.8.8:53 3.124.116.128.in-addr.arpa udp
US 8.8.8.8:53 3.50.116.128.in-addr.arpa udp
US 8.8.8.8:53 88.173.198.52.in-addr.arpa udp
US 8.8.8.8:53 3.51.116.128.in-addr.arpa udp
DE 3.121.9.76:443 b.ns1p.net tcp
DE 18.196.192.127:443 b.ns1p.net tcp
US 151.101.1.194:443 roblox-poc.global.ssl.fastly.net tcp
DE 128.116.44.3:443 fra4-128-116-44-3.roblox.com tcp
US 128.116.101.3:443 ord2-128-116-101-3.roblox.com tcp
GB 128.116.119.3:443 lhr2-128-116-119-3.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
DE 128.116.123.3:443 pulsar.roblox.com tcp
PL 128.116.124.3:443 waw1-128-116-124-3.roblox.com tcp
GB 3.10.240.89:443 aws-eu-west-2a-lms.rbx.com tcp
US 128.116.45.3:443 mia4-128-116-45-3.roblox.com tcp
US 151.101.0.176:443 js.stripe.com tcp
US 128.116.32.3:443 lga2-128-116-32-3.roblox.com tcp
US 128.116.99.3:443 atl1-128-116-99-3.roblox.com tcp
US 128.116.102.3:443 iad4-128-116-102-3.roblox.com tcp
SG 128.116.97.3:443 sin2-128-116-97-3.roblox.com tcp
JP 128.116.120.3:443 nrt1-128-116-120-3.roblox.com tcp
US 18.189.4.18:443 aws-us-east-2c-lms.rbx.com tcp
US 52.8.133.26:443 aws-us-west-1a-lms.rbx.com tcp
SG 128.116.97.3:443 sin2-128-116-97-3.roblox.com tcp
JP 128.116.120.3:443 nrt1-128-116-120-3.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
US 44.239.187.210:443 m.stripe.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:51617 tcp
N/A 127.0.0.1:51631 tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
GB 104.84.73.17:443 clientsettingscdn.roblox.com tcp
US 205.234.175.102:443 setup.rbxcdn.com tcp
N/A 127.0.0.1:51634 tcp
N/A 127.0.0.1:51637 tcp
US 205.234.175.102:443 setup.rbxcdn.com tcp
US 205.234.175.102:443 setup.rbxcdn.com tcp
US 23.102.129.60:443 msedge.api.cdp.microsoft.com tcp
GB 88.221.135.73:80 msedge.f.tlu.dl.delivery.mp.microsoft.com tcp
N/A 127.0.0.1:52148 tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
GB 2.20.37.224:443 cxcs.microsoft.net tcp
GB 92.123.128.164:443 www.bing.com tcp
US 8.8.8.8:53 164.128.123.92.in-addr.arpa udp
GB 184.25.204.43:443 tcp
IE 20.50.73.11:443 browser.pipe.aria.microsoft.com tcp
GB 92.123.128.168:443 www.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
GB 92.123.128.192:443 r.bing.com tcp
US 13.107.136.254:443 spo-ring.msedge.net tcp
US 13.107.9.254:443 b-ring-fallback.msedge.net tcp
GB 51.143.210.130:443 management.azure.com tcp
US 8.8.8.8:53 254.9.107.13.in-addr.arpa udp
US 8.8.8.8:53 130.210.143.51.in-addr.arpa udp
IE 20.166.2.191:443 msedge.api.cdp.microsoft.com tcp
GB 88.221.134.73:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
US 104.26.14.127:80 memz-trojan.br.download.it tcp
US 104.26.14.127:80 memz-trojan.br.download.it tcp
US 104.26.14.127:443 memz-trojan.br.download.it tcp
US 8.8.8.8:53 cdn.download.it udp
US 104.26.15.127:443 cdn.download.it tcp
US 104.26.15.127:443 cdn.download.it tcp
US 104.26.15.127:443 cdn.download.it tcp
US 8.8.8.8:53 cmp.quantcast.com udp
US 151.101.1.91:443 spn-v1.revampcdn.com tcp
US 151.101.1.91:443 spn-v1.revampcdn.com tcp
NL 142.250.179.130:443 securepubads.g.doubleclick.net tcp
US 104.20.95.138:443 www.statcounter.com tcp
NL 18.239.83.15:443 cmp.quantcast.com tcp
US 104.16.79.73:443 static.cloudflareinsights.com tcp
GB 96.17.179.184:80 apps.identrust.com tcp
US 8.8.8.8:53 42.36.251.142.in-addr.arpa udp
US 8.8.8.8:53 91.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 138.95.20.104.in-addr.arpa udp
US 8.8.8.8:53 40.36.251.142.in-addr.arpa udp
US 8.8.8.8:53 130.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 15.83.239.18.in-addr.arpa udp
US 8.8.8.8:53 73.79.16.104.in-addr.arpa udp
US 8.8.8.8:53 184.179.17.96.in-addr.arpa udp
NL 18.239.36.14:443 cmp.inmobi.com tcp
NL 142.250.179.130:443 securepubads.g.doubleclick.net udp
NL 18.239.19.24:443 www.datadoghq-browser-agent.com tcp
US 104.22.75.216:443 btloader.com tcp
US 130.211.23.194:443 api.btloader.com tcp
US 104.26.3.70:443 ad-delivery.net tcp
US 104.26.3.70:443 ad-delivery.net tcp
US 216.239.38.181:443 analytics.google.com tcp
NL 142.250.27.157:443 stats.g.doubleclick.net tcp
NL 142.250.27.157:443 stats.g.doubleclick.net udp
DE 35.156.224.54:443 api.cmp.inmobi.com tcp
US 130.211.23.194:443 api.btloader.com udp
NL 142.250.179.196:443 www.google.com tcp
NL 216.58.208.97:443 cddd5232124767b15eb0184bac9a2e42.safeframe.googlesyndication.com tcp
US 104.22.52.86:443 cdn.id5-sync.com tcp
NL 142.250.179.129:443 tpc.googlesyndication.com tcp
NL 142.250.179.129:443 tpc.googlesyndication.com tcp
NL 142.250.179.129:443 tpc.googlesyndication.com tcp
NL 142.250.179.129:443 tpc.googlesyndication.com tcp
NL 172.217.168.225:443 cdn.ampproject.org tcp
NL 172.217.168.225:443 cdn.ampproject.org tcp
NL 172.217.168.225:443 cdn.ampproject.org tcp
NL 172.217.168.225:443 cdn.ampproject.org tcp
NL 172.217.168.225:443 cdn.ampproject.org tcp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
NL 172.217.23.194:443 googleads.g.doubleclick.net tcp
NL 142.250.179.129:443 tpc.googlesyndication.com udp
NL 142.250.179.196:443 www.google.com udp
NL 142.250.179.129:443 tpc.googlesyndication.com udp
NL 142.250.179.196:443 www.google.com udp
NL 142.250.179.130:443 securepubads.g.doubleclick.net udp
NL 172.217.23.194:443 googleads.g.doubleclick.net udp
US 216.239.38.181:443 analytics.google.com udp
DE 178.63.241.79:443 shb.richaudience.com tcp
DE 138.201.8.249:443 sync.richaudience.com tcp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
NL 142.250.179.130:443 securepubads.g.doubleclick.net udp
NL 142.250.179.129:443 tpc.googlesyndication.com udp
US 151.101.1.91:443 spn-v1.revampcdn.com udp
US 216.239.34.181:443 analytics.google.com udp
US 130.211.23.194:443 api.btloader.com udp
DE 141.95.98.64:443 lb.eu-1-id5-sync.com tcp
NL 142.250.27.157:443 stats.g.doubleclick.net udp
DE 162.19.138.120:443 lb.eu-1-id5-sync.com tcp
NL 142.250.179.196:443 www.google.com udp
NL 172.217.168.225:443 cdn.ampproject.org udp
NL 142.250.179.129:443 tpc.googlesyndication.com udp
NL 172.217.23.194:443 googleads.g.doubleclick.net udp
NL 142.250.179.130:443 securepubads.g.doubleclick.net udp
NL 142.250.179.130:443 securepubads.g.doubleclick.net udp
NL 142.250.179.129:443 tpc.googlesyndication.com udp
NL 142.250.179.196:443 www.google.com udp
NL 172.217.23.194:443 googleads.g.doubleclick.net udp
NL 142.250.179.130:443 securepubads.g.doubleclick.net udp
DE 157.90.0.38:443 s.richaudience.com tcp
NL 142.250.179.129:443 tpc.googlesyndication.com udp
DE 162.55.233.29:443 sync.richaudience.com tcp
NL 142.250.179.130:443 securepubads.g.doubleclick.net udp
NL 142.250.179.129:443 tpc.googlesyndication.com udp
NL 142.250.179.196:443 www.google.com udp
NL 142.250.179.130:443 securepubads.g.doubleclick.net udp
NL 172.217.23.194:443 googleads.g.doubleclick.net udp
DE 178.63.241.79:443 shb.richaudience.com tcp
NL 142.250.179.129:443 tpc.googlesyndication.com udp
NL 142.250.179.130:443 securepubads.g.doubleclick.net udp
NL 142.250.179.129:443 tpc.googlesyndication.com udp
NL 142.250.179.196:443 www.google.com udp
NL 142.250.179.130:443 securepubads.g.doubleclick.net udp
NL 142.251.36.2:443 googleads.g.doubleclick.net udp
DE 157.90.0.38:443 s.richaudience.com tcp
US 13.67.191.143:443 msedge.api.cdp.microsoft.com tcp
GB 88.221.135.73:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
GB 128.116.119.4:443 ncs.roblox.com tcp
US 13.67.191.143:443 msedge.api.cdp.microsoft.com tcp
US 104.20.95.138:443 c.statcounter.com tcp
US 172.67.75.124:443 download.it tcp
DE 140.82.121.4:443 github.com tcp
DE 140.82.121.4:443 github.com tcp
US 185.199.111.133:443 user-images.githubusercontent.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 216.239.36.181:443 analytics.google.com udp
US 8.8.8.8:53 154.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 181.36.239.216.in-addr.arpa udp
US 185.199.108.154:443 github.githubassets.com tcp
US 140.82.113.22:443 collector.github.com tcp
US 140.82.113.22:443 collector.github.com tcp
DE 140.82.121.6:443 api.github.com tcp

Files

memory/2232-0-0x0000000002790000-0x0000000002791000-memory.dmp

memory/2232-1-0x0000000000400000-0x00000000006E9000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 88e9aaca62aa2aed293699f139d7e7e1
SHA1 09d9ccfbdff9680366291d5d1bc311b0b56a05e9
SHA256 27dcdb1cddab5d56ac53cff93489038de93f61b5504f8595b1eb2d3124bbc12c
SHA512 d90dabe34504dde422f5f6dec87851af8f4849f521759a768dfa0a38f50827b099dfde256d8f8467460c289bdb168358b2678772b8b49418c23b882ba21d4793

\??\pipe\LOCAL\crashpad_4024_FAFHHXALOHLXLERN

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 341f6b71eb8fcb1e52a749a673b2819c
SHA1 6c81b6acb3ce5f64180cb58a6aae927b882f4109
SHA256 57934852f04cef38bb4acbe4407f707f137fada0c36bab71b2cdfd58cc030a29
SHA512 57ecaa087bc5626752f89501c635a2da8404dbda89260895910a9cc31203e15095eba2e1ce9eee1481f02a43d0df77b75cb9b0d77a3bc3b894fdd1cf0f6ce6f9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 2ea23e8ab00a41fb64181ea458157a5f
SHA1 1a6006d19b98bb2195534790e5d6d17314e919cb
SHA256 e0d46e52a6c318ffe0cc3a5ccdc9391fbc5825bee36ecd51ff50dd02a07a19ec
SHA512 d23204889970492584495f11020f75b830e140032a5bff22dc41bac32c8001117587176329b294f42ae4a98753845777586d3603265ce18c8693efa14c39939a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

memory/2232-48-0x0000000000400000-0x00000000006E9000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 0edc6a8b16564d4ee7f2db8fbd0d0d6a
SHA1 6022fd2162ed42833caa54905760895e2ff2fb6c
SHA256 7f83ba43accb0d783c341c74297cd8e00062889e34ef4ee7db855f7b6869c175
SHA512 97b30f02dc3f46cca0abb53f4be433b930c1f8a85c3a4e78851defe7ea1845cd37f90caff39eee7ac10c3763a8e6a754d7866f8b5c7c4227495f735f28e54dce

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1a15c87286d92c1401e5db71afe637fb
SHA1 67e98b031c2d087bbe3e6741912d2df1c58aab21
SHA256 991ab26293a06869184b84dab03b963b0b91176c390d37cf12bc4ae3cd67d1e0
SHA512 8b1d3db243336399442ee02ee8cce1bff590a4501a64fdd03c7a85c12a2fbff73d188cb9fd8fda06daeea9d850b296b461218d5414f10d22109c38812c0e3bcc

memory/2232-72-0x0000000002790000-0x0000000002791000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c9a737fbfa6cdcc1edeb402c615f0020
SHA1 bc12578ebf4b49e2b7dbaaba9dcd80af9724e5d2
SHA256 f80ba0bd44d5844ace0bb025da083af18cad80f70409a39edcd7fde6854f6783
SHA512 d4aee782953b23408a717855fed751beee5d551802c2fdc8b18295ace566ab333674daedb439163af42a6b9d4cf7b368d934507c4c4fb509beb5cb8a265ffd5e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 d2f768ac822cccaffe31536a67422680
SHA1 a8a47b85de05825af56610a1a2a572d1652dcaf6
SHA256 65ffe69baacd66306e4b1dde17f67c25f4b9373a067824f40af7dd247a29a63c
SHA512 046ac2bbcdc0efe623dd0d793820cb888589bac1f8826ec366bf716e0b4a4bb0930c9bfd4e43e2ae9f19c53d97b4bc11af4c0c7cb48a46b7bb1883b822c89659

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58e0d6.TMP

MD5 fbc29f61bbd6020a8b7adb4ef728a71b
SHA1 83b2146d40cbb7832df9f8fed3e4b58792093074
SHA256 0e5cb20ba5417d8b45315aa3d31e0cbea89b7374f13b31117b7177ed5c06a6b3
SHA512 f247ca16411397d1a95926b65f8299720ec4ded1474e6a82b477293db93f6137fb5934df149a565e7745f83c9c8b839f30bb9e89d981082859be96a2b06ba9a3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f47c19e1cf7b54703ca9273cb39c4b51
SHA1 f61a65d71fb87487cd423c07e55bf60d7d347588
SHA256 264d40ad3a01bb980222e2b2c2a006bcf1b857f0078b3bb833a5f755bc33b6e8
SHA512 48608212e96bd663cb75609c62e0aaf9805f74a2547122cf5d0645273f3e8dd5319674973faf8ecb84fa7b60dfdd1be8b545f1a85384fa65842cc85fdd527126

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1b6852ae-bdd3-4ac5-84c7-2c6055f00283.tmp

MD5 2cb1c485c351cc38f24fd529a1d52837
SHA1 a4c74c7a612e442a6b310b592976466c1d138bb7
SHA256 9b076aa7239d48e4c5da3486202659902fcc4e4b42373f1559134e63e10c8861
SHA512 a131933b5c5cca12ef0b3b0d35dc3c9c4153ddc8b890ffc9958b854aef9b39f4e45cffa38ecaf0940ad904f53bbd8ce2bdddae883d20b3b8aa271222dab46e91

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9118db896268e0dc60e995e34aeb4f65
SHA1 5b2118b3ba37ff650cc63136b1543a3646e8c68b
SHA256 970ef1c2acbae159f80b14d85b3a5dcf0abf5e280b592f602c118a0513eb0ee3
SHA512 d0f8278a4b0362d097397b4bfda792237b8d8eb73cc839c43c8ebe019b7469681bc194676de72afc2a269bb8dcd72da5ee34bdc1f640e25408655785b1471765

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 f0753228bf20946e1ebc64d03f5a67b2
SHA1 76e7fbc80ad6c91b59dfd7f9c715e1ad566b414a
SHA256 26208bab38979da91032d283b6d5bbf849241dfae3eda72db9ebeee1f88c3721
SHA512 9e426403b13a0e6389294ac1f7bc1a4d596e50fef0be10f6977e721051049f254fe55e76b3411b567f84d98ef1886699addfc2bd8171f0070b917b11781f8015

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 bcefbec660cb774ac3aa2ccf51530905
SHA1 0162dae36e655bf25a9563714d4b65f0ad9dfa54
SHA256 54a3e230a2cfb38fe51fb0f611f6c5df12cb8f9033422acd15ad63eccf34f17f
SHA512 4799a8c175d6c1fa9e0b986ed2e97909d15ca7c772773a55abda8dad5f3824835cad90a63a716817aa29c8930ea4a59b746b25faa9ea8e8ae648909da35e4d5e

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e8449bda60e3bb00042fa92924421e85
SHA1 e5938be2c098d363bfcc4679ccd4e0bec021dc12
SHA256 b45f2cf07b4dfd3c7e98b5ea2b07ff9e2244d40e101bb0e60c54be522e2a3789
SHA512 33f05c9277123078633de1f31b96d955de564cb487065f1d4e70008c08aac7e87a0ff529ef72662a3776e635175a3aac5fdfbb238f081cc21507981c398d93d4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c7155214aa13f4c97873b97d3ddfec01
SHA1 225cfa48b4f5c2cf02cbd3ba2483d795b61375c2
SHA256 f78e281ed9ab3931b45389476ab72f3b8d0394beeb08a932cc22c2c4a5678a6b
SHA512 15e1e8603c17dcd26363428cb97ca8eafa83ee1839427b2126665397a9799fc5b1b74e8183930529bd8f537d410e3b4309bf2cce9973e4e7be8d592a61a4b2cc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7d0517ea7a6af02f03b5edcc4c0256d7
SHA1 abde3c97682b35d226e35451720c7e32c76b752c
SHA256 862a6e657fb33951f2d9654be301fa32dac565d12167fd6b81d246e1ee689076
SHA512 8081dde3193d0ef2285449ed04d8970c4912559c40020e1796e8ebe83d3317ee4be213e7a80ce2adfcd92996f9e054ea674ccf451503bbb3f5324c74f70ce071

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

MD5 d54d629519ad881468ff05f892e92aa5
SHA1 55388988ed7faada0bc509c440e8b5ba9078a230
SHA256 58961e3ca2ffcf67bbd76989556d93b085c4334e30fd524d46654c53af85d550
SHA512 36ce9fe695c6970ed2d25d10836a9942d6d9d8de2f1199e63d8fc595fb99e63a6acabbc856035d5fc846c75bbcec44cd3bf181ee512933d55a6f01f5bce352f6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old~RFe59bc41.TMP

MD5 427fb4b65c78dc895d58474c7b95a747
SHA1 190077f705bade7fab9a5a56d0890287836d1fe7
SHA256 23ae8d648a54cb1886d8e05ea080659c7f25569aeac1d3b774f0a54d997b2550
SHA512 fab0aa925c22b25a1bf0c74e2bc700b146a6146994c9d2c1708d507b59ef2bae8df6d144929fea007d95d071c28e0fe59c744f07cd06fe63b7a5d759c18764c9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old

MD5 3918e8a73dfd17e0f29d42b6e8e7ff15
SHA1 cbe06417d049a738c09946c992bdd65f31831c61
SHA256 2c6fd09e5ce3a01c59c6631f00b2d382c0f7bb299c680c181bf89a58a89a78b3
SHA512 a955644fe3c1e13fafd2b6cf6ae3edef8783fde1b54da482cc139e86916ccaaeef2ef65a97df42066b1f2a429eba134f1e2625ade24d5f56deb05d24dfed1171

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002f

MD5 fe8b250e6e41e5876461118e60cce721
SHA1 f7a2ab00269c8e830b2eb76b834110a5461dbfc5
SHA256 8865c1482bb0c479daaa576c21d03576b08284b7d4f9380c1627f97c40772178
SHA512 622162341c7135c62e9bfe86ff3f29b42f713de72b0f9c1accd33b32f88545302ec932f11f0f4765765a6997fb3a1d3befaa47d921a47d5541700dc4cbe01f06

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00014d

MD5 588ee33c26fe83cb97ca65e3c66b2e87
SHA1 842429b803132c3e7827af42fe4dc7a66e736b37
SHA256 bbc4044fe46acd7ab69d8a4e3db46e7e3ca713b05fa8ecb096ebe9e133bba760
SHA512 6f7500b12fc7a9f57c00711af2bc8a7c62973f9a8e37012b88a0726d06063add02077420bc280e7163302d5f3a005ac8796aee97042c40954144d84c26adbd04

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 43792a0eded8d35b13123948dffeffff
SHA1 51681706622b6755201d2695cb3a2cc27521b38a
SHA256 4e714cca641902185161388dad6ecf65f28f173f77a5dcb62ea095e4e003d0d4
SHA512 e8a1dd53d3c5b425bcf90e76edc164af73f6e820d477d08b554ea2ebb95fa5d9e7c787ad4d506379b358813ea1d832d2bdab9456cb0fdaa0c0862d4734d74595

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ec613d78b9ac16659acac6b98e4fcc33
SHA1 7d5fcfab3393362d82266ba770673553a6d76497
SHA256 f9b54a256da226311d5ac0089f34d9d63f4788e24f175df9af4973e6b22c2cf7
SHA512 992a807b3186d4ecdcb35c452430d242a397f76f164010b6933414ea33bbf9a5497f41483ae69c927f8787cad76cf4086db299e97d93658775835de045e8d992

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003c

MD5 71c6e4dcb559033bffb685bfcac9213a
SHA1 25f961c9654c8b6ebdb65fc84b3e218fba9fe9fe
SHA256 77dcc1c86b052027db7eeeec2d6bad3d899360ca512a5c8ff38db272e9cee5c9
SHA512 f7065427eab4f90046446685101518f036d4472bafa41da4d0c80f30e3accb19d90f29c0483ff7b95a8282d1ef68b60457818e4c1457d307208b56d536e9ac68

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old

MD5 3b68c57ce510c6134bb8449eb1e21391
SHA1 d102d74aad17f61e15cf6b2c97f35bedbe9f7093
SHA256 c3817e3fef87d17dc10dd5c6916d6fb4e2de94a958e822d29a1129357592b05a
SHA512 57b64773852c856e1ad287675c336d9bfdb56b425af2e99d679544dab2fc489c8b18a068d7dbdc0d8b69c84e9e10ac9b7bccc4fe5d94a74b9c777e7ebb160a5a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000051

MD5 7aa8676fc389e1fbc55a8443998674c5
SHA1 7ff1cb8c9331cdfa61cb92c2427a17b63770a8ee
SHA256 65a711d5d266ccfc8a465750d5a9a3ffd927ec24eb0fc5c12b906d89ac0c0972
SHA512 1bf30468e111f54bce288a04b091c92c304e1171faae20673b7e3a24f4f6afdae4dc1a54b8feab70c8e05c888a17f86fbe4009fcde34dc3aacbfeb0d7d52a431

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\000005.ldb

MD5 aca9f1d463e1942ad1c58b67c8523252
SHA1 99d06631f8ef2ca1f5ff4850306372e0585c326c
SHA256 c53f442af217a793cab7a65083ec899b5ac5ee7cfe94c3d32f21c7fcaa2c0ecc
SHA512 9329bbe16c106578e94b667aa2f76048cfb9baa043e74a50a533ee240e1b6ecd543dc9ea239dd81e145996c483e508e0e7d7122860be080ff38d16b5fb25c167

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2656af65a98310535b0e417fe9f56015
SHA1 30ce382c977563a47237d90c195832fbbfe05096
SHA256 87995e6a306ff59a3486dd38de9b5343d943ac4966821d814b74ea146131b621
SHA512 abec435d6f4b3ff2541621750bf2ba56b6f699f1c1afa53ea0d87e7963b7910c09325b2e10e9a27283b636e48239c70805b2b364cf363bd6945e4a10b95c31a6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 75f436e3096b826342d57cec9a541548
SHA1 bd0c3956edfe0f68665f8278be653bbaed921564
SHA256 47c109a7573947c775be34603c036950fa12baea7f2297e39e59c608adedd50f
SHA512 a1e5e202c3dd5d7a11837070a4f0fcaf3a3452162921d48d85f333147d530325ef7fa9c8245edad53c0675c6156bf6fabda3e561371ceaad29733b6994b8e720

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 740953655acb1148fc562850c55827b6
SHA1 aa44c1055e476227dd786cae5bb5384e70a88d67
SHA256 84dbc9dd3e9691038f94a9b88dc293ad1fbc9008e1b764526a1518cd6f01543d
SHA512 a849e3c3e7ce96750f04cd272f54b43f1d402bbfbe366b0793a3c2ef20bc8956c17c5405e643199f95372b5fbe328ac18650451efac3f413faf32b246522413c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 d09e6aa32bd7c8f7cff495127101f576
SHA1 ae67862a849458b3498245d83d81bc7737559f66
SHA256 319736367b06ce49878ff7f378be4b944b21f10e39b95a8e8ed8ff8cb6b794f2
SHA512 a0a9a96c763a986a085b2d622f1b92c6b81c7fcb77c4e1416a052a70ce313c7f36646c60780ecac08058ba548bfcb9cc593a215236241394e5f4791a639b3612

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ab4615c3d248e1ecf053df95e760db45
SHA1 c547a150bb1e8751ef7712b9ac8145f06483bd0d
SHA256 f19fc3b4e27203a71dad7d283ccd646b474ed2e76e83a2cb3683c3071919f824
SHA512 e071e55124448baecb6c35243ee51c03957456359c3579b5a6e50221940e2243dd35b33213d3c1aa3403f49291112961ab932b3a6c3d7123b3e3f50ef281f370

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6b1a7457cf9e3c0e347f1f37c73b3a73
SHA1 757dc697b8bf8165ec0ee58859f06ebc9a30b637
SHA256 7aca72143aefd2b4d6fce10c88e88cbee36a1013934608ed7ce0f5892c979e4d
SHA512 7b919c9fe3fc5b3f4fcf58837423c3660966393d0892fd7e7130e410282f30bbc02812276820a850480a9477e367a00895878c7c25c9b31457fe83af03224227

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 be40bceac1025e66decb439f9c93689d
SHA1 ec75e233181f7ba533afb3397c167c86e44cf3c6
SHA256 24a67fdd0cdd0a1af66d6bf7f5f6c5beae5d868908a5a8c8fdff2b492cbc5d52
SHA512 67d21ba0f802792d2632d1a486f0f4cabf80008ad967700e6487316a947b1a7dc97904b95bc7703d9d603f1a9e9e75ee0ecea9b27ac7f1d05cc43c3b20ca0ed7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 63dca018cd3bbc6419fd7e1a09acf055
SHA1 29512a9be4ef2e0f5c526dc961e9767c0dcb95fc
SHA256 30594c4e5e3612c5d5d8c50f16595821c04ca6ad7a1621e8cec1968638c53c10
SHA512 9342e120e701bdecc4ca2aeeea98ef3c269b27f076e8e68008a9ccad10c0559c1756dae1b2f6306bfae2e93c2d15df4bed9506058e627e943de0da65cf2883f3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c54a5330-d781-407a-8d5b-12bc36883cb2.tmp

MD5 756e0f857db7d0d98929b50f155493c7
SHA1 9275c61f92515502abc5a7d823439b4368188ee7
SHA256 40584a5f13e30838d6587a21e6c0022d50cec74b8fa71ac2d6557cd527779fbf
SHA512 d3d2a0a6b2716a010b3d0eca4ae9e6ee856aa74701f33e78cc10d615d7c72c155c0c932dd794475778c86682534c83b2546bf9de43b50348d490eace71dbd480

C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe:Zone.Identifier

MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512 aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe

MD5 d775ab568a5f9b8af507caac46aedf90
SHA1 06e2228fb1d5ae99fd433f465ac2c04d60416a14
SHA256 7c3f61b3aa30d223c423208300f2da92ab2946a34cca060b7803edc668fd03d6
SHA512 f171fe0d943d96fba62b660a124c69fba68f9add81b331d6ea27e9f8cda6f47496dc7fbb3af4fc353a3b4568c7cbab1479fb9b0d47faf58316f23078e8624010

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7246357f1c5592959a3d19ee1ef229cb
SHA1 ec8cb8cbdc257add9bada03b3ea1ca9afc6726c2
SHA256 1d0c90f1708186bf1718f621bbc8c036fce9213f9b14d3746c33a29bb1f0e5d9
SHA512 7b26883395d3ace135294281d88a0e60ce43bb266f949a517ad71639203822e10d174bfdec669ee9fde13667d786042c6c2bd52e0601fd90233df40e33782a01

C:\Program Files (x86)\Roblox\Versions\RobloxStudioInstaller.exe

MD5 22c000db02461f0d89f6a1702398d03d
SHA1 afec4263c16cdc0e6ed2750361d1cc52fba62903
SHA256 faecd31856b9664945e0ac923f6b6a295296239b65af73e959e87ed454df1f47
SHA512 35700007d91099f18cbd02ce1e198b66e3f7340e4d7f597e2c3841829c5cc8b5eb023b0b64d621e39bb2897bc0f1d7b36163f4b801ec547bc487830e32aadbae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3e045654dc4797138916c31293d4c953
SHA1 0a8adc936fe451cd5406ef99b54baa02ada3cf36
SHA256 1ef2df70743fb45d1a0e278906686ea8663373cd1c6758d17dc99f2c25680437
SHA512 2d9aa45972df1473b19709e003958d361f095f816035d165cb54ca1b94f9610dd71bc2953ca2b8f0f1d3cdab116dc550c2e441ac00a67e7b2ff93c51a5b2a75b

C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\902abff44b3b5339ec2dd6c0ac11adf4

MD5 1933d28f0204ea0efa04f036161a0650
SHA1 1efeb5facbe1cf9fa29f08bd1e69486b453623c0
SHA256 6de16b83408c141f58b9d8d0614a42a375384af398f56679428d3c88c2e59c05
SHA512 ea95111eec627384854fd59e878a5ea67729b81e3a9a97b4b83d06a1b67e27573b73fe56e04b43f7bba3080e4f96039d99078e94e0b565d628356762813fbbb5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a19b2520a28551547c809f566a3800d8
SHA1 4df1ea5cfb133b8ddcb01043167e5264c6786893
SHA256 b83b69ab6056776f9a14fa31e34b2f1052fd74d1a4ebc661b1957a7c69f40976
SHA512 99406c51d19c997c0ff94624717747ffc171e22a8a2a6a2f348406d9c5635300592202eea8599bdd21c12a8223f80ffdb1df67dcee50ad08919d18105e05bb9b

C:\Program Files (x86)\Roblox\Versions\version-94a1a798754e4385\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MD5 610b1b60dc8729bad759c92f82ee2804
SHA1 9992b7ae7a9c4e17a0a6d58ffd91b14cbb576552
SHA256 921d51979f3416ca19dca13a057f6fd3b09d8741f3576cad444eb95af87ebe08
SHA512 0614c4e421ccd5f4475a690ba46aac5bbb7d15caea66e2961895724e07e1ec7ee09589ca9394f6b2bcfb2160b17ac53798d3cf40fb207b6e4c6381c8f81ab6b4

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\MicrosoftEdgeUpdate.exe

MD5 4dc57ab56e37cd05e81f0d8aaafc5179
SHA1 494a90728d7680f979b0ad87f09b5b58f16d1cd5
SHA256 87c6f7d9b58f136aeb33c96dbfe3702083ec519aafca39be66778a9c27a68718
SHA512 320eeed88d7facf8c1f45786951ef81708c82cb89c63a3c820ee631c52ea913e64c4e21f0039c1b277cfb710c4d81cd2191878320d00fd006dd777c727d9dc2b

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdate.dll

MD5 965b3af7886e7bf6584488658c050ca2
SHA1 72daabdde7cd500c483d0eeecb1bd19708f8e4a5
SHA256 d80c512d99765586e02323a2e18694965eafb903e9bc13f0e0b4265f86b21a19
SHA512 1c57dc7b89e7f13f21eaec7736b724cd864c443a2f09829308a4f23cb03e9a5f2a1e5bcdc441301e33119767e656a95d0f9ede0e5114bf67f5dce6e55de7b0a4

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdateres_en.dll

MD5 4a1e3cf488e998ef4d22ac25ccc520a5
SHA1 dc568a6e3c9465474ef0d761581c733b3371b1cd
SHA256 9afbbe2a591250b80499f0bf02715f02dbcd5a80088e129b1f670f1a3167a011
SHA512 ce3bffb6568ff2ef83ef7c89fd668f6b5972f1484ce3fbd5597dcac0eaec851d5705ed17a5280dd08cd9812d6faec58a5561217b897c9209566545db2f3e1245

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdateres_bs.dll

MD5 e338dccaa43962697db9f67e0265a3fc
SHA1 4c6c327efc12d21c4299df7b97bf2c45840e0d83
SHA256 99b1b7e25fbc2c64489c0607cef0ae5ff720ab529e11093ed9860d953adeba04
SHA512 e0c15b166892433ef31ddf6b086680c55e1a515bed89d51edbdf526fcac71fb4e8cb2fadc739ac75ae5c2d9819fc985ca873b0e9e2a2925f82e0a456210898f9

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdateres_bn-IN.dll

MD5 a94cf5e8b1708a43393263a33e739edd
SHA1 1068868bdc271a52aaae6f749028ed3170b09cce
SHA256 5b01fe11016610d5606f815281c970c86025732fc597b99c031a018626cd9f3c
SHA512 920f7fed1b720afdb569aec2961bd827a6fc54b4598c0704f65da781d142b1707e5106a459f0c289e0f476b054d93c0b733806af036b68f46377dde0541af2e7

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdateres_eu.dll

MD5 a7e1f4f482522a647311735699bec186
SHA1 3b4b4b6e6a5e0c1981c62b6b33a0ca78f82b7bbd
SHA256 e5615c838a71b533b26d308509954907bcc0eb4032cdbaa3db621eede5e6bfa4
SHA512 22131600bbac8d9c2dab358e244ec85315a1aaebfc0fb62aaa1493c418c8832c3a6fbf24a6f8cf4704fdc4bc10a66c88839a719116b4a3d85264b7ad93c54d57

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdateres_et.dll

MD5 b78cba3088ecdc571412955742ea560b
SHA1 bc04cf9014cec5b9f240235b5ff0f29dbdb22926
SHA256 f0a4cfd96c85f2d98a3c9ecfadd41c0c139fdb20470c8004f4c112dd3d69e085
SHA512 04c8ab8e62017df63e411a49fb6218c341672f348cb9950b1f0d2b2a48016036f395b4568da70989f038e8e28efea65ddd284dfd490e93b6731d9e3e0e0813cf

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdateres_es-419.dll

MD5 28fefc59008ef0325682a0611f8dba70
SHA1 f528803c731c11d8d92c5660cb4125c26bb75265
SHA256 55a69ce2d6fc4109d16172ba6d9edb59dbadbc8af6746cc71dc4045aa549022d
SHA512 2ec71244303beac7d5ce0905001fe5b0fb996ad1d1c35e63eecd4d9b87751f0633a281554b3f0aa02ee44b8ceaad85a671ef6c34589055797912324e48cc23ed

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdateres_es.dll

MD5 9db7f66f9dc417ebba021bc45af5d34b
SHA1 6815318b05019f521d65f6046cf340ad88e40971
SHA256 e652159a75cbab76217ecbb4340020f277175838b316b32cf71e18d83da4a819
SHA512 943d8fc0d308c5ccd5ab068fc10e799b92465a22841ce700c636e7ae1c12995d99c0a93ab85c1ae27fefce869eabadbeafee0f2f5f010ad3b35fa4f748b54952

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdateres_en-GB.dll

MD5 d749e093f263244d276b6ffcf4ef4b42
SHA1 69f024c769632cdbb019943552bac5281d4cbe05
SHA256 fd90699e7f29b6028a2e8e6f3ae82d26cdc6942bd39c4f07b221d87c5dbbfe1e
SHA512 48d51b006ce0cd903154fa03d17e76591db739c4bfb64243725d21d4aa17db57a852077be00b9a51815d09664d18f9e6ad61d9bc41b3d013ed24aaec8f477ad9

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdateres_el.dll

MD5 ac275b6e825c3bd87d96b52eac36c0f6
SHA1 29e537d81f5d997285b62cd2efea088c3284d18f
SHA256 223d2db0bc2cc82bda04a0a2cd2b7f6cb589e2fa5c0471a2d5eb04d2ffcfcfa0
SHA512 bba581412c4297c4daf245550a2656cdc2923f77158b171e0eacf6e933c174eac84580864813cf6d75d73d1a58e0caf46170aee3cee9d84dc468379252b16679

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdateres_de.dll

MD5 aab01f0d7bdc51b190f27ce58701c1da
SHA1 1a21aabab0875651efd974100a81cda52c462997
SHA256 061a7cdaff9867ddb0bd3de2c0760d6919d8d2ca7c7f889ec2d32265d7e7a75c
SHA512 5edbda45205b61ac48ea6e874411bb1031989001539650de6e424528f72ec8071bd709c037c956450bb0558ee37d026c26fdb966efceb990ed1219f135b09e6e

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdateres_da.dll

MD5 d34380d302b16eab40d5b63cfb4ed0fe
SHA1 1d3047119e353a55dc215666f2b7b69f0ede775b
SHA256 fd98159338d1f3b03814af31440d37d15ab183c1a230e6261fbb90e402f85d5f
SHA512 45ce58f4343755e392037a9c6fc301ad9392e280a72b9d4b6d328866fe26877b2988c39e05c4e7f1d5b046c0864714b897d35285e222fd668f0d71b7b10e6538

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdateres_cy.dll

MD5 34d991980016595b803d212dc356d765
SHA1 e3a35df6488c3463c2a7adf89029e1dd8308f816
SHA256 252b6f9bf5a9cb59ad1c072e289cc9695c0040b363d4bfbcc9618a12df77d18e
SHA512 8a6cbcf812af37e3ead789fbec6cba9c4e1829dbeea6200f0abbdae15efd1eda38c3a2576e819d95ed2df0aafd2370480daa24a3fe6aeb8081a936d5e1f8d8ed

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdateres_cs.dll

MD5 16c84ad1222284f40968a851f541d6bb
SHA1 bc26d50e15ccaed6a5fbe801943117269b3b8e6b
SHA256 e0f0026ddcbeafc6c991da6ba7c52927d050f928dba4a7153552efcea893a35b
SHA512 d3018619469ed25d84713bd6b6515c9a27528810765ed41741ac92caf0a3f72345c465a5bda825041df69e1264aada322b62e10c7ed20b3d1bcde82c7e146b7e

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdateres_ca-Es-VALENCIA.dll

MD5 2929e8d496d95739f207b9f59b13f925
SHA1 7c1c574194d9e31ca91e2a21a5c671e5e95c734c
SHA256 2726c48a468f8f6debc2d9a6a0706b640b2852c885e603e6b2dec638756160df
SHA512 ea459305d3c3fa7a546194f649722b76072f31e75d59da149c57ff05f4af8f38a809066054df809303937bbca917e67441da2f0e1ea37b50007c25ae99429957

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdateres_bn.dll

MD5 7dc58c4e27eaf84ae9984cff2cc16235
SHA1 3f53499ddc487658932a8c2bcf562ba32afd3bda
SHA256 e32f77ed3067d7735d10f80e5a0aa0c50c993b59b82dc834f2583c314e28fa98
SHA512 bdec1300cf83ea06dfd351fe1252b850fecea08f9ef9cb1207fce40ce30742348db953107ade6cdb0612af2e774345faf03a8a6476f2f26735eb89153b4256dc

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdateres_ca.dll

MD5 39551d8d284c108a17dc5f74a7084bb5
SHA1 6e43fc5cec4b4b0d44f3b45253c5e0b032e8e884
SHA256 8dbd55ed532073874f4fe006ef456e31642317145bd18ddc30f681ce9e0c8e07
SHA512 6fa5013a9ce62deca9fa90a98849401b6e164bbad8bef00a8a8b228427520dd584e28cba19c71e2c658692390fe29be28f0398cb6c0f9324c56290bb245d06d2

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdateres_bg.dll

MD5 8375b1b756b2a74a12def575351e6bbd
SHA1 802ec096425dc1cab723d4cf2fd1a868315d3727
SHA256 a12df15afac4eb2695626d7a8a2888bdf54c8db671043b0677180f746d8ad105
SHA512 aec4bb94fde884db79a629abcff27fd8afb7f229d055514f51fa570fb47a85f8dfc9a54a8f69607d2bcaf82fae1ec7ffab0b246795a77a589be11fad51b24d19

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdateres_az.dll

MD5 7937c407ebe21170daf0975779f1aa49
SHA1 4c2a40e76209abd2492dfaaf65ef24de72291346
SHA256 5ab96e4e6e065dbce3b643c6be2c668f5570984ead1a8b3578bbd2056fbad4e9
SHA512 8670746941660e6573732077f5ed1b630f94a825cf4ac9dbe5018772eaac1c48216334757a2aeaa561034b4d907162a370b8f0bae83b34a09457fafe165fb5d7

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdateres_as.dll

MD5 a8d3210e34bf6f63a35590245c16bc1b
SHA1 f337f2cbec05b7e20ca676d7c2b1a8d5ae8bf693
SHA256 3b82de846ad028544013383e3c9fb570d2a09abf2c854e8a4d641bd7fc3b3766
SHA512 6e47ffe8f7c2532e7854dcae3cbd4e6533f0238815cb6af5ea85087c51017ea284542b988f07692d0297ebab1bad80d7613bf424ff532e10b01c8e528ab1043a

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdateres_ar.dll

MD5 570efe7aa117a1f98c7a682f8112cb6d
SHA1 536e7c49e24e9aa068a021a8f258e3e4e69fa64f
SHA256 e2cc8017bc24e73048c7ee68d3787ed63c3898eec61299a9ca1bab8aeaa8da01
SHA512 5e963dd55a5739a1da19cec7277dc3d07afdb682330998fd8c33a1b5949942019521967d8b5af0752a7a8e2cf536faa7e62982501170319558ceaa21ed657ae8

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdateres_am.dll

MD5 f6c1324070b6c4e2a8f8921652bfbdfa
SHA1 988e6190f26e4ca8f7ea3caabb366cf1edcdcbbf
SHA256 986b0654a8b5f7b23478463ff051bffe1e9bbdeb48744e4aa1bd3d89a7520717
SHA512 63092cf13e8a19966181df695eb021b0a9993afe8f98b1309973ea999fdf4cd9b6ffd609968d4aa0b2cde41e872688a283fd922d8b22cb5ad06339fe18221100

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\msedgeupdateres_af.dll

MD5 567aec2d42d02675eb515bbd852be7db
SHA1 66079ae8ac619ff34e3ddb5fb0823b1790ba7b37
SHA256 a881788359b2a7d90ac70a76c45938fb337c2064487dcb8be00b9c311d10c24c
SHA512 3a7414e95c2927d5496f29814556d731aef19efa531fb58988079287669dfc033f3e04c8740697571df76bfecfe3b75659511783ce34682d2a2ea704dfa115b3

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\EdgeUpdate.dat

MD5 369bbc37cff290adb8963dc5e518b9b8
SHA1 de0ef569f7ef55032e4b18d3a03542cc2bbac191
SHA256 3d7ec761bef1b1af418b909f1c81ce577c769722957713fdafbc8131b0a0c7d3
SHA512 4f8ec1fd4de8d373a4973513aa95e646dfc5b1069549fafe0d125614116c902bfc04b0e6afd12554cc13ca6c53e1f258a3b14e54ac811f6b06ed50c9ac9890b1

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\NOTICE.TXT

MD5 6dd5bf0743f2366a0bdd37e302783bcd
SHA1 e5ff6e044c40c02b1fc78304804fe1f993fed2e6
SHA256 91d3fc490565ded7621ff5198960e501b6db857d5dd45af2fe7c3ecd141145f5
SHA512 f546c1dff8902a3353c0b7c10ca9f69bb77ebd276e4d5217da9e0823a0d8d506a5267773f789343d8c56b41a0ee6a97d4470a44bbd81ceaa8529e5e818f4951e

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\MicrosoftEdgeComRegisterShellARM64.exe

MD5 7a160c6016922713345454265807f08d
SHA1 e36ee184edd449252eb2dfd3016d5b0d2edad3c6
SHA256 35a14bd84e74dd6d8e2683470243fb1bb9071178d9283b12ebbfb405c8cd4aa9
SHA512 c0f1d5c8455cf14f2088ede062967d6dfa7c39ca2ac9636b10ed46dfbea143f64106a4f03c285e89dd8cf4405612f1eef25a8ec4f15294ca3350053891fc3d7e

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe

MD5 60dba9b06b56e58f5aea1a4149c743d2
SHA1 a7e456acf64dd99ca30259cf45b88cf2515a69b3
SHA256 4d01f5531f93ab2af9e92c4f998a145c94f36688c3793845d528c8675697e112
SHA512 e98088a368d4c4468e325a1d62bee49661f597e5c1cd1fe2dabad3911b8ac07e1cc4909e7324cb4ab39f30fa32a34807685fcfba767f88884ef84ca69a0049e7

C:\Program Files (x86)\Microsoft\Temp\EU6FED.tmp\MicrosoftEdgeUpdateCore.exe

MD5 c044dcfa4d518df8fc9d4a161d49cece
SHA1 91bd4e933b22c010454fd6d3e3b042ab6e8b2149
SHA256 9f79fe09f57002ca07ae0b2a196e8cc002d2be6d5540ee857217e99b33fa4bb2
SHA512 f26b89085aa22ac62a28610689e81b4dfe3c38a9015ec56dfeaff02fdb6fa64e784b86a961509b52ad968400faa1ef0487f29f07a41e37239fe4c3262a11ac2c

C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log

MD5 372edea8205ce6c952b1e11c69f72ea6
SHA1 3216928f33d441c23f84e4c28063f64e52665b7d
SHA256 85cba8fab2cd4013824c9d6c53074635b5579e174c2ff8321f258a5630aa2049
SHA512 678a5261b0abcab76c6cdfeba2992c84547fe20ed0429dba47adf7f17360e481611b4ba5014718b9de37cfe96a3f57802a18fa0212b8aa9e790a577fc74a2e03

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 70f235b1f84908735303bed6a3bc044c
SHA1 5b60887f4a1a154fece4f0dbe365ebd5c64a651a
SHA256 e507a8d941297db0fe7fd06a3bd63030a418e120169e630a3d0ce6fc0fcbceca
SHA512 5a8ac066114a292f9917e879ab594974d77f351537a9d6a515eda438daf0a9feee981acf54804e7a80372326ab993ba25678ac983769e45eda834303d8cfd600

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e6e8f2320beb02a8d2f439cc88e57d86
SHA1 50ff8e48103ce05c69cce5df5f4b8dbae281b184
SHA256 9c2e69bdae3f2be94f2197796183a84b31e4387cefa6f78d0812207a458c707b
SHA512 3294869a4b1f71814e5c26151380b5fa68852cd96cbce6ef823e36249b2c41201270a8c5a1f574729cc1fcebfb6aaa6b3c60c61148885630cbb9e83753c451a9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f338bb712f53af9a58f2a4ce0790c984
SHA1 bf4318c3604654602e9907d7fdf4e2900a9a26a8
SHA256 4228c3a2b8f6d9889258cb60c7e23baa2c9bf2774dd43fae5100f4e3db9ce7fc
SHA512 49a0ec53eec6976bb27b7b6ba07a55cd1f11fb739122c7d318b665454ebae53b72d7d2358df304876d60468f04d24a2f3edc9491d0b0c2128e11476179a05a51

C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}\122.0.2365.92\MicrosoftEdge_X64_122.0.2365.92.exe

MD5 a54ab01ccc08e7387b4c349caeb45f2a
SHA1 97b8e6461e6c03bd0ed3e3fc3f3b0245594e1cbf
SHA256 bac68f26b970ac8d3fff47b40d4004d8204073edc963a1d104804e08870ed6e9
SHA512 ae7f035d4aea24d138ac376a6913b735bcd78af493669b33d038b3d12de76eded395e2e13312a8a64d106e1d52987203375dac4b9360fa15dbdf3b0185f947cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 e0157c233b4d3cb632ed4e73101e042c
SHA1 28127d571cda7c66671a217197cd75c41708f7b2
SHA256 e92b8bb18e77c415f0b451bd01c1d60682caa165f2b632d2d44e1b606343864e
SHA512 86aab0d04e1d75f2b9915329766ea8120eb09b41e23ee0d9d48ec9e7e38a6c305ff35b6669d25864ee9cc8d70aa939476cf031d09e017de827e5de22a10c7d16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 951264008ce695050134d06fc2cbdbf5
SHA1 3648fc279fb85d2c2020b9e6036aecb44a902051
SHA256 6daaebb31cb63b4395bd5d839da681f0ea93f97d8374d3851a54f21e111918e5
SHA512 79a8b6b21cca130092583aef13794de9288e97028b980f04d2dd1111be5432bc3336abd6dcc0af27310cd067f02a15859453c1592f7d3b70ef30a67abb66cc1f

C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat

MD5 de77e021a7e12b5fe3d3fe5939d0322c
SHA1 dbbad0b9b9eb3923cf3d037768e8c8d6e0a8d6bd
SHA256 13e6cee4d7789fa47b0cbae11efc16049271bbea09851eab86eeef9ed45c31ae
SHA512 43a5587e08ba54ce437056aea0c0f2908bb9072c7ee9ca329af1fc3dabe46e94ca363da18343650db8d5ee082456542d8b036d722e33c1a3007063d305feea15

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d16166c2573beb7b1ba65faef6ecfd51
SHA1 3c2b7e3c3be4d13f06163b8a038508807ab8f15e
SHA256 e5bd56e078b25357f4bdf1d6feb9980a3d8be5d0176f8682782eb715f229e900
SHA512 3e3e2b0e452a1f5aebaaa752cb3e96a161cee1ff1683c20b6137607fbca1561d5126541bb03ff66d93b0ae3f409d1f5d0592829e42c5196e25268d404f1d0b7a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 31fcf826d94281ec375adffd1e0f08ae
SHA1 214fdd70d0346078c2e185710a7a5921b01c477a
SHA256 d156d81959bb215f1a2045404f675136f7ede97658534ca1a7ace0ed4c195b53
SHA512 01d89a3d0358584d8c001773bbafda2e0d919114108627ce771acdd5f340240820863d7dc9d1a378c682c119d1d7e21fb4d3184ec108dbcf9a01c11da8edaa27

C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.92\Installer\setup.exe

MD5 2b6cc0e81418f97237a510a4b0cfb44d
SHA1 320fbd5344190540919b85847bee2dc23e860887
SHA256 4cd490c0a119273cc36038cc0dd41e5cfbc0270e5b9adaa8b0d0b50b4c53d534
SHA512 ec64cba1602d4fef0c120b304b885ac52df44e651d8aad3e528dd2903d3ce39a73061903ecaf9c193f1e59952d6d518f5ad6cad12235a9bd83a8b1bafbae0bb9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 70c44180dad9723d3fb1241c28d79420
SHA1 20887ef06ed3eb01856f6137b88b9b255fbc6d44
SHA256 b3efadc44a4249a18ddf5398d6736fa5f5804ec184e2688ade7ecd11b871978d
SHA512 a9b035e18ad6cab123637b528d1e9b33f763cf6f5a85921556cfc2ba466beb5e1f7f2c91c642a9ebda17da9c70c1ed087ea0dfde563e56ea32d75f304544dd9b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cdaa6766ba9f64bcfe010288936ca995
SHA1 5504849177e4635eee42aef15233fa2a18a6dfab
SHA256 d9701f5025763b2a88abbac75d70731dad919035980d7b059f25269537262515
SHA512 8f95c495c7a7d7deffaa40e011820c202a2ab4069a18e7709ddf78cae13fc2f63610a83fd39bf22cccb0cc64a62b0803dcc1ac96f8344031b667cc3c75e3e9be

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 aed30e6ac14fe0db44bfadcac9274f06
SHA1 c3b3a8e74da5235ea316e7376bc01512a8de3ae4
SHA256 583efd1a1b1dbd598ada2cddeaa4edfb93de47ea4e0dbc18b681496d3918aa6c
SHA512 c511892d506e5e392d7928225966e6b59424a385b8ecb39f0e54f53a0b55b63ecbe73cc36b9651953a38052db7e5abd908d765ba9fd48d92dc35b21cd0adc230

memory/5036-2099-0x0000000002790000-0x0000000002791000-memory.dmp

memory/5036-2100-0x00007FFB5F840000-0x00007FFB5F850000-memory.dmp

memory/5036-2101-0x00007FFB5F840000-0x00007FFB5F850000-memory.dmp

memory/5036-2102-0x00007FFB5F960000-0x00007FFB5F970000-memory.dmp

memory/5036-2103-0x00007FFB5F960000-0x00007FFB5F970000-memory.dmp

memory/5036-2104-0x00007FFB5F9B0000-0x00007FFB5F9E0000-memory.dmp

memory/5036-2105-0x00007FFB5F9B0000-0x00007FFB5F9E0000-memory.dmp

memory/5036-2106-0x00007FFB5F9B0000-0x00007FFB5F9E0000-memory.dmp

memory/5036-2107-0x00007FFB5F9B0000-0x00007FFB5F9E0000-memory.dmp

memory/5036-2108-0x00007FFB5F9B0000-0x00007FFB5F9E0000-memory.dmp

memory/5036-2109-0x00007FFB5FA40000-0x00007FFB5FA49000-memory.dmp

memory/5036-2111-0x00007FFB5EC60000-0x00007FFB5EC70000-memory.dmp

memory/5036-2112-0x00007FFB5ECF0000-0x00007FFB5ED00000-memory.dmp

memory/5036-2113-0x00007FFB5ECF0000-0x00007FFB5ED00000-memory.dmp

memory/5036-2114-0x00007FFB5ED10000-0x00007FFB5ED30000-memory.dmp

memory/5036-2115-0x00007FFB5ED10000-0x00007FFB5ED30000-memory.dmp

memory/5036-2118-0x00007FFB5ED10000-0x00007FFB5ED30000-memory.dmp

memory/5036-2119-0x00007FFB5EE00000-0x00007FFB5EE0C000-memory.dmp

memory/5036-2117-0x00007FFB5ED10000-0x00007FFB5ED30000-memory.dmp

memory/5036-2116-0x00007FFB5ED10000-0x00007FFB5ED30000-memory.dmp

memory/5036-2110-0x00007FFB5EC60000-0x00007FFB5EC70000-memory.dmp

memory/5036-2120-0x00007FFB5F830000-0x00007FFB5F831000-memory.dmp

memory/5036-2122-0x00007FFB5D090000-0x00007FFB5D0A0000-memory.dmp

memory/5036-2121-0x00007FFB5D090000-0x00007FFB5D0A0000-memory.dmp

memory/5036-2123-0x00007FFB5D200000-0x00007FFB5D210000-memory.dmp

memory/5036-2126-0x00007FFB5D3B0000-0x00007FFB5D3C0000-memory.dmp

memory/5036-2125-0x00007FFB5D3B0000-0x00007FFB5D3C0000-memory.dmp

memory/5036-2127-0x00007FFB5D3B0000-0x00007FFB5D3C0000-memory.dmp

memory/5036-2124-0x00007FFB5D200000-0x00007FFB5D210000-memory.dmp

memory/5036-2128-0x00007FFB5D3D0000-0x00007FFB5D3E0000-memory.dmp

memory/5036-2129-0x00007FFB5D3D0000-0x00007FFB5D3E0000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b2661fba9ceb378d9602389fa52c0854
SHA1 afd8346589b5a39153192e62fe324db5d2eb8794
SHA256 17eb9b5f1e6557788a8092bbf4a5ed6b468cea8bc9e21a56fd5a1d59299af7d9
SHA512 70523fb2e1a7d704e62165f036f56b3347eea8acc1085c791dd223c3e7f940f4995c70e719727092ba61bc97fbb025b12bb6fc4098e2a8a87c98a6f671e1e3d5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 989871bbe3b2eaa2fde9ab5d7c450832
SHA1 29a294a0b70335c9c58a774542068590b672ce9d
SHA256 40b60c5b6e6236d9d928ad6cf2890603415fb0df8e13bdefacf45d5e88cf137d
SHA512 cb66c74a10bba53f7fb5fc8a867fe07b5a08829c8e9f43fde341ab8a3e8f492fcf4ac516701294281409451ac2fcf1ceae4b044663e78dde804518866ba5f123

memory/5036-2208-0x0000000002790000-0x0000000002791000-memory.dmp

memory/5036-2209-0x00007FFB5F830000-0x00007FFB5F831000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f9c1b8e2-b099-481f-a511-18a3e183b8aa.tmp

MD5 e97f63f1fd62652e610f20154341e9e8
SHA1 6f40a7b81d3f103597ee91df47e866c2bc3cb528
SHA256 469a17d1a697747037fe739644a9de0387eef4d9724460d7eb5c3771043fe6b4
SHA512 81558d7eab62b675379321b88f1e9c8d0473ba14d025c82370fe22a82a44d8a560c0e190807b365979d5b542b53b2de3eecbac5c8f95a2bcabe0d4f3aeffa005

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 561cf9ef59cb053d7ef008f19ade9338
SHA1 554b966462a8e6ccb2949cf0600989c38dbde409
SHA256 5a0e7273b3b3e3184d23d911d87d26138b31174f9ac13047063fab074b134a20
SHA512 e0197e0d541bd08bf48d1aabe0e13b91c36685c1aff6dcb3c3233940b29bd9076adf81bc952697fe7f3895774ac56bd6cd94997cdeaafdcc9a3759cbd958673c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fb7d4558bfaf3e5b1a26ebc53342b6d2
SHA1 c02ff5ed9b56e6b98c7d36b2a64be7f339f0da92
SHA256 f8140948fa86f028414545411574a811deca0620160814adb1871ac70c1950d2
SHA512 9757dcf6480f6cdac510316bfdedd7a43b25f0f875cf760396e70d9a63d3bb8c83b52a23f53b74bd82e70bdb19ec77a76fb2f013783e3d19e15c49d97db2e936

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4b1ec8adc24e34ec83535d559094a992
SHA1 560c5ac920185abaa5edaf96298821f8d6c65c19
SHA256 932a0183cf129210cb113c654542bd73f197c521e31a8a104d7aef4d905ae9f1
SHA512 dd81abfb99f4e4e1ec1a7b5e0781bd32fa5b0c5c2ebb5cf170c37e45eeee9a3fb4be523a75fc6b0930154e28b62639fda795b063ef97efccbd4320205b161810

memory/2960-2350-0x00007FFB5F830000-0x00007FFB5F831000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1507a2038fc55b8c1989fbb15e8e3bc2
SHA1 87e0c4fc2f12dc35448ff43325ea8b1043eeda1e
SHA256 b6c1cab9212391254df60d626c6056f49e63dadedc427542f7312c7e2e550de6
SHA512 79f786af2636d6d4ae9733ea547678013d3d2724e29f869eb0affd78b4c49b2205ed7daf8e44c437edabceefaf333f0ab24cd609ca6594680163c4bba86b5f14

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8adf6a1cd75b3a6693d936e3d73e86c0
SHA1 62b557feeb58bd0e2cef1a8ec6fad66cef10ffe2
SHA256 dff4d7ba0b5038877e70d3dff392178ce688642ffa62455cb5737ff6ae0b73a6
SHA512 3f1e041cefc5e800984dfae5a10e9a27b4d3e61c2efaca7d18089197cc9683592e6defe5a5ea6bbfb59d2bb93d356b353b4254d1115dca3b1fd13ab9330708e7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 f4605d785483b887e5e22015ab81fdce
SHA1 27aed0b795d13e6e86e91546fd349dfaa03dcf25
SHA256 83fefa0d475a50ec219ea0ec65edacd6b49aecaabaabc557a0dc3e52d9df3ff9
SHA512 84805825e9272425380a558a5d7536ab490b331c395978634df50fd09e6d13f4a5b8c0bb7b37ecf03fb2f6186689eba13ee4f103d90f4c71e3f6f5f8c76b1cf3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c28a41ca3cb2e999d921c3d2a2c88f02
SHA1 36c6bfd4127c090eddfa6bc8f16db12784d54416
SHA256 e9b5872db4f387f740b5420c45e46c82f5cd60f8f53f9e850ec2c02da87b5811
SHA512 4ad0bb8485ff0c11e9eb8690ba26e3cc00fb7795bd728f0adfe39ee2827dd604ffbb82011feed010edd52088b05e4cd1df961c71f7f6c7ba4a1c5215ad76c1c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 33aad77d9e42d972e1445a48960ad46c
SHA1 800aacd03d250a6ad11ece8ac8aa1723edf6012f
SHA256 5d18e5c2f33333b4d20a1d1a3a36e31047c1dc6a843184163e1424e0f4e297e4
SHA512 d97779dbc7df4cf8dfd6c323f144d55e8eb10f4550fa896103e7e547d4f064812b6347bfc84dba4e517e9ca8b00ea49afbc4eef9a7101ba1284248624fab6810

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c50edf39ba3467b398dddc2dded75096
SHA1 339e70c7492986fe78a5f6a961c879167e830b85
SHA256 341b0e8df9038ce795c567d03efa70f8a657e5d8742dcf549b7445eac9cf03a9
SHA512 b637622bb6dfed6188d162360ec32c813277473a19d948db9a809cf204097bb5f3b6e044addc4015feb57a19fa653bf61d0f2e754689a74884533f0221f24b7c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4aea0dc4d07cf9d52032290085f5f9f6
SHA1 802e9511cd547c5b96a92ce760fc80bc84671ad8
SHA256 3f7b8b735b751eef8068ad312d8f1d24638936d15481508f7697e5398ddd23bf
SHA512 40e569c111454ea7afc0ff7a53920b84be2eef2d039bf1383336e7359fad66767b949043eaa76706a249c3275f3791e464924695eedf00ac2deec923c03efdb3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2d0b025ec534505f0c841c54e398c2e3
SHA1 28f14b6cee4752a930755792fc16380ee7ad559c
SHA256 6e081fcb289c4262b773b1a593bb64aca151a73ef98fe4121287e91fbdb6d4fa
SHA512 dfaa047379d2f57ec985c656d3347e9e171bba217c1fd4c291bdff5c2b450c0e891aeb3ecbb00e3bc59d51b279e8f6c3327b0ff8a6bdb9c60042562b93d1da11

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 63dca39cb33bdc40626806d45727c106
SHA1 14267f61ca28e5ce02e9d85c0a0bafe3c3f3baff
SHA256 744507370d8bb9c1bc54a3d9ade2422bd022ffc1ab582c589ef9e3fa7cbe357e
SHA512 ac3da24a323e4ef4f71a87115536f994f9a3500f3d8ccf95243ad471332045b2646fe91f9ea3e6992dc610a06507d4e3ab891c1df996e80124eba1947bfbed0b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 55bd5655c82fd5a16a3d54c36c82d43a
SHA1 9f041b637e4a7f05de85bfbfbdb234cb5186cd8d
SHA256 080a1fda6b53b4e290911b7d7a03c99b45eadb632878835dd419b0d55245537c
SHA512 17771286a2c08fe75fbc1f59dd9248f0fcfd45eac2ed2fbbe2e82dc657cb287e5795a21a4140505e8c52af4cb5d2fa0b3590037ea0cb5037e66d7eb68a84abf7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 18b800d1aa2f6dc411251fc465a654ab
SHA1 1fe39431cb32e117783f18e479601b7f01cc79ee
SHA256 1ecb1d792c9613dca8d221c0d4ade1cfe4b1151cc007a1b807255fe04eb3db50
SHA512 f2587a10cce21e7d230cf1ef72ccfc6d805142cfb4f20ad92a3af5448fc9c148f68fb0ab0c983699a7969c548c4138ab031376e40f9da2b31f6a2afcc8048d52

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 70ba12256ccaabc0e16feabcf40d78ea
SHA1 9e8737f58d6a91c85954842da8d583a90a6de80b
SHA256 1f8f1e62ea40ac4a3dc2a915b05bec225a65448e22e3caf3ea9b95cd891760bb
SHA512 56a2d6a8693ac381b850ddd52188f317c403b795a74069cc9c22c8efba2631a4f7f2007b35204d81aa3a13f584e8fe1f587950f8ee7f89fb03e9189a9c20dd11

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2614330db66f3b9eb08c9c70bae27bfd
SHA1 89a17db996d80723e0972e50d9e83d0a19851277
SHA256 e14bcb098de54bb8af2c3b76d17989da247b25d10f9de8e8f3cf921a2bfc62ec
SHA512 95a4075f14a41e440f84f0d09d88d7e1fca305708b266bc9bef39b7cc768bfaaf13fabd73f46c18870a41779548dd577b02c5dca28b96b34d76db96ba11f7bd4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f1d25542be8d9b946e2c918d1e40bdba
SHA1 9a22bdc43263389a0c31f44daefb7d26071335b1
SHA256 62d8ef17a96ce6c1905dd5d8e90ee37b1e21d7466fd09eafc2d7b7685dcaf3cb
SHA512 97ccef2cdac692df0a055828577ec076636d9e666322593b17140cc62cb4b47bf5803ecaf5b6c15dcb2a0b300c475d2db631bdee7c84953317383b463ba5fa23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 86c41aed01e69246790805dcd5584dc5
SHA1 137190b25923d03cd633d539d020a41e47ec5d5e
SHA256 a67333e695dc6f68ceda70743355342c7cf9ba2a1aa16c0097a8164930579591
SHA512 b19934d32beda986d5d7a5be1c852a40558847a62e51c7884d84c3d6d9617d2d1292be8facd9a90fbeff1ad1e504ba51849e644d7a1f47300ae40e5538c5eadb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 724cf44832ab31acfa85dbdd114e6a80
SHA1 9d6aeaaa54d86a17e33c67e76f39c4d91be4c781
SHA256 e9337b4a1150e43071d280f80876c4690eda0481e896b38ef7621c6397810d99
SHA512 d312cca42f63f0303f1bac692e405b51a158bec5c07327be0e58169735c8fc35f027679d27a27e2b74d2173194c20aa3cde63e9db85647cdbfc37db491819b8d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 67c4322a9c5745c0cae12ee7d2045b45
SHA1 fcaab185ebb286a2eb7a9ab22964d24e467a1fec
SHA256 fc894d546169e61e0dc9dd3ad1c386a20b73d5ab73c78b1cb978131d12328b70
SHA512 7b8e7cd26496db61083a9b7c2fd8987f653d4ab8596678c7711066df347dad6de154da7850434f6f5e7b0747de5d2bb97df002c54da4fc9ecc720705e6577a71

memory/5024-2583-0x000001F4E4C00000-0x000001F4E4C01000-memory.dmp

memory/5024-2608-0x00007FFB5F830000-0x00007FFB5F831000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 48b6d20728538d9cb3c2432db11c33ff
SHA1 dabc779da851e4a68e6fd6307cd99acb40a5cb56
SHA256 9419f3fe5affbc3778b05075d82ccc4ec1ad0eadee46b67b436775fd457cae96
SHA512 e4b3392e9907d8819aa53cdb12dcb4e55918a594b642db64af5265ccb14ca4470d1028d8dda23bd3a31363a11a01ff2372e9bef8371342b8563bd0a44ddcbf64

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d622cf89e4b4f267aac0655d0e9d7cf2
SHA1 02feff841437d42de8c903a8bbdfb22df6497758
SHA256 719f409b19ca68bc380f5b78933bcbeb35472c8addfcae43214d72a66f2dbdf2
SHA512 b2a5c1432fbe494f16a0ed6a8e4c4e4c493fddbde9848914b4f113a063c4b4308a3b2bb91129a3999ed4a977b93c5a722afd90c1ac0340cc0df591a733183fe8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e0986d2a8b5291d8fd65ea7e6cd9170d
SHA1 cc4bd8a7f5e73bf7376299d77c7969b7abf52360
SHA256 2523f485435eae02b73cc1851b948224e0fd9c4e2d54522225b03488ab799e35
SHA512 e59e1803e35a60d50f5f8d6b2802b7c5cf96f4c0d34b26a99996a0cc76c1b1730f89781eef5f457b958d355320ee5dc0b8a62749ed2ccd754f087e4030ea9db5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d1d36d95f4a3f8292669ee387f337686
SHA1 10574f9cacc1b3384b11430ad20de6f898bb3b18
SHA256 0ac2cf4a906201ca985e8af4be3662e6ac430156f7b250d72c5e61dfee1283d9
SHA512 9880c22fca92378b777844187729866832adbb06766c62d17a93c1fe5a522db5c92c92ec4cd5e36a57ab89f0ac7f78998de31b73bc110414b3f45604b192ee56

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1d1046e5-9bb6-42f1-8ef0-b9b8386ce47e.tmp

MD5 aaefb868bb100db044a736a8130c5235
SHA1 57630d4181d0b292d29a6b88afefd6dec6f320d2
SHA256 fb296838ba890f1d6ef94eb2b0a3b33ad7bf9479a01f16593c7ea1fcf775d4cc
SHA512 7a47494f4f22e70302e86dc83c793335f0a8891dee044baa31dfda43c428d1566538940960f01c8d3cd11f1f5554fe2d6e1e5b89c437dec3a100bb037f586f00

C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{F3C4FE00-EFD5-403B-9569-398A20F1BA4A}\1.3.185.21\MicrosoftEdgeUpdateSetup_X86_1.3.185.21.exe

MD5 631a39288f922faddc8602ddfe384fce
SHA1 cdc494459d946206275ec8e36520553be902f3b2
SHA256 d278b57be269d3839548445e9546b14ec44cbb12c4db37786b1703917e7f886e
SHA512 11c015fba63ea7ac9e73681e0b3518559d610655aef45b0bf2885c950f0112ca12c4995582a25b21cfae0a6c9a74567d6154df2acdd3e6e14f94b35d81223e27

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 71522c916b6deca0c54ab14319b49aa8
SHA1 7657fa014b9fb0245ecc9e32ba95d228d74d2b04
SHA256 804c34e2db7f9420fb83c127afda015e324abfa0960f452f88ad58b43765f505
SHA512 c3bb33711de5777ff92b12db1c4371db939c711f9b481ecdda65831efd32178b145a9b354538fdefd6a8942c0175e381515aa64156a1f5ad79d08f57afe9383a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6ec2e64d2551375f358a0bc9e25195ce
SHA1 ab5bdf3f0c069d989bbe67d3114765665275f9e5
SHA256 3ee6f93fd77220bb55cc9c592a75f65a6ebce4a9f8c36f7418454c5ad7854d58
SHA512 41da6ebacf16d63cc91fcfbce62556da63c5a751ad5dc005c515d34ab31063137c3867034ed3d7e18cd1a674ce6140b2dd951cfc2627311973c5ef79e9a68523

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 558e81469c7f09b8e777de4edd496621
SHA1 7b7d161941a041c7c484672db359510d7731a031
SHA256 724c239fe2f09b865ae20405ee7bda19384de19623e93e9e1848e2922795bcc6
SHA512 34d9e03b9902464d0dd00179e2388dc0cf27dc77634c04d68a7e05763271969774918144305875317a3af35e83edf4c3a1af913fc0eee85537c8edd7c6ebe1da

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a24b046971f260f518bf1b611acaf3de
SHA1 269f84dbd7d9f59ced2c722de0d0d8a3749086c9
SHA256 7e885da8719798424cb59aba33467843495d70ab750839d02e5356c384dd0ccc
SHA512 e9b3217d23101e0efc93dea6da49d81627555e15e131d9c64a8f0cfa2531acba0f9ac8353e4f210f8c304dff767cdd786171c6bf65da09c2449bd0e85f8dde10

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 12918390f2015774837c2da0621bd535
SHA1 f187af6e8b0957f91a5f1abd2623ff776d8df155
SHA256 9c194edef0eb8eac5f71edd2580bd327f1ae4523204902cea842e21541cbdc24
SHA512 30cf725170ea6987ecc2afee0c097e67373940a7a5daaefd32036695ec333da38e05d9b574a05bd246514d83be171d94be14f30aa892bd52c64edeb133507222

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e3d6b98bc577a46f2ada007ffe7aabba
SHA1 cdb28ca7e9715082596758bca07bd07ea4dda6ae
SHA256 11a8482fc3096025befcb62257f5a67e851b51becbbf24475d870454b424a18d
SHA512 7ed7fc4842d9e37fec8fbb3f2043093da63fd3d0e1487c4e975b89043b1ee59dc430c1bb4fb0b2281f72724d22bd97b88435c161ff77e5ae9f2f1b855dcda137

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 895307ff1c2833aae489d22d20e73b71
SHA1 96cc254ba5202bd72b4f16a5fec158dcc4db507c
SHA256 92fca2a348793207a7616bf4733a557ffd7d4009ca84d78d758da60f0f9aeaa7
SHA512 988aa6437b5cc8300f08697351bda6dd51d75316ed1401691c52ed54f46ef1c7baf833e567722384162ef518715b4481ef4efd0b701f4d99c8012813f0715fc6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 92239d44dabe1a9ffeb600481c6b16e3
SHA1 a1a0827f32a6deb5a6a17d9761e2dad980103ba2
SHA256 60d35ca400906d8960f422eae7e277829304abfdb3c723de05b2d902141a8a4a
SHA512 2d28df4f9b69d52fffb64a9fa3afc992a9d4c37a4b52b321ff82fce70c05dd4cda2f7d5d95558fac98b0b9da6f7e0e0e2fe81100e726d997e142968d91ffb66a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 19df396cd5edf944a71003dab2ad13c4
SHA1 af0d5ce5b41ed5060caed1ccf94da4e048bdde7d
SHA256 3962bf6289553eb7f23eae09fd1433139601d4cdf4a188c6347499d4d93e6c21
SHA512 7da7484e613f0917fb92046eff85ed1e8bb1cf436e4a76ef9bc96ecff43b0f1730b4ad5947ff845779d52a00b4eadfeb360880c3f3fa9a1e5bc1958e4e53e383

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 dba63726ea9aeab525d2781c015989f6
SHA1 ae712e397fb65c25b93b97603f4d221901e33247
SHA256 66014113dc3da9a5f5b09d368e6ca125f10db0fd15173bbfe3b1452faf1d71aa
SHA512 3e6d1ad29f364d3cfc13b8856fd30eab4fc9d70dc7b7fc33c2dc75e7d9a9ea9df8849ad9256a8b5b1e936643a0168b2c64a79c66028f992e3e2df3dba21414a5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 093c60b7447b576489a8c969decb4be2
SHA1 480a207088092f1ccdafa77e7696bc0cdf77195b
SHA256 197339c1e20510d04c2c498ff0cfba3479a3487de907775324a3a69f56028f48
SHA512 15c4132a3898215573fd0ba96f2d7b26f5d9b3a3f6cd05dc3b4e3941b3b6a7287ce4a83bc545e3996c02a4b178b9f6c367b8c92e4d5a1f70938aac92279d475a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b8085650d51ca51cfa739afaba9c6c41
SHA1 002c6799420d82202aa7c014f420784705333509
SHA256 2dce8f4b8fcd4054c53fbb199baff1d1832c9abc5c9cb958fdfcd4991432c4e4
SHA512 414a0ccf714a7c6080686defea903d506c7a2d796feea52c7a3aae0c712efa3510e5b7be2fea420fd1ab9565dac8d60745bb937d657cf4a3501d5dc747ed41a0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00016a

MD5 09be3a348217d1233854c54da942c065
SHA1 25d3a05a090b30a4d9b290b4766ef94e15899a93
SHA256 b5b4c244995c4aeb57ab7ea21928cd489f218af3967b19b488fbdc178fd149a9
SHA512 c27f22fbed3138c7fba97232d76e8975f4828618cb16527a4063549ca05e39373c806713f22895c5fd8ef7fb94b8f45de40a483bfb3c855d56d14de0ba3110ca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000168

MD5 741c643bf6c7810685a8d9e3c834a357
SHA1 aed09d196f514800ca24b49f7c1df795b455a33f
SHA256 7f85c7936282686bb3ae90a09d29c7fb1ccdcade602c2c256e809eecd31dfb31
SHA512 5823a11927f9d9df172ab940da21582930a43d4cc82c91a8473e24c6ff1b8f147fd332582fa332fa12479a79a1d1a0c4977e99c772b7e52156a163bb13ad02e9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000169

MD5 88f7335d7d480fd0afdad92bf739a3c0
SHA1 4ef1f001d3f5400eb64912ee4bf7a233cec5582b
SHA256 fe6b40ccddf821253e67c0e03fc1d34f97d45a1e7ea8ec7bcf17bd03f9c27cc9
SHA512 75034b38717a44e8e3a911275a1993ad45e9337966eb5270f69c3b5352a522fedf2ed21afd6ad2fe284f81093caed8e4900b53f99d0635b59a1781d9299ab9a8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000167

MD5 f7065cec7a41af560876d8c6f69ba18a
SHA1 cf388f8d71f0c284f1e7403af6d69abd988c0c84
SHA256 d341ba03719138dd6c6b7d558fc7d5a01432a0b1960831e4f076575125188030
SHA512 b4878099b20df66c56cde5375ab4c86711035d2d16ac6d6c24dced612ffa0542f5152eeaddcb6c7273c8c442163aa72ff8f2944d57c9b26983c45b227cc7c85b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a38fc67e1f266ac48001ee5f77171c43
SHA1 954010a01e0b0dc137aafa629be5efbfabeda835
SHA256 7adee88c43e3a9a5cee85aea757c3875133aae312cb7fd75fc291eab4d9efde0
SHA512 1ffce2ab416bdc407f5e1044dde844774aa47058a440912bd874e5b3725966c78727f3993c6e1acf23723c77d3327dfc96f48746687d419b938d9b0a1e19d105

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 82cee944b89d30a0788bffa5a7d37d80
SHA1 fc3dbd94eeda68813e2c722ff523599000891920
SHA256 90ccd25ede05d3383e57274159e8aab306374c06e05813135c32ef041ab58236
SHA512 751a209dad72e3cc350e0b9219281465c0b0c72a1a0cef8a44d2aa583326b7130b25fbbb9eb003c5ab2d4003992c57b875c9c3e15a332cea6192aac9da56d10b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b41aaca7f6796bd5c5383369cceb03b1
SHA1 c909e3feb91b3cc100e228b3bf696f8e30f28f53
SHA256 7471165717d0725e1943b4aada513b099b593f7a328100075716564276ecfc08
SHA512 d5bc083b35a49676a0ba504f81051a78e22116431766e29a00bb1f4bf8a88a2fab9c3074c44e518e6fb732b7d79e33808348e539e341a925691521bc185627f7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 4f327f6f32a31a3fb6f626d3783efe41
SHA1 cb552e60f6b2f5b15c7eea0066d4fe1bfc29c6ce
SHA256 00ea5e7404f3905150c593f86d0ee7599ce9cd953448182138df0a161cd367c2
SHA512 0e7e543c9539f09bc8ba1bb52e219ef897b32d46becae243c8976178d080c08afb640ffa7bc431b4a2b5a94cc4ae80335913743b7e486a1fd5760779ea69a28c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 30900f40a805c1badabba653ddd6e2f5
SHA1 4b3a20fad721fcda2df71c0c67fca625cacfb1e5
SHA256 7067fec4069a9d12c43e6e0750aa9f6da1d5d92215bd3a1ebb9c988803639d4b
SHA512 5a3e1a3a60f02af7f929b9fa716f657f8d24073624317a026f76fcea986c41c8f1e26aa7a18ce6a58ea0e5e79482646443ee4840c1d1fbf661ce739ee7af60c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 016c375575ce86a6b376e8ef3fd8fca1
SHA1 3a34f6ebcbccee2e2a14e45598285e1abe66fed5
SHA256 f41b81f8a58de4abbca0b694f023adeff81d02ae62f3a804bc8c26422bc2d8a6
SHA512 bce1e491320ca20d6eb591bae5d579f1a1d232bfea7cce7bd82ddf08c77ea7e20a066dbc4308ddb96b42f671068ae034e10dfe657f51e8ae9dd243d9d3523c76

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000184

MD5 c58b2cdc4b2aca6d0b2c5b3cab3f8bbd
SHA1 3d22bb3caa7a2f4e4c58f496671c87f038641dd7
SHA256 453190c377780c54c85af5ed4ead80ac2d1dc805c7e5bd5e0c2a836f938e214d
SHA512 09277e9da5da3c0230c037977762d6a60668279cacf98cc28d40b1376b4c26209dc03ebe8a402f5242351e23c4d054098ce25b3f97f8d78853a0c02ebd848418

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 82934f16eddeb8dae0a0075718e4cc49
SHA1 186e7eff8e88f6c7cfc0b223f76c5d5ef2d359bb
SHA256 cbe5e9e25911597d3e9b25ff8335f57feb4741c35ccbe0b02e16bb20ab5a2916
SHA512 cd25755de1760724c82a41ab4691a24a00b4d48b066ad9822324c7a0383b2ef8060d30c1c9d003e793ef6f4cfd6915657ad13efac7e817cbe73c241c3182636d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a68b8b86dd9920d87c014701deba1e11
SHA1 3c82a8bfedd86368c12b12427bb2481dc3c46551
SHA256 97f8e2fb69f5c6c7f32e0778b53ef1c4f1ecf3a87f25e1de1da491196cdbae53
SHA512 3650c35ca25c9e21f510296ece7100698570a7966fdd49c15912f2c2ef24da199332c71fda1b6bf79f604bdc846b5db5212d59373499f4420b91350082d61c42

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 74c31fb4ace0c4834149d4cee239f3ae
SHA1 bd1c483b7f77a5d08784ee5cacff7d011ded5834
SHA256 f05e199cc988dac2d11c916a65711037e1b30dffefdaeeb46dc3540a1c569dab
SHA512 e6f50db17faaf8c9e0baccf8e5cf3b20c3bd32c64ab408f2d33092c03eea553227bddba48f4b80f81df37feb21b732441a77f77368be09305bbcc1d66c65b1cc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3802284901e152ecf49c0e186983f74f
SHA1 cf1e2933f2a2d20d44511fd923a6f1bf392f0849
SHA256 03b3404b2ae4c14b7b1de19eb5a2aa1e3721615fef6e3965b478c5b1e835e8bc
SHA512 ab716bdfc9db3c57750e6d0384e5e2d5838ff8dfb96f0e46d63cef363983c3956f0e5c4448e5c4649853d748c0eb9cbd8e1ed998a32d7a665b5022b556adaa40

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7dde8189b1ff82580cfa9f0586ff91b0
SHA1 178a22d8b5f0354813ea1304c5d6220cbf27ad37
SHA256 b5fd204dd6d1904b9d8f2e870ff5495ce3c3a2cc349b56319be734ea6927d836
SHA512 f576d46853ee6935a413a284841fcd6635c62e9de921d67120472998ab6172623fa457449ce3bcc067025200d004206f9bda6962e7ff4ddf3ada300f924e4247

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a0a07c049de9c619dc976428f08898eb
SHA1 c15100ee1b7ae600f03fec26d50bf5ab4c85cbcc
SHA256 55827a7ec3b254d341837dbd6f8a50c019174323640d9acc7a548d61b096abe9
SHA512 ca58d2d0fcace154053db2efc299e642031b3b97870091b84be98c66206d3f43292fc9ff3f12b1b76c1b77c48a0a95c9432592fd0fad017e09d4daa20cea8db7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 1a7aea6bd070c7f998448a87a50050d1
SHA1 e267c0bfe9540e8fbd38852655a94d731807641c
SHA256 db2769b909ac6ebc292f8810134e488412fd15b08e6152ff1df5ad73458286bc
SHA512 4e2def5c0b398800fddc9451bf920e26fdc9bab30785a01c0c94c385f42ec14ce548398b1a0e0bebf253621e13729096a5c1189a53fefce7bf65a2e60cb162d5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1b5b693667e56befe50edc666f4c64d7
SHA1 f2a1e1cdf70189b6d84ca1a0d2e958b07ba9838d
SHA256 0da9812cef2dfc76ef207e9a4da7854dc7336277cd82dcc568fca70b32d86b7f
SHA512 584ed1d193d501dcfd9d8d79120da19f05e29895f2cf29069931b1baaf47ded8d0009418dcc3c9e2b21f642a12eab7521af0b89b3f3f055d355a4b8c5fbb6d72

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0f2a498eee7705f2cd5551721dbf4b87
SHA1 9575bb971ac119fae4dd76f38ea08be473f74b8b
SHA256 c0a99074c00097453bfb5d49f6e0a39a75aff5b3ff31421b419523bee5d849f5
SHA512 c9af33f0b2da3405415f8dbb19042e5cdafde8ebd962d4c54f64c8fc40a7cf8f59711cac9870d5776ebf09c3084f3add7ea8f6f0039afdcfe2c1471f934dca59

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 450880a6c61d73e231eee3c4ac822473
SHA1 ef5b62e6784787781166083da8ee5deca9ec5468
SHA256 dcda986cd9b9febf7b6ef919a1e3a5bcf0cca883d18b723e6e8dd4d0464bc531
SHA512 858adbeb539a413ccbf0f8ba456774deab082a5c24c603a828f23c218d1ea0c94f1cea1923de1a33891473165c6be6f87850bef64ce5a798adf90b2ee23f7b10

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cc2ca367920bd261bcfedb9e5728bb01
SHA1 4df03427793d359e1281d066c899a2ed48ebd828
SHA256 2f7ad7aefa66845e1d12022e056c841bda23159bd656c509ebf8ec2352be5274
SHA512 770c117ceff05915bd427cef02f98ba85ccd03c64ae0a61666e85afcd3db99d41aa97d5d891951e43827d661744ba2bbf5c59f1a3f583ba436022d27ae404933

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 379f0e31cc5bb263c96dc4b9eb3d77a6
SHA1 ec16e52c0c0ef77f8a30af95fb92346f6c50d219
SHA256 c24647ac4fe1461b052b10d523b16411ee8868402fcf069179d94634380bb0c2
SHA512 0d108a5e1bde657df269b5279b9bb8a4b4526f9cf6450fc1cf817b69d06313ce4503f04ef935ed304030b60874840332ebb2e444df5f938d9b00e28eb3f37cf4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000182

MD5 2492081eea96a2de2b4bc6a8af420d25
SHA1 7b08865b0276ed97b967ba951eb8548a75a97c59
SHA256 22c0cde8189ff2aa2a70bca8b04214b4aecf93e4ad48086654456856061d53be
SHA512 c31edb386c315e7504863d152a7deee8662f8970b99ca2673f5d556d57881709753f95af31f1b1f80f238990d41d73b3bcb3af0e81f019e6ec0c5ae15136f6f1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e1f1a3e5f6332b546fa780b82c92b097
SHA1 52cabe7d8e1f01e07b9e2d173d13a49ab8d665b1
SHA256 ca9956b06e7c260b6bd6614f1a55a9d1226e267c21a4e97ed8f0241d72235ba4
SHA512 d39e21f2d18a12f18dd317042db6c9a6ef746ea1fe12d477df0c7e8c6562cb01aef5452f2b52877ee970fd4f4edbff97665fba785a263427c901adfe7906af3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0f3c345b1d44c188f8814a3acc26886d
SHA1 620126686a514976535e733064af0d2e69beb735
SHA256 15b4efd022f8c1ceaae15baa4bdadc9702233d7756e436a90a0b2bc7dfa1e60f
SHA512 a1f2247748da41a10c1f732c9f230c6555fdf52b1e622d772a05b4404f47f47c123942f56a548c621c5a6a65039bf09afe1ef503b4e7b09c33dd76f04bed4bba

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 4ec23bbb2117befaad4e04bbee3bcb5d
SHA1 24cc9fc1aa98d0dbc5d31acda2d1abb38ca2c792
SHA256 0c924b416e83e79c4fd96cffb20f8aa5e3536d25e31737c9949d05b79b1a6bea
SHA512 7877c465f4258457e7f029a4141dbd8eb7d03b8d7886cfe6ed8bad371dd2288710a9ce7e5d31307ba9a13bf484b0030fb768c290bb15b7928a4eb4f54c6f662c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 45c7cf7deb490ef2234f2fdb084e604b
SHA1 ee728100408f2ce2b87c19e610a52541e8e68738
SHA256 92049bf443925de5d76c4912443dec54cfc089baafaaeb3d695b29c0d1337196
SHA512 a88b2a616e291cc92e05ac7e93aaa69e1acfee7cdbd006b4fde3459ee0299d4f837d2aab46f141f38e9c5881faa595a35215597af1365aa46866bfd08e9c726c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b9738717dfdda457f8e746aab17ee228
SHA1 d15fb51ce0ebb0038653222e6f31852af76a484d
SHA256 5d7fcff776742828132705caa6581ce2870225474eea7d4b9bc53f1420df2511
SHA512 21c89c07d2af26d99634dc53e601d1402a90b67eaefb4832fcb94900f90cc146bceef1d79faf64a149f8e0ccfd129420ba6a4780fe04eee9dac003e52f7c67f9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 602207f9c7b30276f5860f1a580bcc94
SHA1 4e6614e8e41900c6984d3fe53ac8f173630d2b85
SHA256 8bf580962d056dabb01bee078c0be748ced6d402d810abe61941fee6ea488728
SHA512 26abfbfcfb3502b256d5d751df56a76ce4d1beb128df6d2637a7f95717836f77a89cd9186006aaa21d9541542830d60476ea2ad501d5bcb13265357db21deb6a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 682a8a68626e5a0cbad7a8d1220b8b13
SHA1 a7032e83c924a4280f789c8894c8f56a2f8ea166
SHA256 385b1f8ce6139d152f4c7197af1028043ca8239ecbdeaa780665ac63b596981f
SHA512 d28ce006905c2191068ab2e53c00ed9d76056299ec9b1e35302e0723a74c69a624a809c943b158769af94a76d37a08cf83a5169c92a55d0c0bc947dc522f55a6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cf0a1baed06f813b987815da96966d5f
SHA1 6acabcb1995698c43c60626b78ac4d096606bc76
SHA256 2bcea098e49dad0e1238de1e31da389d8e6d8621b9f7f63225f01740a39ab9c1
SHA512 4aa1c28b9464f9b536be67c0a2fb70fef619758abd288bd49bd66aba96a6b316c41a0f2d77a420d939870b421f4190832c3a6f027e4923b0b55d93b7b41e91bf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 44dfcd04d39fb0f167fe8a51f5db56ea
SHA1 1e0ba9e51f4eca56306fe88d4cec08ade12a8704
SHA256 95866926d67197cef8aad7d0a0ba9b432355e4a6c86e0ff3c307ff5e9111289c
SHA512 0643d2afdd42724cf093cab5f741ecc1a4639a4993fd90441ed4643fe91dc187d19ed58850117a0d928671c5d24b2e5f92f9248ffc51f5e0583251c5b911c35b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4a3286f8-c283-4dbc-9305-ff1e49262157.tmp

MD5 e57d0b43a49a4eba3141c8c3829f390e
SHA1 538148ffff6744200cba463ac9dafc7ce907ed6f
SHA256 fc7e86d587bfe4ef1010c8cd2651a7c82130264d9ee235ea26d5e27a1f0a6a93
SHA512 b9a2c2a7580203f630d31e2b9e3f4be41cb433f100ed7380cfa73f8952d51533d8977abe5f5d842bfc5698c138a7bbbff306d88af60e93aa7cb4ca2594e10e21

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3cc50d6a7da842353ad02dd1b8b2c74b
SHA1 0281f9df2d2a3058eb2a191a0247e55cd3a20189
SHA256 def7964e36c64c33155beedc61e9be39bf4d1de471854671f5bcb045ab29490c
SHA512 e24c6c59d27db7c82ace9e6fc56bcb35140977a3fe18787f35ac32cfcb4b2af3d488fe0874c6d6bd17522813d54c29db270eb369e4300c372296b3c0acf26b21

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 18a66e32028392fe93cefd6102105a83
SHA1 ca00a5c471a471de18f01b862022c206a819cfa6
SHA256 91e74b27c11efd539acb0351c932184d77e1357104a7fdecbdb039c0f6396f09
SHA512 227586e215489cf82cb98233b5d339f658804cb3861bdab766aea49b699f9db80aaee1aab698f7b503a80d1c65a0d1175dd8af7dee0ea23e8e2ed3a3687943c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a36c8cdc65d44ffbd544915cd8f1855b
SHA1 a7e7c570f4f8d6ac56030359f8c7ec65263d46e1
SHA256 9e3d9c32162684248fbc296eb37bf2fe3f52338ecb4bde6fdfd01ef228a2b405
SHA512 bd2f411335436b8c56d9b4306b7a7de93ebceb9dd38351cf7cb70ab94b5c4d5806dabe4d9f30386a1705d40b3e7d42dbc9d00253f6c41a786f9c0346a21c030c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 75b9b9d9d73d967a97490f61aca7e6a6
SHA1 4e291bda82eed9a4369fe16a2d414bae9e4b68b5
SHA256 01d1d2c95516392b9f23dc94a681d0f0f037ada405714737b486078a33bdae9b
SHA512 22cd7a472a41dcc14955991e51a18913687a386a3e0a1bc762a8318429a7dc34ceeb249ecc18311861cc4123ea043e5c24df2b256ff6202ce2f092283bf5c661

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 61a97cdf753d4a4098f4c15221a78336
SHA1 a83e0cf020cb645fe9e900640ea248b610edae80
SHA256 ed25bb8ec66b8e716018bf6ac926cb0bd10ed714b7ffb850f21c8fd16b8145ae
SHA512 1c761071e65610dd191bb2092ade0d2ec832438263f7c61ed7f133c2eebdd1bab6315c6c9e3af1033440801fb9dbb345a5d0b03d20ea68b456f8d9bcb50c83e0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fe9b99c4bed7fd3fb03538ccb89425b4
SHA1 449b5a79f26bb2c7462d5aa2846bb3e0f454c807
SHA256 01cafc6589cc6eea982b638627a533e9be1202ddc188b6f21dd009a4920e6a55
SHA512 7ac3b18305cda38e84ac9466c37ee40a18d7dc8fbdd49f7f8ee860f5e8408cc40094b908864fbaab07190a933779dd34c7f1fcdd9004d9e58c25039eaf776b74

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2f4121604d944371bdcc9013854a40be
SHA1 b158f227ffb09a8799e8cbc4a1dd6b90b43aa468
SHA256 24291700b46dc17084d7bc34541e16550c57d446d0bc2ad5d0d7bde8af51c153
SHA512 70ef7a168d0e5e5a42492d25219c7246e2a1fbd7f659e651583429486842a269e308a01a6ab0e4b6913b842455da9c21e8998112780a97e9ca738969e584e8ba

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cc1ccc49e3fe7522652da99c076aaff7
SHA1 3a29d8ba7eba3ad89862a416df8b8a8e36d81c8b
SHA256 27d39635ee03fb8ccbfa872050954e8bb59cc0f59d35b3f2bf4a3ca471f51ef0
SHA512 65d65a316d2dd5fc6943dfdfbc608142d6f607038c2f6745c1ad17b2c8e9b287924ee1467297b46696743f09880facf1caed9e022ab267e6d89724d3a93f9dc4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3f95c6d9d06d078c85851c40d419b267
SHA1 cf65da4302a3ffc602672585df60af106badf47a
SHA256 c3fc4142531ee4d867042df6213b0b5b693e3fbd636fdd693b3b74cd4c536117
SHA512 c36b3301f268f10726cb1ed00d2b4d68e348be239e232e3327a9928033d6532bacc07b03dfa81ecd0a91e133e05a5a635379f6cc3f058c721318d9a455367c32

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6cae9b5ffe8ab1cdecc218c0629fbe9b
SHA1 aea005eff4148f4f8d42925c0c1ff0b27f23785e
SHA256 68544c0cc10f7c7899cf37327d1e9ddf07bdcf00f158b913952e832bcc258571
SHA512 3f91841e9227b290cde255514b1c6df4fdb0b0c1bfdbaa867f663be028cb5a1ad1d4d6efb41a642274d95c6025165ef776525c39340bfb3e8e7cf27fb03982ca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cabba463c0c8a06a2b5ad87a30fc6e02
SHA1 03bd9321e44eb9f54ed0a2016eb8b4a2851abbd2
SHA256 8d88865e76fb779014d2f2bb98b9ba7b5c18d2d5f8c0fc9f7d5e71f42fdac5af
SHA512 7fd472f3e9686ed0bb523e687c1249da43e1ec151dca867571ad63e966b25fe08fcd62e665aecebad82c6d7005aee653cbc411c69b15e776006d9fa878fabac3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e31588d376c1e44f0def0f780070fc90
SHA1 0273f6a8a08463034b60bcd64c1853376a60f005
SHA256 ca73d9c1b2bf7216fcecbce943f1def26319c7255881f60fc64f2f768e0049bf
SHA512 283d36b038e0baecd8143525a886b82c4a1f4b0e3ef580a9f6ecd6116014cd9b680e4993e389918d21778a4d8a92edba00ac35e6801921a5324332a25d91fcfd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1e31fce50fabe4962958dc300464a83c
SHA1 68d4de6eaf57b26aa3274a6d1f557c8f6e412e34
SHA256 c1ecfdb547b92f1ecbfe7e059a1a31b867afd09852dc517b0c273ea2712839e3
SHA512 a77dca623faab98ff91996e8a55b0820c3453719326b31d304d7e5689f5ad276dbdc28959f62dbb0b674b7c07b6af3f97a2e078951c157cd9d2333dd1f4bb298

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 16e3587af1efb2d36ff25e9df98ff141
SHA1 724c34414f9c7518f0aa4eb9654b2a72aa50b864
SHA256 c09b4e93cb7b7d1bf91ab166177bc0f179e199433d1f50375558fc3932c53ebb
SHA512 cd573bfdf7e6e76f75847fe0d6567ed01ce4810db48d8cbf8e9d7cc5fd3094293607500486f18fd8e88142a5abeb84b391ccb4c9b0b6d5c9a2afd6ecc08470ab

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b82930ec3527f1e823a3045f6769a1f4
SHA1 093d67c3546cefb5f5c4be42b433231a688a34ea
SHA256 6bc36187013d27d0719aec8c41559f50f980d558a4d060f1e30dd5bfb1371387
SHA512 3fc2e200ef4f691ef723c690741a1580cbc0fc628fc385450ad287b9a4fd39dc9323a299aca2cbac96c781b39030007f62db5508f3aaa5c2f1e0f1848c6207e9

C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{1FAB8CFE-9860-415C-A6CA-AA7D12021940}\2.0.0.32\BGAUpdate.exe

MD5 92bf8dad30c4bd7e3a74ac3d72520498
SHA1 952c37196ece1fdda1592f0afefbfa24c84c5b83
SHA256 014cbd6ac316ae90ebd01ce1bbd8be14e146d022f5b8a86394f2353bc447e7b8
SHA512 9640474d2dd2f3100d9484dcc8bc6a14114e18483e20bfcd9bc16ce863c6aa29e7d74728e435f5842bafeaa6751a420a488a5450f5264ea84642f1d999c5bb97

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 681e960cc1021560c2548544ffa3f7f7
SHA1 c6533765619ae01605e80f2529ad657aae28f805
SHA256 bd424fcc74cc27e97dcd659bcbdf64308b02afc54be283715b08c1b9157b008a
SHA512 e6af8e4569c0f58fcff0e17c582dd7a827207e32915cd15896ceade410e670fe70ca8b3c78f7d4c3fd6b296defcf94045346c289fd3a0072ea1e58601ac52642

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b16f3f5a0d6d8c6f12682221f99de7eb
SHA1 a45297eb508aeae5de86780122182b1495133693
SHA256 9788696791d2d0ab972714985f1d900e2bc9af191cc23b8e86e205a7b8ab057d
SHA512 07def138a766f62b596a8276f7c1940895b34d264b3d34aa67df8723f614eced671ee13c21bfda595f6f26eb61ad8bf161a0544376009149ce0a2324d625458d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8f64c863692a2c3f4e40e0e258a6064d
SHA1 c3d758baef5c4477f3ddca6e6f429e03ac39a5ca
SHA256 99623978ca3a6f4ff9baa42520224565a93b5471e3084e2fd274fe76814094f5
SHA512 46adf94d737cfb5af469f6899adda00304d7c869aec13ba63d5d5175b671510cda32515e8454041be10e4b00e25d8305497518abda0169686e2bc507512a90dc

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{440F2E8A-2CB6-4284-94FB-12B6378A4D8B}\EDGEMITMP_7F7EF.tmp\SETUP.EX_

MD5 ac32fab2c3001f20f9c57a99c2557220
SHA1 3132e9e81c4d5208470ccea941565aeeee99f446
SHA256 817463502712e46e7638d0f681f14cdb0081570b04e0200a027270c1336700c1
SHA512 36c3f9cc04e75c7d83eceb09f44fe3a5b243c543d73df00e3527d0f0fff873769e9d3264e71a1b521c74f87135aa7cfc9fb4d3f59d8c5c0cc19cafb1fa015366

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ae0db991030f595421cbae33669017f3
SHA1 1c7416b05c0e2e77bb026f0575c0b71a90b7c53c
SHA256 9fc0db93d19d2f0cae24168bccd631fc66b51635dba366309a9cca2e0233cb3a
SHA512 42a9f6a328f6a82f17f76b25b25cad6cb0bdc22ab5c6ff49d1da740127c30a344e048ed5606a1148ddffcfdbd9fef6c7def746c80eb39495557dcc6f21f595a8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 14ec3235d63f60f8deb2b767311cc7ae
SHA1 acb9d3b5dbf2f23738415ba59b5659c731ea739e
SHA256 8ca5337bd05ef08fb91432ab6612c03af6890fa24d5c3b523b441fb3b36c2b3b
SHA512 97c156f0b996f98f0588a94ae47d99ce3d55ab68100fda8c91c7ee5f88cf8bbd75d3e57228ef1b96b36f9ab013c35a2fc243c7ee1aa58a9f97814e0baa9397e4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 54a16b49bcf9aee305f3bc1c944b5f63
SHA1 90cecb70fcfac069c330cde1c1514a571621ffad
SHA256 44f65348fa699741c41fc76472d8dca0905c38a261d66a6c39f837d7791ab5b2
SHA512 d7ee8939514eab647bd3453295b02f0e1abd2a4f438c1e50d72be456877de234ab8e76507a3134c9e9822d3b4a4f7ed804c6b523b7544148a0bacb388617ae08

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9bc4b6cb97ffb255e4f83a2253c9f507
SHA1 3fe96f87bb83aa77dec91597d5899e96e94cc9f4
SHA256 e1c18391aaed75283fd031360f83f0bc3755e57516b0a17e72ad991c5693b668
SHA512 f3320598bf51d92ac47f53d04266f3550f05a4bc51f79470933d454bf2a55ef70e557ea246ae89619b4d6f70d151001eb188850a0447341f55e7f3e743b8a2b2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 a7086a8e408ced02fb0e2e2536c1e4d2
SHA1 f7e7c243150b3a5b8ffd0e8e1bae0e4e295d8e68
SHA256 7bb9785355ba0ef6d9d9153672644cf747eb66965e46d4d250e2d509943d045a
SHA512 4705a8b7a9293191faf8201a40caa2d71271a341913e1b2d8631c1789bea55dffdecd873e2943ab8ca1bdccbbb7c6de4a3553bda55766f7bbc0bc4ead4066535

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a4f2ac0a223b8096ae474462bd1a681c
SHA1 225ba78d7edddd6ff8254ed0536faae5cc756469
SHA256 6638da57f29a79127ae5bb2e16e4b2da5fad2980b1ee83f75151350a5f352a8f
SHA512 415331e3442836e642a3e7202c4a9dc8a421289fda094a41667b840c3d183943eadd6f3881754113ed825f93f35df680db9e0e81e80a9af212135e5f7c1bc9db

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 7a4376e4b2059e7b8069bc53b10ecd22
SHA1 5dbddbe0ec7cf179b2ca8b428d6daa9f2e3f301f
SHA256 bc3a0f62f360ba178100835f7146b7790d29f0cc93945a4ac23066794eca5618
SHA512 5f52e90ade7b4d0bc663d4e9b688520e70aa1bfdd9362af923c00872619a3b155308d319e9fd91439e4c4239114453bf5ff1bcb5301213a9192fc8640b9e59cf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ff7e9ec8aff12fbbe3d3cf045d08f926
SHA1 526badfa55114df6440fc177d935918d8559b16d
SHA256 dabf76d4e930316a46253f3ad6228b3f5d8e8f574a84613ed6b2cfe3d3031d51
SHA512 f5ee2d2508895e43113a59c438ff36150a2064c0176e9a27939eaeadcf9b304c414d9f9fc0abdbcaac5eb0cac184acc2d746b4580d414f404449715e0ff68b60

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f757a5ccfdb0cc9dff91d8d774137e3b
SHA1 7a0da523444596e662eca15849d9682bce3742b0
SHA256 8ea496eafc0a99ad68e61f4577ec825c1a144d1f209bcd990b08d3bca493d8d3
SHA512 4a264982bcd2c8149779635957007b61381f74ff66c9597797df41d7ff4f587f0652efcaad3d691c08e61e98d2359d4fa8d0d114c895a6d0adf2e51154a72a79

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 589591a1245bbc006f821576ed360af1
SHA1 bec74095b1b37674ba0552dbf4c02a85a7efb5ee
SHA256 e3e5c66e3babd7e71ab082c7673b001cebb259f1c6f11fb4cdf98427d95aa224
SHA512 c22a4d3fa75010f74dc4973638786b276be96757e165dabac54b175d496a1dc71e084a7eeb42330254d491d0c18c970c3d65d3c2816b7243df1acdd1eda2970d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 30be98e54ddba379a31c16d04b2cc2de
SHA1 693bd526ca80dddd1edd847815eeac3d7c6e5eb3
SHA256 56e0dc01ed9d17e789cc7ac6e545dba001cc475aedb3f00233ec449be85babff
SHA512 bad23cc0d67b6f4fcdebe3a940368d5144277f2887bd1eb5bc63ab7a9ec413f703f9ac05b882c86bd883960083825c8a7ea692de89f817bb87d307584aafcdbb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 76b4c97b955dffabdbd7e96142669c7e
SHA1 6bad0c6a9b70d7f14a75dab730e8d46dcde579d6
SHA256 80aadff5258f1d70ae2b1cd05ca0a587e3cc803b2804af24dd9e8df2598a4840
SHA512 7a9f1ccf463913d73a11e59f2660dc977b37cbd3b7a5b6bab9fd8b4830c00374d1516493ab7cea344f93a055757d5e79b86c86f00676e9b231f9a9d60242a4d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f237c0b9e33cf42c5c1fcaa91d824d29
SHA1 f833b5f80013bd6d8b27ca1e7c2f0b931806eec6
SHA256 088c2c234dd6382c537daee0cbc71f389593a77cb19662b3a796d0f1c3026d8f
SHA512 4bd27d59a5efecad16509881580e82e6942b9a065d39e117733a8e6085aa1c9b9c2d0286639635bb2347359c157902f8fead6a380db5aa8839854eed68ee7eb9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d67618875eff90fe96ff7a38e634f8ba
SHA1 0938a3f10b167b0fb32f0a28a2059f51621f7566
SHA256 3192a3a13c773be62a7db8fd420900765952bc5fe23ff7a071b66e03bf581cc0
SHA512 6bae1ace8a25ddcdf055e9661fbe74ffbe63b06c6c85f950b2c7cc7859c44cede33eb54c9110f37f705a250357a1b1b3cbfb3cbe51f0c86566e153f87e712339

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fe2aeeea4ad38a9906c07679fad4a558
SHA1 233f6b6147deac86eee9f2eb2d5d80bf7e32a242
SHA256 c41724c4f0e2c9baf1c9a9134bbf977c1b9e88a748307dcdfc9e5fa93aa0b36f
SHA512 1f341579ec0cca6ab9e0cb107497f501e2207d4e2218ffe9e790b93ca8b563a9ca5995ab7bfe9f3814fcf42e6030923221eb924448c9a441566234532d492a17

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 396e7666e77f2c02e8a2341501d154a4
SHA1 f7e95772f1f8bbffda1fbe281b76c886a40f5e17
SHA256 04e495f2408c55690cc990fff6a761ece7da5eca5603bdec193b9404ed15ac86
SHA512 0f8943b91cd74760d53a63f313392b46f40222951e4b7ee8c3e2059b5bb42f860f8b18bfff5ca20f63b8be40945fa884ef1f6f6284ba83d841677b4a7ee4c667

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 069c0500b20fc7ee033fdbc10b4817c6
SHA1 be04a639939ce97582ca4ebfdb6b6b9f07d5cb6b
SHA256 bcada278a2d3d53bc80c3eaa0815bf8b52c7f917e6b462da7276a45ffefa4ee8
SHA512 bc16cd74c8a7d69f6c1d859c996147d9f149bae31c3c90395aa031fd0eb02f08a183345d6f0d1a3dfc5cec28560c46832f45ce4ab25a7fda0aa324a77c322933

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 51e5e7797adfa5f9119ffb7ac687a5fa
SHA1 1441bd868a9a05aeef76ca8cab28b55e6912cd33
SHA256 26f0abac2213a53231554297c80a7e0a23506e0aa1ad99296fbcf57d473ab931
SHA512 eb95427525de53417b0acb43337fb4b2f3c4e222132891c804e85d12d484114c756bc5a7f5bf751ab9836d23974d1a8b415658c7f6e2a4b0cd40e6c09752eeea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3a78887470c108fce895a0a6cd3db25e
SHA1 5a0130d007688268a91db9478c05402025b40ab3
SHA256 b5e34f1b481f31645f79b8453871c283afc25c2021792cc586e42573bbc95d25
SHA512 2f0b52502cd0093020f7de675c1cf7a4cbd8b1aa1491722f9d0947af8ccdeffabfc7f17b8cce81d71e636621b931d884704199381ea21d24e26d78325125a29c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2392d5afd43bdcaf8e87b6372fe2c190
SHA1 0d87d9f2d97ab671d9a4785b7f3dfc76dfee5dfa
SHA256 2f1861fc09bbd0a02b96a445d08a638f2c3a248ae4b57df85148d5d0ade4edf9
SHA512 5ff6f9ee5b82b3e1cfe2c11ae6f1aaa8ed245c5b2b6f878447cc60f9ffec60e281fbddfa9d16cb29c90d60a6b83bc2a63160f4fb3e7f6d9fbdafadc4522fdd1c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7cae17d849650801b52aa2562fba342f
SHA1 667f1a67da6bad929f6f77aad711107f73f2ec02
SHA256 ade7ad4b3dc1012dede95450dd164d3790b11f3af9501a442b4c890427c4c8cf
SHA512 457dbcee9aa376b2eb683f59c57221c8a538e3ebecbbb88d7214b69734b54431ef573c891834166d8c75141ad53101815c66461e01b551403151dd431735b46a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 332a48850de6d882b2260d68eb6785c7
SHA1 8171df8f541229dfc8342d464451827b2fc800f5
SHA256 7595c9047f18bd2b5635841ada98daa2e4b89156f2021e0af90364886eda28ba
SHA512 cf875fa1e9c8bcfe22917a29640b9c3cef3bbc82b35b8edd1a78f644131cc38fb1eb90518e89827034b7171ebf26a9a45f4c1c55f6febd156f5c62fa67d3b8fc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4e3869d0a8666f5147322b1978226f48
SHA1 16227c8883df093c651ec2ca1510e0ff25dc2655
SHA256 fe4d0cb9505015d738d3c9975adf4d96d1e01e60ccbb680e66385237f2bd62cc
SHA512 a2eb69a8691e17ea4c301b21c8a31ae5109c5edd422577054adb5d0b2513ff677d6d063f8712234260be52af932cb015267cab8c5b063080f7a22d1ddbc22493

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 34052861148c8d99bbc8878aa88b5bee
SHA1 00fbee35e2695606711c918a4f197d33f8f6321e
SHA256 1a2b4b95fba51c8d34ec4253cfe8193f7a0f22049ef5fa7724849adb961c63b6
SHA512 cb990414bfb64bde1a08e003989faa1df3830c69eaec9f1a7cdab8d6558e4a8908dff98ee5348c3ae85f341451c6c8ff894d2ec8480d7625fd93dc64531f7d44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5f4534d96f8428ae0c4045d6a6396811
SHA1 64e15bc2595d098d5e8cc70475b3547e577e20de
SHA256 c8d25f093d6c082cd22496f675827c8e583502bc1be861d5b91195508442d94d
SHA512 c490c220cdfde1b9b3a39298a7b6dc3a77b3ca7d9a2edc264f1d5f94facd946b15f5c624c516de7157c9769a9872e330e355084fdfad6c4d395377bf7f05ab2f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1e78099655c0506627492a74cad1b32a
SHA1 660bb2058cce1b3796fc90a98fc3edf98fdb2d7d
SHA256 56017fe570dff13994776b3be2588e5aba81e130f81e1a1cfdc5215394b5969c
SHA512 ec436dbd96dec05062560e13042e06c0323d537ea7d86c853e9d4288785d77459170243a2cf24a25a00ada5cd1c30991811906f1b4cac52ecaeb647e79cead03

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8217946ee6e98ebca7fd271e5a9407a2
SHA1 04cb8332d890a0bc8d772d5ae13f3764930d7ffb
SHA256 f3d36a20e79700f007fee8304cc44dcd5fb955d97af11e4a202f946e929e1b0e
SHA512 1876bf430e265ad720a5709b989b7dd199222299e56d559d8157eaa2052aad754bf23931e9e450041596dc566ae19d3bbf12ee8cfe01d42fdc313847c68dd408

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b3ce6290dea1ccac19670bfa2c2da06b
SHA1 0bf78238e7069d74e3f6b29f3f89524ebf098907
SHA256 a48f9d5ab746ef94e7395d2d12cef378e3b242514a41d881a764e1b0a8ba76d2
SHA512 c88cc00d050c759b72f192a33caccabb2f1edec7694031c9b123e4ec6119de1a2c4587e7f6faf462c3366a8dd2e546300d9a29a05b12795a8d8a2bc0a4e673db

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 77cf08ebd69e0cb326a0f190d1010183
SHA1 a7ddc980a6cb3009bbb0eaf15dfb343974ed7728
SHA256 b41f665839bd0a3bc30139bc464e0e72f33766921bffc851a972ca2bc09c1be2
SHA512 2989d6c615bf86f6fa6cae59ae3c7f7f314e1858faece7ff349063c37b717fd6397fd3a81fe830382480b80d014c2ab843e3042e1240179b7a61740af65ca815

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9b6078162c4f654cad111fc32221e5bf
SHA1 4c49628c026d305a3e6777e163fbef71894cc161
SHA256 b41e726843161ce1c7d4a5b786561b0cb5b452f360c40114edf9558172df32dd
SHA512 7b20d1ec224a8674771b8bc208e3a4342022e0d20ce5c9f538b5b09df5dfd39eadf15a83e625159f6a521a46534a9f57b926930feb898d9c4ea316ca71b10a4c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 325c38695cc81713c979b3cc87bebc8d
SHA1 801ee4e4ec3b1caf5d05f17dba1b717997cc55bc
SHA256 2b64d2ad7c36742372e9cc2d9576c96c9c4670a373d56d89c8586d30c1c761d6
SHA512 7895fdd7401ba6bfaf3c476de5512886fe4fbeebd09293ea64748b3bf3ca8f8c34cc0076574b113ac8d5532800778ee022f33b20f4e80d1888af947735d2c684

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 428bf4a492edd39f0d07ea14e60cd465
SHA1 511c7817862566866cc1ea409311f4bf991c9008
SHA256 09c5bc1814d190aaf54bc7d27d555a97a4ee107def8c87a30b243282223e0b91
SHA512 da8bea30388659103d7bd56db52a36429194e78eccdeb68186c175c24e9b0abac7015bf4f145a9d9996093e38737e3b4fcb01e350e6ccc99a017a3545c32d149

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9a0e7001358adedabb61afc02391dee1
SHA1 0fb9b070c0000cc2e6adcfd92d7b64e430b9da64
SHA256 079b5b2e6af9b28abfe51a54c4e3babd5e18ffe7a9a383b1fc35664a51dd8a89
SHA512 16654d964be4029c0c3d36fea351041d813a49c74b1ed4c1c5f96ae2066121f4bee1c8c1b68fba22eab3ab0980e49964673cfddb1deb36f23ca3ed05c9bdb0f1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f5b7ee545a48870701e9a2e94202e680
SHA1 b8614eb0739a80e2e8086961a190fdb3ca3a03ed
SHA256 78a3365ea13eb4760671681d087782c914d25904d9dfedec3b479b393052d7fe
SHA512 548ea3e56bac55fbfe594b5f6c7a115e24a74ddd0e56f1a56b1e0d8c4b12a83032a23b7f8f7eee8d0bba64e74d70c022d3488c2cf637f4ce934fd3f110b812a8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 75e70beb0fa7e39e8ced2c7a5ebf22bb
SHA1 e0d1eeab3c8810efc063bd676cccdbb4716d1300
SHA256 42d55b076826f4e2bf7c5490f3e0ef808134cc32dba75d611c40a5ee226b1531
SHA512 1ba0a8b503936ebe3bd91fcf27439a2150aeeda5e98246eb365306ef3954c8f8ad0a2a57ed695512fb1896fec12bda71e878a73947acac921680e7739f0c48f6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0ff9e52ebd6abd761ffc94255a49f8f2
SHA1 bcb1f85400d35f428c5d35ee77ee6afc5ef4d7fe
SHA256 65ab6e6c7b1b323b9e3b1475993e7d93275a2189133d9a847241aca76b50de19
SHA512 e947c4978337fc41f91122b3bbf05b51d1139d746e45cc55ccb605f4ced0739b37776e4a3672e0cf229de56bf2bc4bec072ea642bee76358ee88b80a532271e8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1c59b57fbb91ff2741f8877b3b26dc6d
SHA1 957b4106c14fc0bd2ea6ecce1ee17b34f9a8c0cc
SHA256 7fc5b9331197c5cbeae17d62372c36989d5774d6f7382a69de64b41b3ade76e0
SHA512 af6d867ecafe6d4baec515af415915fbc181a587e1a91cd4cda69e15bd8ea0afb9df1be04c26bef2d34d3c323ea92874bdd2411db52ee48d46d8880d0033b270

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a08747132f4ccca9694d7979abc732d0
SHA1 8b9ce0ed1575ce1cfe710d8db94a04a85da5bd3d
SHA256 23a9b4cd2e5e24d20c8814444b198fd7a5d9b45931fdfd58731c0f0832492a4a
SHA512 722574b0408a893b25464e3b03b22f547a5ed3f65c79b5adb0d1e70be266c735375eeb8ca8b3c632f77e03d103625b915109115112be003e5c5ed43ee95d7e86

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c60216bfc81451e8e853bd3108d3cb2a
SHA1 06bc4f3ec9c738bb115cc0f247ca579aad1b6cac
SHA256 eda60c78898d70cc8f64af6b72b3e5ceb5dce2eedd645a99ad1aeea43d4bd7a5
SHA512 374e2e1be9dd9733f1ded4ff883890896c80d39ca1e4a478a85a4b33a15fcc75be8114fb5cab7fd231d8ed115417eda5597e674dab6b2bf820a86132e1a530dc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0051cbf4e855411900ed11f5c22f951b
SHA1 8a0f528294bf19f290e8bb873fdc0c6e539a71b2
SHA256 206b26d756f2229e946d66f177a61e51f9d3af7fbf0ac5f57ee1492bb26f8371
SHA512 705994b2813f14ddb740ccda367c8d90db426ea6eff38d3ea3388c637d65154230a15fed22b1fad438e1e21fd96eceefd65acc6c2692e101a2e1f96418c79528

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 09e14d7d711f2f3bd72d6b83b042d68e
SHA1 ef47b465bfff5682b51da85747d0fa64a91a1c40
SHA256 ccc938b04b6ff0350bcab809fb94b847739c1dd1ba607382f74d5743ec47f9f5
SHA512 074ae2aed9b9459992c995acaa22750ad0990631923669d37a1bac5dabf8d498f34c303d484dae95cd4fef028c151cebd6c79d9443645116e3949834aba31219

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ba77d0387e70f3a0c1177deb8f020b0b
SHA1 fa3b09dcac5041519c1f0c6cb0333a9816de6b66
SHA256 045edfeea88a3bf72da2af574b186fb6be940b3a312b64d96df79836ad11b646
SHA512 553e881c35529b1aa72ddf771cf46a35ecbe1921d7caa29246a303dbd32d57b51bf88806d6e86cb8b0baebdda86d0555df584afef302996bedb6cbc53e7c1f89

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c9aa55e04f24376c517fd5c4164c18d3
SHA1 df9bb9942941f4a75fb053e1b99056b29daaa03c
SHA256 d2a082c25ec3bb9b47a397db92b9b16d873dc27978181c6271efa937ac6170b7
SHA512 86a9d64960cd27ff21d3b791928ab9a6a9b7a1062734dae4f7452f9e5e6c3dc9b0a634c1a15fde582aab447548603c24c171173581bba7a551361721fd6eedf3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1aea66bf40658389087a17b94aee2f02
SHA1 6f8c283784070bb1d154e2f64c5a41c8da00d6b7
SHA256 6529d18189819cd81aa138102b6d77858ee0e923925cfaa250958760d0497d60
SHA512 88e71eff582560936ba7fee9bd41f3d1cec2460e798ae6c6d933895d9ce4f547e368abaf0c44305e604d411deb4d9cec85f369331bd69def891d37a020a67cf8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 21952053291b040dce3cfbe5aaf04dc8
SHA1 beef96cc2ac772212c7128c80d11fa932bd72efc
SHA256 ec220da8790a7a26862382d77e306de88a772f8cb850c482ccae742643e2f880
SHA512 4055bce67a655d4dbf1a48e058605c2932cce3f72f1603fd09bd9ec7a50befaf6f773eda821c61e49b8575f0925c6aff98ea37cb645f9a76500250f3904bf510

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0edc6a7af3058e71b1337c17890162eb
SHA1 8a2172a0a9fbffe7e3ca2494adb1418a29d114a8
SHA256 f93d126557a560b8cb0658ff62d63cca661e5d964a2d81912f7d22ddeab1cf57
SHA512 39677487babd7aacb810c2ea99e1cd844637dae6697b263d24e7e892e60826b3f1dd9c6acdf58dd0c2d46f6f1132b4f55e9ff43da83ea0a43c7f9e0370cee7a1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 582f40c4026e8e602a80a42c68d11d7c
SHA1 7ca346eaf542f8540544aca5b90b33ab8d6eca7f
SHA256 8e7bb4701f34f1d9889a1b43beb54ff60f32a8c0e2f14a88cc2289255a13a641
SHA512 c532566f9b4ad6c724577ea7089803699a1764bbe81adea53cee2399d28150e7f8ca7a2a7fd028e1264c9cb87e74cad664dea05b60fc085c92d24e1763621493

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 99d96b2b52e5cb09b138e27b62c4352e
SHA1 7706204881e5391fd1350992a2f2972e52a87198
SHA256 389b21e38b6781bbe96f4dfa16ffad41295e327f4deca8716a2a156433e8f8bf
SHA512 df2e1fc41f728a6cc10c949514f9cf6c424196a1d7938d1fce8f4c80f55af7e73ba3b1b542a901a94e4ef41c20137225fcadb707fb28195292fb0ae6e8a77c57

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 dfa1cf4112a16cff3b5420ac8fb6bcb5
SHA1 85e879a6c313dec9aca97f45bdce8d26c30fbf90
SHA256 b38b5938f6007b7ad4ee8747aec1c830568cfb7ba260ef9c0f9a0a8ff586816e
SHA512 aae2b9649e2377ac7a290ca5fd19241101cf6f5641e540400f6de7f5374fbb16dbc90c8a751e563535988544d7e4c82d3875bdecfa2f2f17089498b36e765729

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 668fb90da423d77322cad8d77f8ac10f
SHA1 fcde20c96f38f712ecad01e713fa5ea5e244d8d9
SHA256 69c74d8c3ea8488d8398018311ffd3f88bc8b1cc84f700d746abbac63fce7672
SHA512 942027c34c1052b85f872ad2b7461a14ce1bfba6a493489a76fa0258366ce22984b82a1088df03ddcc0a67130bc23e25e9f7e48429effaaf9fa1493cf6670950

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c8b4b923a0e32a7176bbc94aec3b463f
SHA1 b4e241d0257f23c80f00e053b89d8479a1e903cf
SHA256 8dddd9ee3f529c7a9bbeac4565b372920e83a1c85a9ebf436b84b3717e8b8eb8
SHA512 4f9ea7b6033a542bcc4eb9f8b85a5444d3c0c7715b6b75898beb76eab4f1305e46043f183a3d85740a5d2456cf6e73ea4d0e36ba8a89d1c23d4061d5a5d2666f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ab65230d1bc0376c2ed7d2f13da80aab
SHA1 871fbd8dc4566ec8337f434a36115e310223d711
SHA256 b94158a577e7cd8d8feea0988f668d02a19e9ecb60041f406469906be1ec6dc1
SHA512 8482823c133fdd20e1eaa19180fa15f0bd5300af8223a29815887a6fe0e191ba8fb9fcf8c3f0281f965cbcb6e359d93ae4524e4a2ac78e2a90b98b7a973cb18e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 83286541e5bdd0cbcf77c122dc17533f
SHA1 4e9eb812791321fb32a806f533b08cc525187c1f
SHA256 c8cd1d755f150c580f74a2d89121bbba9c1e6808cf9fe8161465df2e2439bc44
SHA512 6d749f382cabeff07a438791e74006b6d398585b8a9253226f7dab775253ecb23f88dabbfc5529d3ba3226a043074d48a6122752bea3b11eabb0aced86a11abc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 831b2f150a323837aa9cf98b9d8ea2eb
SHA1 8780d6a82b07e749ef857567b4eef585c9c05a95
SHA256 d4658c89ac444091f50ae7a583764fb32f8aa5f879f577661f81d495fe06cfed
SHA512 1f8bc96fc61ce83352b4eb475788c0f267bdf3675489f3804f9d69062d9ef07793318c25f39a8e192e7596473296f276216719da66915fb5edcfbebe3675b8ba

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 007952f117aa34c55684a22e776d5b4b
SHA1 bffcaf05d6f8c0ab7a835b7c95f72d8536f2d494
SHA256 7fa489bf9eec17e30cb3ee3953cb743be7afe7392f362e589e923b295c2c8438
SHA512 0dada61ea09403dc90f333dc325e1017a7e5c74af9343d2991198d5e43ce23fda6e4ac98d73c7b90add2bea98f59256f317d6a6c46b049b1951d5e8ff0915798

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 626b6d40443441683b2937408c322450
SHA1 d0bab4faebb79d2b9768cc6ec781ea9217f994b8
SHA256 bcdf04e5f105fae8f4a8c30ff89ba7ca7125e071db4839524aba9fca03e2af86
SHA512 773d937ba3a8f3030aa9d7a84614f03c95f60c40fe10599e13efbbd2e01241355a73cd3530b095657a90222e7e6874a8eb5ebe14561d55fe2d0f0bf95db30836

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2b37d4882a9a50972731167332583bbd
SHA1 00b077df8f1d3024cbaa6d95a2d742955891c32e
SHA256 9cee7c2a794fbd40a25bf925887a2f0ac3531e6470cc5664b897f6cf505b4588
SHA512 7c33d30966f98d634473cf6fa4e886ff1f9924549fc8e78002e5e440c5f436ecd137688e57806779859d6719b5e748579a11916bf619c41e02d817acbf549d69

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 45a23abcab836b3e157ec2656daac2d0
SHA1 67174b34f0661448f77ea2004bd9ad841d4c5df7
SHA256 9f383712d4313659cb94e1e62763a722b01302c831b1db7cb260fe9c68bfd487
SHA512 834f695ee5e4fd0169a2f3f2530e5c19ecc5ab10f127814bb9876631e4b6a175bc501c059282452ec1c29bfd7b7d33e19440f2cbd9e568eac87043ff43857ab5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a48e728d3f0cbbd5efd713b375615723
SHA1 d97c5257ea75d25ed2d73ac93c704fe7165acd53
SHA256 01d06c3d60c91f0e6a81ca566cc0e2d3b2bd2b269ae7d5ff1199ba739af0f805
SHA512 e5f3960f2653fccf16a0df67cb42cf3dc91bc6213d6b3f8b6da1777bce1c8538112383a661ff11167d12597dd2e869afcd753e9205bea294166203cdeb4b2be2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5ec026a97bf0fe6b513a7f80697c2239
SHA1 d37c2ce9cbc51047d634507ed43b6cc9312750f2
SHA256 d1db7767986e59ba78de3a0a49e1c2068f1febf7adf9630d4ba9fa906d44ba8c
SHA512 11a8167965d4e3ce1ebfdab41d33577648896fbab1a492fb17a32d51b1628667141407cf6da7a7a001e81065ff3a8944ff28179b586fc491e03534a2dcf68c72

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c4a5ba89a4b9a4f42b0bd2755fda1510
SHA1 f80443b544c50976cecc976b24a80a4294fba0a1
SHA256 a93c61d1597b6c3937737f8f3994afe3956eec3daba5cb56e236cc387cb549dc
SHA512 1cd6ff80e361a13d5997eb24ff3440de7a153a1229d41ca3f56bf43c54d462f759e83963da9f238d4e6ba89ef65bd353b262d96ad80d4b184a2e00faae99f98c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f02e7d94ac8bbfb68b27bb7b417ee6aa
SHA1 8b19e91c2bca073275e8b1d6a795d76afd2109fd
SHA256 a980934a0759e404c8f6412db743bbd75260c9cef27556440cea8f0429ad7834
SHA512 1aecb256b35b33b1c5287ed8072150138429efa5f2531269ba53228035ee044d3c845c5ed8e3bb5afc682f2d05105ad3168fc0dbc468eb0dd29fd4c48218ed2b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4481af44b126b6b7708e50ca3b96557b
SHA1 defcf0981397269bda2c676c37072bbe3ca7e544
SHA256 811db3e7f6d2d7c19d7e8f37d1ad48f5f23de7129234ab876c35aac2f51f071b
SHA512 ed597076b1fd3ca7a75aa8ce689ecc525cd27f68929d3e0b7852275050dc32d1fe0a897f7eca685ab1e1731d0c179f562bd65a3222910f7395786f342a93c0ab

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e0abb272afdc5e0e5a5c9d96b01cfa9c
SHA1 9df920225df80bd9c083708e9e4993dc7db0b3b5
SHA256 59866a2cf689606de0e074493f7072acd4c9146aa77719ffa37e0b43a8f14539
SHA512 a5e356f12963dc35b681f3ea8d1d9642e7ca6bd4b307fc167d457fc8ea5b78a564be3926f7556c15806effe9dd34939b63efad2ea3c9b72c12b8498612e57ec6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 bba77dc43feffbff4369ad9a4c6eb4ca
SHA1 9b0c76df54995f6f523294ad07b6f6c545cc3be3
SHA256 9f7bb8ee51ba87bb9c085419fa03354bdd48a3fc4c108f2585b7e04fd9a4d1d9
SHA512 fdb6355a44a3eb68bcd615172a3e296bf3413aec6982cfbbfef8959321f325eb51061b66cd5c09d52834e5a48552e00449fe62678e874073d99fc894ba2812d2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4cf874544ff52f318f94fb2194d332bf
SHA1 99e563a23f2dee9b30c10bbd1c344106dafefc49
SHA256 2844c5444d92fcdfecb93d983e3083078040dcca8755704dc2237c716c7e4082
SHA512 6680b49a05ba694c85dc51c2db9935399cdbecbb42578d76faaec88e791772ed996731c6de453948d147ff2d920e7b6b937aaff3cd7f39aa578dd301a849c134

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 efee7ebdb6827737c72c2bd1a1feb0c2
SHA1 34a6ce673efd31bc3dfd4896f6d86a69d4d3cf5c
SHA256 834fac55fba264d3dd4bcf0814fa71ef9461896853e424135fe7c6c72e8b429b
SHA512 e6905089a3e44170641bd1bd6b727f1ea5f62cb26d4f17f614427492055fccbe54a6c231a116f9e0fe5f7aa26a0c72b94039a721cf5d52b3c628b8d0d7d17a33

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3c53f5bca780c0b0cf5c43c1ece24a1e
SHA1 e01bb094caf7d6a83bbd37fb97273570ba003cbf
SHA256 ae81dadc7d3f4d4f76d016acb7f276b9857230cd1d1fecf8dd9ef06d91218d0f
SHA512 7e07ad5d7a9ca2010d7f7109ced192ee50dceca998c346fcefbdf3775f7ae8f9b27d908216299575ac27e3655ac2847e6123dfd0229f6ad3c17449aebda5d5c9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3b4e0637ca954319653973b30a014457
SHA1 d668cad0db588ca044c701c914ca18c919eb6dfb
SHA256 64f3c06443029d84931be653fab56f96228ecb505fe843733fe72f655fcf8b29
SHA512 16008f5b3c55babaa3830ff58577952c377fd9e4d36dd699eb0f66a23e1b8c1e2911e747e6c08a9120667fbd610afc33c9ab7a39c4144357048b15ecca17f699

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b8eb4828-b07a-48a1-80ee-e09c32b9a4c6.tmp

MD5 2e3ed99b6e37bb8404f1d70fec41ebae
SHA1 48d56d166c589d1a98a9ff4b7aa3c715f78a9f5f
SHA256 443652e685652f5de289a453e1e8a8d1f7e53d29909f776f01bdb1a2444258b3
SHA512 aedc940ac56c38e4bf047b5b25ce3e2fa8a162bc1ada9e118151ce35e3b80fc3d01c90cdb5b99740db2a7d1fa1fe672941a469b4502d1b38d21a1d0455a58938

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 658c05bc6f6abad926530f9823bc6fdc
SHA1 7dce6fb4e19c8a33e55b069e9ea068b4fa51553a
SHA256 3dd19627475f093a416de8235784031ef1b3fef920efc2a69e2b1a8948e1766d
SHA512 60c861a923fed767743ea6995e32b42c894c09109da42bc2bedaf3fc905d917c9fd39b3d8b25b333a55676dc519fbe02da259f13905b9c85dc1f8544ab9a7a1b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a12e03c198db372ac51c67efe786dbbf
SHA1 368ad53c0bc9efc94f4c9533b64e0d7f9b878d4e
SHA256 7c00ffc5cbea56b4579e0b369bbfe401737104cfd72fa4fc26332b5462fc59bf
SHA512 7e3a4db947bfa5c49a8a1dae28fc01fffca2dcea4951c4161622c1c87e75c17294fa991f7875006e1f8973e6b0d86b6ebdab2ae935fb6a02be1cf90c688b6d1a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 97a9b42751f4138be728bc9a05d4f33a
SHA1 28c50704d1945c8fe2e7ac8045d2e6eeaca3deff
SHA256 0e0fefe1e4f1111a8c07b61a57680bccddbf7144bb3033ade7d294f462c084f5
SHA512 3826e2f7731428ef994820ca4d09b33fccc15ea164e86a6bdcd3ec1dc937e59a6c7aecfac42b0399b3d151163a7b0bcb34407809531d7e073265d1945e68f6ba

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 caa56aa09125169a876ee571a8eec1a5
SHA1 babd9d47fddc12b75a7881d6dc654213d6c5e67f
SHA256 83041d288969b978633f7b2beaa2f340b5ea109d5cfb991d7a43d251b33fed37
SHA512 52665ae17c71bc6d6faf11953bd36e2fafbc7b48884c5a39b7aa49aae8c2aadf753c17a901461fb1ccd6b92c8337f263769cc31391a779936ff9b4f5d9148413

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f3be32294223128e8a288680c4ee8a20
SHA1 3f16cecdae14ccad7f62e360092708e532ff14e0
SHA256 c88f4fc34cba38b416ea011b9110dab4fa764d45072d43dffc7845bef412414d
SHA512 e8156cc54ee1c9607c1553f02756b6806ee30ae79f212507135e99d25449c5f555c6950157adebddd3253904ea4c86476c4dc458a1d58ed7723628778e6160c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4797d41e4e3905193de8237b822bf340
SHA1 4f0714771c93438ea614e35566f2a581846de139
SHA256 cd78a9b026300633379a9cc74e269db5e2c44fd05bc346dcb266202977d1c110
SHA512 d29750106ebd723c5a8b872c07d03475e92f3c1448fb9c130c488cf78a2373de8e4875e3c015f558baf6e4b8ac82ea69245cf02d356b60120f11bd5a5c8359c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7e1714771665a9beab4fbcf65ddcb5e7
SHA1 f98ed1c2583b31312ba492429119e8d17e1fbf22
SHA256 461c950671d29e7702a3c3bd82a9ce9ac2d7f380bf8566890d0973406ce3d790
SHA512 033f82708fff62e4cf3abf5779bd5a4d3359ffe10e0cbd4353f9811fb1b9f2840e34f6c7c8e663ba010054981d481308858909e25d5f4257e7e07e1380aea1cd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 142b63cb9cd17a9f61391750a38ae091
SHA1 4e947f56095b7cafcd296df12cd4334d1418b323
SHA256 f57ba189cc0d0e18076a153cc17bcab9af172a645006c6a88c29ef2d70b74491
SHA512 8b6b3884b48dde182037929b38bc88e50f227f18c1e9db7ccad245bdf692ade931c1e9dcba2c0cfdc10e3858b1f9ea05485a45a0069f58e8de48393379811ba0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a99b423157f34b785c6e981971f4802a
SHA1 0314ac9cbc7661a8aabf6c20a870b5ba3943369a
SHA256 3be8c831dd882a85dbb9df77bfd58f415b815ad3528484cdd957dd5de1d1cc51
SHA512 8586c78d4023066dd5ea0a7bc8a0685d7a8bb3953d938c2ea8d542be603ec824b822a5807bd7fe68e5f283cc07b32a979f9fef797769da7bd0462d67c98fcfe3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9b6407792abbca4bc96f36bcf128a0c2
SHA1 133431a1bc4408c51e2ff57648f2160c1bdba5f9
SHA256 10bc7752168f0544c706b1f3f6dc2c3b0a333fd7e38275b7e09ecedb10cfbb77
SHA512 b76deb9dcc97d41ed7e842d711546dd20d9b4a61fbdbf9b2af901a3a32b0d13d5dfad913942afdbf4bd9636d9b7cecee970b2a0d9d473aa38a898d25b81b01f7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7a556ec191509c7763c0a88032b53d70
SHA1 318924bfaeb107ba38b974ba97d7aa974c1e3aff
SHA256 f7e5403e542c9d04bad1f73661465d1cf233d3e38c8d028ecd3104e0e015e2e9
SHA512 9bf1a66545b0857f040b4569206e1a322ebc4410b4d776d802a7d8d00e6e30a7684db07c4e65e51e315b2cda09086a91915fff737a257c6467b5ee05ac9a1321

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\857a3f35-4d10-42f1-a678-5abb78af24c7.tmp

MD5 69c0f79d3937ae6aac1c3e796f08ea37
SHA1 ad2d70596c83e14e21a858437f29ae60d500b199
SHA256 83fdd4f9eb84a7ee525f35da88333d3cf48a658d9b0bf1bdb6ad47817b9a041a
SHA512 fc2a45d12ccaa3b9409917309eedd9125c73a77c1a8c2f02fcaf0eb343e9087f68952042153961f4e34087fe0931c5b809c0fb34cb8fef4a30e5cc070bdb2f1e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a9cac4dfd11f4e0c8475ee6dacefd4da
SHA1 dec8b70f78a4780c8cc52cec0d3afb6daf024433
SHA256 6c392ddfc8232b0cc54e2e686974d1aba8a63bdded03a1f5e020731b44eed036
SHA512 d7500594463a932385e2868f5a48fac2a0ad7ade90875d0660ad097af3278d36e1182d67dc08dc653eedd221cb1c7867c69f050f496e227277fd51cdc81de6ce

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b42fd1bd2962b5242617db2ff07b3b69
SHA1 2045c6787716aa31b371be044ce11fc2be9c25be
SHA256 aed4cd74050081f6be39f696e5d8d059293fec58881752c2e93f13191f11d6cd
SHA512 b575672080c731c553f5f9cfa11e164445412ce4d16a4e996434cdf438e5a507d483d7b9ad33cc17c81ef4b14310d7502bf773f40ab9d5d5d953288c19c64468

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0727a03a6a788c578737ba5ddedd7b5d
SHA1 f1b1733c76326ad58fcab6a76797a930da5c3059
SHA256 ddd7100e3ec2910eb563beec2c5fd4e6883f115ad7eed0a464acc8f316c3fa4a
SHA512 0d343f02ac5f3df396c65a5e5dc10dadd580c903560b82846775d4c829f3af14f1994c49a498361714cfb344e725daa35b0952dc36ca2edd04d79cdf89fe6f00

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 12228c97a5565da337c5a8c0909e9865
SHA1 4b890ecaaffb5956ebad9b913bc756068c1522af
SHA256 668b376d8999a619d519f541e981265397b8a418a79eed29919fb1c84ba9f1d5
SHA512 58935d9ff0ad97e18ff2ce23dbcd210c8935fb9775d89bebc33fc554acb7d568d03c8cc8e5147d40e6d41ec4fddf8cff28eda3b3d5cb94ad9087d02c706bd2c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a958e1b4db859edc6cce42f29dd2bda6
SHA1 63e9a64e0e67fe3ac5a29c87b33e0fecca49d156
SHA256 a1ef9c1e4c462799638e4a422c99be5d65e163dde9f98252a8f9c5449e10e42f
SHA512 715008a4cf6a1e0f07937c2be7fe93b6eb4a8b994756304d6f2483e27b3a5618e312b71f4a37c275db593224590275ee1a34ad71ea527d56e8dcce10b2b49d0e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d7d95366f7789fef2963598baeb6cd6e
SHA1 c4a18bc5726bdb4a8dca2f1c9ce8174432006e35
SHA256 f69f7727d675575558ea8dc5f82d79ffe4216e697b8c26f51d1e4a4ba3b4f47d
SHA512 46c18df35bb4b5d5d69f0f923c4a32fbc3f0810efd6e204b7d0e2abacb135f5d339deeb972f1d6e7e1b769b11c812c0bd773882c92d21f45aacfd0072e3a4816

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 14405e5c203d773ff3c9ba8a66ddca6e
SHA1 ef3d5e4684e57676b7da2ed5ac301bc101581996
SHA256 00ed87d4ce366a9813cab7f5b270e2130e4699b245926e236444312a0eb5be98
SHA512 63dac704476a13b31b17bad1c94c46708ea222f9a56b3a28b3fb75474c4399ed39e69159aea261f1bd98c686a9efa505211d36aa0e2d429c35619d6228e1d8c1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e4330737986e33241cf01580366887fa
SHA1 c82761a6e779cb669ff1230f1ac3a24df90c9583
SHA256 2cc032381f1a30b652dfe345db5c8203eafb2c80e3a711e55db9ed00e72eeee1
SHA512 31238092978fb3e4b6780a2bfbbb15df8e9730913db55939b65ab7320b1024e557ef493fe60141bb33b3167bd255da50029f222f989a0ec43a6a9671c56b24c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0adffa7889d6d71c6e02da6621bcd92e
SHA1 30ec036fe7171523ec8a3ff72f342aa49cc1beb7
SHA256 26b7630bf05137595a35f5e44f02bf7c16acb7f83cc81bd3b83d3df146699fbf
SHA512 9a5dba73428b52ace496c2aa64550c67e1834047f7a272167bcc25d59a2cf4010da843306eab42b11eec57cac0c81d0a5f0df42d9332d4501a74c145a588e413

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 40bf9a1fbef015094d956eed9139c5cf
SHA1 eb956050dafab01efa18b339e7ee8ecdde12412c
SHA256 170d8bc5c179e72bd8a64563b51d60984f6b598ec4b4e87734253eaafc8bfbd3
SHA512 831b101766e9ff25193e1ec3afc74a97d09866b8017cb481c1636ecf421940d0134541f056f5281251feb089096bf320c0198096cb19f025864370a8dcf3418e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8fc8ae22-8297-4650-8409-5d77e909d65d.tmp

MD5 78a7c6bdcb6f9e54e4da694899a422e2
SHA1 e2ee7d3a58fd383370e51e04714aecb3595b407b
SHA256 63acb0c810216cfa65cf41c331fb5a51e447dfd5af149ee9372ebc2c3defb0fb
SHA512 8118d8e61f526594152d1c6eccb5051013745f90760c94d9138e5f36eed3d4bd47a00b694957488c31e6b990287f5b934df94e39a87cbf83621b34a06dec8fc9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9013d0c5adc617a97f9c30f2d07a982b
SHA1 e47ffdbd3398eee047fcf0a80dc1564dff9be88f
SHA256 0a9733b56f93d311f1593713777bae8be229a59fc6a3c2d30c29d5656a438ef3
SHA512 4e4b45c19515108cf09003bd276cb2020feca289c2475b7175f2bd299dacf3f70279f1013b2b984fbc33a9a6ff2844393e2af9c277f73f6f0038df0a1143762b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4f4441e71bef9f7dd893d3386a7ac981
SHA1 c3022b146b54749395c1ead39e9689255ac80263
SHA256 8f170ed50336d4ee0ea12b279708cd7244f5a2451c0738339b60867558138bcb
SHA512 510ca04220838713c0cce37990340a6268087248ad8b33c3f71d0ea8b6b69f04883236e33616dc14cffa0334438940214052d8cb004e9a7a96e90b754451e027

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c1b3e66165b6a4c65959acb4d3c7f1aa
SHA1 23399ee3953b9caa29e2525975568ac3cddeca78
SHA256 26b33c3ea35adf0a13fb2b2836a0688b9a415ffc8d48437a7febe1162c129197
SHA512 4c1802ce3a2288f2d42f446cd696ad6571a937369532043ddadfd6d211a0f5d015ffee8de7ffa8333605b8a1c74820b504e05abb4611cc5b78374b1e9fb079a0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e737bd05bbca1d99d5709e1504b66224
SHA1 7dc5bde5c4ac0e2055d32446e9c0f19d66b5a80f
SHA256 edf3abd45c142062c16d4fa803296829ad14f4afab508e3bd7ace8f030174a14
SHA512 23b42ce85a40b08cd9c916f53743e63390858a0abafc1425ec67a3e94acff2f8f7bb2962731e390e3a95b5ac9dc7a9a28730c16abecf96369e00070ef71b14d6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ad0da47f55a82b943665b04cd178eede
SHA1 71bf3b7165d21cf0ef8d090b0bc87119366e5002
SHA256 046da9d005b84097b4f955d8d848a957e69bfb9371be12ae1acaac20f88639ef
SHA512 52b990237acbc4a80f66493d89bf57b34f3563b059319535e3e510d624d92b76ce1a696dc68f5efc711e6bbb7749dec650d14d617c691ae464e082707391e37d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a71f36f659a3415d61a7da9cd37b08dc
SHA1 51ab26d9e302bd030362fcf51820af3d6dfef827
SHA256 e5810123077bd3f21831efb4ace00d1d44136167a439976905ff6e850a9cd505
SHA512 0b96761b982673e84144b49a4bd04e978c09fcc07bccf4f901aa19144495b3889e84be4ecfc14548e51bc4980c0a7cc6a78279cd43aa82d28aa01b8fd93f217e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 8bca77c3a1739d1ac85b58057c725d65
SHA1 eff15fa6450723585386d94899763d62261fd777
SHA256 6275da4b2b0e8f25d0e388bedabe2793e7d9f1366af08a21ddddb12874d172dd
SHA512 a5b6bf7a27961101175ebc223ccb3913685b1d3bec93e49eb122088a3daed9cbc8389d5ce92dcb9ea7c9f0a32568419f77c7fcee20118d034ec84cae7eb52d72

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0e14bdf73ecf3dfbe20b7034b7904ad8
SHA1 bcd16e2b848466b4dfe2cead7dd78acee13008bc
SHA256 3530d4e2dc6843088cbfc3a073f6070943b86294ff7c4855488f01f7567f40cc
SHA512 f5af7f5814585d8a6714182ee130b1f5ed0003cfaa75771dee68adfa5da7171597ffaa85dee9caa06a5597fb95e78d63e946a528942ec235eafd9562065d0aca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b29277cf01364095cc4e0076443b9cbc
SHA1 c9edf3a836f2966e4595766dcfe919889c4afaf6
SHA256 42c40e0d9c0a5df9110df286bb1d7f08cbf07e2bb5531dfc455bcd2c54f1b8aa
SHA512 b9518de616f67fffa8741860fd6ad33ea0ae2f2ec6e47ba365ce259b26cd10fa236ff76da0196b50c61a6a7791f61544cec47ed004d86949c3ef0b3d91ccf7ca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 dcf1d997b61f1ce6ab417ff19eae9a63
SHA1 69440f87709fcbc6f93ea9e2e732feb39ad6643c
SHA256 499281f0a761b4d08fa7756d394e512bb238fb80919d21302e914e207feb35e1
SHA512 3da22aaa6f627389d9389d47cfd76ab375de66b36851797ef22e20a69557cc151dd6e0e965c689c49f5f9997b88e8e8ef6c4e8fe65e9564aa41f3fac82235a58

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 731ee96a276e5a0020e2518b002a6793
SHA1 9eb73b8326cba36ed2e84636033520294101ccca
SHA256 e75e8018ad24e424a67f749cea1d51c7e1cf581e9c56826752fedb9da139f915
SHA512 8009203d63a581f3bdf1c04624656a9a012b5e9028623f111e26dff09c015bd50fd8845c25888f29734a8b06275fb742631c71e14a48f943848969786f7e3eeb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e7576a0f3c560db1bec684518825c742
SHA1 22605998fa4483dc3d5b662d778ddea38236e494
SHA256 a19bcd8dec25ef0f079adc0f6fce90aaee6fb3700e688e81872fb0b4f0a249de
SHA512 89f8bbf588f085158e23ad125e7e2068f1f6e2a48c9469eb56e8898714e06e2452850f04e8a9a182b3ef90681138ec40b2991c27bb29f3b97aa5e55e0915faba

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c639909026d57593dfe18d9b1e1cd8f8
SHA1 514a25bd7696613ffaf218ef80edf6d0942654a7
SHA256 6ffc21f2c338673f09a46eadfb8bece2da5f5cd8d47223bd404af2df4a995e95
SHA512 b154530035368b71f13b94e0dd7f98318c1478906d2e88b798619de802cd32833125ea4b51bd4bb8fd1cd8797400d53813c9c685a78eafa415a8ae9586d13e80

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fdcfd7f765c1ecbb5ef709fdbcad0657
SHA1 d6cff6fb32f7c82c70de8e92c490292b2ea2b8be
SHA256 c30e081a996c06140153d022641d1c077e4219524d2740db4ebf41208943efc0
SHA512 254bfbd9f365dee1a32100411db433462f8a155c9de11d8ae77f10a70f064a40ed57203c4b157b486f56a5d96d8dce2711bf5dc93e592d7c11a3599bd6c5767b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 69d1323e049702670f1eafccf42d9f08
SHA1 16f56fa484150e90b024ff2889162846f01eaead
SHA256 f75b8e7af5baee1e4b2e9ca0f45f3e36b196a6e7378657ee3c12134f172c205e
SHA512 c62c91ca5842e88433a54cb0d3a5f06439536802fa9e391fa9caef123161b778a9d19be4951252d23090b71af24adf0e90cc990c00c13c494b83bebf3afa830d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d45a8cad4b380e3b65d5b9de2cd20111
SHA1 b3861dcad01f2c081a962cab7de0284ffea406e0
SHA256 282e4e157fad322892fa501d31e7e04841a8251a1c415feb39d4fefa28840d6e
SHA512 edb3b354d17cbbc6633ba555ce1a30bf96df025d8376404a71721f51d6a6d966c8f76dbfbb95f83270c52ffe33e2e6950c738bead643db65b6455f911816e64e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7d5190293731c7418b64fd0cc242613d
SHA1 d7439523caaaeb3eaa064f5d19c1d8da7f4601f9
SHA256 53a9849e5d7b7390510ddc2520692af43fa8df0a74182a4434c455735fb69da2
SHA512 be6bf0ce4b7a940720ce3acf1194c55ba7d3d3b43fffd903dec72f1308942182d22ac7d2f62af38eecd309c6219019418f3530f555baefc262b438e402274e8c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b88b40e02552ac6abd028aafaa0ec8b1
SHA1 f3370a166f84a43546fd96f9a66aaf4e1585b19e
SHA256 f0839ab787b1f24e18ee595a5af3d524d2eeb01a820f796b03396e6c97c7718e
SHA512 59bc1c5f05f863fc6a1ed94906e8512b309906974bb18772385923e91788acfce22a3ab5d3ecbd5c7906aa1326c0250546e7f97cdec0a6d412fb67d2e86a32a8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e794d6ed3799c007172a44bb7bea5996
SHA1 d77d0ccc1e144bf1b8d3bf90b68f5358e3107c67
SHA256 b2e30ca654f957818567f435125792c32949d59b524e16781f4cee7a7b5b5bde
SHA512 1f36b1690c41202d6a639d44e074accab37725e9bd9d5239a0e78f28280b977acf5374a57bf6d60406d35010d9880bc1c3a9a49dd47329e671521bd788fab1c8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 bb8049e77564471a62b6ec022002229a
SHA1 972374f99b8233a05acfad68b60064f3250f4b1e
SHA256 267cc7eb7ff703805c0285028d43e677b3150f30db99991ead3328fc2176f5a0
SHA512 5abd157b3c3ce1e23bca69d17c715b1f8b159b25691d04a2eb9dcc09a1c1cd9b933868cde0e57785aaede6166e8e2b11d3756cd50bc2786e7757d9c211c2b840

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f49884ef14fb9754bc49d57872e73f5f
SHA1 9c83f10634225416bbfc1d0a2ad298e510c01c3b
SHA256 6b709d90008e50ae8fd2b15bd3a41061d206b29625effd19243752138d5da13a
SHA512 4fb05a6a0926993ed595f105ae643a9ec0851bfafb8ad8237e4da276a820045170e2753c281f9044de8206788b2acb67f530eebf011722efa45a42e06d8642d5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7d36492781b06391c9e6d94ae9d2e1f7
SHA1 24c5fce2506eedaa1707a32bff0c812e446eef0d
SHA256 fd2bd237b0046247f7724c747fe35108e0af8aa9b864c8a3d303e07737e9813d
SHA512 1c747a3e47f8357ea28af3b2f06062e11ee255990a1a71ac52969b87f9491c5745a802ea0e6449bf9e6261b1fb091645a0ba9ca0c785d7fbee5510a168d5effa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d7a89a43e54e8f62fe43ea8d71d16d90
SHA1 f16c75d91e892be08154fa21d8e2c7c03a73cfc3
SHA256 dbbf9b91f07c3a32c35c230a1344d6a50c214ef63915591dbe0911359643e097
SHA512 538ceba4045c6b071501cae7db65ea3843db10b5435f6836edda15d52b0c7cfc4f6eaa97168f1874d6657e17bbb4df9fd371973902c4166a8ee3669e6668fbfe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 70a7dbb2e6fd8c845dd8de9fac6f0a92
SHA1 43fe669af7ec960428358ec81ef5ff61e7c22a45
SHA256 682a04186ade2b2002d69f6e0799220e75c6c7c65a5b42d78d9cd20bd152fdea
SHA512 729cd8fbfa577d189ee48d915665eaf72c3aaef51bf382dd0bdbd81d892c4be5930e77b2d8bc2bf5f51a648eba7304b6fe67952ae03bbac5b04211b14fda1acf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 867ef4fe21f1fabedf1bbdc0f4585c21
SHA1 2975bf58bdac35790ca6530d8f6153dbe035d3f0
SHA256 0d7bee6a17e58117600a05302755c1c8f1d7e73c856aba5e5231641ebd20d4b1
SHA512 f7c7fa38d7aec3c2b48261a4a7a859fe388f6de741e46fc67d7cca96f331b562a952601bc6877fae864c75520356bcac122089f6828628bf283b8430dead846d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\75e113d1-a9bb-4aef-8310-2ba4e88791f8.tmp

MD5 cc2f44c41e186f1e72ffb32bca34d75d
SHA1 994945a95228ba0185e6c994fd193b19b2c16f83
SHA256 bbcd3d538da5abe3f0dc899847e49dcdfbec24b81cb90645e6616175b4af1aee
SHA512 35a8cdc2340745ce475509a8f8d8db30e1e9ce9c510374ea7e915a62879909d1a63a9a2cfb6ac7c1c6808550c3254e91a71d5e173afa28c031ca2757e23388ee

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e5450fb89847371eca748e45be47efec
SHA1 e8f02f8ee9f16d65d1989fd64b5e3c35978750c2
SHA256 0e372c09372f24af3776a9b255397ba110fe73748f20e963b2434389de8d9bfa
SHA512 e966d3fc63c7fe527a44bdf646891c602189e8a28d9f6ff5d16f2c2d394e9a3f5ff20562a1900a7a9b3d6a010edc007ad1a26e9e08954d52615391e9cd02cfee

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4a3fa4edb539f96bb0d0897689149e7b
SHA1 e691620b6e6a365778f857b957f4dc16b3802a58
SHA256 b20acb7131324009644e5882c4c4a1ca59b588c06b144cfd5c3e52b6094e068e
SHA512 10fe7dc3a6f7c5b6f2011c07b76ec7d725d233e79013be8a2cd3414348ec9b1cbb84e80dd2a3fbecf1dbd5b6d5c896ca55abf395b06d4cd0b320e5e832ae7b5b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 72eda998a28776e4898cc9da331aedd9
SHA1 caa5ff1432484ada77ebce2bd844257a7d98a472
SHA256 78f8dc38b1555a97afdd594888dae176cb67e16119082cd1547ecc5760266bac
SHA512 2528bd95195915cd2543ff9b55aae81b10190364a4752aeac9df8211e1ea04499b5c655ef0f878760431f4590c318edad90ea02ab1931ee27f8cda2004031ee4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2881b1f039a50d3b6222568c17ec306b
SHA1 d49668ff8fcf8b4fae68283562667d0b4a5a6f2b
SHA256 ade9633f5544e1d99af003ab1a42f76b980450bdfc328048053667508d5b1468
SHA512 8f7d23d90be6829a2c2765836c5494bd2ff7c0b6b626d94239cc47052af7957d997f8085fe866079237c011e9532226630f913052a09c8978244554e68d2dd30

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7baa12cc13f5963ddbf7cdaf043ee13d
SHA1 c0fc41fbdf89626f9588f4bc2fae97a3c64a61b1
SHA256 a128aa9848728f980d515f66b065f6c1e0acc90b8d21498869c92f18deb30858
SHA512 1a570e02104dac215304c5e826dc84f313ef02b4146b533e3f3752fd778738e7e1bc941415521a5720d282a8f2843acb3e30d5f7c03b5600c0edb185d2a519c7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2efbe639b3c9152a011918e1101ec48f
SHA1 eb4908f0b64d3b3326eb5f899909deabf4301936
SHA256 3b33c1fc510fe82118b4a22099689a0f7ff9bdd131b2858f86b1a335a0faacb8
SHA512 8815d981d65e5c8aa26c140ef5b47c582230697cca057aef6d5e29999777173058f086791b6f8fafa2325056674bdeb3ad11608f0f91c0d67b08c2cf25067f36

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6c52560382bd8622521e582c1263c32f
SHA1 3f2a33d805910a1a46e92252e1896768b3aa45db
SHA256 c4d9bff9a2c88b0627831f351f44b2b70d5c2fe302c10195a354ca8fabe87974
SHA512 fa2898cd2ef83cf918a76ce53ad190236f1b9ecc4ccc4fca8f688bb2877f109823e2713df0f443da664dca71797f78d9ac56c133e59302ac59ae8dd032e91c8e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4d8d8653f169ddbdc68ef09aba033144
SHA1 70f851ffce3950f5c6529a876bbfffa0c384feee
SHA256 95c94852011da6ac810cd98791706d345d620aa7e43fcfa6ec4356289053ce9f
SHA512 e4d5043b6d23b9ec81f0828c063eb6561c7baaebb5b8f2a8fd55d0f67de1cb5cee9f28d5d6037a1025c0e3be6b48d96c4daec94eba3f4e8976f3447492f5ef95

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9f91918c78b8af7a918f927519eec6f4
SHA1 36b49b75ad23b5ce94569be25aee2dc1b3916a71
SHA256 463721aa12e818017c614de45e63de7109f56ebc745664456f73868dfd4720be
SHA512 96be2d48cbbef4d055d4b7d0bc78f51defd1803f8f720047e47797c1fbcc477526e664c6925990852dc5834c03e1fe8b0a213efe2c8de7fb2d1b4ca5ba031af6