Malware Analysis Report

2025-01-18 21:46

Sample ID 240414-nxnm3sbc2v
Target Emotional Jensi.mp3
SHA256 192367011ec5a6699bea5a195d64492d0f822b18bc0a8a3d5a6dd216101130c8
Tags
adware discovery evasion persistence stealer trojan
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

192367011ec5a6699bea5a195d64492d0f822b18bc0a8a3d5a6dd216101130c8

Threat Level: Likely malicious

The file Emotional Jensi.mp3 was found to be: Likely malicious.

Malicious Activity Summary

adware discovery evasion persistence stealer trojan

Sets file execution options in registry

Modifies Installed Components in the registry

Downloads MZ/PE file

Loads dropped DLL

Registers COM server for autorun

Executes dropped EXE

Adds Run key to start application

Checks installed software on the system

Enumerates connected drives

Drops desktop.ini file(s)

Checks whether UAC is enabled

Installs/modifies Browser Helper Object

Checks system information in the registry

Drops file in System32 directory

Suspicious use of NtSetInformationThreadHideFromDebugger

Suspicious use of NtCreateThreadExHideFromDebugger

Drops file in Windows directory

Drops file in Program Files directory

Enumerates physical storage devices

Suspicious use of FindShellTrayWindow

Modifies registry class

Suspicious behavior: AddClipboardFormatListener

Suspicious behavior: EnumeratesProcesses

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of SetWindowsHookEx

Suspicious use of UnmapMainImage

Suspicious use of AdjustPrivilegeToken

Enumerates system info in registry

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of WriteProcessMemory

System policy modification

Checks processor information in registry

Suspicious use of SendNotifyMessage

Modifies data under HKEY_USERS

Modifies Internet Explorer settings

NTFS ADS

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-04-14 11:46

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-04-14 11:46

Reported

2024-04-14 12:32

Platform

win11-20240412-en

Max time kernel

2700s

Max time network

2706s

Command Line

"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "C:\Users\Admin\AppData\Local\Temp\Emotional Jensi.mp3"

Signatures

Downloads MZ/PE file

Modifies Installed Components in the registry

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\ = "Microsoft Edge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\StubPath = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\123.0.2420.97\\Installer\\setup.exe\" --configure-user-settings --verbose-logging --system-level --msedge --channel=stable" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Localized Name = "Microsoft Edge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\IsInstalled = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Version = "43,0,0,0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A

Sets file execution options in registry

persistence
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EU6589.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EU6589.tmp\MicrosoftEdgeUpdate.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\MicrosoftEdge_X64_123.0.2420.97.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{AAA7C0FF-9B0F-4461-B14D-2B09EA0CBA30}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU6589.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{74DA4EE6-E792-4EF1-A99D-FD4EC2BD2D9B}\BGAUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\MicrosoftEdge_X64_123.0.2420.97.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A

Registers COM server for autorun

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\123.0.2420.97\\notification_click_helper.exe\"" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32\ServerExecutable = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\123.0.2420.97\\notification_click_helper.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\123.0.2420.97\\EBWebView\\x64\\EmbeddedBrowserWebView.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\123.0.2420.97\\notification_helper.exe\"" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\123.0.2420.97\\BHO\\ie_to_edge_bho_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32\ThreadingModel = "Apartment" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\INPROCSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\123.0.2420.97\\PdfPreview\\PdfPreviewHandler.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\!BCILauncher = "\"C:\\Windows\\Temp\\MUBSTemp\\BCILauncher.EXE\" bgaupmi=64F7FF2CAD784AF8AF35BEB4DA4A3B08" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{74DA4EE6-E792-4EF1-A99D-FD4EC2BD2D9B}\BGAUpdate.exe N/A

Checks installed software on the system

discovery

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Admin\Videos\Captures\desktop.ini C:\Windows\system32\svchost.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\T: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\P: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\L: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\N: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\unregmp2.exe N/A
File opened (read-only) \??\G: C:\Windows\system32\unregmp2.exe N/A

Installs/modifies Browser Helper Object

stealer adware
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A

Checks system information in the registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EU6589.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EU6589.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A

Suspicious use of NtCreateThreadExHideFromDebugger

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A

Suspicious use of NtSetInformationThreadHideFromDebugger

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\GraphQL\GraphQL\jsutils\invariant.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\content\textures\ui\Controls\DesignSystem\ButtonB.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\textures\MaterialGenerator\Materials\WoodPlanks.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Lua\AvatarCompatibilityPreviewer\Dark\Large\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Lua\FileSync\Dark\Standard\Import.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\scripts\CoreScripts\CoreScripts\SocialContextToast.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\GraphQL\GraphQL\utilities\__tests__\coerceInputValue.spec.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\avatar\compositing\CompositExtraSlot4.mesh C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Shared\WidgetIcons\Light\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\scripts\CoreScripts\Modules\Common\PerfUtils.spec.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\123.0.2420.97\Trust Protection Lists\Mu\Advertising C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\content\textures\ui\Controls\DefaultController\ButtonR1.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\ExtraContent\textures\ui\LuaApp\icons\ic-more-message.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\textures\ui\LuaChat\graphic\gr-game-border-60x60.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\scripts\CoreScripts\Modules\DevConsole\Components\Network\NetworkSummary.spec.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\scripts\CoreScripts\Modules\PurchasePrompt\Utils\getPaymentPlatform.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\scripts\CoreScripts\Modules\Common\renderWithCoreScriptsStyleProvider.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\scripts\CoreScripts\Modules\PurchasePrompt\Actions\RequestProductPurchase.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\EditProfile\Analytics.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\content\textures\ui\PlayerList\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\Qml\QtQuick\Controls.2\designer\images\stackview-icon.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\textures\DeveloperFramework\checkbox_indeterminate_light.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\textures\DeveloperFramework\PageNavigation\button_control_end.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Lua\AvatarCompatibilityPreviewer\Light\Standard\rate_feedback.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\UGCValidation\UGCValidation\util\Types.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\InvisibleMode\Dev\Style.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\ExtraContent\textures\ui\LuaChat\icons\[email protected] C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Lua\AvatarCompatibilityPreviewer\Dark\Large\star.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Lua\Notifications\Light\Large\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\Promise340\lock.toml C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\roblox_lua-roact-policy-provider\lua-roact-policy-provider\getPolicyImplementations\fromStaticSource.spec.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\RoduxContacts-d3dec4b0-3cde6d38\lock.toml C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\PlatformContent\pc\textures\diamondplate\normaldetail.dds C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\Qml\QtQuick\Controls.2\designer\images\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Shared\WidgetIcons\Dark\Large\BuildRig.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\scripts\CoreScripts\Modules\BlockingUtility.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\JestUtil-edcba0e9-2.4.1\JestUtil\isPromise.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\AudioListener.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\Thumbnailing\Thumbnailing\ColorUtility.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\ApolloPresence\Dev\JestConfigs.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\GameTile\Dev\PlayabilityRodux.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\textures\advCursor-white.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\textures\ui\NetworkPause\no [email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\textures\ui\TopBar\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Shared\Navigation\Light\Large\ZoomIn.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\scripts\CoreScripts\Modules\DevConsole\Reducers\DevConsoleReducer.spec.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\App\Loading\Enum\RetrievalStatus.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\GraphQlShared\GraphQlShared\default.rbxp C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Shared\DraggerTools\Dark\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Shared\InsertableObjects\Light\Large\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\JestDiff-edcba0e9-2.4.1\JestDiff\JoinAlignedDiffs.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\JestSnapshot-edcba0e9-3.5.0\JestSnapshot\printSnapshot.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\123.0.2420.97\Trust Protection Lists\Mu\Entities C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\content\textures\ui\Emotes\EmotesRadialIcon.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\GameDetailRodux\GameIconRodux.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\NotificationsCommon\t.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Shared\Navigation\Light\Standard\ScrollbarUp.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\scripts\CoreScripts\Modules\AvatarEditorPrompts\Thunks\PerformRenameOutfit.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\scripts\CoreScripts\Modules\VR\Controllers\IndexController.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\JestDiff-edcba0e9-3.5.0\ChalkLua.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\ExtraContent\textures\ui\LuaApp\category\ic-popular.png C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe N/A

Enumerates physical storage devices

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge\WarnOnOpen = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\123.0.2420.97\\BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main\EnterpriseMode C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\EnterpriseMode\MSEdgePath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge\WarnOnOpen = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations\C:\Program Files (x86)\Microsoft\Edge\Application = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\123.0.2420.97\\BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "1" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{69E11C9D-4974-41A2-B067-9F26953CF52A}\InprocHandler32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3}\NumMethods\ = "4" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\TypeLib\{C9C2B807-7731-4F34-81B7-44FF7779522B} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\ = "IJobObserver" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\NumMethods\ = "5" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E421557C-0628-43FB-BF2B-7C9F8A4D067C}\Elevation C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\NumMethods\ = "9" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{77857D02-7A25-4B67-9266-3E122A8F39E4}\Elevation\IconReference = "@C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\msedgeupdate.dll,-1004" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\ie_to_edge_bho.IEToEdgeBHO.1\CLSID\ = "{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{492E1C30-A1A2-4695-87C8-7A8CAD6F936F}\ = "Microsoft Edge Update Broker Class Factory" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\NumMethods\ = "24" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MSEdgeHTM\Application\ApplicationCompany = "Microsoft Corporation" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusMachine.1.0\ = "Microsoft Edge Update Broker Class Factory" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF}\NumMethods\ = "23" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A6556DFF-AB15-4DC3-A890-AB54120BEAEC}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7B3B7A69-7D88-4847-A6BC-90E246A41F69}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1B9063E4-3882-485E-8797-F28A0240782F}\NumMethods\ = "4" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ = "IProgressWndEvents" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\NumMethods\ = "16" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FF419FF9-90BE-4D9F-B410-A789F90E5A7C} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A6B716CB-028B-404D-B72C-50E153DD68DA} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ = "IProgressWndEvents" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\123.0.2420.97\\PdfPreview\\PdfPreviewHandler.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\ = "IAppBundle" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FF419FF9-90BE-4D9F-B410-A789F90E5A7C}\ = "Microsoft Edge Update Legacy On Demand" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusSvc\CLSID\ = "{9F3F5F5D-721A-4B19-9B5D-69F664C1A591}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E}\NumMethods\ = "41" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\CLASSES\MIME\Database\Content Type\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3A49F783-1C7D-4D35-8F63-5C1C206B9B6E}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C20433B3-0D4B-49F6-9B6C-6EE0FAE07837}\ = "ICoCreateAsync" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1B9063E4-3882-485E-8797-F28A0240782F} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\123.0.2420.97\\EBWebView\\x64\\EmbeddedBrowserWebView.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A6B716CB-028B-404D-B72C-50E153DD68DA}\AppID = "{A6B716CB-028B-404D-B72C-50E153DD68DA}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\ = "PSFactoryBuffer" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{450CF5FF-95C4-4679-BECA-22680389ECB9}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FCBE96C-1697-43AF-9140-2897C7C69767}\AppID = "{1FCBE96C-1697-43AF-9140-2897C7C69767}" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MSEdgeHTM\Application\ApplicationName = "Microsoft Edge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 282943.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 238851.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\RobloxStudioInstaller.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU6589.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU6589.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Windows\system32\unregmp2.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\system32\unregmp2.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\Temp\EU6589.tmp\MicrosoftEdgeUpdate.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Token: 33 N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe N/A

Suspicious use of UnmapMainImage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2500 wrote to memory of 3080 N/A C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Program Files (x86)\Windows Media Player\setup_wm.exe
PID 2500 wrote to memory of 3080 N/A C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Program Files (x86)\Windows Media Player\setup_wm.exe
PID 2500 wrote to memory of 3080 N/A C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Program Files (x86)\Windows Media Player\setup_wm.exe
PID 2500 wrote to memory of 1484 N/A C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Windows\SysWOW64\unregmp2.exe
PID 2500 wrote to memory of 1484 N/A C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Windows\SysWOW64\unregmp2.exe
PID 2500 wrote to memory of 1484 N/A C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Windows\SysWOW64\unregmp2.exe
PID 1484 wrote to memory of 4800 N/A C:\Windows\SysWOW64\unregmp2.exe C:\Windows\system32\unregmp2.exe
PID 1484 wrote to memory of 4800 N/A C:\Windows\SysWOW64\unregmp2.exe C:\Windows\system32\unregmp2.exe
PID 4024 wrote to memory of 696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 696 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1576 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1836 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 1836 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 2968 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 2968 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 2968 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 2968 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 2968 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 2968 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 2968 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 2968 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 2968 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 2968 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 2968 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4024 wrote to memory of 2968 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

System policy modification

evasion
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe N/A

Processes

C:\Program Files (x86)\Windows Media Player\wmplayer.exe

"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "C:\Users\Admin\AppData\Local\Temp\Emotional Jensi.mp3"

C:\Program Files (x86)\Windows Media Player\setup_wm.exe

"C:\Program Files (x86)\Windows Media Player\setup_wm.exe" /RunOnce:"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "C:\Users\Admin\AppData\Local\Temp\Emotional Jensi.mp3"

C:\Windows\SysWOW64\unregmp2.exe

"C:\Windows\System32\unregmp2.exe" /AsyncFirstLogon

C:\Windows\system32\unregmp2.exe

"C:\Windows\SysNative\unregmp2.exe" /AsyncFirstLogon /REENTRANT

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa7e773cb8,0x7ffa7e773cc8,0x7ffa7e773cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1868 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2548 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1812 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4848 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3368 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5444 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4828 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5292 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=3368 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4584 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3856 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5280 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3368 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5092 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5896 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6064 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6092 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5728 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5600 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1924 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5876 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4584 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6680 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6832 /prefetch:8

C:\Users\Admin\Downloads\RobloxStudioInstaller.exe

"C:\Users\Admin\Downloads\RobloxStudioInstaller.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=5860 /prefetch:2

C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MicrosoftEdgeWebview2Setup.exe /silent /install

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MDBEQkE2NTctNERDRC00Q0U2LUE3QkYtNEI5NjczNDNFMENDfSIgdXNlcmlkPSJ7MkM1MUIyNUEtRDQxMC00ODNFLUJCMzUtQzY5MkIxMjVDNEUxfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins2ODBGNDA1Qy05RThDLTRCOUUtOTNGOC1DRTAyMUNENUJCMjd9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE0My41NyIgbmV4dHZlcnNpb249IjEuMy4xNzEuMzkiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjY0NDk0NDY3NTUiIGluc3RhbGxfdGltZV9tcz0iMTQxNiIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{00DBA657-4DCD-4CE6-A7BF-4B967343E0CC}" /silent

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MDBEQkE2NTctNERDRC00Q0U2LUE3QkYtNEI5NjczNDNFMENDfSIgdXNlcmlkPSJ7MkM1MUIyNUEtRDQxMC00ODNFLUJCMzUtQzY5MkIxMjVDNEUxfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9InswQzIwMjU0OC1GQjQ0LTQwNTItOEIxNS0wNjFCMTMxRUI4RkJ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtyNDUydDErazJUZ3EvSFh6anZGTkJSaG9wQldSOXNialh4cWVVREg5dVgwPSZxdW90OyIvPjxhcHAgYXBwaWQ9Ins4QTY5RDM0NS1ENTY0LTQ2M2MtQUZGMS1BNjlEOUU1MzBGOTZ9IiB2ZXJzaW9uPSIxMTAuMC41NDgxLjEwNCIgbmV4dHZlcnNpb249IjExMC4wLjU0ODEuMTA0IiBsYW5nPSJlbiIgYnJhbmQ9IkdHTFMiIGNsaWVudD0iIj48ZXZlbnQgZXZlbnR0eXBlPSIzMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iNSIgc3lzdGVtX3VwdGltZV90aWNrcz0iNjQ1NDk2NjUzOCIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\MicrosoftEdge_X64_123.0.2420.97.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\MicrosoftEdge_X64_123.0.2420.97.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\MicrosoftEdge_X64_123.0.2420.97.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=123.0.6312.123 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=123.0.2420.97 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x7ff7cf44baf8,0x7ff7cf44bb04,0x7ff7cf44bb10

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MDBEQkE2NTctNERDRC00Q0U2LUE3QkYtNEI5NjczNDNFMENDfSIgdXNlcmlkPSJ7MkM1MUIyNUEtRDQxMC00ODNFLUJCMzUtQzY5MkIxMjVDNEUxfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9InszRkVCRjNBQy04RENCLTQyQjAtOEFCNi01REFCN0FEQjVDRTV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtWUFFvUDFGK2ZxMTV3UnpoMWtQTDRQTXBXaDhPUk1CNWl6dnJPQy9jaGpRPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGMzAxNzIyNi1GRTJBLTQyOTUtOEJERi0wMEMzQTlBN0U0QzV9IiB2ZXJzaW9uPSIiIG5leHR2ZXJzaW9uPSIxMjMuMC4yNDIwLjk3IiBsYW5nPSIiIGJyYW5kPSIiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSI-PHVwZGF0ZWNoZWNrLz48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI2NDYzNDU3MzI1IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iNSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iNjQ2MzU1NjUzOSIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxldmVudCBldmVudHR5cGU9IjEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjY2ODQ4NDY5NDQiIHNvdXJjZV91cmxfaW5kZXg9IjAiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiIGRvd25sb2FkZXI9ImJpdHMiIHVybD0iaHR0cDovL21zZWRnZS5mLnRsdS5kbC5kZWxpdmVyeS5tcC5taWNyb3NvZnQuY29tL2ZpbGVzdHJlYW1pbmdzZXJ2aWNlL2ZpbGVzLzFjMWZjOGZlLWYyNTAtNGEzYS05MWVjLTlmOTBlMzFiODI2NT9QMT0xNzEzNzAwMjI1JmFtcDtQMj00MDQmYW1wO1AzPTImYW1wO1A0PW0lMmZqNWV0TUphU0hJJTJmWW1YdXZmY25rN01Jb2czdE80NGFmeUpOUHFzWWk3WDU4STNjNHplYTYyNFJlaVdUQVh5T1VVeTduSXlUbWl0WndvVCUyYnY4cjNRJTNkJTNkIiBzZXJ2ZXJfaXBfaGludD0iIiBjZG5fY2lkPSItMSIgY2RuX2NjYz0iIiBjZG5fbXNlZGdlX3JlZj0iIiBjZG5fYXp1cmVfcmVmX29yaWdpbl9zaGllbGQ9IiIgY2RuX2NhY2hlPSIiIGNkbl9wM3A9IiIgZG93bmxvYWRlZD0iMTcyMDc2MDg4IiB0b3RhbD0iMTcyMDc2MDg4IiBkb3dubG9hZF90aW1lX21zPSIxNDAxOCIvPjxldmVudCBldmVudHR5cGU9IjEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjY2ODU1MjcyNjMiIHNvdXJjZV91cmxfaW5kZXg9IjAiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSI2IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI2NzA2NjU3MjgzIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMTk2NzU3IiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI3NDM0Njg2OTgzIiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiB1cGRhdGVfY2hlY2tfdGltZV9tcz0iMzQ1IiBkb3dubG9hZF90aW1lX21zPSIyMjE4NCIgZG93bmxvYWRlZD0iMTcyMDc2MDg4IiB0b3RhbD0iMTcyMDc2MDg4IiBwYWNrYWdlX2NhY2hlX3Jlc3VsdD0iMCIgaW5zdGFsbF90aW1lX21zPSI3Mjc4NSIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe" -startEvent www.roblox.com/robloxQTStudioStartedEvent -firstLaunch

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 620, 0, 6200463" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=2704.2880.9271086520913292915

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=123.0.6312.123 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=123.0.2420.97 --initial-client-data=0x17c,0x180,0x184,0x158,0x18c,0x7ffa652c4e48,0x7ffa652c4e54,0x7ffa652c4e60

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 620, 0, 6200463" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1724,i,6391270752603661407,16229802140066291706,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=1744 /prefetch:2

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 620, 0, 6200463" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=1824,i,6391270752603661407,16229802140066291706,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:3

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 620, 0, 6200463" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=2112,i,6391270752603661407,16229802140066291706,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:8

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 620, 0, 6200463" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3296,i,6391270752603661407,16229802140066291706,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3324 /prefetch:1

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 620, 0, 6200463" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3644,i,6391270752603661407,16229802140066291706,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=4004 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 620, 0, 6200463" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=4088,i,6391270752603661407,16229802140066291706,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=4072 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004C4 0x00000000000004A8

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6352 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6980 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6284 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{AAA7C0FF-9B0F-4461-B14D-2B09EA0CBA30}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{AAA7C0FF-9B0F-4461-B14D-2B09EA0CBA30}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe" /update /sessionid "{D1BBA147-1F3E-4728-93D6-4CC2FEEA28A1}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RDFCQkExNDctMUYzRS00NzI4LTkzRDYtNENDMkZFRUEyOEExfSIgdXNlcmlkPSJ7MkM1MUIyNUEtRDQxMC00ODNFLUJCMzUtQzY5MkIxMjVDNEUxfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9Ins3NjFERjcwNS05NzE2LTQ3N0UtQjA2MC01MDU3NzVCNzJFMEZ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtyNDUydDErazJUZ3EvSFh6anZGTkJSaG9wQldSOXNialh4cWVVREg5dVgwPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIxLjMuMTcxLjM5IiBuZXh0dmVyc2lvbj0iMS4zLjE4NS4yOSIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGluc3RhbGxhZ2U9IjAiPjx1cGRhdGVjaGVjay8-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-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-PHBpbmcgcj0iLTEiIHJkPSItMSIvPjwvYXBwPjxhcHAgYXBwaWQ9Ins1NkVCMThGOC1CMDA4LTRDQkQtQjZEMi04Qzk3RkU3RTkwNjJ9IiB2ZXJzaW9uPSI5MC4wLjgxOC42NiIgbmV4dHZlcnNpb249IiIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGV4cGVyaW1lbnRzPSJjb25zZW50PWZhbHNlIiBsYXN0X2xhdW5jaF90aW1lPSIxMzM1NzU2ODg3NjU1NzY1NDAiPjx1cGRhdGVjaGVjay8-PHBpbmcgYWN0aXZlPSIxIiBhPSItMSIgcj0iLTEiIGFkPSItMSIgcmQ9Ii0xIi8-PC9hcHA-PGFwcCBhcHBpZD0ie0YzMDE3MjI2LUZFMkEtNDI5NS04QkRGLTAwQzNBOUE3RTRDNX0iIHZlcnNpb249IjEyMy4wLjI0MjAuOTciIG5leHR2ZXJzaW9uPSIiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSIgdXBkYXRlX2NvdW50PSIxIiBsYXN0X2xhdW5jaF90aW1lPSIxMzM1NzU2OTEzNDM5ODg1NDAiPjx1cGRhdGVjaGVjay8-PHBpbmcgYWN0aXZlPSIxIiBhPSItMSIgcj0iLTEiIGFkPSItMSIgcmQ9Ii0xIiBwaW5nX2ZyZXNobmVzcz0iezBFRDNCQzJBLTEyNkYtNDEzMy05MkYwLUJEQjhCQzkzQTcwNn0iLz48L2FwcD48L3JlcXVlc3Q-

C:\Program Files (x86)\Microsoft\Temp\EU6589.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EU6589.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{D1BBA147-1F3E-4728-93D6-4CC2FEEA28A1}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-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-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4580 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7132 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7136 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7KzBqVW1ZZUt0WkFGNUMzZzIycEJCNUYwUnlkdGYxU0g3Ym53c25vVStmaz0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7OEE2OUQzNDUtRDU2NC00NjNjLUFGRjEtQTY5RDlFNTMwRjk2fSIgdmVyc2lvbj0iMTEwLjAuNTQ4MS4xMDQiIG5leHR2ZXJzaW9uPSIiIGxhbmc9ImVuIiBicmFuZD0iR0dMUyIgY2xpZW50PSIiIGluc3RhbGxhZ2U9IjEiIGluc3RhbGxkYXRldGltZT0iMTcxMjkzMjg1NCIgb29iZV9pbnN0YWxsX3RpbWU9IjEzMzU3NDMwMzkxMTYxNTgxNiI-PGV2ZW50IGV2ZW50dHlwZT0iMzEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjIxMTQwNjgiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEzMjY4ODAwOTA2Ii8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{74DA4EE6-E792-4EF1-A99D-FD4EC2BD2D9B}\BGAUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{74DA4EE6-E792-4EF1-A99D-FD4EC2BD2D9B}\BGAUpdate.exe" --edgeupdate-client --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODUuMjkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NjBEM0VCN0YtQUQwNC00MkRDLUIwRTEtQzE2MzgxMzM0QzE4fSIgdXNlcmlkPSJ7MkM1MUIyNUEtRDQxMC00ODNFLUJCMzUtQzY5MkIxMjVDNEUxfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9Ins5REJFRjFCMi04QzM1LTRFOEYtQTQzQS1DQjY2RTM3NjQzMzV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiIGlzX2luX2xvY2tkb3duX21vZGU9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-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-PGV2ZW50IGV2ZW50dHlwZT0iNSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iMTMzODQzNTY4OTQiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIxIiBldmVudHJlc3VsdD0iMCIgZXJyb3Jjb2RlPSItMjE0NzAyMzgzOCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iMTM4MTg3NjEwNDciIHNvdXJjZV91cmxfaW5kZXg9IjAiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiIGRvd25sb2FkZXI9ImRvIiB1cmw9Imh0dHA6Ly9tc2VkZ2UuYi50bHUuZGwuZGVsaXZlcnkubXAubWljcm9zb2Z0LmNvbS9maWxlc3RyZWFtaW5nc2VydmljZS9maWxlcy9kYTAxN2RlYS0zNGY4LTRhOWYtYTNmZC0yN2YxYjk1Mzg2MDA_UDE9MTcxMzcwMDkxNiZhbXA7UDI9NDA0JmFtcDtQMz0yJmFtcDtQND1hMXlOeDdJTEElMmY3ZHZkc1RKUWolMmZQd3lJTkRpcGtYWE93SXowazlIUnFFMm0zd0hVSDdGQ1YzcWxPT3dyWUFWY0g2NTFUTCUyZmxSbk9zaSUyZng3ZzlkJTJiUlElM2QlM2QiIHNlcnZlcl9pcF9oaW50PSIiIGNkbl9jaWQ9Ii0xIiBjZG5fY2NjPSIiIGNkbl9tc2VkZ2VfcmVmPSIiIGNkbl9henVyZV9yZWZfb3JpZ2luX3NoaWVsZD0iIiBjZG5fY2FjaGU9IiIgY2RuX3AzcD0iIiBkb3dubG9hZGVkPSIwIiB0b3RhbD0iMCIgZG93bmxvYWRfdGltZV9tcz0iMzUyIi8-PGV2ZW50IGV2ZW50dHlwZT0iMSIgZXZlbnRyZXN1bHQ9IjAiIGVycm9yY29kZT0iLTIxNDUzODYzODUiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEzODE4NzgxMjY1IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiBkb3dubG9hZGVyPSJiaXRzIiB1cmw9Imh0dHA6Ly9tc2VkZ2UuYi50bHUuZGwuZGVsaXZlcnkubXAubWljcm9zb2Z0LmNvbS9maWxlc3RyZWFtaW5nc2VydmljZS9maWxlcy9kYTAxN2RlYS0zNGY4LTRhOWYtYTNmZC0yN2YxYjk1Mzg2MDA_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_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-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-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\MicrosoftEdge_X64_123.0.2420.97.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\MicrosoftEdge_X64_123.0.2420.97.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6296 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7076 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\MicrosoftEdge_X64_123.0.2420.97.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=123.0.6312.123 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=123.0.2420.97 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff75bdfbaf8,0x7ff75bdfbb04,0x7ff75bdfbb10

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7136 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6984 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6224 /prefetch:1

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k AppReadiness -p -s AppReadiness

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe" --msedge --channel=stable --system-level --verbose-logging --create-shortcuts=3 --install-level=1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=123.0.6312.123 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=123.0.2420.97 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff75bdfbaf8,0x7ff75bdfbb04,0x7ff75bdfbb10

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7036 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5136 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7020 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODUuMjkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RUJERTY5MUItNkNGQi00M0JELThGMjgtQjU4MzY0ODExOUMzfSIgdXNlcmlkPSJ7MkM1MUIyNUEtRDQxMC00ODNFLUJCMzUtQzY5MkIxMjVDNEUxfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9Ins3MDBFRkEwRS1ERTY4LTQ3NkItQkQ1OS0yQzhCQkQ1RTJBQzR9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiIGlzX2luX2xvY2tkb3duX21vZGU9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-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-PGV2ZW50IGV2ZW50dHlwZT0iMTIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjE0NDcwOTcwMTAwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTMiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjE0NDcxMTYwNjcxIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTQiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjE0OTA3NzYwMjk2IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjE1MDM2MzEyMjE2IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMyIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMTk2NzU3IiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIxOTEzMzI2NTI4NyIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIgdXBkYXRlX2NoZWNrX3RpbWVfbXM9IjI1NjgiIGRvd25sb2FkZWQ9IjE3MjA3NjA4OCIgdG90YWw9IjE3MjA3NjA4OCIgcGFja2FnZV9jYWNoZV9yZXN1bHQ9IjIiIGluc3RhbGxfdGltZV9tcz0iNDA5NjgyIi8-PHBpbmcgYWN0aXZlPSIxIiBhZD0iNjMxMyIgcmQ9IjYzMTMiIHBpbmdfZnJlc2huZXNzPSJ7Mzg3Q0Q5NTctNTNFOC00MjQ5LUJCRUYtQkM4NDQ2NjIzOTk0fSIvPjwvYXBwPjxhcHAgYXBwaWQ9IntGMzAxNzIyNi1GRTJBLTQyOTUtOEJERi0wMEMzQTlBN0U0QzV9IiB2ZXJzaW9uPSIxMjMuMC4yNDIwLjk3IiBuZXh0dmVyc2lvbj0iIiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9ImNvbnNlbnQ9ZmFsc2UiIGNvaG9ydD0icnJmQDAuMDciIHVwZGF0ZV9jb3VudD0iMSIgbGFzdF9sYXVuY2hfY291bnQ9IjEiIGxhc3RfbGF1bmNoX3RpbWU9IjEzMzU3NTY5MTM0Mzk4ODU0MCI-PHVwZGF0ZWNoZWNrLz48cGluZyBhY3RpdmU9IjAiIHJkPSI2MzEzIiBwaW5nX2ZyZXNobmVzcz0ie0IzMUFEQzk0LUMzRDQtNDE1Ny1BODBFLTQ3MzBBQTAyQUE1OH0iLz48L2FwcD48L3JlcXVlc3Q-

C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe

"C:/Program Files (x86)/Roblox/Versions/version-e2bc56a1e4374ca0/RobloxStudioBeta.exe" -task EditPlace -placeId 17144245639 -universeId 5872555972 -userid 4957272940 -parentPid 2704 -parentSessionGuid FC6FB4D5-E218-4688-B7EF-95E4F7222DE2

C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_2.50.24002.0_x64__8wekyb3d8bbwe\GameBar.exe

"C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_2.50.24002.0_x64__8wekyb3d8bbwe\GameBar.exe" -ServerName:App.AppXbdkk0yrkwpcgeaem8zk81k8py1eaahny.mca

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe

"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4928 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6264 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2776 /prefetch:1

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4976 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6272 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7120 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1652 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3572 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6568 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4872 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6512 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=media.mojom.MediaService --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --service-sandbox-type=mf_cdm --mojo-platform-channel-handle=5020 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8128 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7972 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7244 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7260 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7748 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7432 /prefetch:8

C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe

"C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe"

C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe" -app -isInstallerLaunch

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /c

Network

Country Destination Domain Proto
GB 104.86.110.90:443 tcp
GB 2.18.66.179:443 tcp
GB 2.18.66.179:443 tcp
GB 2.18.66.179:443 tcp
GB 2.18.66.179:443 tcp
GB 2.18.66.179:443 tcp
GB 2.18.66.179:443 tcp
US 52.168.117.169:443 browser.pipe.aria.microsoft.com tcp
US 8.8.8.8:53 240.221.184.93.in-addr.arpa udp
NL 23.62.61.185:443 www.bing.com tcp
NL 23.62.61.185:443 www.bing.com tcp
N/A 224.0.0.251:5353 udp
NL 23.62.61.106:443 r.bing.com tcp
NL 23.62.61.106:443 r.bing.com tcp
NL 23.62.61.192:443 www.bing.com tcp
NL 23.62.61.192:443 www.bing.com tcp
IE 20.190.159.0:443 login.microsoftonline.com tcp
US 13.107.5.80:443 services.bingapis.com tcp
US 13.107.5.80:443 services.bingapis.com tcp
FR 128.116.122.4:443 www.roblox.com tcp
FR 128.116.122.4:443 www.roblox.com tcp
US 8.8.8.8:53 js.rbxcdn.com udp
BE 2.17.107.145:443 css.rbxcdn.com tcp
BE 2.17.107.145:443 css.rbxcdn.com tcp
BE 2.17.107.145:443 css.rbxcdn.com tcp
BE 2.17.107.145:443 css.rbxcdn.com tcp
BE 2.17.107.145:443 css.rbxcdn.com tcp
BE 2.17.107.145:443 css.rbxcdn.com tcp
NL 18.239.18.116:443 static.rbxcdn.com tcp
NL 18.65.39.82:443 js.rbxcdn.com tcp
NL 18.65.39.82:443 js.rbxcdn.com tcp
NL 18.65.39.82:443 js.rbxcdn.com tcp
NL 18.65.39.82:443 js.rbxcdn.com tcp
NL 18.65.39.82:443 js.rbxcdn.com tcp
NL 18.65.39.82:443 js.rbxcdn.com tcp
US 8.8.8.8:53 116.18.239.18.in-addr.arpa udp
US 128.116.99.4:443 roblox.com tcp
US 172.64.154.86:443 roblox-api.arkoselabs.com tcp
FR 128.116.122.3:443 client-telemetry.roblox.com tcp
US 8.8.8.8:53 3.122.116.128.in-addr.arpa udp
US 8.8.8.8:53 apis.roblox.com udp
FR 128.116.122.4:443 apis.roblox.com tcp
FR 128.116.122.4:443 apis.roblox.com tcp
BE 23.14.90.88:443 apis.rbxcdn.com tcp
BE 2.17.107.145:443 css.rbxcdn.com tcp
FR 128.116.122.4:443 apis.roblox.com tcp
FR 128.116.122.4:443 apis.roblox.com tcp
BE 23.14.90.88:443 apis.rbxcdn.com tcp
BE 2.17.107.145:443 css.rbxcdn.com tcp
NL 18.239.94.33:443 images.rbxcdn.com tcp
NL 18.239.94.33:443 images.rbxcdn.com tcp
NL 18.239.94.33:443 images.rbxcdn.com tcp
NL 18.239.94.33:443 images.rbxcdn.com tcp
NL 18.239.94.33:443 images.rbxcdn.com tcp
NL 18.239.94.33:443 images.rbxcdn.com tcp
NL 18.239.94.66:443 create.roblox.com tcp
NL 18.239.94.66:443 create.roblox.com tcp
US 8.8.8.8:53 8.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 users.roblox.com udp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
US 34.120.195.249:443 o293668.ingest.sentry.io tcp
NL 18.239.94.124:443 fonts.roblox.com tcp
NL 18.239.94.124:443 fonts.roblox.com tcp
US 8.8.8.8:53 238.179.250.142.in-addr.arpa udp
GB 23.73.139.64:443 tr.rbxcdn.com tcp
GB 23.73.139.64:443 tr.rbxcdn.com tcp
GB 23.73.139.64:443 tr.rbxcdn.com tcp
GB 23.73.139.64:443 tr.rbxcdn.com tcp
GB 23.73.139.64:443 tr.rbxcdn.com tcp
GB 23.73.139.64:443 tr.rbxcdn.com tcp
NL 18.239.94.116:443 setup.rbxcdn.com tcp
NL 18.239.94.116:443 setup.rbxcdn.com tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
NL 18.239.94.116:443 setup.rbxcdn.com tcp
NL 18.239.94.116:443 setup.rbxcdn.com tcp
NL 18.239.94.116:443 setup.rbxcdn.com tcp
N/A 127.0.0.1:50666 tcp
N/A 127.0.0.1:50670 tcp
N/A 127.0.0.1:50673 tcp
N/A 127.0.0.1:50676 tcp
IE 20.166.2.191:443 msedge.api.cdp.microsoft.com tcp
GB 87.248.205.0:80 msedge.f.tlu.dl.delivery.mp.microsoft.com tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
N/A 127.0.0.1:51003 tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
FR 128.116.122.4:443 thumbnails.roblox.com tcp
N/A 127.0.0.1:51015 tcp
N/A 127.0.0.1:51023 tcp
N/A 127.0.0.1:51026 tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
FR 128.116.122.4:443 thumbnails.roblox.com tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
N/A 127.0.0.1:51030 tcp
N/A 127.0.0.1:51034 tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google udp
US 8.8.8.8:443 dns.google udp
FR 128.116.122.4:443 thumbnails.roblox.com tcp
FR 128.116.122.4:443 thumbnails.roblox.com tcp
NL 18.239.83.69:443 tcp
NL 18.239.83.69:443 tcp
NL 18.239.83.69:443 tcp
NL 18.239.83.69:443 tcp
NL 18.239.83.69:443 tcp
NL 18.239.83.69:443 tcp
BE 2.17.107.35:443 tcp
BE 2.17.107.35:443 tcp
BE 2.17.107.35:443 tcp
BE 2.17.107.35:443 tcp
BE 2.17.107.35:443 tcp
BE 2.17.107.35:443 tcp
BE 2.17.107.241:443 tcp
NL 18.239.18.72:443 static.rbxcdn.com tcp
NL 18.239.18.72:443 static.rbxcdn.com tcp
NL 18.239.83.69:443 tcp
GB 128.116.119.4:443 tcp
US 172.64.154.86:443 roblox-api.arkoselabs.com tcp
FR 128.116.122.4:443 thumbnails.roblox.com tcp
US 172.64.154.86:443 roblox-api.arkoselabs.com udp
BE 23.14.90.88:443 apis.rbxcdn.com tcp
US 8.8.8.8:53 4.119.116.128.in-addr.arpa udp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
FR 128.116.122.4:443 thumbnails.roblox.com tcp
FR 128.116.122.4:443 thumbnails.roblox.com tcp
FR 128.116.122.4:443 thumbnails.roblox.com tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
FR 128.116.122.4:443 thumbnails.roblox.com tcp
FR 128.116.122.4:443 thumbnails.roblox.com tcp
N/A 127.0.0.1:51516 tcp
N/A 127.0.0.1:51697 tcp
N/A 127.0.0.1:51703 tcp
N/A 127.0.0.1:51705 tcp
N/A 127.0.0.1:51707 tcp
FR 128.116.122.4:443 thumbnails.roblox.com tcp
FR 128.116.122.4:443 thumbnails.roblox.com tcp
FR 128.116.122.4:443 thumbnails.roblox.com tcp
FR 128.116.122.4:443 thumbnails.roblox.com tcp
FR 128.116.122.4:443 thumbnails.roblox.com tcp
FR 128.116.122.4:443 thumbnails.roblox.com tcp
FR 128.116.122.4:443 thumbnails.roblox.com tcp
FR 128.116.122.4:443 thumbnails.roblox.com tcp
FR 128.116.122.4:443 thumbnails.roblox.com tcp
GB 23.73.139.67:443 tr.rbxcdn.com tcp
GB 23.73.139.67:443 tr.rbxcdn.com tcp
GB 23.73.139.67:443 tr.rbxcdn.com tcp
GB 23.73.139.67:443 tr.rbxcdn.com tcp
GB 23.73.139.67:443 tr.rbxcdn.com tcp
NL 108.156.60.101:443 c5.rbxcdn.com tcp
GB 23.73.139.67:443 tr.rbxcdn.com tcp
GB 23.73.139.67:443 tr.rbxcdn.com tcp
NL 18.239.18.70:443 t4.rbxcdn.com tcp
N/A 127.0.0.1:52977 tcp
N/A 127.0.0.1:52980 tcp
US 8.8.8.8:53 101.60.156.108.in-addr.arpa udp
US 8.8.8.8:53 67.139.73.23.in-addr.arpa udp
US 8.8.8.8:53 70.18.239.18.in-addr.arpa udp
N/A 127.0.0.1:52983 tcp
N/A 127.0.0.1:53095 tcp
N/A 127.0.0.1:53108 tcp
N/A 127.0.0.1:53114 tcp
N/A 127.0.0.1:53130 tcp
N/A 127.0.0.1:53135 tcp
N/A 127.0.0.1:53167 tcp
N/A 127.0.0.1:53206 tcp
GB 23.73.139.67:443 tr.rbxcdn.com tcp
NL 18.239.18.90:443 c1.rbxcdn.com tcp
FR 128.116.122.4:443 games.roblox.com tcp
FR 128.116.122.4:443 games.roblox.com tcp
FR 128.116.122.4:443 games.roblox.com tcp
FR 128.116.122.4:443 games.roblox.com tcp
FR 128.116.122.4:443 games.roblox.com tcp
FR 128.116.122.4:443 games.roblox.com tcp
FR 128.116.122.4:443 games.roblox.com tcp
NL 108.156.60.42:443 c0.rbxcdn.com tcp
N/A 127.0.0.1:53386 tcp
N/A 127.0.0.1:53404 tcp
N/A 127.0.0.1:53419 tcp
N/A 127.0.0.1:53425 tcp
N/A 127.0.0.1:53427 tcp
US 8.8.8.8:53 c3.rbxcdn.com udp
NL 18.239.69.87:443 t7.rbxcdn.com tcp
NL 18.239.69.14:443 t6.rbxcdn.com tcp
NL 18.239.69.14:443 t6.rbxcdn.com tcp
NL 18.239.69.87:443 t7.rbxcdn.com tcp
BE 2.17.107.240:443 c2.rbxcdn.com tcp
NL 108.156.60.80:443 c3.rbxcdn.com tcp
NL 18.239.18.75:443 t3.rbxcdn.com tcp
N/A 127.0.0.1:53437 tcp
N/A 127.0.0.1:53439 tcp
N/A 127.0.0.1:53441 tcp
N/A 127.0.0.1:53443 tcp
US 8.8.8.8:53 87.69.239.18.in-addr.arpa udp
US 8.8.8.8:53 14.69.239.18.in-addr.arpa udp
US 8.8.8.8:53 80.60.156.108.in-addr.arpa udp
US 8.8.8.8:53 240.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 75.18.239.18.in-addr.arpa udp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
NL 18.239.69.6:443 t2.rbxcdn.com tcp
N/A 127.0.0.1:53515 tcp
N/A 127.0.0.1:53518 tcp
N/A 127.0.0.1:53521 tcp
N/A 127.0.0.1:53524 tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
N/A 127.0.0.1:53527 tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
N/A 127.0.0.1:53529 tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
N/A 127.0.0.1:53531 tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
N/A 127.0.0.1:53533 tcp
N/A 127.0.0.1:53535 tcp
N/A 127.0.0.1:53537 tcp
N/A 127.0.0.1:53539 tcp
N/A 127.0.0.1:53541 tcp
N/A 127.0.0.1:53543 tcp
N/A 127.0.0.1:53545 tcp
N/A 127.0.0.1:53547 tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
N/A 127.0.0.1:53566 tcp
N/A 127.0.0.1:53568 tcp
N/A 127.0.0.1:53570 tcp
N/A 127.0.0.1:53572 tcp
BE 2.17.107.136:443 c6.rbxcdn.com tcp
NL 18.239.18.101:443 c7.rbxcdn.com tcp
N/A 127.0.0.1:53626 tcp
N/A 127.0.0.1:53628 tcp
N/A 127.0.0.1:53760 tcp
N/A 127.0.0.1:53762 tcp
N/A 127.0.0.1:53764 tcp
BE 2.17.107.224:443 t1.rbxcdn.com tcp
BE 2.17.107.224:443 t1.rbxcdn.com tcp
BE 2.17.107.224:443 t1.rbxcdn.com tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
N/A 127.0.0.1:54142 udp
N/A 127.0.0.1:53810 tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
NL 18.239.18.89:443 c7.rbxcdn.com tcp
NL 18.239.18.28:443 c1.rbxcdn.com tcp
NL 108.156.60.101:443 c5.rbxcdn.com tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
N/A 127.0.0.1:53820 tcp
N/A 127.0.0.1:53840 tcp
N/A 127.0.0.1:53848 tcp
N/A 127.0.0.1:53850 tcp
N/A 127.0.0.1:53853 tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
N/A 127.0.0.1:53877 tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
N/A 127.0.0.1:53879 tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
N/A 127.0.0.1:53887 tcp
NL 18.238.243.28:443 c4.rbxcdn.com tcp
NL 18.238.243.28:443 c4.rbxcdn.com tcp
NL 18.238.243.28:443 c4.rbxcdn.com tcp
NL 18.238.243.28:443 c4.rbxcdn.com tcp
NL 18.238.243.28:443 c4.rbxcdn.com tcp
US 8.8.8.8:53 c0.rbxcdn.com udp
NL 108.156.60.71:443 c3.rbxcdn.com tcp
NL 108.156.60.71:443 c3.rbxcdn.com tcp
NL 108.156.60.71:443 c3.rbxcdn.com tcp
US 8.8.8.8:53 c2.rbxcdn.com udp
NL 108.156.60.108:443 c0.rbxcdn.com tcp
NL 108.156.60.71:443 c3.rbxcdn.com tcp
BE 2.17.107.185:443 c2.rbxcdn.com tcp
BE 2.17.107.185:443 c2.rbxcdn.com tcp
NL 108.156.60.108:443 c0.rbxcdn.com tcp
US 8.8.8.8:53 apis.roblox.com udp
FR 128.116.122.4:443 apis.roblox.com tcp
US 8.8.8.8:53 economy.roblox.com udp
FR 128.116.122.4:443 economy.roblox.com tcp
FR 128.116.122.4:443 economy.roblox.com tcp
FR 128.116.122.4:443 economy.roblox.com tcp
US 8.8.8.8:53 t7.rbxcdn.com udp
US 8.8.8.8:53 28.243.238.18.in-addr.arpa udp
FR 128.116.122.4:443 clientsettings.roblox.com tcp
FR 128.116.122.4:443 clientsettings.roblox.com tcp
NL 18.239.69.87:443 t7.rbxcdn.com tcp
FR 128.116.122.4:443 clientsettings.roblox.com tcp
FR 128.116.122.4:443 clientsettings.roblox.com tcp
FR 128.116.122.4:443 clientsettings.roblox.com tcp
FR 128.116.122.4:443 clientsettings.roblox.com tcp
FR 128.116.122.4:443 clientsettings.roblox.com tcp
FR 128.116.122.4:443 clientsettings.roblox.com tcp
FR 128.116.122.4:443 clientsettings.roblox.com tcp
FR 128.116.122.4:443 clientsettings.roblox.com tcp
NL 18.65.39.118:443 c6.rbxcdn.com tcp
US 8.8.8.8:53 108.60.156.108.in-addr.arpa udp
N/A 127.0.0.1:53891 tcp
N/A 127.0.0.1:53894 tcp
N/A 127.0.0.1:53896 tcp
N/A 127.0.0.1:53904 tcp
N/A 127.0.0.1:53906 tcp
N/A 127.0.0.1:53908 tcp
N/A 127.0.0.1:53948 tcp
N/A 127.0.0.1:54015 tcp
N/A 127.0.0.1:54018 tcp
N/A 127.0.0.1:54020 tcp
N/A 127.0.0.1:54029 tcp
N/A 127.0.0.1:54050 tcp
N/A 127.0.0.1:54052 tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:54059 tcp
N/A 127.0.0.1:54064 tcp
N/A 127.0.0.1:54086 tcp
N/A 127.0.0.1:54210 tcp
N/A 127.0.0.1:54212 tcp
N/A 127.0.0.1:54214 tcp
N/A 127.0.0.1:54216 tcp
N/A 127.0.0.1:54218 tcp
N/A 127.0.0.1:54220 tcp
N/A 127.0.0.1:54222 tcp
N/A 127.0.0.1:54374 tcp
N/A 127.0.0.1:54377 tcp
N/A 127.0.0.1:54379 tcp
N/A 127.0.0.1:54381 tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
IE 20.166.2.191:443 msedge.api.cdp.microsoft.com tcp
FR 128.116.122.4:443 clientsettings.roblox.com tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
N/A 127.0.0.1:54415 tcp
N/A 127.0.0.1:54418 tcp
GB 23.73.139.75:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
FR 128.116.122.4:443 clientsettings.roblox.com tcp
N/A 127.0.0.1:54444 tcp
N/A 127.0.0.1:54566 tcp
FR 128.116.122.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:54569 tcp
FR 128.116.122.4:443 ephemeralcounters.api.roblox.com tcp
FR 128.116.122.4:443 ephemeralcounters.api.roblox.com tcp
N/A 127.0.0.1:54572 tcp
N/A 127.0.0.1:54575 tcp
US 8.8.8.8:53 avatar.roblox.com udp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
N/A 127.0.0.1:54580 tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
N/A 127.0.0.1:54583 tcp
N/A 127.0.0.1:54585 tcp
N/A 127.0.0.1:54590 tcp
N/A 127.0.0.1:54593 tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
N/A 127.0.0.1:54643 tcp
N/A 127.0.0.1:54649 tcp
BE 2.17.107.171:443 t4.rbxcdn.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
GB 128.116.33.33:63967 udp
N/A 127.0.0.1:54656 tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
N/A 127.0.0.1:54667 tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
N/A 127.0.0.1:54697 tcp
N/A 127.0.0.1:54700 tcp
N/A 127.0.0.1:54702 tcp
N/A 127.0.0.1:54704 tcp
N/A 127.0.0.1:54706 tcp
N/A 127.0.0.1:54708 tcp
N/A 127.0.0.1:54710 tcp
N/A 127.0.0.1:54712 tcp
N/A 127.0.0.1:54714 tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
N/A 127.0.0.1:54817 tcp
N/A 127.0.0.1:54819 tcp
N/A 127.0.0.1:54821 tcp
N/A 127.0.0.1:54823 tcp
N/A 127.0.0.1:54825 tcp
N/A 127.0.0.1:54827 tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
US 8.8.8.8:53 c6.rbxcdn.com udp
NL 18.65.39.25:443 c6.rbxcdn.com tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
N/A 127.0.0.1:54835 tcp
NL 18.65.39.20:443 t0.rbxcdn.com tcp
NL 18.239.69.33:443 t6.rbxcdn.com tcp
N/A 127.0.0.1:54838 tcp
N/A 127.0.0.1:54852 tcp
N/A 127.0.0.1:54862 tcp
US 8.8.8.8:53 20.39.65.18.in-addr.arpa udp
US 8.8.8.8:53 33.69.239.18.in-addr.arpa udp
NL 108.156.60.71:443 c3.rbxcdn.com tcp
N/A 127.0.0.1:54883 tcp
NL 18.238.243.24:443 c4.rbxcdn.com tcp
N/A 127.0.0.1:54893 tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
BE 2.17.107.211:443 c0ak.rbxcdn.com tcp
N/A 127.0.0.1:54910 tcp
N/A 127.0.0.1:54913 tcp
N/A 127.0.0.1:54916 tcp
N/A 127.0.0.1:54918 tcp
N/A 127.0.0.1:54924 tcp
N/A 127.0.0.1:54926 tcp
BE 2.17.107.147:443 c7.rbxcdn.com tcp
N/A 127.0.0.1:64217 udp
DE 3.78.22.124:443 b.ns1p.net tcp
US 8.8.8.8:53 147.107.17.2.in-addr.arpa udp
US 8.8.8.8:53 124.22.78.3.in-addr.arpa udp
FR 128.116.122.4:443 apis.roblox.com tcp
FR 128.116.122.4:443 apis.roblox.com tcp
FR 128.116.122.4:443 apis.roblox.com tcp
FR 128.116.122.4:443 apis.roblox.com tcp
N/A 127.0.0.1:54943 tcp
N/A 127.0.0.1:54946 tcp
N/A 127.0.0.1:54948 tcp
N/A 127.0.0.1:54980 tcp
FR 128.116.122.4:443 apis.roblox.com tcp
FR 128.116.122.4:443 apis.roblox.com tcp
FR 128.116.122.4:443 apis.roblox.com tcp
FR 128.116.122.4:443 apis.roblox.com tcp
FR 128.116.122.4:443 apis.roblox.com tcp
N/A 127.0.0.1:54996 tcp
N/A 127.0.0.1:54998 tcp
FR 128.116.122.4:443 apis.roblox.com tcp
FR 128.116.122.4:443 apis.roblox.com tcp
FR 128.116.122.4:443 apis.roblox.com tcp
FR 128.116.122.4:443 apis.roblox.com tcp
N/A 127.0.0.1:55194 tcp
N/A 127.0.0.1:55199 tcp
N/A 127.0.0.1:55283 tcp
N/A 127.0.0.1:55285 tcp
NL 13.95.26.4:443 msedge.api.cdp.microsoft.com tcp
N/A 127.0.0.1:55512 tcp
N/A 127.0.0.1:55514 tcp
N/A 127.0.0.1:55516 tcp
FR 128.116.122.4:443 apis.roblox.com tcp
FR 128.116.122.4:443 apis.roblox.com tcp
FR 128.116.122.4:443 apis.roblox.com tcp
FR 128.116.122.4:443 apis.roblox.com tcp
N/A 127.0.0.1:55521 tcp
GB 23.73.139.35:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
N/A 127.0.0.1:55525 tcp
FR 128.116.122.4:443 apis.roblox.com tcp
NL 13.95.26.4:443 msedge.api.cdp.microsoft.com tcp
FR 128.116.122.4:443 apis.roblox.com tcp
N/A 127.0.0.1:55549 tcp
N/A 127.0.0.1:55559 tcp
US 8.8.8.8:53 gameinternationalization.roblox.com udp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com tcp
N/A 127.0.0.1:55561 tcp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com tcp
NL 18.239.18.101:443 c7.rbxcdn.com tcp
FR 128.116.122.4:443 locale.roblox.com tcp
N/A 127.0.0.1:55565 tcp
N/A 127.0.0.1:55568 tcp
N/A 127.0.0.1:55570 tcp
N/A 127.0.0.1:58254 udp
N/A 127.0.0.1:55578 tcp
N/A 127.0.0.1:55596 tcp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com tcp
US 8.8.8.8:53 economy.roblox.com udp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
N/A 127.0.0.1:55600 tcp
N/A 127.0.0.1:55633 tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:55661 tcp
N/A 127.0.0.1:55663 tcp
N/A 127.0.0.1:55665 tcp
N/A 127.0.0.1:55675 tcp
N/A 127.0.0.1:55995 tcp
N/A 127.0.0.1:55997 tcp
N/A 127.0.0.1:62689 udp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:56792 tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
GB 23.73.139.19:443 tr.rbxcdn.com tcp
GB 23.73.139.19:443 tr.rbxcdn.com tcp
GB 23.73.139.19:443 tr.rbxcdn.com tcp
GB 23.73.139.19:443 tr.rbxcdn.com tcp
GB 23.73.139.19:443 tr.rbxcdn.com tcp
GB 23.73.139.19:443 tr.rbxcdn.com tcp
GB 23.73.139.19:443 tr.rbxcdn.com tcp
GB 23.73.139.19:443 tr.rbxcdn.com tcp
N/A 127.0.0.1:56795 tcp
N/A 127.0.0.1:56797 tcp
N/A 127.0.0.1:56799 tcp
N/A 127.0.0.1:56801 tcp
N/A 127.0.0.1:56803 tcp
N/A 127.0.0.1:56805 tcp
N/A 127.0.0.1:56807 tcp
N/A 127.0.0.1:56809 tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
N/A 127.0.0.1:56861 tcp
NL 108.156.60.71:443 c3.rbxcdn.com tcp
N/A 127.0.0.1:56951 tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
N/A 127.0.0.1:56963 tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
N/A 127.0.0.1:56980 tcp
US 8.8.8.8:53 apis.roblox.com udp
FR 128.116.122.4:443 apis.roblox.com tcp
N/A 127.0.0.1:56989 tcp
FR 128.116.122.4:443 apis.roblox.com tcp
N/A 127.0.0.1:57010 tcp
US 8.8.8.8:53 assetdelivery.roblox.com udp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
BE 2.17.107.171:443 c4.rbxcdn.com tcp
N/A 127.0.0.1:57021 tcp
N/A 127.0.0.1:57024 tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
FR 128.116.122.4:443 assetdelivery.roblox.com tcp
US 8.8.8.8:53 t1.rbxcdn.com udp
N/A 127.0.0.1:57038 tcp
N/A 127.0.0.1:57044 tcp
N/A 127.0.0.1:57046 tcp
N/A 127.0.0.1:57048 tcp
FR 52.222.201.96:443 t1.rbxcdn.com tcp
FR 52.222.201.96:443 t1.rbxcdn.com tcp
US 8.8.8.8:53 t6.rbxcdn.com udp
US 8.8.8.8:53 t5.rbxcdn.com udp
FR 13.249.9.84:443 t5.rbxcdn.com tcp
BE 2.17.107.168:443 t6.rbxcdn.com tcp
N/A 127.0.0.1:57132 tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
NL 18.239.18.65:443 c7.rbxcdn.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
N/A 127.0.0.1:57143 tcp
N/A 127.0.0.1:57145 tcp
N/A 127.0.0.1:57153 tcp
N/A 127.0.0.1:57158 tcp
N/A 127.0.0.1:57165 tcp
N/A 127.0.0.1:65013 udp
N/A 127.0.0.1:57202 tcp
N/A 127.0.0.1:57211 tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
N/A 127.0.0.1:57252 tcp
N/A 127.0.0.1:57294 tcp
N/A 127.0.0.1:57296 tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
N/A 127.0.0.1:57621 tcp
N/A 127.0.0.1:57623 tcp
N/A 127.0.0.1:57625 tcp
N/A 127.0.0.1:57627 tcp
N/A 127.0.0.1:57636 tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:57996 tcp
N/A 127.0.0.1:57998 tcp
N/A 127.0.0.1:58000 tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
N/A 127.0.0.1:58005 tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
N/A 127.0.0.1:58016 tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
N/A 127.0.0.1:58019 tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:58022 tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
N/A 127.0.0.1:58029 tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
N/A 127.0.0.1:58038 tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
N/A 127.0.0.1:58045 tcp
N/A 127.0.0.1:58048 tcp
GB 128.116.119.3:443 ecsv2.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
N/A 127.0.0.1:58051 tcp
US 8.8.8.8:53 users.roblox.com udp
GB 128.116.119.4:443 users.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
US 8.8.8.8:53 realtime-signalr.roblox.com udp
GB 128.116.119.3:443 realtime-signalr.roblox.com tcp
GB 128.116.119.4:443 ephemeralcounters.api.roblox.com tcp
GB 128.116.119.4:443 ephemeralcounters.api.roblox.com tcp
GB 128.116.119.4:443 ephemeralcounters.api.roblox.com tcp
GB 128.116.119.4:443 ephemeralcounters.api.roblox.com tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
GB 128.116.119.4:443 ephemeralcounters.api.roblox.com tcp
GB 128.116.119.3:443 realtime-signalr.roblox.com tcp
GB 128.116.119.3:443 realtime-signalr.roblox.com tcp
N/A 127.0.0.1:58066 tcp
GB 128.116.119.3:443 realtime-signalr.roblox.com tcp
GB 128.116.119.4:443 ephemeralcounters.api.roblox.com tcp
US 8.8.8.8:53 client-telemetry.roblox.com udp
GB 128.116.119.3:443 client-telemetry.roblox.com tcp
N/A 127.0.0.1:58070 tcp
N/A 127.0.0.1:58075 tcp
FR 128.116.122.4:443 assetgame.roblox.com tcp
GB 128.116.119.4:443 gamejoin.roblox.com tcp
GB 128.116.119.4:443 gamejoin.roblox.com tcp
N/A 127.0.0.1:58427 tcp
N/A 127.0.0.1:58429 tcp
N/A 127.0.0.1:58757 tcp
N/A 127.0.0.1:59359 tcp
N/A 127.0.0.1:59362 tcp
N/A 127.0.0.1:59365 tcp
US 8.8.8.8:53 thumbnails.roblox.com udp
GB 128.116.119.4:443 thumbnails.roblox.com tcp
GB 128.116.119.3:443 client-telemetry.roblox.com tcp
US 8.8.8.8:53 avatar.roblox.com udp
GB 128.116.119.4:443 avatar.roblox.com tcp
GB 128.116.119.4:443 avatar.roblox.com tcp
GB 128.116.33.33:63967 udp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 128.116.119.4:443 avatar.roblox.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
FR 13.249.9.87:443 t4.rbxcdn.com tcp
US 8.8.8.8:53 t2.rbxcdn.com udp
BE 2.17.107.184:443 t2.rbxcdn.com tcp
GB 128.116.119.4:443 locale.roblox.com tcp
GB 128.116.119.4:443 locale.roblox.com tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
N/A 127.0.0.1:59487 tcp
N/A 127.0.0.1:59497 tcp
GB 128.116.119.3:443 client-telemetry.roblox.com tcp
GB 128.116.119.3:443 client-telemetry.roblox.com tcp
GB 128.116.119.4:443 locale.roblox.com tcp
GB 128.116.119.4:443 locale.roblox.com tcp
N/A 127.0.0.1:59500 tcp
N/A 127.0.0.1:59505 tcp
GB 128.116.119.4:443 locale.roblox.com tcp
GB 128.116.119.4:443 locale.roblox.com tcp
GB 128.116.119.4:443 locale.roblox.com tcp
GB 128.116.119.4:443 locale.roblox.com tcp
GB 128.116.119.4:443 locale.roblox.com tcp
GB 128.116.119.4:443 locale.roblox.com tcp
GB 128.116.119.3:443 client-telemetry.roblox.com tcp
GB 128.116.119.3:443 client-telemetry.roblox.com tcp
GB 128.116.119.3:443 client-telemetry.roblox.com tcp
GB 128.116.119.3:443 client-telemetry.roblox.com tcp
N/A 127.0.0.1:59599 tcp
N/A 127.0.0.1:59608 tcp
N/A 127.0.0.1:59772 tcp
N/A 127.0.0.1:59776 tcp
GB 128.116.119.4:443 locale.roblox.com tcp
N/A 127.0.0.1:59866 tcp
N/A 127.0.0.1:59876 tcp
N/A 127.0.0.1:59878 tcp
N/A 127.0.0.1:59909 tcp
N/A 127.0.0.1:59911 tcp
N/A 127.0.0.1:59913 tcp
N/A 127.0.0.1:59915 tcp
N/A 127.0.0.1:59917 tcp
N/A 127.0.0.1:59919 tcp
N/A 127.0.0.1:59940 tcp
N/A 127.0.0.1:59942 tcp
N/A 127.0.0.1:59944 tcp
N/A 127.0.0.1:59946 tcp
N/A 127.0.0.1:59952 tcp
NL 23.62.61.106:443 th.bing.com tcp
US 8.8.8.8:53 r.bing.com udp
NL 23.62.61.138:443 r.bing.com tcp
NL 23.62.61.138:443 r.bing.com tcp
NL 23.62.61.75:443 th.bing.com tcp
NL 23.62.61.75:443 th.bing.com tcp
IE 40.126.31.71:443 login.microsoftonline.com tcp
US 8.8.8.8:53 css.rbxcdn.com udp
FR 18.244.28.55:443 js.rbxcdn.com tcp
FR 52.222.201.77:443 css.rbxcdn.com tcp
GB 128.116.119.4:443 assetgame.roblox.com tcp
FR 3.162.38.58:443 static.rbxcdn.com tcp
US 172.64.154.86:443 roblox-api.arkoselabs.com tcp
GB 128.116.119.4:443 assetgame.roblox.com tcp
BE 23.14.90.81:443 apis.rbxcdn.com tcp
GB 128.116.119.3:443 ecsv2.roblox.com tcp
US 8.8.8.8:53 static.rbxcdn.com udp
NL 23.63.101.177:443 js.rbxcdn.com tcp
FR 52.222.201.122:443 css.rbxcdn.com tcp
FR 3.162.38.18:443 static.rbxcdn.com tcp
FR 13.32.145.74:443 images.rbxcdn.com tcp
GB 128.116.119.3:443 realtime-signalr.roblox.com tcp
US 8.8.8.8:53 contacts.roblox.com udp
GB 23.73.139.67:443 tr.rbxcdn.com tcp
US 8.8.8.8:53 accountsettings.roblox.com udp
US 8.8.8.8:53 economy.roblox.com udp
US 8.8.8.8:53 friends.roblox.com udp
US 8.8.8.8:53 privatemessages.roblox.com udp
US 8.8.8.8:53 lhr2-128-116-119-3.roblox.com udp
FR 3.162.38.18:443 static.rbxcdn.com tcp
US 128.116.32.3:443 lga2-128-116-32-3.roblox.com tcp
US 128.116.116.3:443 lax2-128-116-116-3.roblox.com tcp
AU 128.116.51.3:443 syd1-128-116-51-3.roblox.com tcp
GB 128.116.119.3:443 lhr2-128-116-119-3.roblox.com tcp
PL 128.116.124.3:443 pulsar.roblox.com tcp
US 128.116.95.3:443 dfw2-128-116-95-3.roblox.com tcp
NL 128.116.21.3:443 ams2-128-116-21-3.roblox.com tcp
US 34.203.158.12:443 aws-us-east-1b-lms.rbx.com tcp
US 128.116.115.3:443 sea1-128-116-115-3.roblox.com tcp
JP 52.192.8.211:443 aws-ap-northeast-1c-lms.rbx.com tcp
AU 128.116.51.3:443 syd1-128-116-51-3.roblox.com tcp
US 128.116.115.3:443 sea1-128-116-115-3.roblox.com tcp
US 34.203.158.12:443 aws-us-east-1b-lms.rbx.com tcp
JP 52.192.8.211:443 aws-ap-northeast-1c-lms.rbx.com tcp
US 8.8.8.8:53 3.116.116.128.in-addr.arpa udp
US 8.8.8.8:53 3.95.116.128.in-addr.arpa udp
US 8.8.8.8:53 12.158.203.34.in-addr.arpa udp
US 8.8.8.8:53 3.115.116.128.in-addr.arpa udp
US 8.8.8.8:53 3.51.116.128.in-addr.arpa udp
DE 3.78.22.124:443 s.ns1p.net tcp
DE 3.121.72.41:443 s.ns1p.net tcp
US 8.8.8.8:53 presence.roblox.com udp
HK 128.116.118.3:443 hkg1-128-116-118-3.roblox.com tcp
HK 128.116.118.3:443 hkg1-128-116-118-3.roblox.com tcp
HK 128.116.118.3:443 hkg1-128-116-118-3.roblox.com tcp
GB 128.116.119.3:443 lhr2-128-116-119-3.roblox.com tcp
NL 128.116.21.3:443 ams2-128-116-21-3.roblox.com tcp
PL 128.116.124.3:443 pulsar.roblox.com tcp
US 128.116.32.3:443 lga2-128-116-32-3.roblox.com tcp
US 128.116.115.3:443 sea1-128-116-115-3.roblox.com tcp
US 34.203.158.12:443 aws-us-east-1b-lms.rbx.com tcp
US 128.116.116.3:443 lax2-128-116-116-3.roblox.com tcp
AU 128.116.51.3:443 syd1-128-116-51-3.roblox.com tcp
US 128.116.95.3:443 dfw2-128-116-95-3.roblox.com tcp
JP 52.192.8.211:443 aws-ap-northeast-1c-lms.rbx.com tcp
US 151.101.0.176:443 js.stripe.com tcp
US 8.8.8.8:53 mia4-128-116-45-3.roblox.com udp
US 8.8.8.8:53 fra2-128-116-123-3.roblox.com udp
US 8.8.8.8:53 silver.roblox.com udp
US 8.8.8.8:53 gold.roblox.com udp
US 8.8.8.8:53 iad4-128-116-102-3.roblox.com udp
US 128.116.45.3:443 mia4-128-116-45-3.roblox.com tcp
DE 128.116.123.3:443 fra2-128-116-123-3.roblox.com tcp
US 8.8.8.8:53 aws-eu-west-2c-lms.rbx.com udp
US 128.116.102.3:443 iad4-128-116-102-3.roblox.com tcp
US 54.241.119.217:443 aws-us-west-1c-lms.rbx.com tcp
GB 13.42.225.121:443 aws-eu-west-2c-lms.rbx.com tcp
FR 18.155.129.94:443 c0aws.rbxcdn.com tcp
US 44.215.249.147:443 aws-us-east-1c-lms.rbx.com tcp
US 8.8.8.8:53 147.249.215.44.in-addr.arpa udp
US 8.8.8.8:53 217.119.241.54.in-addr.arpa udp
US 44.237.125.219:443 m.stripe.com tcp
GB 128.116.119.3:443 ecsv2.roblox.com tcp
FR 3.162.38.49:443 setup.rbxcdn.com tcp
GB 128.116.119.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:61509 tcp
N/A 127.0.0.1:61512 tcp
GB 128.116.119.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:61524 tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
FR 3.162.38.49:443 setup.rbxcdn.com tcp
FR 3.162.38.49:443 setup.rbxcdn.com tcp
FR 3.162.38.49:443 setup.rbxcdn.com tcp
N/A 127.0.0.1:61527 tcp

Files

C:\Users\Admin\AppData\Local\Temp\wmsetup.log

MD5 38e6733e1ead9d042af435f18b6665b6
SHA1 6b2caff1e6b991a0f14558d9f693196caebdcf11
SHA256 562cb7ff684f755dc864178ccfc2856cf5e24138ffb61c290ac38c8968f4e781
SHA512 e1b0364f1aa7b04ebde8d1410b5baadae992e63113d6924726dc226f7644a7cb612b0718fe64fb84231236482645578fb5f2554e3ee156190776ee31919ca46c

C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML

MD5 7050d5ae8acfbe560fa11073fef8185d
SHA1 5bc38e77ff06785fe0aec5a345c4ccd15752560e
SHA256 cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b
SHA512 a7a295ac8921bb3dde58d4bcde9372ed59def61d4b7699057274960fa8c1d1a1daff834a93f7a0698e9e5c16db43af05e9fd2d6d7c9232f7d26ffcff5fc5900b

C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

MD5 d2ef79666180e535690b6c2cac188b72
SHA1 47e9bad5f130d9c78d59d34e06eff9d80ae534d3
SHA256 9913254ed01bdd8987c352aeea8e2bfdf79c55cd26314300c03d3b0bbbfd2f02
SHA512 c77b0b44e5797467c5ddca1de8bb6c63633e05a1e30101948cf0ee581ddc6507d05f66bd709e666f5785f46838d5fdaf602172186189fcdadcfb626c40c61e4e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 15fe2ca7fbb19bce73b3127d3ce38b40
SHA1 3b6d7bb9a2a45706b41570c3237620977f91bfe3
SHA256 fdc0d483560fd857db4fd1f96c8dd963c4400095e8191206cc1400e07cfbe097
SHA512 8a2ed9de98c5e82d7924695caf8350a4cb702fe52bd6183f929966bfa9909e4b55471cccde3c0324024061bc4d6ea50076708fed9fe4e0cd976106784caf5fda

\??\pipe\LOCAL\crashpad_4024_LHKRJWRMZJFPOGLB

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 387bda50a259f550e0a5b9c3f441359d
SHA1 9e0a87fad07a1fc8e67b5f44244aee8c49289a28
SHA256 f7a53d094bdb8498f4a5edf5dbfa6f1f04e62013a9173d48cab6f31e7fdc4f68
SHA512 060019710d5059241e00e23d6780ff44a016774f4658d16443d1ca7b7187aa4ab4ec484b18d380692f75dda19b882411749cc29545c9e3e57488a758bf618e24

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1b55376241f69aa1774840046921736d
SHA1 cf4ab1e30cb74eff894973f6e85a667acdf89cc2
SHA256 90bec582c125f49a7529c908c5c9d9c293d7e5ea1ab1c369d387db8ef0742b5f
SHA512 75b50eabf01698ee715360201ccdb48a7508d200d4346e1fa02f178f65fc79ac3a45cd31741a8ecae921170ddf6bc18f156df5bd96a9689e91c335dee726c157

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 30219be7a4cfc6cf738fce5045bfc77a
SHA1 2f540955b9839850733ef5e38812dceefbdd9320
SHA256 49f0aa175d55701b8a1024cbd00ebe0a01a04d0063af449a94e6b97f9ae4ddd2
SHA512 c5b5b89d76b80e39be146d1772da4c7e95eaad2b15ecc5863ddc85e10e272613b26209cef005f325267249448238e2a7b731d17d8f66807eecbf97c14b3617c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 22575acadc650122eb3145be5d22f977
SHA1 66aeecd77ccc3117935f5b4ed63b6a0e9dfce811
SHA256 c3b3b2a22077878438909ec6934ddb3b19ef624a4291d13cb0d25a0b2bb8922c
SHA512 8dcf161a133eac4794a39fd118c4f1f45cae86a3594b14b7ba912fc3a832382c39a8ed357eab4af3aa6f32bf6990a412bde4615b90364a5fe07514aa1892d9f9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 dead6dfd9a21d41734bbb68c9d86d52f
SHA1 b6f2de60d48c4a0eecb0b595a6a662a924915ed2
SHA256 7b4f30dde157d8671c73be9ac553a3aecbaa9b9315ce512aca79c9063db47e97
SHA512 80bb184835cd454e839c2b39c91cb1a38bebd46eafa9b4b427bdbd814333a73aab3c5bb46588f5e56ad88eefb70047d01e2c199092a80a272ddcc5a794850efb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe587ac9.TMP

MD5 61b68eeaa9ae78e96df2294bcf0000a8
SHA1 2ef7314994473cb113d9e37a796af777cd63d705
SHA256 3b8072b5c7d2752797653b21193aab7a973782f5c5c1c97524693ca6e3a3fb0f
SHA512 e0966fb535b36d310ca93e97a12cd9ef6bb944a7d180dc0001949981dfeaa445f59925aa5dabd487933222e6d7714d90eb1477fda9d16e7b588f003aa181f0aa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 1f5696f3e955430cf95cd98958198772
SHA1 de5759d9d3bec5f5ee07c903c8ef826cb73a59f2
SHA256 8b7513773e67cd4ed6aaf92b2410aca834487f12b85e3d25d3a7a3b570883ed6
SHA512 14e0995219ed945b04cd4f40e4b13917ce4e85db42c8d192bb20efc48023b3cb6b4e0fec1ac09c2e8ff5d8b6eaa4465a9192e9b7f6d5556637fe13860782f0ff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5bdcfbed9d7e19fbe9baf0e529e4bb40
SHA1 762b2239998fa2e1eed3e57b3993ab5637d520f6
SHA256 8a13f51214561ba09a8bfe7d94dd8bdf5c153ee36748c56f76fefaf7b5e1b763
SHA512 bb8484bb4f3c268850ab5cb01741830eb1d01486f1346f60420dc39ba58de936d12251ca9e571bb0f774760db28cb8ba976cbcf3c87df7e8a2644b7627f5df2e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 d60014d304d88d4dc9a2aa7cfd7c0cfe
SHA1 0afcca53bb82178155058b0a29b2460905128fa2
SHA256 6a566c3d44edbc8d77646293970192a6b703855648e898f3d1760f9245e528a9
SHA512 073e515ed61218040e3108efd0352a15d69f395587ecb57d20531d0efc614f285bf5a9c5bbd58ab1294df51ddaa9c99dbb432914b87ff3e8f3865e2772a78381

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 a5fd9917fe8735a14e2d555dda40fa33
SHA1 7e6e7e65e9c636007e9ca4f32acc80e23e9bc234
SHA256 d607bb64eeb807cdb43deb443ae98475e94e15d425a0f7707265c95301af30cf
SHA512 ab3545591a7acf73dd0cf385c4c8861ceabc8639895537110e57796aafa41c3304eb33f4789fefc8af24dad063236359be797ebd81714f50773eafd1896e886b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 300533ccac9a1f18e1cf10e1b251b5db
SHA1 9b0384e4264e80d8b59afa26d6906c6f36c74112
SHA256 25e2ae30acc5d61a8e16b90bb5bf179e55b4c1ac04b4660f62b4dd6090aee53b
SHA512 524cd02388336d153b1597edf3f2ec0baf4582291568d9b2081fd992d8a5cbfe289215bbac3ab651529cfaca108929bc54113d169849f39c1d3fec209657cc91

C:\Users\Admin\Downloads\Unconfirmed 238851.crdownload

MD5 4f9d28edc0c431adbfcc19d8fa47702f
SHA1 37a6e145fec66acce633199ea7261bf5dd3d855b
SHA256 17e5cfe0cd5e01c1cf679b2fb7da7f3eae6cac2481c41f355c23df375ee0b48d
SHA512 bb7a5f33e2ef384347f8ffa09381aee5609a5b4997a205c972e7d431effa8c89f47e065b41f3acd86c2a395e0fdcd2fa656b57c84c3b94bb2fbde52ed2284dc3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0e841c12b3dbf9f681f1da2aae2e5e23
SHA1 d2798ec9196accf2f38bc03881c7641f5919389e
SHA256 90f3841293b985cee0a9d40566b956e16275bceaf31f41cec04c8fe11b9296b5
SHA512 9053f63633f144a0b649104141facab4a546e2ac91164548612735c674694a822798f54a9b804ae633dcf434c818d74741399fdc6df850cf05ef3d0e696b6a89

C:\Users\Admin\Downloads\RobloxStudioInstaller.exe:Zone.Identifier

MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512 aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 f19cd8c4b39fe34808694280a059ec8f
SHA1 c46ef1bcc2c01e40f0a2810c99d1a8f782960c17
SHA256 a983592ff62debb1655532b9cb27111c2f006d2e081e6ba349eb022cc415a45d
SHA512 ddd8a36e9ebf0b1d0d1d3ae46df53113b3ae3ffa2f36458cfced86557cc69612a4c52aa077cb47d148bebe67da41de6923c2e431c1b34367c859fb80d0b0ee54

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 dacf570191c946be3949ef595a297c11
SHA1 5525b2858bfdd00a81a9bcb859021939f59f4e26
SHA256 c0830f0fd3af2285fca51a303ad8be0b493326b01122ebadb7ff2ef5a77a85dd
SHA512 4bb457fcdb91b981247c168d38fd592cf0689a0d4abd0a8d76392f221afdbd25de2c7ac4b9e75aca628d81d0d62092888f17533a6f572c38bb944e1939bfac6c

C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MD5 610b1b60dc8729bad759c92f82ee2804
SHA1 9992b7ae7a9c4e17a0a6d58ffd91b14cbb576552
SHA256 921d51979f3416ca19dca13a057f6fd3b09d8741f3576cad444eb95af87ebe08
SHA512 0614c4e421ccd5f4475a690ba46aac5bbb7d15caea66e2961895724e07e1ec7ee09589ca9394f6b2bcfb2160b17ac53798d3cf40fb207b6e4c6381c8f81ab6b4

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe

MD5 4dc57ab56e37cd05e81f0d8aaafc5179
SHA1 494a90728d7680f979b0ad87f09b5b58f16d1cd5
SHA256 87c6f7d9b58f136aeb33c96dbfe3702083ec519aafca39be66778a9c27a68718
SHA512 320eeed88d7facf8c1f45786951ef81708c82cb89c63a3c820ee631c52ea913e64c4e21f0039c1b277cfb710c4d81cd2191878320d00fd006dd777c727d9dc2b

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdate.dll

MD5 965b3af7886e7bf6584488658c050ca2
SHA1 72daabdde7cd500c483d0eeecb1bd19708f8e4a5
SHA256 d80c512d99765586e02323a2e18694965eafb903e9bc13f0e0b4265f86b21a19
SHA512 1c57dc7b89e7f13f21eaec7736b724cd864c443a2f09829308a4f23cb03e9a5f2a1e5bcdc441301e33119767e656a95d0f9ede0e5114bf67f5dce6e55de7b0a4

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_en.dll

MD5 4a1e3cf488e998ef4d22ac25ccc520a5
SHA1 dc568a6e3c9465474ef0d761581c733b3371b1cd
SHA256 9afbbe2a591250b80499f0bf02715f02dbcd5a80088e129b1f670f1a3167a011
SHA512 ce3bffb6568ff2ef83ef7c89fd668f6b5972f1484ce3fbd5597dcac0eaec851d5705ed17a5280dd08cd9812d6faec58a5561217b897c9209566545db2f3e1245

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdateCore.exe

MD5 c044dcfa4d518df8fc9d4a161d49cece
SHA1 91bd4e933b22c010454fd6d3e3b042ab6e8b2149
SHA256 9f79fe09f57002ca07ae0b2a196e8cc002d2be6d5540ee857217e99b33fa4bb2
SHA512 f26b89085aa22ac62a28610689e81b4dfe3c38a9015ec56dfeaff02fdb6fa64e784b86a961509b52ad968400faa1ef0487f29f07a41e37239fe4c3262a11ac2c

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe

MD5 60dba9b06b56e58f5aea1a4149c743d2
SHA1 a7e456acf64dd99ca30259cf45b88cf2515a69b3
SHA256 4d01f5531f93ab2af9e92c4f998a145c94f36688c3793845d528c8675697e112
SHA512 e98088a368d4c4468e325a1d62bee49661f597e5c1cd1fe2dabad3911b8ac07e1cc4909e7324cb4ab39f30fa32a34807685fcfba767f88884ef84ca69a0049e7

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeComRegisterShellARM64.exe

MD5 7a160c6016922713345454265807f08d
SHA1 e36ee184edd449252eb2dfd3016d5b0d2edad3c6
SHA256 35a14bd84e74dd6d8e2683470243fb1bb9071178d9283b12ebbfb405c8cd4aa9
SHA512 c0f1d5c8455cf14f2088ede062967d6dfa7c39ca2ac9636b10ed46dfbea143f64106a4f03c285e89dd8cf4405612f1eef25a8ec4f15294ca3350053891fc3d7e

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\NOTICE.TXT

MD5 6dd5bf0743f2366a0bdd37e302783bcd
SHA1 e5ff6e044c40c02b1fc78304804fe1f993fed2e6
SHA256 91d3fc490565ded7621ff5198960e501b6db857d5dd45af2fe7c3ecd141145f5
SHA512 f546c1dff8902a3353c0b7c10ca9f69bb77ebd276e4d5217da9e0823a0d8d506a5267773f789343d8c56b41a0ee6a97d4470a44bbd81ceaa8529e5e818f4951e

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\EdgeUpdate.dat

MD5 369bbc37cff290adb8963dc5e518b9b8
SHA1 de0ef569f7ef55032e4b18d3a03542cc2bbac191
SHA256 3d7ec761bef1b1af418b909f1c81ce577c769722957713fdafbc8131b0a0c7d3
SHA512 4f8ec1fd4de8d373a4973513aa95e646dfc5b1069549fafe0d125614116c902bfc04b0e6afd12554cc13ca6c53e1f258a3b14e54ac811f6b06ed50c9ac9890b1

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_am.dll

MD5 f6c1324070b6c4e2a8f8921652bfbdfa
SHA1 988e6190f26e4ca8f7ea3caabb366cf1edcdcbbf
SHA256 986b0654a8b5f7b23478463ff051bffe1e9bbdeb48744e4aa1bd3d89a7520717
SHA512 63092cf13e8a19966181df695eb021b0a9993afe8f98b1309973ea999fdf4cd9b6ffd609968d4aa0b2cde41e872688a283fd922d8b22cb5ad06339fe18221100

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_af.dll

MD5 567aec2d42d02675eb515bbd852be7db
SHA1 66079ae8ac619ff34e3ddb5fb0823b1790ba7b37
SHA256 a881788359b2a7d90ac70a76c45938fb337c2064487dcb8be00b9c311d10c24c
SHA512 3a7414e95c2927d5496f29814556d731aef19efa531fb58988079287669dfc033f3e04c8740697571df76bfecfe3b75659511783ce34682d2a2ea704dfa115b3

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_as.dll

MD5 a8d3210e34bf6f63a35590245c16bc1b
SHA1 f337f2cbec05b7e20ca676d7c2b1a8d5ae8bf693
SHA256 3b82de846ad028544013383e3c9fb570d2a09abf2c854e8a4d641bd7fc3b3766
SHA512 6e47ffe8f7c2532e7854dcae3cbd4e6533f0238815cb6af5ea85087c51017ea284542b988f07692d0297ebab1bad80d7613bf424ff532e10b01c8e528ab1043a

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_bg.dll

MD5 8375b1b756b2a74a12def575351e6bbd
SHA1 802ec096425dc1cab723d4cf2fd1a868315d3727
SHA256 a12df15afac4eb2695626d7a8a2888bdf54c8db671043b0677180f746d8ad105
SHA512 aec4bb94fde884db79a629abcff27fd8afb7f229d055514f51fa570fb47a85f8dfc9a54a8f69607d2bcaf82fae1ec7ffab0b246795a77a589be11fad51b24d19

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_bn-IN.dll

MD5 a94cf5e8b1708a43393263a33e739edd
SHA1 1068868bdc271a52aaae6f749028ed3170b09cce
SHA256 5b01fe11016610d5606f815281c970c86025732fc597b99c031a018626cd9f3c
SHA512 920f7fed1b720afdb569aec2961bd827a6fc54b4598c0704f65da781d142b1707e5106a459f0c289e0f476b054d93c0b733806af036b68f46377dde0541af2e7

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_bs.dll

MD5 e338dccaa43962697db9f67e0265a3fc
SHA1 4c6c327efc12d21c4299df7b97bf2c45840e0d83
SHA256 99b1b7e25fbc2c64489c0607cef0ae5ff720ab529e11093ed9860d953adeba04
SHA512 e0c15b166892433ef31ddf6b086680c55e1a515bed89d51edbdf526fcac71fb4e8cb2fadc739ac75ae5c2d9819fc985ca873b0e9e2a2925f82e0a456210898f9

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_ar.dll

MD5 570efe7aa117a1f98c7a682f8112cb6d
SHA1 536e7c49e24e9aa068a021a8f258e3e4e69fa64f
SHA256 e2cc8017bc24e73048c7ee68d3787ed63c3898eec61299a9ca1bab8aeaa8da01
SHA512 5e963dd55a5739a1da19cec7277dc3d07afdb682330998fd8c33a1b5949942019521967d8b5af0752a7a8e2cf536faa7e62982501170319558ceaa21ed657ae8

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_cy.dll

MD5 34d991980016595b803d212dc356d765
SHA1 e3a35df6488c3463c2a7adf89029e1dd8308f816
SHA256 252b6f9bf5a9cb59ad1c072e289cc9695c0040b363d4bfbcc9618a12df77d18e
SHA512 8a6cbcf812af37e3ead789fbec6cba9c4e1829dbeea6200f0abbdae15efd1eda38c3a2576e819d95ed2df0aafd2370480daa24a3fe6aeb8081a936d5e1f8d8ed

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_cs.dll

MD5 16c84ad1222284f40968a851f541d6bb
SHA1 bc26d50e15ccaed6a5fbe801943117269b3b8e6b
SHA256 e0f0026ddcbeafc6c991da6ba7c52927d050f928dba4a7153552efcea893a35b
SHA512 d3018619469ed25d84713bd6b6515c9a27528810765ed41741ac92caf0a3f72345c465a5bda825041df69e1264aada322b62e10c7ed20b3d1bcde82c7e146b7e

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_el.dll

MD5 ac275b6e825c3bd87d96b52eac36c0f6
SHA1 29e537d81f5d997285b62cd2efea088c3284d18f
SHA256 223d2db0bc2cc82bda04a0a2cd2b7f6cb589e2fa5c0471a2d5eb04d2ffcfcfa0
SHA512 bba581412c4297c4daf245550a2656cdc2923f77158b171e0eacf6e933c174eac84580864813cf6d75d73d1a58e0caf46170aee3cee9d84dc468379252b16679

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_de.dll

MD5 aab01f0d7bdc51b190f27ce58701c1da
SHA1 1a21aabab0875651efd974100a81cda52c462997
SHA256 061a7cdaff9867ddb0bd3de2c0760d6919d8d2ca7c7f889ec2d32265d7e7a75c
SHA512 5edbda45205b61ac48ea6e874411bb1031989001539650de6e424528f72ec8071bd709c037c956450bb0558ee37d026c26fdb966efceb990ed1219f135b09e6e

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_en-GB.dll

MD5 d749e093f263244d276b6ffcf4ef4b42
SHA1 69f024c769632cdbb019943552bac5281d4cbe05
SHA256 fd90699e7f29b6028a2e8e6f3ae82d26cdc6942bd39c4f07b221d87c5dbbfe1e
SHA512 48d51b006ce0cd903154fa03d17e76591db739c4bfb64243725d21d4aa17db57a852077be00b9a51815d09664d18f9e6ad61d9bc41b3d013ed24aaec8f477ad9

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_eu.dll

MD5 a7e1f4f482522a647311735699bec186
SHA1 3b4b4b6e6a5e0c1981c62b6b33a0ca78f82b7bbd
SHA256 e5615c838a71b533b26d308509954907bcc0eb4032cdbaa3db621eede5e6bfa4
SHA512 22131600bbac8d9c2dab358e244ec85315a1aaebfc0fb62aaa1493c418c8832c3a6fbf24a6f8cf4704fdc4bc10a66c88839a719116b4a3d85264b7ad93c54d57

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_et.dll

MD5 b78cba3088ecdc571412955742ea560b
SHA1 bc04cf9014cec5b9f240235b5ff0f29dbdb22926
SHA256 f0a4cfd96c85f2d98a3c9ecfadd41c0c139fdb20470c8004f4c112dd3d69e085
SHA512 04c8ab8e62017df63e411a49fb6218c341672f348cb9950b1f0d2b2a48016036f395b4568da70989f038e8e28efea65ddd284dfd490e93b6731d9e3e0e0813cf

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_fa.dll

MD5 cbe3454843ce2f36201460e316af1404
SHA1 0883394c28cb60be8276cb690496318fcabea424
SHA256 c66c4024847d353e9985eb9b2f060b2d84f12cc77fb6479df5ffc55dbda97e59
SHA512 f39e660f3bfab288871d3ec40135c16d31c6eb1a84136e065b54ff306f6f8016a788c713d4d8e46ad62e459f9073d2307a6ed650919b2dd00577bbfd04e5bd73

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_es.dll

MD5 9db7f66f9dc417ebba021bc45af5d34b
SHA1 6815318b05019f521d65f6046cf340ad88e40971
SHA256 e652159a75cbab76217ecbb4340020f277175838b316b32cf71e18d83da4a819
SHA512 943d8fc0d308c5ccd5ab068fc10e799b92465a22841ce700c636e7ae1c12995d99c0a93ab85c1ae27fefce869eabadbeafee0f2f5f010ad3b35fa4f748b54952

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_es-419.dll

MD5 28fefc59008ef0325682a0611f8dba70
SHA1 f528803c731c11d8d92c5660cb4125c26bb75265
SHA256 55a69ce2d6fc4109d16172ba6d9edb59dbadbc8af6746cc71dc4045aa549022d
SHA512 2ec71244303beac7d5ce0905001fe5b0fb996ad1d1c35e63eecd4d9b87751f0633a281554b3f0aa02ee44b8ceaad85a671ef6c34589055797912324e48cc23ed

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_da.dll

MD5 d34380d302b16eab40d5b63cfb4ed0fe
SHA1 1d3047119e353a55dc215666f2b7b69f0ede775b
SHA256 fd98159338d1f3b03814af31440d37d15ab183c1a230e6261fbb90e402f85d5f
SHA512 45ce58f4343755e392037a9c6fc301ad9392e280a72b9d4b6d328866fe26877b2988c39e05c4e7f1d5b046c0864714b897d35285e222fd668f0d71b7b10e6538

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_ca-Es-VALENCIA.dll

MD5 2929e8d496d95739f207b9f59b13f925
SHA1 7c1c574194d9e31ca91e2a21a5c671e5e95c734c
SHA256 2726c48a468f8f6debc2d9a6a0706b640b2852c885e603e6b2dec638756160df
SHA512 ea459305d3c3fa7a546194f649722b76072f31e75d59da149c57ff05f4af8f38a809066054df809303937bbca917e67441da2f0e1ea37b50007c25ae99429957

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_ca.dll

MD5 39551d8d284c108a17dc5f74a7084bb5
SHA1 6e43fc5cec4b4b0d44f3b45253c5e0b032e8e884
SHA256 8dbd55ed532073874f4fe006ef456e31642317145bd18ddc30f681ce9e0c8e07
SHA512 6fa5013a9ce62deca9fa90a98849401b6e164bbad8bef00a8a8b228427520dd584e28cba19c71e2c658692390fe29be28f0398cb6c0f9324c56290bb245d06d2

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_bn.dll

MD5 7dc58c4e27eaf84ae9984cff2cc16235
SHA1 3f53499ddc487658932a8c2bcf562ba32afd3bda
SHA256 e32f77ed3067d7735d10f80e5a0aa0c50c993b59b82dc834f2583c314e28fa98
SHA512 bdec1300cf83ea06dfd351fe1252b850fecea08f9ef9cb1207fce40ce30742348db953107ade6cdb0612af2e774345faf03a8a6476f2f26735eb89153b4256dc

C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_az.dll

MD5 7937c407ebe21170daf0975779f1aa49
SHA1 4c2a40e76209abd2492dfaaf65ef24de72291346
SHA256 5ab96e4e6e065dbce3b643c6be2c668f5570984ead1a8b3578bbd2056fbad4e9
SHA512 8670746941660e6573732077f5ed1b630f94a825cf4ac9dbe5018772eaac1c48216334757a2aeaa561034b4d907162a370b8f0bae83b34a09457fafe165fb5d7

C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log

MD5 598ce330acedf7c7572f8bf787417ae9
SHA1 c8c7a58492032ffcae1a5329de22b0c7c10706b9
SHA256 2b9aa7789938127b8feeaeccf0709c4ee68726725ef09719cd7f8000fdaca6dc
SHA512 5e83d8048e663fc4d10dda7fa2ede37e6402a6fc79b40f6577978745d05f319c214466e84eb5aeafd1babce789ee35bf946b5ba9ae113200761954768dfd5d9a

C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}\123.0.2420.97\MicrosoftEdge_X64_123.0.2420.97.exe

MD5 300df46436ba5d076b227c32967ada91
SHA1 de9d47ef0c61fb04b7309875e2f03c8fa37d19f4
SHA256 1614eb0c2697d74f2a05f8c973b2055e9cc158d94b19105e3a9d450adc9e333b
SHA512 ba3053085da062ec32f87aec43f527624248a81b702c8cdb359c0fba7194556658b49aca8ef98d885de5da5b9b2eab3f1fac2c99891f91949d1b9a155e4a6971

C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat

MD5 93a2ce34588a87f0b4db8fc87fd96fef
SHA1 46f0dbbd13cc07e1567986ac476c07e6ddf3efee
SHA256 5576237099738a74f018ebfa97687749cfbd38ff0bdc5f3eb547e98150771bd0
SHA512 dcbc28a747dcde9ccf7066a78179d56b7277d06cc6f55fba31628204a3ef34dbc6d4ab5dc77d1281aa14484b976ce36e16145490399b5a089a3cafb65443919b

C:\Program Files (x86)\Microsoft\EdgeCore\123.0.2420.97\Installer\setup.exe

MD5 31ddc9e1c11a44b88cf96c45b3551ffb
SHA1 811ccb9706f656e29d089e30a2ee1650302394e2
SHA256 46cb58faa60db59cb8d145bf6493f7c01a8ea8895f812d65512e3c7340a054da
SHA512 67e5a4ec4b030e48ac06bdf79bfb2b9bfe7778f046a739f23b7be65e143a7181954c7587eb6841636a6e667aabfa292d6831bab709cd798d1de01987bc99aaf8

memory/2704-1162-0x00007FFA6A920000-0x00007FFA6AD22000-memory.dmp

memory/2704-1161-0x00007FFA69360000-0x00007FFA698AC000-memory.dmp

memory/2704-1163-0x00007FF640210000-0x00007FF641210000-memory.dmp

memory/2704-1164-0x00007FFA6A920000-0x00007FFA6AD22000-memory.dmp

memory/2704-1166-0x0000025131AB0000-0x0000025131AC0000-memory.dmp

memory/2704-1174-0x000002513C1B0000-0x000002513C5F0000-memory.dmp

memory/2704-1176-0x000002513C5F0000-0x000002513C7F0000-memory.dmp

memory/2704-1178-0x000002513EC50000-0x000002513EC51000-memory.dmp

memory/2704-1179-0x000002513EC50000-0x000002513EC51000-memory.dmp

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat

MD5 3cf4ebf02af1d8a8cba7847ee47543e2
SHA1 6a959bcf1f2c8c0822ece4a3ecdfc9098521bd43
SHA256 16c004fac0edc6e46c4c1038061835d7f6804a1244fd035b8a7a9ba1a965db9f
SHA512 e711f8668fbdd0ae1799bdf76039c04d5de41ff08d20c250da033c912f95f6fb02f1761e853f2a0233f81ba5e583d0ea8b751da9c70273e8f4a4df03971df90d

memory/5008-1214-0x00007FFA8CC10000-0x00007FFA8CC11000-memory.dmp

memory/4008-1215-0x00007FFA8D040000-0x00007FFA8D041000-memory.dmp

memory/4008-1217-0x00007FFA8CA00000-0x00007FFA8CA01000-memory.dmp

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 4731c1b1713031509f156e0dd1d3297e
SHA1 58281386b3433c0e5916911e055f419dbfc78748
SHA256 949563890f794c7cad0ffc79c2af25594ac2648bf82aeded9c95396e28cdfa5c
SHA512 c81d4872a1c0681adfd7716344e3c48ef7b9a3d70f2bdda07c0904f8ed3f5deea61954161f857da3660e6fa6fb71c640882831fba4ab2bd14cb565e785727642

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State~RFe5c0111.TMP

MD5 4b89f2ceb221bce55ee78256f6324ab5
SHA1 c2feaab893051095ce028f7ba52bac378ed15bac
SHA256 2e50fb45c10ba3ef2f6c177a2e7de1308c710341dfcd7edd59a166dab491aad3
SHA512 b56a87bf291209d2fee094360470b5956efdeb513d493f888a5781ad933b7b3d73f4f38fd4683e97fc414914ef9ffe5ce61eb613c1c255039f3b499c05a75c07

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Site Characteristics Database\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 f70d50960e7872db1c138e156e9323f0
SHA1 10704fc436977e88b6faf4d2bc4d77fa470e663f
SHA256 8ed6cf3327545eb12f49dc054cf79712d887c0aa00e7c35b90648402d9e46635
SHA512 ca712eb9c34bba43724b7c8cb3f49526a69bff2c4dbe62d053913c478681823aa124258ed4f2c89c51a9c5439ab9974f49b63df23683d493948d65eb75d8c1e4

memory/1840-1259-0x00007FFA8CC10000-0x00007FFA8CC11000-memory.dmp

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\Videos\Captures\desktop.ini

MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\data_1

MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\f_00000c

MD5 6eafc48312528e2515d622428b6b95cc
SHA1 8c21c748004366757a93c587668ab55cb6a4bdf0
SHA256 dee6942321440ad24c989d45fd96bf0c0c11e63e04357af2128118eb75eb887b
SHA512 c501160df9b93014d510cd22060704b434fac4c6ba242d3e625e1bb6e838aca31889197e74fd4d082f4333147ec18197b2a31619d55d37c9157ec275621ee64a

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\f_00001c

MD5 66d562e3299ee732a53db150038c026e
SHA1 f514a9e346cd443d196c1bc401f078a9fa147323
SHA256 252d971616775193836fe6c0c057edc13c511ed2bdbdb61fbe3c4567a3a8e530
SHA512 ee24be2709cb98ccbde710654eb1ba533e432819caa8c6bf1fedfeceec452fa3c5f3b2402efc06e75d59e55b6e7beaa71f88bd049fad8e17449c0fde217a6468

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 3e07a86e9ec7c06834c5b397e4baae82
SHA1 72310ef04196578f6219e457076c2c0cce93a56f
SHA256 1672fbc14b8ade8113132186df05fb57961c4490c3ab08d0def1ff5c519df5b0
SHA512 dd4ab6ead2b6e0466662550658c66e30bd36d54db6d5c5a86662975c35cd77ae96ee06039abf20c148678f15569f88c8779dd444bfbca87d30698dfe350e15bd

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

memory/2704-1583-0x0000025131AB0000-0x0000025131AC0000-memory.dmp

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences

MD5 42bccd3530d4a3da50e822130e5fe2cc
SHA1 c52d87e47d82c0ec50fb5b4e0ee7088dc4901e1f
SHA256 9d6135e5e6f40573873b6dfaccb020d6382ff314fb87cef16b906ec3c1e9b8a7
SHA512 e2d225356d9546200f302a8444c5e71861ddf160970b383f31ccbe829e3f417b0970fa52cc45eba1a1150aded453bb59885fe11beceb0347ff10796c73158230

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences~RFe5c5125.TMP

MD5 f02fe1d73369f42e64b9c55b5c7e84d9
SHA1 7b5673a10263aac7b4721af7a23b956a7a550dc2
SHA256 89da6fa0ca7b7d51ae58db483370de1a82bee8bdb0b9d9ddb13de6121c828888
SHA512 138d9618aa5883e37025d9da256b277aa721b005b14d3f84d072cc4213ead28e0122227099975766fc3a42abc8f8c7065d88a5b9f07129e0fe5cd25447a9f3c0

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 5e32bf5f14604ad69af876a2899aa55e
SHA1 66568e3de5a3e33281b013d039532c536fe39927
SHA256 cbde065799240c380d378981ecbf0198bcffa5f5f8585fc2dd2a527e8e3b06c9
SHA512 ef2ffa6051ffc2eac1f4b2209c9a9ba321a78805c3711ffe81e7f63a67bb553ebe22545e9e93c19fa6ae71be89c61ba021ecc92899258a867a3dfc68d437ef38

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity~RFe5c6ad7.TMP

MD5 744e0563a122a6d61adb1a521bea95e5
SHA1 cc6db04af290592523a507c1294c449347d261ab
SHA256 41f9eb55b5a5dc97dc558451042a4274a9a07c6aa055684922b7b1b15b06ea4f
SHA512 f45d9d6a4f6bbe77bd42bc9eb4257c49b72c1053545092b01632c20edcbcf4ad7c004f018530d180410f6c7a40f908127f05a80e9b5749674fcbbc07655b8ef7

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 4e63395f16dc95236c13546f2fdce525
SHA1 1abcee86f7d139120c2cfbfb2722c4e84cbe1357
SHA256 69b190e929426302dfba9ff486f1439b186cf8786f1c216dd871f298fc600deb
SHA512 f64aae0ab349c974f11ca440b58fc131361e68394403025e0d08f05aad86a9ebf77c70bac84139587d9de096573763cf273b9317dfe957aac09008f139c49898

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index

MD5 7ae592565275cd412d2d4b26073bb581
SHA1 347ef8e4469c01d76420839ef3af7a8adaf57dcc
SHA256 6b41778577aaee3c60b194558fd8d0d2bc1f2f6de385108896d5f1dc8e8a7d54
SHA512 2056d6ab1e1f8f4da99734e99d3a69fef9bf2d5ecfc404851b6b10a0ce3257ec90d579fad54c0a14681ee96236553fb3ad24078b86ece9176164aae795197f06

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index

MD5 4680f7742c7c52ef798fab65014eea6f
SHA1 480e2565d048a63366af9a735412ea0509ae0be3
SHA256 3c9f7e60062c338fc4d4b1b1a48c5306a4069d66e9b9a47731b796c7df8d553f
SHA512 2a042034df6f61d46d97793ef90b4a560f32559204beeb224ea20871168f352ecfa9b0e71dd27217652c82a05baee675565e54a334fd5f694ebedff2a0fc9cf4

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 708eff80ab815a4319679d51a2e08fc3
SHA1 e51b02e94ee801b4b2f7c3acdc45e6db746a876d
SHA256 2f69334614def0c24878cfed35cc6487735943d43b37698d2fd04f8a59b1ffdf
SHA512 7e4afc2609f5e6a95f48094f74b11f7e4e653a20630ab091ad99974ffd0a12958b063bda79a9613444c913f8deb5c4b9f1f26832bde2c780853f8a978ff09e5f

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences

MD5 cce80132f7829267c20401ce1d0af016
SHA1 bae2ef4deca68a60286fdee671d3cc655ec2fd25
SHA256 42db78bd700e954fba751ee7ab7d8326ac36b976b3d24030dc35a5065c0f3df9
SHA512 59f91f82d041873266a6974460e77c128dcc561cf765ac0151dc073e9d63aafada3818ab170911047ddd1d9c2efd9d63363095fabcac64598b6e1d0485702950

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State

MD5 3c37ea355cc0c3edec823c0ad5844bd1
SHA1 5c2c020960fe21f3b66e48a92020bda1a2ad1f1f
SHA256 29b3ec2363b459e8830dd6d8c820b8c8bdbaa5c66e12c09f186c365e55aadb27
SHA512 f3035961954ee774bfd5178164bd69357cad05cfcf427207ba62099406ed545eb491fd43f95331dfaf43468e9187ceb61dd5102326142d634123378154640394

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State~RFe5c7007.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 a4a0c4c3fe4bdf6d9b73e175b5e07007
SHA1 1e55433e66a1e8f4f315ee5e2b40f4a4b7b5d6ef
SHA256 ce43ea8758719950424551685fbf17f41cc2b23f0b4ff949ff56b63d6f25bd85
SHA512 0b4c9c20d2e95aa05521dc55e47d08be18c71f26f4751a5ace48365fd8861da0cfb10c1214cb98f9fb5358e62ed2e7e27511dda3647e6c050e21a1a437fb03a1

memory/2704-1803-0x0000025134DF0000-0x0000025134DF1000-memory.dmp

memory/2704-1804-0x000002513EC50000-0x000002513EC51000-memory.dmp

memory/2704-1805-0x0000025134DF0000-0x0000025134DF1000-memory.dmp

memory/2704-1806-0x0000025134DF0000-0x0000025134DF1000-memory.dmp

memory/2704-1807-0x0000025134DF0000-0x0000025134DF1000-memory.dmp

memory/2704-1808-0x0000025134DF0000-0x0000025134DF1000-memory.dmp

memory/2704-1810-0x00000251390F0000-0x00000251390F1000-memory.dmp

memory/2704-1811-0x00000251390F0000-0x00000251390F1000-memory.dmp

memory/2704-1812-0x00000251390F0000-0x00000251390F1000-memory.dmp

memory/2704-1813-0x00000251390F0000-0x00000251390F1000-memory.dmp

memory/2704-1814-0x00000251390F0000-0x00000251390F1000-memory.dmp

memory/2704-1815-0x00000251390F0000-0x00000251390F1000-memory.dmp

memory/2704-1816-0x00000251390F0000-0x00000251390F1000-memory.dmp

memory/2704-1817-0x00000251390F0000-0x00000251390F1000-memory.dmp

memory/2704-1819-0x0000025139100000-0x0000025139101000-memory.dmp

memory/2704-1820-0x0000025139100000-0x0000025139101000-memory.dmp

memory/2704-1821-0x0000025139100000-0x0000025139101000-memory.dmp

memory/2704-1822-0x0000025139100000-0x0000025139101000-memory.dmp

memory/2704-1823-0x0000025139100000-0x0000025139101000-memory.dmp

memory/2704-1824-0x0000025139100000-0x0000025139101000-memory.dmp

memory/2704-1825-0x0000025139100000-0x0000025139101000-memory.dmp

memory/2704-1826-0x0000025139100000-0x0000025139101000-memory.dmp

memory/2704-1827-0x0000025139100000-0x0000025139101000-memory.dmp

memory/2704-1828-0x0000025139100000-0x0000025139101000-memory.dmp

memory/2704-1829-0x0000025139100000-0x0000025139101000-memory.dmp

memory/2704-1830-0x0000025139100000-0x0000025139101000-memory.dmp

memory/2704-1832-0x0000025139110000-0x0000025139111000-memory.dmp

memory/2704-1833-0x0000025139110000-0x0000025139111000-memory.dmp

memory/2704-1834-0x0000025139110000-0x0000025139111000-memory.dmp

memory/2704-1836-0x0000025139100000-0x0000025139101000-memory.dmp

memory/2704-1835-0x0000025139110000-0x0000025139111000-memory.dmp

memory/2704-1838-0x0000025139110000-0x0000025139111000-memory.dmp

memory/2704-1837-0x0000025139110000-0x0000025139111000-memory.dmp

memory/2704-1839-0x0000025139110000-0x0000025139111000-memory.dmp

memory/2704-1840-0x0000025139110000-0x0000025139111000-memory.dmp

memory/2704-1841-0x0000025139110000-0x0000025139111000-memory.dmp

memory/2704-1842-0x0000025139110000-0x0000025139111000-memory.dmp

memory/2704-1844-0x0000025139110000-0x0000025139111000-memory.dmp

memory/2704-1843-0x0000025139110000-0x0000025139111000-memory.dmp

memory/2704-1846-0x0000025139110000-0x0000025139111000-memory.dmp

memory/2704-1845-0x0000025139110000-0x0000025139111000-memory.dmp

memory/2704-1847-0x0000025139110000-0x0000025139111000-memory.dmp

memory/2704-1848-0x0000025139110000-0x0000025139111000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Roblox\http\45e20ecd29b50b9e8111963299275d4b

MD5 c6588ecb6c7ce000190bff2e80c2ce43
SHA1 9dfc9727b448e084bc13f4235fe45578cca23012
SHA256 744bedfe9fbfdc894c6eb3862ed095e2278e3e92bb730f3ab7f58c0aeb9d6b9c
SHA512 c496f17df40e7c39646395589e89a7616ea3e16809517f7cff4699c0499753668731a90b27b4cbc7628343aad2872e4a5245870bc1958f627d14505c1c9650d2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5d34a1f5416fdc978c6e0c7edc7d67a2

MD5 c76ac26f80988d0fcf03874d625b86af
SHA1 b04a5e95018f8eca571daa4077e66626b9ba0de6
SHA256 3dca66141315cdee30f7604013deab2fcc1dd74af93f9630fb700b7606f531ab
SHA512 23ba1357212eb135ad87fcbb81bf73fcf2e189da34f08ca1cccd40d763a856e9ca8ce5514af395caeefca2b0dd3a6fe3b8d43e060c5baf5139fb357fedb90a59

C:\Users\Admin\AppData\Local\Temp\Roblox\http\95d98e1cfee595f720d12856399cbd72

MD5 39be6457e3ff988375205765c4660895
SHA1 8e946b84ba320df9c28aaa6e759e24719ec38aba
SHA256 1194e8aa1e2ff45887bca03f3ddee55de61436c660e162ae343ee64e7d146da1
SHA512 80f75601d5887291d0f2884945dd2ca197090431fb30dab6e6ee9ef601076950922a75f23a577dc58824a8ea7f57c48c1a742cdbc13a28215bead6b2b0b47033

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b0cd0725ce628c802aea646becfd46a5

MD5 b7c03229a5a8d6586e4532281bf1bcf6
SHA1 e2cf4dcb1a5ed9ec90882b05fd92a1cb2d9b7031
SHA256 2f68626defe72fe2f0f653e4f329dc40a4da28ec0b6805b7e372df74503490e4
SHA512 4b33587bd1e348c0c3c90ab22556c1a1634c9c16a7986d5ca92cf409a6bc9a2d4ef6ff29f1c56fbaeea7ea42b9e6bcac980f3a13869c7321dfa94b3d4c68498b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3acc8af1251b7ed321f9b36da661d9ed

MD5 808cb55c51b6fc55fa6cdb17892dc876
SHA1 4487b86a3a42ff05e109800b1827c100390245c0
SHA256 eed0725bdeac66a2e53e7daaa033f06c360314d751df70176a0af3f23eb08c7d
SHA512 0d2e6534792e7d417a6fa8403f22397f406352a38bfe1019d87e0308d041b3e69d7defae77e2bf6b87adb3b7d59718efea7d5fad340847c681eeb293beb0f24e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a1aac6bdbb2642f3f23fbed64d042c3f

MD5 2c65a49f36fbe81aed88d7626a0112e3
SHA1 832fc429cd021f288f5ef9531e7dad6c9c6507fc
SHA256 eb8f138e67962a5c7db64722b78454da2e3c3d656ec8d72c9bec566f10a942de
SHA512 4fe7c7a7e439f6b43bc13af9291994ff913fa65ab1d77f162c97b18ae505b1c46ffb2c9236b7c9010580b095526a58204bf182aa5d476e3d0a006b2ca450d181

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0f10b6865c21c904e29f52a54a31f37a

MD5 38b25c1089062288a7a9a8876138e465
SHA1 d7dc1955cdabe9a50ef4f6b345c9012e3efeb56c
SHA256 e39aceee4952e730f1a101894520b046ff21156ebc79c0f8e070e87af20fdd29
SHA512 198469bc9aa03de2c29b322cee7714a67b1b421a8fb0b6ade7148f54fb5ea0a37f6afe5e80f052f41815174363ca2b2dc8395534c624f0f87d2f7a0e9d773dd5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ceea000e430b7c9714bd62a61ef5eb0d

MD5 e6bf3b994b7bd85aa47c17406d367d2b
SHA1 b18be2803acd9576aaa72bb19116b09680f0cbd0
SHA256 92638ea5cef2b20242923fd21757df86c8c434ff12243d480250364b8480f2fa
SHA512 3e207bfe1b30c981fb533971769a4051c0c87ffbfcabc012606ec939c5b66f2bf59cefeb85c2b903856d6396584b2c96472965c11d90d6a1ac9f59b29cf3d664

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0cbacc9a3c6aa07deb13db83f658936d

MD5 e3690a37568ee9fe7f191a17a47e2146
SHA1 476c939e0ca065001820946509e36ac2842fb1fa
SHA256 b8da756d34febd98745815e7ee643c49dfdf1adeece7fbdeda22487c06472f28
SHA512 c7b777cb3616fbe210b58c1e2395ffb378ffb36c2fed3af8c634e7d39667b9b433386d1a284f936a1d4e10e76c7a678e97216fe801cf95a0fc3fb313fc4514a3

C:\Users\Admin\AppData\Local\Roblox\4957272940\InstalledPlugins\0\settings.json

MD5 1d44007d13da3eecfc0386ffbd99f9ae
SHA1 060b4ce5674ca2881f685c5579fa8fb3e2530256
SHA256 b2c2cbcbdabd47765ca587e00a8e894d6fc78beb53448aaa1ac91aba793e299c
SHA512 a555b98e65f1c064b91c4f5adf75b2bf249e251865807ad2d680018f78a0212ef5580e67cfdd00c30573a01cd8f02d7997ead726b4dc99b507a1483299dd4e1a

C:\Users\Admin\AppData\Local\Roblox\4957272940\InstalledPlugins\0\settings.json

MD5 a124ac9f9f82ce9bfa4465e75bfad473
SHA1 465ee8d621bdb73b9987dbe479b976e1cef6917b
SHA256 97c10ff6f86f63a5fe2097b8592321a600ee8415cd1822e441c0ff138139261e
SHA512 2e5205b90c7de76a8ff73163520fc36db7ced0f891209e6f2223ec5419b0a08b0aaf866d9f57ccc7f99a1209d9b94567f840374387282090f54b33f35fe367fa

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ce509e8b9e297bfe237059275b80ee6f

MD5 1f24bd72658bb247e9074fdabdd0c718
SHA1 378ac82e3df1641524f98c9d45db159bbb267f00
SHA256 5d11dde1b235b542a5528241af9b58cd634de84e3a883776a0f406438809cf39
SHA512 15cce30bccb88aa63a6241cbeac3ef0785e07a0d12540c20223c995d61e8a288f622703df1356cb2305bb0f198dee142792f75031d4b4bbac84767ee67889ffc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3c85359d5c04bb92e62078d2a2b44b00

MD5 24e91b67d30f6bf4e0b5b5b311bf5a10
SHA1 d5a793a3c576299d46c64f68b594127c66f9b1fc
SHA256 d7f82dc10976402d42ca18ac2be546ff081f31b547808e73b5e655f19b6f2c09
SHA512 904e13c841076e8313a3dc14d78b2cd52d026495b5b9d38f1b9181091a9a94dbea87d04376934e15c45d0796d77a77485d02b23a78ed5a6e82419af00bf7062b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0f59e9fdf4da71481870424e6fc30a30

MD5 7ae049c294f06b2a15cbe791a02197db
SHA1 ce92dbb6757b92d9ed498c915232993e9102f7ab
SHA256 1d8a1edb4d4583538a4c3a27034c79de63a9263e60270dc6898acf398c905313
SHA512 ff2b26eb23aeabbb86dbf60a483e6539bb60a6506a3e8dea25187ea1ce7be808e6b13b0a0b21eb4227549a0e6fef0b32891f5d9ae12ad94d83c2f1422adaf8da

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b2c22e1e1eba57b7893baf1dbc05537b

MD5 a00d4d9130cba47efd21978dad83e33d
SHA1 d4cb71778b0541f5f26f4e5873f6c76d45818f8e
SHA256 c96dbcafe82cd6a795d2bf99f5fb064686aabc31ece2b759e111ebaccf6cee25
SHA512 49bdf636a9e3987b7086561e6097271f42b788e726537f147ae7ed19954b52519276e4c8acc1715f930fc8df5053aeb487f237cc374c043e9bf9202e585c5556

C:\Users\Admin\AppData\Local\Temp\Roblox\http\26d7d12c3f91bacd3717ca2d83fedc6e

MD5 4a811765c51eb9696dcc37a35efc400a
SHA1 9fc611fc419cbae7a16913ce6c55b1d75cbf199a
SHA256 926ba82a4fcae4db04877cadbb7cbb92f760cd10b51338d3eb5792bda708a361
SHA512 743f9343c90a9dbc2b7710bda4de7634ec42b313935bf8df1ee3bd1e109a91a4eca5861c594fdc7fa96436d2be3c0248a886d0d5e3b7c90bbe21af2e7ec9d966

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c597fbbd6748945312494e7870d59f10

MD5 f1f1398c7d12435f91f04dbadee3f9d0
SHA1 3c26ef304254ea9724d4a6d67852159eca80966e
SHA256 e19a834d7a00a0c800996a52d317271ada66b5ae07151484a6691061a7d7fe72
SHA512 cc679825bc90b4b53bc25fee142ebc99f7122fe005848aafc9e66b76d47882afcfceb1625bb27dc297cb4f93197436ec75d7928e77c5da2a9cbe98913f5079f3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\14a9419ddd4a75cafe04c3c3667216d2

MD5 0f05c3ff5bfdb89dcc1b83d5368e12c2
SHA1 d6f888157dec49eccb867ed10d677840147fb1f5
SHA256 fd71e9997753c2d54f1decda7d250d234ac8de4590a46485a155e3ad3841ec6a
SHA512 fb0e6ae0fe72d8fa8646b1e0e9f7745d6b3ff91d25adc4b64e6c4f7d5ae64bf0e9bc5cbd6266408bd7c47fbbcc2694862686ec0d45ebb744ac50b7cfb0a2bd30

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1a77c5a978a065905c380f1800860f47

MD5 539b8613a0fc11ca7ceee5c8aa38ac43
SHA1 3d793a894cfc0d03b2d202a920f1ed41d1a646be
SHA256 6d213a2887049a473ea0c7ad79ea695ac194f8e573e964b673de9baa5c92b5f6
SHA512 f459af2d252145dc6f9d046728c05c8503e7c3174c9ed10388edc465de5435e10346ed82edd2eb3a6b362651e613157cef36377c3014e4e7c5ec42b07a04e1ee

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ccbc3d3b9a2024f180ff5ef3712055a9

MD5 f769d3aa60212d95e6b88d3a59f65f2b
SHA1 f299779fbb3d6e54230b2767881bab9b580d4d20
SHA256 7b1681baa589b144cfc04c9c5986f7aa16dcec0656dbdb2a05028ace0f51c728
SHA512 15800e787037549e925f31fe02c91b2afc2e37ed1342d33c7a106be8d9a10523d603581b242b1a15df18fe240399752cf66be093f9b932c546f726da0644ce3a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5477b96b8c7694aaab08397c539323cd

MD5 74efd118f986358ad4cde9a57e61dc32
SHA1 0cfe0335bb35298456edc9ed791e019b70266c31
SHA256 b973558fa71e5b3a07fe6ca6180c5bd0cffdb343af3a0d2e4e4e89b40b194ee5
SHA512 357ad98fcdea45563ac733ff39aae16b103a1327a063445b6febb89616a61fbcd140c2148eeef122965cae78c2158bb39bd3eacac6d6c70a58546489687dd733

C:\Users\Admin\AppData\Local\Temp\Roblox\http\dbd61a11fcfb26392338fd2b1ff6a849

MD5 7342a963fbe8b3a5bce98391f7c91497
SHA1 d937946afb025eb344dac220aa2d8d3494c759af
SHA256 3306f048a000d6a897405f05abfd4c6ea181af54c1b77f6db995e8e00a7a17cd
SHA512 fbf1bc5dd2e4dd9a4bda60309ad0a9d891b60f5666d003af712028b28e740f060d6d745f1d33fbd8db95f0d6d8b4f1ba18a8c9622bf52fba1d14f2299ddc4053

C:\Users\Admin\AppData\Local\Temp\Roblox\http\78e2b6ce1224c7617a6a8c90174aa783

MD5 22b25a819c414b6c626e5306888142d6
SHA1 e7d68968d0848af0e5203409227a1980dfeb4a0f
SHA256 275eacbd4554f5b0e4a4266514243c661edb1e4eea694a2fa01ac20a531dfcea
SHA512 bd04fe05aedb2cf10fef09648566834b019d40a6ec8532b19edcbb2348059984dbd5c04d6fd9579dac55f99a6b4de820cda159256d236450b0d0a51594e3b15d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f469136d50a09240f313e4f48b35b40a

MD5 81927a5a1612202db2ce511c62ced773
SHA1 4414e92b078a515ca699a82cc3bc64a1e264e4bb
SHA256 a8a2313bedad3d93a06ce01ca1abb579013d083e2fec866cc22342713b7b6b2e
SHA512 33918119fc071674aac79062c0e4bab978d04cc957189cffdb8c1bb1c7add1bf7d9a0ab03b08d9e997bd8734266bcbc7a312b316f8303347e2aba876022e7cad

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9ebfa9ac9af1a7e825fa303c7cef0d00

MD5 638f05a6d2e63c63ddf5bcde414cf4d1
SHA1 3ccd4ea7034ab36116f5ecde1d3c96387a66e1c0
SHA256 8e92748ed9b1257258bcf8096b6b162269f338113edd06ec498788cb4eace3a2
SHA512 d23e9e2a9144b3ead3b47e3d5dc08bfbcc4d3a083184520299c1cc3afbc608aea4179d16f0fd96ebfcbe34851c8dc66b941c62d7b84f5b823d3c40d6854eb992

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ee967de1f839e1f82edf0dbfed505feb

MD5 296e4fe06404d04a70c7d45bf96916e2
SHA1 3ac545794ed0ddaeeef03e26c32b69f8267272bc
SHA256 b00dc78cae24887e0fbeaa14a91749359c844cc4c6f03344daac077beb20cada
SHA512 3676b121baf31055dfb26cd29d919e797aec7ddd40058df93991a8cfe32883331eb794ea22e0ffb0537b6aef05d311336c44245aa837e1acc5c65513d54df270

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c042bf256fdac2928dc9938bc0c24395

MD5 9e732cb70fce6e130cf5a9b819c40961
SHA1 f1a9b14f84c38cba86641bda0ee167bf847d1cba
SHA256 5f05bfd1dd2ca04abf1e0035b0e0895057b6ac5a0a8d2c87813e1f51f4b5f457
SHA512 6796cdb837b2e467cf1329833035ca57ec0639022778fce1738aa14f5d41a4a98e53304e94b7df3966ca50421bb8717d972efe18a6351408bd388c5b6aa12a26

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5d90ffffdade11fca3ab6d6173b10742

MD5 8eb0fd433af7498b61d3380f812aa9f9
SHA1 1c2fd03e11050b47c0b53d568292894bfa805438
SHA256 a400ccf6fadb706e69adcd72036d390b579925bb0f09bdeed0c278f7db125f66
SHA512 caf4f4b6269c6cb72f32b2eba515f83dbfd9c4de48d78c1c149a6b425a4c2ab8a8d5d1e02afd0c2ae7f11bedea1fadb60cd4f96a7deeb119640b48bc9d0dd6dd

C:\Users\Admin\AppData\Local\Temp\Roblox\http\def185f32cacafd8915bf1aed099bf25

MD5 a6ecdc2fdb84f478019e3f8eda5521f8
SHA1 8a71a780bb394602f0c02389239b951e524d0e5f
SHA256 2a79a75446a3265dcca7a138526b5129d4ad00e1c0407b6aaeb527593859827b
SHA512 f8af4561a79a9e404fbf76ff0a72971f08265631458f3af158ec531ab2de9c24450ae13035a5af5ffd4c6220fe5a2738e6b7fe1da34f437342b0446301e3b083

C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX1E36AEA9AC9B48AE88A91706353A6FD3

MD5 9de52d85b06da1acd48afa0d6d1d19aa
SHA1 6683b9c8eabeb1f315873fa6bcdfaaafa9353ad6
SHA256 8b231ef4bd7d12979f583d8c1b89c66ae7e379d6557a1bb6bfeffcafc15f1a2b
SHA512 f3c1210177102ad92dc8661720f12f4c6aed3a86991b59c823471464feb2eed41cc1512acc864cdace009852380701c20a694fdc0311d5a023c2b9298979c8fd

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e508bcc64367cf9b98fe28c4255655a9

MD5 82b21f9bd843529c51bc0e290ca119e5
SHA1 697c8e0ec246effbf2d047870b81f701756b591f
SHA256 a7f86e25dfed056d6c9833e367cb58dec30c5707046b9941edb54726c78620d6
SHA512 8e1ecbea17605f90660dff9c3918bf0ca7a4f661611ca0796bb875098f15d1c1e3dc595a0337162c26ff78949aa66c27f883a71c5c8077f9c29faca1c92c4889

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8bc8142bf8cc1cf9651c8a362da64449

MD5 19163b66086bbfdfbb675d3e29a8aa33
SHA1 67131ed92b40233c14475a7829cee371eec3a323
SHA256 1d4ba4bfd8dd8a532562d2c8bcfb23d9a82c8e7957e54a909e65f88242ef70c9
SHA512 10f4a5a0aff7cb4e260b26fc313ee5d75a438c6ad4ae51327f6b9c8c20bdc1b3ab9a45b37314c03d148ec7629d580e895cb7938adac0cd219aab6ce184468a39

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6dd68cb0200a2861cb23469d7520c837

MD5 8f26da95fdf19254cf1520d4f2152923
SHA1 f095fc770579e744504718c46bf741893719528b
SHA256 9d1db83d9c0d686d3282252526c5c89a078bcb2fd93f6cb0d524d0659427c86a
SHA512 7c547d463c09d067be0376f8c10d51b3463d419f0f1420fdb195ec9667210e6f4d4742283cbd4a493a7a68f33ec1d244395bd8c4d2f3be63c7c76caa17e05af9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\cc7ba4b03084890121f90573c08fe802

MD5 c519f35acb2b906a14843671b30c4dca
SHA1 4ca1f63a314e6f5fa8dfcfb3c65eb600140c0070
SHA256 78b8f7a7bda9c66b90dbb716b639a800e1be42941743b145e0e91ed471dd8a54
SHA512 97963fecfd7edf26f2211b8144ce9c71e494d29583a9fb07c98d0e76c01a2929d6556072f71eb2e4e8693af9361c2445d67d16bb2f1fc844140d122880cd3208

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5115104c7cffafdf5607ea77a3b35088

MD5 b65c1a6a506a176d3979b9f8f603b899
SHA1 c50bc108ca32c27c17d2bf9b3cd880cb84bada8a
SHA256 d0fdeb0d693131e34fb0702794fedee4c703d8e3efaaf26a050cf8a142982c86
SHA512 2126dca4251473b8f642b648d5eaa5d4bd59d87924c665513239772db2cf1c0002bbd75da6266506906bb29e63e7cebb7229fc632751e0a42c82c140fe138d48

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7581a9a23735a343b4ecea67d1198bb1

MD5 c86448495cb7ca58e345f084f6f4ae73
SHA1 0b2297c3dcd1d57fb8c9aa6532b0326fe301322b
SHA256 a0839dc623c1330e766fdf2ff0069fc7516bcdd1bf347a72140086736eaa641e
SHA512 983ead14b37f91892e8bd7af0a49ea1c812e5dcb7fed67ce9448cc75ef2beb831d04b67bf138c717abd41ef1631cc338bb201d728f47ff25737194d4a155d57f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a5bd6e0a8e9a1b40fcbc08bad2a94559

MD5 5c39923b473a18ba8dae0195512c7cb4
SHA1 a29abce36a5f2958f9b8324d51cf841ebca96f7e
SHA256 9d4427043c654eadb9c750d723ce47f64cc0199954eb664e78cb74b8af09a816
SHA512 f48f6c76dcffb5609c6bbc4bd485b8712968e860c7f5c26e2fa4b455eb4464c6f90e7bd551ee75131dd2e143799de3129a94c3041b32c51e8c3bf0b423126074

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8f82ee24e69866dd3748305b9db72c06

MD5 5d98e2e6c684700e5072e39285c6d339
SHA1 4e6ac20c340ec562d48571d916381b932a73a7ae
SHA256 54b59bd6491d18e725b30d471397b7ff53caecb7fba5a5015e47b98e26806f56
SHA512 dc8e1fc18485a58312d953004b3736ca086fe3cd2b2038573789cfd52c7ce312c7838945f2b77617434e507121c8093af7b7a738ccf97f27548673f287aca1e4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\81483c16864573e12066978b4073be55

MD5 36de38aeedb87afb7cddc1f102f06c41
SHA1 39a06764dcc888b494ad2bafa2acce144d04f269
SHA256 9aa67701184a14317c7b98a5bb81ff8f84ad96662bcf6d2532eb71004227376a
SHA512 0ced959feae5685694e244b9b3f0acf6db3b4cf56035920532ffbe593b61208d316026844413d403a1376abc7143a613b32dfb7997dcacfc58491374e51459db

C:\Users\Admin\AppData\Local\Temp\Roblox\http\aaa39c5f3ff965de07f7a5e770ac084d

MD5 4b6d67d7bbfae04c725d3c4557d039d1
SHA1 e701495ef58dbe92669ab88a440713697d4214bd
SHA256 55f1afe7970321562315838b3cd89dafa2362e5959a28178bc0d15d9922c4654
SHA512 c99a0f0ba4586617658432e299afd96e436c9ba403e7847bb0267de1933568c4771280325b121afa4d5957d0babd3c4d5bf9a5de3c1b96f1a01f3f4eb7e9e407

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ae6f6da72d44994a0506f3c4e01409b7

MD5 62935375a28b84784243e28c1a40b6bd
SHA1 f43b81f8baa8eba79883d6f2109abe50e01397ae
SHA256 6cdfce5ad3e99eb76326b0acbf8cfff62cf461cc32750d4beb18d3875536aef4
SHA512 a2709de53cc2a4d88a59852e5519886e5f53b6603b974c3c0e74b2679020feb3e2a3da9807b01ebe0b4278a471f59a1d6e9b8e8181db7c98b5db896fd77b044b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\14219a7b96e38fee831e9c4c8de6ee1d

MD5 0796d0fa911d5bcc43ab5dd93b1e537e
SHA1 fc72cf87bb2b508a4ac62ab9993086d4391877cd
SHA256 5bba985d1ecd0026d224c189de9607171866b540f10fa9c40c9e3411e579999e
SHA512 92436963c975517cb18acdcf12ec039c244e7d8690fb32f9a8d369ed1033b768f449b70329b849cfc7ebd1c2b76e5113a600a814d39b6ffa32dde61276f0cc2f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8105c44d3796161f1a3c919e0332c219

MD5 3d7dad3e669918c636eb3e9504fc36d1
SHA1 3ac8f47efc3fc71eaac2b6e494ef48070d2e6cb1
SHA256 baabb2d55fa437958ca20265ca1d93a615d1b67f97e6319a53f91f08c54e1f3c
SHA512 27c54c74de5528cb7829a96be8b6ddbeec99a14dadbf1bba19221a428997d2270cae1a1101f879bef1bbb6b87b26ef47ff8429ba3b37e8d09b3e022ba94688c6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5ce80fa948bc10d8dc2ca7cce0f9b930

MD5 571dee447dcc14c29a7e08767bd6b5c1
SHA1 f1941a993ab867b4fad22541ab26e1465a755123
SHA256 8d1c95f5d55977063fcf247356b592f97f1f16243abce7b4687af10ae3effe08
SHA512 5b200a1c1bbb43d34cc90455d30d4405f5381dee5af240904ceb0138fa22677646532498d8814195b2563f5778e6d95c8be6d910cbc695fc685a8b25545f8dd6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9476ac03bba4cf1df5ab53d02fe192dc

MD5 f3d82ea0933bb0bc73d520d65068047f
SHA1 be4e1869b91842a748ac8b5b46dbc79e5cf65d37
SHA256 05df0644a0efee34a5a0b5d494430ed6b82b49cd53ca72d938d7fb01c0003302
SHA512 11b0077972690b5816ee16597e62408c7317e8bc1c091aad9e502abda4008cf7c10afe95ef20d33c90c6c50140a356721f6ae62e1ba268979ee1aa4dba6f5bfc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\186c73fde9923acf466630a51ea37b1a

MD5 24ed23e60b056f5d334e00088ae33836
SHA1 75a42ae94a263bad5bbc482bdcc0844d82ad8206
SHA256 366e81a80b5a1771169ef20531574e838fbc0d61a72ba8b21719cd38055b266b
SHA512 2b55c9b67248b5baa5db374ac59ff227c0753412f19c1ac6e9e51aa011b429ff2fb62e109bce576aac18c9b892d37487e2fff8057c1be6cb67fa662c8b8bdeab

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2eb9ab36829994d11c65e82f546b5241

MD5 6aa8bc268a75a675bc4c37a3b8bd48b9
SHA1 7d5fdbb6c0f6e0b25dbade748580c564c893bd01
SHA256 5da5a04d315061907bb274627ecc359d57414ac63698d2ac2404b4506368c397
SHA512 4100afd1428ed410c6afe47306b8e98bdf302fc183afad9a52b575debf248443cd391ad5523ad1bdb69e5df82536dcdff246182b4e2f6aa7844a4d81ab9181b4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7eb9c2ada496c1f585e5b7b62ef7f10d

MD5 b247f71c66420a3ee186c782dc9989b0
SHA1 5ecbf9e6fdcdc627bc80600350fe08eb70716c19
SHA256 ead4058cb5b7ed21ab7c3de643a9855c4df21c15affbc4e928c77d6a4546d418
SHA512 652dcffd2cf9a721ff3034c9a79129ab4479b51252fbc4aaeab7e94efdf57469ebd4e6b03e482504cfbc40144607b02b8016c4aa33ae215ed8de7a3023030a88

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9a1dede260c89ae126078ce683ec6e03

MD5 9fa3b4ffe5e6abe8adefe470d2e429da
SHA1 2241d57ed79a933b55d08d61c6ba3be22b368e12
SHA256 f4d7262424ccb5efe80dca733cdc9bb5f715ce24be58977cf21b53d2856e97d2
SHA512 5bbf910b26436dfe75dc39fcc2df1f26e3416ff5cd3f0487ad1ecc6cd59ad463dbe2714540e6cab98b40e3e02fa35713dc9a8705cbf8e1b3d922e78a0577e705

C:\Users\Admin\AppData\Local\Temp\Roblox\http\460c2f8a4b941819d81ee5e0aa43f732

MD5 3927ee3a62d4fed5a032e0f676459ee8
SHA1 3188b1c83d225bcaa1d8cb1c80e52f02589fe0d3
SHA256 d06e927d723cb60580af0eba10332f1d9bc7c05e94d24cfffe2be40c6b46c4ae
SHA512 29e82b44ac9bc632fc64f089464f392038a852dac563cee3c55845a963ed6b2f7fd4c85d264bbec6779088a273e8692f9889638ac50d901213187ce8b7760e43

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e81489ca248da128fe61473200c5d020

MD5 520ab766bca67603b739d14545224a36
SHA1 f4034ed446290fc46ec6c34c2477b55d6a07476e
SHA256 c7a8d3923046b6f77cedd9fe94b6dddb725568999a48265e7457c67ede70df5a
SHA512 a13593c5e7f348838561d4afbd8cbb15fb413af7db59f462b0fb87727dca3393b8d1a470b18cfbae8161755f5558b84a23f7d814578882fb1c0fb51a11d0f2b1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b2f20103cac5461a1d3547c6e14d7587

MD5 1b9490b907af8da1fcdcca50c8f65b90
SHA1 cc193d424cf6411e6354fa24ab94a1edfd252cf4
SHA256 7332f2665454eadc72aa894f2dbbe8369ed53b1462c8951d2c0f3e1f09616397
SHA512 bbc0bd3e165b69997bce74bf28349edd89dc8e7509457c8a40df3de21745f3e63d0026101b4a31bcdebe0411a620168b49ec0f0431b7ed2315f92e346cf458b9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\373eb9f859dfb4f553b19748d262bbb1

MD5 e6ac2d485aad3b98341b7d126a034c04
SHA1 4193eed9387a9645f6cb6323b48f31d4ae7096c7
SHA256 05defb267e9ef077e09014672106fb227f7166552fbabb131ca26195fbd32b90
SHA512 18ec7a42adabfd627061a45546b2499f9cd51650ee7d3d64b1c5eac1920771f093da37656ae8a07cbff974ef8f1328eb74392d87d6aca52da0d8dffbef4fc700

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0aaf6f7317997d554f4a87946e18f4bd

MD5 b7fcabc842e34093c2d79eddb9b0a14b
SHA1 a6ac7bc76d847debd8851693a34c9d4652770ec9
SHA256 ea654e6a85aae695ed6a83519d28e14c497685a7d9a1e3113de375dfad9c0105
SHA512 30bd3f1a0f400ec09fb702f60da46d66415fcfbeb38f0c4ccba33ad9ec0f31c536dfa514ab06a7f4fe96b7685195a69f9d30caca2244dda3ec8866193f2ce26c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bbd32ecc5c32b11bcd2509d541b5579d

MD5 fcf7972a3c5bd7a9a8239778acbeef31
SHA1 ee81b0e3c6d7d6599776bc1d18c207d5264299c2
SHA256 6854ba55b5f4061656e4660ceb37ef25a108dff6f96167c5b2a67e291ee9f56c
SHA512 48eea8ec572bd641c02e860baa0a11c47f65f1f450ca6be43f3502dc8294d9ac6d495ba3268990a867a271a6e2753aa2d2b80bd84bdf77d99cd1c6446a4e0209

C:\Users\Admin\AppData\Local\Temp\Roblox\http\84757e79ec2d4ea81334496509b1a323

MD5 1c289c14c895dfdf05610074041c670e
SHA1 75ec8d8c4bf89b0d0ba0c1a3487c11988019e975
SHA256 7041f621e57bb76b41d4b329081403cc6bd5a161f8a45ef494f90942762ebbe6
SHA512 04c7d00b7225f604b32a9428860bde90a0a432044878c1060b638761ab8aba20dd41b8ff98e38f98687b587818a13a7f95f32da5ca839956ae56da54dfe3b079

C:\Users\Admin\AppData\Local\Temp\Roblox\http\912f5fc3f8ee84a59c48c411e53edbb1

MD5 c77201c032a8d835884aaef460a86426
SHA1 65082a70376eceba181d6a51f0398813e9e3c8dd
SHA256 6d97a18d7dd1a3971760a44b5c85aef291e6338c1e926ebabca6f5fe31c675d9
SHA512 c66c74ed3df2b1f39f047cb8ae6ef52275b0a3ba2e631ee78ab5af54122fd8a2fcd9dbb9a4d8a70585f50edfd16ab95e4200ec2e3599c28adb8289a8e61afa21

C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBXAD49A78AE3B54D8EB2776D981D0311EB

MD5 b04c0dc18c7d55cd67b193981117e8e5
SHA1 de1b8da5292626c82c5369243ab17e1fe87819e8
SHA256 0e9e0d48cb004bf17d389dc2d43451e7c45546210703bf2c36048568477f538a
SHA512 e6a2aea601a6cc021d9537fd56eaf034dbc5932f9dfeca57fa69921733af8d1c22fa4997a596f2895ca60a9a064ace6a135a8c5893381595521da9cdcfcfbef4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0e72d04ad553b3d0c14270c19eab2986

MD5 71998edfcaf6236c9cbb0100558e9e10
SHA1 6efcd23ccc8e4db8814e5a2e6df0db27e198ba81
SHA256 eba46b16e0d6b6402fb3c4ae1ddb02615263f553b1102c0ff9c7d1b939f30754
SHA512 c81c7c5c19fcd4999b9b0a7abdf044621ebd75fc6ab4058472a7e61af90f2fa021e64040e179e98ab7d31bec33ffe042d93025ea01dccfccd014fa0f72588bde

C:\Users\Admin\AppData\Local\Temp\Roblox\http\642214bf9a59cbc56156898781347ce4

MD5 08d84bf2f25a89392f1aabc36af862f2
SHA1 613d3c85dc28113097a4d8d1f3f727729fdbeff6
SHA256 6268b8c3fffa1759c68ce45a9080e80617ea54bf6651301be4c1cb06ca7bea74
SHA512 ea3c0cd6b18243750e85d10626332af4f9d05e628de062dcc2aa7dca8fd20616b338a39ffae72b09f0f64c0675c48b75d0fabaac88b1e33b8fd49a45b319d374

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4bdacebda49ebc2c2d118b7ade154ab8

MD5 46fe622ae1ed5e04c8e870d2955b0b5b
SHA1 b53f9d01b0b5eed94f7e1efa209fc6fbc95e9006
SHA256 3f64186c98498258f668809710386563ba357ebe3f72afe8da26681539ba6254
SHA512 bc03f8d6cbd1b1dc2a5d0c444d840dfafe51af93fc09b8393f921d5c1e26b58145280d4d51086c3ab9c4938191221c08f3636ad9f317ba718a45fe265b17f723

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b36482b1edea43f2633ea464f06858ab

MD5 d6f5e76b38b611737bea4df7021a180a
SHA1 180495d2c8f89bc65cea42c5cbf343e0f3e0db47
SHA256 cb53664e949e16db8ddb57ebb8146b13b785a6f57b9feaf12109670963efea8b
SHA512 bda67757d47ae3e15b5278a8fdca0a73c1aaee595a27e664a936085ff742dca717b3a1981340589d0a270ea93cf3ccf05f61872fe006c33bd52dad8d61301789

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0da1eff9a99725e6873478bb53e6ad07

MD5 20a9b87070a921eb6ca606f4b49e4ee5
SHA1 500f261fd7bbcdaf2b4b2a3a6fa6f0cc69836e49
SHA256 0cafb5b24a63bf21914494b4800b2ab0aaadadf01fd5413b85ba98b573b8cd61
SHA512 65279869345c2add4d752e8db9b2b5d57f2f21f7441559a76a8c1dad56c8759a37bcc0741bb96164e874fa8062e89e2c200816625328126e019b377e79a973f3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e60894907471600db01872a1741a0bdd

MD5 5bc34a1c60d2a4bbe7441e8307189156
SHA1 136eea02e3c374521146b9f530ad9c1151e20a37
SHA256 563d0ba1f9dde1fa635ee6f29925712b5a162396d7681d8b4dae1fffabcf5626
SHA512 5c542b3aa5f8036901247fee55c187958546966a9dc6b34c291af2d63fe0c3c8f92f3d87466e02e3b124f4972b1558a743e927520dc9c3fc5256ee8d066aafe6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e6b482665e130d2c6c4c2f7990354e75

MD5 a70b131026d5831c371a7a89a1675551
SHA1 b00528f44c72b16bb826a8c12033d991a31e038d
SHA256 545e29a62fbc6ebed60ff126038d047185e2218af1b463e77400713a130f91f0
SHA512 9bb8b9435cecea2e25adf616caadf4f9d7f2af2f905433a797e7be850cbafb9407b04efa5a2b99e7e95dc6a0a6fa56f709a38fd00a87676a22a58dcd6c6d77b6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8e15f36b2180497bcb0891bdfa9def53

MD5 934a11b8eaef18e6790e660f167b251b
SHA1 1195e4573af3ac1c966de8210b162d76f57df7e4
SHA256 8a8ffcca05368fdf6f8941aa5ebf50c565c4946e660dac731827703d5d36665a
SHA512 7b9ec190b7cbdaa40921a775beb6cc245f9e92b12785d0c1a9fc6285a996a809a2c80546a099fbdf5e2628404e4cedc2ab652f3e02c27012fd2fb3ea6d1ddaa1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\576c7360d7dbf5c209ea184dee932ce8

MD5 8b87e00e15e8b22c07fe61343b921def
SHA1 5275488ffd82741832f38ed90f0ba311e06a8c67
SHA256 e9bbf61c79723b15b5210f18154f102fc48902e154ef8feea2527b78e5941103
SHA512 0aa79e6ac8b69bbfa10dd41ea6200ef2ba9c7354969a74deacbc36e5cdd79093d6f592aecf35280beef8fb51a520ad0f80a44d76e63135c1e2f5fb19bdd4ba23

C:\Users\Admin\AppData\Local\Temp\Roblox\http\774ad174c53c04e6b1a29c22a5f6e32e

MD5 99bec00bfc46f3e950ee281f6c95acbb
SHA1 38ab6e7d03e5a58a32fa8b93cdfcf4fc1a959e48
SHA256 df51d04572d489f40be555b7273f7ed2e772480f2827e3bda6213fa38c909328
SHA512 04d346260c3083e318e1b7025e78693f97ab7da9511927efe02e9dad7c96755df7b3dec8bafd175c53514bef532c24846b8e9c429ab0f7942bb9adcadb2c757d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5965db33c00199c8da043230c1beea49

MD5 3ae9eece15951e58cb3c3333675f16bd
SHA1 f68f72eb957241ed71bf15acf71d515361c70398
SHA256 262a1a8b853e44e5ea0f8a61549527c9d7ad4a61c43fe03c062297251ca0ef2f
SHA512 c1c4a46bae66037adce49c680b42c91f8a8f3b91fa21da308db6e0070c605f0b6a072922adb7978c11b83912faa5c82fd134d3a38ad7b34842de4c0514dadb3b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\22b19b20581c5f62166a73f4ed0991fb

MD5 908169b22541e44d56f5d1909909805e
SHA1 40f82ea8fdfd3295706176ce7ba412e753f8eeab
SHA256 d52f23e90b859cc5787fcd15679a6c5ac79ea5bc9b03d5f58e6a67f57afe5bfd
SHA512 b4fef403d66bc05f31fc0929d38f44ac15ff6f2d3cb02160073a9d939ba28e985fa77521e558ece1c4ffc73c720c63ff263ae14adb2ec7b19d0cdde82513efcb

C:\Users\Admin\AppData\Local\Temp\{FCC3977D-A6E2-448F-ABE6-AEA0DEFC1844}-MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe

MD5 b18c705b3c68cc49d9bf3649abc75c24
SHA1 6dc8963dea0f3185368790dee2a346301b4fa24c
SHA256 c2ca3135f3cafd79bf90d4cb3118943ca17f40e0d651d1fc32b1b3d22d1412aa
SHA512 7ac302c1e85c652bd897ce1af812950cd23a53c041af82fdcecb2314bbd1667bf2fc672dea40c21858e64befc9bf60190a4428f0b41c30317bb0e5ec7c00f71b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4483bc61535446a6bc2788d2b938f37c

MD5 53ca0ee102e56412903504b4fa90b588
SHA1 7b6e35b9bfee4a5087532883899e10edfbd9f079
SHA256 748ff269a43c39266dab4e313529110f75cbacecde5070137db3f2d4f11592f6
SHA512 580a107dc21dad9fb013755373f022c6329419bfc9086bba1bfec2807f7e2c8f6fa5acd0f3d601af30b1e9759eaead58d2688243c73e6435d8af9d7109eb8781

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d8b4554062d011287069393d07af8706

MD5 a0c28b8252eda35f15ff0931e1817ac9
SHA1 3fa429b9d0b8926907abc63b81a301bad2442eef
SHA256 ee880812bbf7cc1f00cb363632e9746e7342cb5048765c483d56f4284e555a0d
SHA512 e49af44a8fa6e0c0fe4a5f55df2910ff43a6a9360d6e0ba507375487526fa4fae8c974763e4bb757e0907036141123920024adfb312f9d53703bf6d45a83956f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4dd9b09ac0d9a7bb380a273db7cac4ac

MD5 d97f6e22eba42d95c89cfd439f36c1d4
SHA1 3a439aff0b80708f6510643f70997b897500d2bd
SHA256 25f91091126b2855bcb9c2daa26fec21fe7cc6d25319925a95a55a37cc840b6e
SHA512 52ca405f845e8313b0a04657eaa9a22d1c4fbcf758d5796d2deaf41c7ed6abc28e3597dc1f5d803c009360a63db4e686e6622fac669c252b09d2a3d8dc451e72

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9fd0b17a3402934b24f3b349c8d753a2

MD5 59e7e73fef4a9df2680ff8fe1722014f
SHA1 2b9d42140ad6207b1e3f5cf8d66b345109cb1098
SHA256 05f280e512673a8f1358b88e8706bf5a763727dc16e8c43abe1be6129a820b57
SHA512 49edc88448345ee5bbb1093bbb62bb49b0ac3c1c0a29d4a862be76845fbbacff0347ea457d66e40f721dccb8071c18e4ca7f41cbce88d57a64a02ed400f4f783

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f7a7f74d155bbe4b61dae83c787dc265

MD5 2ef051948c7138e398679bf6040ced69
SHA1 508b65472707ba8d47358984c321b15dc41010dd
SHA256 2213887214efa453eb1fd24e3221f5c5f27305e622b8cc9a5d8a71ec1aad9c2d
SHA512 4a3c6dae947be32e8a36e6db832ac5510156be28df291d8e224ac27e449945f81a2ff97511369eed4a850f165ccd1fe713ba7bde4e63b2f6a8671f205f60fa26

C:\Users\Admin\AppData\Local\Temp\Roblox\http\71f7eb2f3ae2271faf41067cb22b1201

MD5 66ca570aee6f14614f504765fc324f1b
SHA1 888f25b4544484d0d4eed1052ef389bdd5feffb2
SHA256 a13f7601d6f4b40d722596071032796a50fa0a9fc9f7b3675cb87fb63cd0e618
SHA512 b068e1fe6d8da34e026f454ffcaaf818c89ef7fb23c7b8cc4de3cdfab22acbe44b633c1f2fdd1f223be0720b0df60951c50d65d880b62288ef3a9728705dc1f7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7fe0379da44b038f6b0b7f5e2d73e81a

MD5 6b130be076d108daaf61bf250d4b7d1f
SHA1 ff62f13e0657e1f76d844bd60547334efdc49123
SHA256 b196782b9c2d5161586392b52ae0e6031d2fcaffd503bbdac4dc2be5f6bb4a4f
SHA512 ffe379fcd00e6282d9340203fa62ba172193c1bbe85882853c24f10aeec43f946bade9b7f8434a51e0dc02b824d41548443d8f3c1fa90def499720647fec0383

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6308009873b6e28576872a25a9dcd1a8

MD5 cbc77a3567390e186697b317934a9f34
SHA1 903a23d61339ec89ef076958368b6e6d3117d5b5
SHA256 fd2deef76d9fd8953722cc9b2867e1113c2613c7051d4b6ab39fb88a228b5377
SHA512 12fa7b46755541d6a115008a0e088a52b58340c7c2b12c3cbd9741136a85b9d44a0494a0dcbce391731a7038239fdd8824525715994a9b492a08b7e2a9e8ffcd

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c6d99f19053d2b7e8f1830e2f7e76285

MD5 fd49984658035378f89380ba6b335baa
SHA1 33d85ddb6373e70364b1b6347169e27084ea793f
SHA256 f3a9843bd56b3035be2b1900245996ad5d978bc6d0426f15ccaa91adf14e245b
SHA512 6a2dd936bcfede9d75f2874b3f9efcf43d1a68e8dbddcf2d8e8ce0e1fe9f50c55d88fc0c37f336b81089aab10560cae61ab8668b9d84591069f5b691c1cfe779

C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX6448E6BFA2B84B3CB67AB1C2EC843AB3

MD5 c9d7a5449c2416cea3dc4b8697273ad2
SHA1 452f66798b4f15ae1c77aa6c20247d202fc09fa1
SHA256 2b94005f0e346190d6ba38deb3763858acbdae197a6a200f0c7c1220f5f5644a
SHA512 dd637977954052362cf59ab76b8d707243d519398fc51e188ebbd882d4b82abd3cb18f80d0faced0fcd37d06373748ebe493faa0b45b12d41f0af1700c6ece89

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c1050ea1a543136425da772944c95167

MD5 d24aa5d6366eb21ac6bb5717a131d923
SHA1 d4b2ea91ad90966f32eec34daf9d9fa63c045457
SHA256 929f036a889e8017595638c757b45c73d076eb75c3ea34eff2f2e3c5d5aba3b7
SHA512 e3f96e415e76c885dfe88901aa44bfbc58cc5a1339f57f15e786e927fd7fcb3f63644ad0484189663d5ed220d6686c3d48f333db3001f7f2f58a048e31260add

C:\Users\Admin\AppData\Local\Temp\Roblox\http\00017aecdf8bcdf3fa8898c25225bef2

MD5 079dab1166536c4c63d09ba650dcb4e0
SHA1 87ef68e37db2d854e94abe24f6a271d06d62b037
SHA256 73758f88a122f8e0e20dfd4ce6839edd8e75f90801737490c430bd0a81e952d7
SHA512 2558b57af41fdcceef165bba9f0057168559a515d94aad49fb5500f07873ed5c9dae4af91735c6bb0b91fd6323cfa373118472d9046633cb1055aaeb6d09d656

C:\Users\Admin\AppData\Local\Temp\Roblox\http\767fd1c86a6438f2df71a3ad990afaac

MD5 217ff9acd4b2d95d27ac72c6fbea9c97
SHA1 d32bedd502544c93d749e9ad64be05f7f10256ed
SHA256 f937023bae125acd72ec91cbad63dd8a9af332bc0cf384149b98c12181b26af2
SHA512 9dda3d954b29da9de62514dcbdc93ae199b6c4193ca769342f0081806b520aa11e46fb583d4c95932f99449906945efc5b739d4c26a5966e6d617cdd4386dc0f

C:\Users\Admin\AppData\Local\Temp\{0D5915F7-84AF-4737-8F4B-77F02F5AF238}-BGAUpdate.exe

MD5 09fc5490d32c867927e960f673911ebf
SHA1 2ecbee3518fb701959d2539a88892391250dc010
SHA256 9014827c68fd6a31ccd7ec1c8f182cfeeb60962760391446b45c264e062daad6
SHA512 cd295d344bba456cdb2394fbe736c7b52c8f20e2776bb6b37c0ecd7068c841a646208e4bd0ebb4cb7880fc15caa8b18da485340ac8f88154e61cf76fb16e8162

C:\Users\Admin\Documents\ROBLOX\AutoSaves\Place_AutoRecovery_0_AutoRecovery_scrdZo.rbxl

MD5 777a9a6356027bc64aabe50d30f48379
SHA1 c4af6c703c73846c34979ea5206c3b337d24bd95
SHA256 6e6bc6a30982043d3e7452997062f5b18b35d4ad4cb0982fdd60c600bf6d4d22
SHA512 673f168544955455515fbd8cfbf4b2016a011fa4fe297aac3ac566df4b287d4381525d4b6b7115aa4036d89da496efa245ad8b6c46ac8a3f48e38f325106fa7c

C:\Users\Admin\AppData\Local\Roblox\4957272940\InstalledPlugins\0\settings.json

MD5 9f01d936c6cbc93d4e4653fae2ace5c4
SHA1 a59a4b261452161c2da0ef40297fb12f361222f8
SHA256 1b7268a919c9f8afcce829ebd4da5d0be1052dcf8f308068a306dc57fd083ccc
SHA512 104275e32e1a36c92b431d1efd2b6046db2b88a89f243091c03ebe57ced5c55b707fc829500b5989c2b4baee2d32a6bc05730a27ff203587a935096cb2682823

C:\Users\Admin\Documents\ROBLOX\AutoSaves\Place_AutoRecovery_0.rbxl.lock

MD5 c807af70310cb90ee310c3570c34c444
SHA1 abf844839abf933e7a08512e47bf98fb480507be
SHA256 332fd382b6c284ab627abc67f6e363c608ef63a39d163bab6dd6a876aa48af0b
SHA512 83f0b632974f806a2736945db6734c86ca44a70269270c94ea246b93df9d73a742bfd603beea632836b90fad4a5bb176406a90eef2032a4d2e216adccd856312

C:\Users\Admin\AppData\Local\Temp\Roblox\http\df1cec9820fae171e458e4888c366a41

MD5 935351bc5ee4b788019a43fc2a9aea2f
SHA1 0c4e6c8cee65e27dddcbc29ef98b8a62475a2e90
SHA256 bc3af783dd7c014cd15c2f800831d9097aebf14a016d700f261b886696eb8b5d
SHA512 54485954648048c49e893c47c43e2743005d9677983a17e237ea617fbca8d7dc5b7f735b59d369c36f8d14f253619302b7690d36d08bf0f12b2e58b9e19229da

C:\Users\Admin\AppData\Local\Temp\Roblox\http\10c3f73b0a75d33066b20087b17f825d

MD5 2547eebd01251747892620ae4f35d820
SHA1 03d7b5dbcbfc89a1cb72711492e27a654b915351
SHA256 f7ba909c00c07d0d220fd835ad591ca70bde5c2d077486b53902e97154d4447c
SHA512 dc2d2cd56bf1292e7c39ddf9908a49a26936069f176c0a93d23fa29e4adbabd29a6590c53465d41c929c34308559de1fbd609dd07bc65e2d784a248fe0c55eb7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5f272e84ffef3619baa8c9cdc79b1fd5

MD5 7610fa53f4f58ec68f415036b3b549dd
SHA1 d1503796699ca5b03c88c52137a602935b10c7a8
SHA256 613f0f48eae7bc07f60769f4b4fa57e8b872db25b1143af73b98f78b10626014
SHA512 7ee4d323f6897c0f20ea0ee74d75e9ed938dcf5b7d29ee8e3b795053257e100337b88e9b2a2f2f636fda3e048e0d7e5f07483e7b1e06280677134dbeb0c04643

C:\Users\Admin\AppData\Local\Temp\Roblox\http\68312c1293d56a84822e44be313eddb5

MD5 9aa01bd62181259727cea3d4cc622baa
SHA1 607e0b332a3a4784f183051ea434852f88b9ca36
SHA256 fc4b71913f0802823c6651545acbf8777a7614b4f2a6df1222d5543e294e49f8
SHA512 d7149e31d8028b1fafdd605dd00adf9469526e0a8bb3f10c055103a1ec23c57278ea1618b5a1cfd5ad6d2106d913ef614e4860cc5c6ef5f30316225c8f13e142

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d9a2813835649f5ff174c9ddd6335614

MD5 163f562628a1ba5b685257297fd4d5bf
SHA1 8e2cde7e7d8896ebcc0eb35af4cd5b3767bbcdd9
SHA256 65774e65641c29ec6bfd28ad0631dc11ef4c24710a76f5841bf77b2f1fb4f608
SHA512 6e703203dc159dc0130d5333fcf00971027d7af220ec41837de00476cb66637bf582c309a9439be45d7282f1fcb28b444a9bdd04f8e139e38848f74ff05d17bb

C:\Users\Admin\AppData\Local\Temp\Roblox\http\75a2c62544ce7f3171dee8a865faf88a

MD5 6a4067b80cfdb59d7e4c055b9d22e191
SHA1 d70c6253637d9a5cc9c03a9bbd7df7b0477bd276
SHA256 45a435ac0e5f5fdc9ce056222703246252b3782c37932ec972be40467296d119
SHA512 24e0f7a6d400c3b374f2a0a5dab4bdb99b7b5f1611b3d8e71f8405726b2d3f7c38c3c9d2937541245c0cb758b44d9a5ebd743b0b7c4de510d0d80698f7f027e9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ee042923d3bc6cc28d8a2102e01cc238

MD5 6a3f533d2a5579bd172a9291f86bd25d
SHA1 a11fd51a436e1fed77e054c0bcd9d3782bb18023
SHA256 0aacfb084b389b366a570c0e4317778f939f0a2fd526350848f7113ca158fde2
SHA512 5298652f9a9c3948287585288de66945d11a54681126a22510b044475982d708e38b31229604c548e911e93941b4f235b0200df085ac61ee4bd1824bc0d7344c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8d3f2e81a971c4052b93c2d423d622a2

MD5 84327556065f035fa6be07538029e10e
SHA1 c4d0848f3893fac51e689b51594e51a46644026f
SHA256 9c658179a292e9ea15163bc430f52937ac2111de2e754172f7761a4e5f24c8cc
SHA512 09655871d0655c89a8e2fc3c2c1ba849b44feb72d471ab4b87bd657888693a7d2dc915d72e284ba22e89ac5e77b23120f6879d22c6844e8a42c76134abea47f4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7d9efb12ec919f3eb2f808cb32975f40

MD5 4fff08828956b61e31085861a87f402e
SHA1 6cb5cb22727d22150ab12fb82410baa46b09af79
SHA256 a21a4b8b0258193b192212d60303cc42e6e7582b9ef6a33df08800aa0414d913
SHA512 30491e700b78670145936f486fa3bd26c7724f0a8b91a3f2a419158faf02a76a51bccc3b0068a636b3f5f0c90f6c22c5650ffad20bef1970d06fadbaadff1ad2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d57516c06c5874347e36a29e3c95d715

MD5 ccdcd52b4291e1df12a5f255abe59f27
SHA1 9a2ab3b989657d81a926ba848e02a8e74411ff60
SHA256 d06dffdbbbf96af701f2ddbc5ab1aa387b88a967257485d952d91e27a288cd28
SHA512 4ff4044a1f25297ba175150e195a95872e1f3729576b3fae06d575407c3759cca259318cf336004709d5d89333f6d4bf3f2fab5ad69ef66a9a61ce504228d802

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2d3b105b9e066bf39ed6aa9a3c989dad

MD5 b73a97efdb020693cbf55077ecd464d3
SHA1 ffcd7a7bad5416b2a8a430293a778153033db039
SHA256 0217ae6cbba327a5817e7c1fc1972aa2911b3a61b79ef621bd031f3fd3aae686
SHA512 fddf4e05cf986086c44c41af963b52352f9ab5cb16757ce973dc73fae309b1eaff2f1e0cc27c0f3f8577db8c9ada21d94048b391c8224d6a26f67cf0ecfc02b1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\697d9cbd90ed4adde7e3dd205d34cb0f

MD5 bd59c7c649aececc81ef96c24b801759
SHA1 a5d3146d1045e7455612d97dd275da1a68e268fa
SHA256 f319533f859603376c8aab95f73f43f1e08a98461d05450266d0ce783245af7f
SHA512 7c32f0e42a9b787ab63cdeac0df60e74d9050d06bc9b09550d1a794209b8b9f3de2cc932ce890335a20e2ba1a72ff1ef86614d13d5ce88f8b3b15b4abba3e577

C:\Users\Admin\AppData\Local\Temp\Roblox\http\51bc3b232aac328005590ff244c7e78d

MD5 94348cf359d6a9ec649297644d6cbdf5
SHA1 d86119ab126464a2329a4cca42c87f06bbb86c07
SHA256 2be1ecd258a12be3058978efc36d5f1e58fe7cf3ec87212d9933fbf5151908d6
SHA512 1bcb3979a078ae856c0a9752915c1e76562101a654b38d3e6f9fe3823456e94d1ab3c67c0682bac3e7055b80285c512f0e320b081127f634797563b992b4c1ba

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2eb4a88240215df0484eea72c68462bc

MD5 ab5bce7905a44261533cc21a08812ebf
SHA1 4079dae676a4535e249bebf55a81f86c39c10fa6
SHA256 2b8feb57938ac3b3b524bcf1ae6b76ecd412a8aaf21bff4bc0779a2277299d2e
SHA512 41541b0faefb27bd52106c2a20d62a07d88f2a1dae0401f730fc3160a6d852dfc19801fe5fae1061d82798b08bea23cc838468fd5628d9c5afebd20b0b3b84f6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\be84133a4c07a764d50c8394ae140e46

MD5 3e3db9441682aaa1091181bf1be0a39a
SHA1 bd0a2b589a5b945437cf776cbf2fc68c9330b967
SHA256 6c0c718649244f8eca979714d8caac60bd7c83c849b78c04f7bb2da8a181be99
SHA512 e01e864f5b21d45cb7c060cd082b1be0383595820ea8d79f190df0af63f503496774c2bbe427620e9390d32233de906f36c96e13e71bc89fb174c61c707d0621

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0eb49ebdea442cd79f343d8d7013666a

MD5 e5fdb1c6371bf4a5039bf3efcbcdfbef
SHA1 8e0115df44168d7ec7478063c60d39f5e3c8b260
SHA256 506eae1bcf91781a57cf48f3588ddcffbe05369e38ed72801d94fefa4d855d83
SHA512 893eb14c26c2e4b49a11faf96557cf1138708ac34d71d6d3b2f7fdfd4abbd1140aca931c6d252973f2a05b729e5699fc2154d83b197bf09ed6e43f46c0ab70ce

C:\Users\Admin\AppData\Local\Temp\Roblox\http\668217d91a1caafacf79244ea0cd72a0

MD5 5c88b364bf41f7d181e8e6b657e751a6
SHA1 07362d0e6650bb0ed9399d59c1f088b96a299029
SHA256 06c34491e907fc9febdafcdb167cfe3d2b7f4b06a3cd0cc3c33a661be7ca62a2
SHA512 10c084648ba96f9fc72c4ade772edb56ae644162ba4f38de1e75c666c61c1744d92af6eaa92dfbea2dfe3b8aa88e30c97a0faab7e70ec568c89a5fd2e69b7f5d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8e5bb86804e34844f22d2e000443f0cd

MD5 2060250aee572bb7b21d5e634f7f4543
SHA1 d707d5c9d97427bf32b0488f6a41fd594bbae312
SHA256 db03067f067298c404d918a9bdc7e8a3add88983179a35a5512b6c17f302a8a8
SHA512 375f9594ca5135571bf930da7587cfe807d3d480461e7f0489f77bf8e10b59d7da77b152d1a61201651e6d51622af1af857ce0e20e3987373b538e56420f8793

C:\Users\Admin\AppData\Local\Temp\Roblox\http\08746cd350b650930fa07d6c3e5bab4b

MD5 e93d596e138a83806cced33befcae89c
SHA1 caba3c331c62856c2df03327ae6b0bd28fa16cef
SHA256 088ef27e86692379d8705e32a59606eec53ce0c01fee187cf3eb914271f5ee45
SHA512 a02b07f2985b27ece94eef12f525b1f348b9fa18f24c71961d35130aaa91ab32d07a52c6c83512a4df06a1cac739be0e5c65857d917ba697ecf584eb3942e730

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ca2064275888a8463e096ca77bba6f71

MD5 7ffda0a1a9d979063b93c105db224f9b
SHA1 93b7ce9a9882c7df47e6d74740ab1fc94e2fe975
SHA256 2e68b93a10d470b7fcc7316ae6b041c260dfa3eb5dd131eb031a77b23ecfb305
SHA512 2bc86ab559c69aa2823fcd68bb7ac7243832830bce3ea42bbaf11a896c849fc1b18758e92a50529aabd4aea23cd28028c76cd98e90f28c37c010705297fd8794

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f46682265e3ba63e73dc3ae735ca03b7

MD5 57312501ecee2b176bc7dd8f6bd53cc5
SHA1 4e86dc68f0516e33d95ccd1fd248761acf67ef68
SHA256 a1edb6b8512f323b8f3a3bcd45a19623aa70c13a168d5dc4517dbeeb4552bfea
SHA512 9fe7278a4bee107f83d3afdae17ba635e174ec9cfc02743ba77253ef2ac15e7c72d66f80718cdc983efbdc9000a088aecde0ae7a8e652c58b312b0e3ad7389b2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\812c3c5d65ef594641be9d8388fa044b

MD5 fdad40863f6783ca2efaddc8d618f482
SHA1 a1f4117f4f7e07a31cfefc827f6af9a9bef32766
SHA256 e072f03c818a5a191805f3bf9939c3da70deeb523f4b6c9c46a2ead7170cd233
SHA512 002f5ac5bc2922e9e7271d659a2894f133a1bf06d5e816d7ee262262da8356e3317cbd25e463ae01932ad9e1bf1260b4e6004dfdcbe34aefd7a7dfd19170eda0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\385bd488c17f95fd734aec062d64b7f6

MD5 604d21c0e8ed5fb7bf0d236483469ed3
SHA1 8eabb684c495f98d6595a59d0ce77046ef98c640
SHA256 c6549f53eef8c6770b3b45b54c3392f51a7d20527d83e4872023175de2911c54
SHA512 70722b5bd001dc77e686fb53b563dbef6d98d0196e46c63dca63927060ff5062a8ff1ee64c12043c157226d1b8e25d0205a2405aaeab3fd298d888b67a671bde

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a9319eaaa1c47e2060d3401f99cc5812

MD5 4cf29ade36c1f3c6761cfe77661da34b
SHA1 5e23f78a71ee0cfbacecc80dcf520113356ec79d
SHA256 1138d33f8057141ad008d36c07adb3c6dc3dede2fb5d22fb4cf14d3e5c19d82a
SHA512 19c22f8f7b86d9242dd59c5b7777cfbd62beacdddb007a1da58ed8b3b3a9a1b1e57fa692bea2156ae21c36a9ada5e74e2e200a6cbfa7e1e34a149127c14e949e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3e658d9a1b0d687d1e2827ada95d1282

MD5 1b6df4182b2f59bf24283425e10fcee3
SHA1 899fb55f1ff7ae644da60b1d9c69af271fcdf74b
SHA256 204d54cfdce012d2080ca513f1829a5c0b383e90b329bb1ada61c850e061f0ad
SHA512 6560bdc5fca90854ed8df3aaa0988a0b723752a89c4c0e4b3795028f6f0b87b39cb1e159ecf0d02a938bce73b3ea39ba269e5973663ab7ea81d642e0855ccd90

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b2fbcee5c6e19fd9eaf62aa228b2ce34

MD5 4ae0671aaca2e3746215f6d7e7e467df
SHA1 75143b926d9d188873100f434d408ba116d62b38
SHA256 ce89c906adff0282f8e37af289de2644474eca1f4ba287eced0e9b8761db2514
SHA512 765774c4d6cd0ae7d27d105b3c30516ac367021dfef190a78d0723c76bf778bc5001689d3b84b7c52d065e549586a4042f4ef42a7e76d0f679f9d48e1d121cd6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\adacbfdfe30534f13d9b7c707c7a2ea7

MD5 d72dc9032b98331002d8bee7bae0966a
SHA1 bcc8ac36abbac92434a4c06f9ea2a08a967bbcbd
SHA256 153d4b043899a2a375819ba3e33f2c1ff71b61a69ae52233ed224306c5be42fd
SHA512 18cdf782ac1ff74274af4867db94df3baea87a4290ae1c6ee1674ea125c45273f09d308e0934b6651fe4ce80928edb465c1120d9bb4396e8eb2b76ce3cc047f0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5eb65bbd0c13b69e572654ac58de6a1d

MD5 f3fed0fecac102d0a7e909d9d57a67c9
SHA1 46df5770221487fea3c290742aa990ebfa38f6e3
SHA256 ff91c8625e2868a06c74ec208c299504877a5dc40a717779f0956c4749da3773
SHA512 f6c1dff4cc041ca6b5ebe590988593c2bfc38647c6ddaa48f8c8aa0894ca4cf3eceaa6f2354755f983fa2b9c06d8468526f5c3d1280c45cc4753c86cc47c95bd

C:\Users\Admin\AppData\Local\Temp\Roblox\http\397d69adf7e99bb671075432af507ad1

MD5 68c469d960b790a49dda454113bcaae5
SHA1 bab37293d1d66542c6952857be853b20f60c9e56
SHA256 30dae3e8a2bb3ac855d0144209300027300500c77aab5ec55239363dc912165c
SHA512 bbc65ba3786eb1f34a035c4df2c1e358912772f9494ab4d5cc1be1a58bdcd9865356ff9cb32221d8b77c473013129ed9a67c7400453b58d1f2dbd9b0c5b7b62c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\805be2c2f67ac908d72bc3231f51f068

MD5 65367e1d4ca3cd0eae2a0bcb311da20b
SHA1 b51ed8e5f635edc1342d1360e5914580d3fda565
SHA256 fb653e1ddaed8223dd094f364932aad0dc00d623912d5e52ca8c027f4322482d
SHA512 6778df23d757b6a47bcf73feb65a50a0bf737cf254ab4855b748c38bbffecebc3570b18985228af203e2062873de77039da6e5a9df027a1980982896ee7ec38b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b9b8330fbe1e9c0ed3747d27e31e2960

MD5 17c711d45120a88702d7ca183f5aae43
SHA1 d37de8052e969152b2a2300a8326aa67374db713
SHA256 46f995734288901f4695267c5034f713224a0044ad300ab2666d318c81ab4183
SHA512 1d939cd7c9d3be69c659c8bc556da72c3d1c82cb3094593b305ebb62e32b7bd20f820f6cf2539b217b7c0aee417adbd0b29ac2bbdbf4996a3ce1932af98571f5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\cbac17ba4527dbda3ca04a878619482f

MD5 82a78dd3b592130c0a6c87881c927e05
SHA1 977a4566c3ddc575c8c372fe5a15e0f99cf1e845
SHA256 8a75d523164d1fcb35c4f43c2ea260add36f1bb32340de6c7fe68424082aeb90
SHA512 26d5fd182f54b09eb07107e5a550582d7e866dfa2f7efa319728ca07fca2d3d08a6847d6ebe63c60b69270ffb0526e030870815240a065952f8b932771e268ae

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9c63d0c53a67de4dbc2e64e9d7e33b39

MD5 b6cc975ebc9919c9d1bf35ae4d1141ad
SHA1 16a39518f1ea5ba6cef973b01a38c8fe1c8e47a3
SHA256 c4efd0b8bebd49e7ac0aa361e35ad7f16c946bac333c40b354ed524afe034fe1
SHA512 352053b82b44af9719d1fde73e26dada17861a26b65408f5b2f96054ddfd71165cc5e0c7b8c596ed7aa5023a275165ef1e0686f4250173a7201aba63e2ad717b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\49de801ce52b89762777ed3f5227811f

MD5 74817744f4a0596c38c4052fa61cb3d2
SHA1 0bf411f16b430439db263dd5c5cc629cdd948280
SHA256 60108b041016eacc1ac4153e520de8258bb1a4e0c4b9c361033b7243a4e5797f
SHA512 86d64da87ac5b87d9bb41b5b313300be32fb2415123e4f67dce74d46770435c801a7843f89a3cda7c8cf8e9eb6998a722204656ddb1d2709f5ad0d57ee169d81

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f30d6137ea6e1733c39d8d4af2fc2cae

MD5 b1e54bb72d9aa032b3ae3ef111ab1cdd
SHA1 0ada564edcfa29d8130f3032a4cda3cc50adc389
SHA256 d20f7f94de8712f7156955e4607657a19c275b8a4a8354032e59fac902787fcd
SHA512 57cf08395ac5fa6e8ddd5e13ef11a2d0272f9aa0f68cd536603ca6f79df959721d58a3bc4c22da4a951843f9cfd40c62e4640255c9f8f3841b75becb76e9623c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3dfac88f838fa98fa32cc014787adbc3

MD5 ccb3993e279032c22828bf261a5c97e2
SHA1 ac6c958be05d32fdd34094f3146eee78ddf3997d
SHA256 80bc22c4db25eb4696a5c695156100ad55be959c69fc51f389d1b9ad99164f35
SHA512 7c023f3538c5f71e581dae2d5c2db024917b2df1426bf78e83c065fbb91cb5c412ae8dacad9b33d5db55886b443b7153fd8624513e30fb9a8717c902ea609d2c

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\SETUP.EX_

MD5 2415cb112f130a1382726afa58a0933e
SHA1 74ac041e6dc607e476dfeaff2d2bbf2b5c004b5c
SHA256 85679b3b17d42aa988b5c753b9cffe457c063d5186a94203b5e584f4156f2179
SHA512 a334cba72cb6ae4c4706ef3954e98771c4502ae5ee66d7b2d2dca759ac75890efe5a7fea46818760589a66f425a4bc9d463512bf359723685eba86ba4c1edd99

C:\Users\Admin\AppData\Local\Roblox\4957272940\InstalledPlugins\0\settings.json

MD5 3de5af300354f68f48a92796070e0ba9
SHA1 fa8bd111fbc6b0cc3b6b76051bcbd377d556441e
SHA256 ba857cbb36deaabf7e0f01a64f819f3a66f679672446168e67dde182243d63eb
SHA512 d9bb0920558135115fceb82fe29c5b91c63f7207ee2491a19d19380fec1a83c9ff5c2f8d0bd905e522c04419d928d0c6121c33a4faa1a6bda5f26f8ba050d67c

C:\Users\Admin\AppData\Local\Roblox\4957272940\InstalledPlugins\0\settings.json

MD5 090cfce88410397f41083544442fa12f
SHA1 a7cb128ede91cd0ac1b276573f8f365f47c483e7
SHA256 82eaa8410247e693caaf7a8472e820061e9d3cf7614380646be139aed89856be
SHA512 dde267802baaee29fe0d163a187fac825bd572251663b975cb53a727b4bb11735d47ed8145cb47a41f69e7dd6610d35e760e4164a486bf831dea0da0436e7359

C:\Users\Admin\AppData\Local\Roblox\4957272940\InstalledPlugins\0\settings.json

MD5 8c2737f3625bf98c76fc544311cd2961
SHA1 ed3fc6b805e3e50b4909afb40d01350d29591582
SHA256 e0d1e631eaa6066818aab01f15ab2dd332f16f6d2e531a71c6c9867756feaca4
SHA512 6b3f315acdd0a7cdba3f9208ddb50841a63dee27d6b00ad3060f64606fd352cbafc8d5f9f60fda6854c0c30045f4bebd4820135f4c1895ebd81a1d6aa60fc648

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b2df69703446eb692da2f898b3c48acb

MD5 2c670c00848a1a152efc0d65be9eae9c
SHA1 3f862566ee4d83fd8641317e171f2542078708bb
SHA256 a743441a54ea778361e9592773c944bb3301978946268dfa29512285ede756b7
SHA512 8fa6adacb5371e9e583c429a0656d43d77427a8d118ae956d645ea78266d8ebd00b2e9891526ba9336b6b9fba83fc497d6c5079c188ab87f361f6dddb78e1d0a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2a88cec86c7026f64798b15b2384c49f

MD5 72e8c3b5135ad9010a208a9424363ef9
SHA1 bbcb57a914f7e7a10d6161837a415e0ef8ee28c6
SHA256 ac968935212b99d82b42b4714b27718266cfa45fc66c5e22689021886cbf0008
SHA512 3a0f590992f1ab1ac80d0cc1fc8dff1f0827d1cbdcc92eac91b8949994e7b82beed25d129eab3b490b658760bd0258e77324d251cafbe87ae9718c9ae99a2554

C:\Users\Admin\AppData\Local\Temp\Roblox\http\970e89c5adacb2361e95f6ff96d2d6d6

MD5 15f2fa148bc7ea9550a8aaf77e428c0d
SHA1 abfa8d0bde20f2b05fcef9ecbb6a66209b1897ae
SHA256 6c3ba9082c110a3f55a94ccc281100694cbeaae4623f94c42cf6e1446b79f00c
SHA512 b006ddcc27a48cf6b5da235f2e867eb90b6aaa5feefdc4d001558ed6ac2490eb8513fecab83bea0aa9690080e06cf28711a10e19bf404d32101c071b27a5df63

C:\Users\Admin\AppData\Local\Temp\Roblox\http\18feb32a57efdfc03c16870f78af82e3

MD5 8d4d1373e3341ac36d491fe3b99227ff
SHA1 1915e273213cd2f3f16cf3a6d10089fb1e7e7765
SHA256 791c5e7f5de6a235d1570f23532df74e10d78cc3b0120bd3e6f289b47533fac6
SHA512 7a414914fd7c2828ce79f699115857da75918060537634161b6a2a50bf98785faa04f6e3b933a61808c6ad8a38dd0d10ade9a42d523811951fb26818d3424c61

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8664925e55f0fe4da66660353fb87e38

MD5 e9b1a938d1cde4be24cae027c65e22ce
SHA1 33d81d803d8c3313de5fd959bf7466f29dd430a6
SHA256 33144e2ddc6f54f73b15a16fe2c3462c66d9ec84d7962f78708d6f9c9eaa6e29
SHA512 f7fb903bd5d0984fb9653894cc0abfdb83c2cff96cb2ecc5ecb39c700f6a08077143ecf2ea10357e46c38e1fbdb2d06332cd5a9855938702de0432bb419da7b9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\828b69a61285e07a18b953fd0b9a224c

MD5 3f7024eedc7ce19aa5873a28998c289d
SHA1 b02ec3378d0f4444e0cc97135e915574d3e5d90d
SHA256 cab5dec69d7d9c8bc497117c2c420d2e7f086172b82633a9776e703f0d13074b
SHA512 6aa45b44e1916105159b7c322d70eeb034a38edd0340350a9c7687b3f3d5cfe494784d4130d63ac2a3b1f08d90f8bd7d4a74256e55283eb54e9266e42066fec4

C:\Users\Admin\AppData\Local\Roblox\4957272940\InstalledPlugins\0\settings.json

MD5 42722667c8f0433a86bb659e11056585
SHA1 055b5ad483c19e3d7609a61bc86040cdfb8ac4b6
SHA256 e1c00ec01313291b60d843108fcf10a2ab2547a498fdc89d4425b310cf58fefb
SHA512 b0f75b55584a7078fbad8dafa7a94f18d74d557e8607b84d677f18de4b32d01a7b572cc830ef6bf3ddd5b2faa04159463c9b5aacdd144553ad9a25a534db8a1a

C:\Users\Admin\AppData\Local\Roblox\4957272940\InstalledPlugins\0\settings.json

MD5 3edc073d6e6bb90155fc4b04682933c1
SHA1 b0f34a83a38ade0f79b00c6a60a71592dfd7dab1
SHA256 40c3ea937a539a1bd69980378a359fe4f771d47eb86b0cd818eefe502196c0a8
SHA512 745a16908d89507aefe6ac9d60da88b6a35fddb329274fb2a52cc10292d658d11400e836ae8c5b607400c9afd19afde3dfcaeccc68d422c26ad652e779b52881

C:\Users\Admin\Documents\ROBLOX\AutoSaves\Place_AutoRecovery_0_AutoRecovery_haYoTK.rbxl

MD5 99d87ce2bc76fc85a569cbc34927def7
SHA1 b9a85cd4ac889497de0d8ea779ebb9a4022e753b
SHA256 755cf9f5084939103c5182a7e07f15e29a39882ad04e3d174cdf0ab6c7b82414
SHA512 ac20203040099b22ad069faf0659555d161720cd7c2f1cf7c4d7972dfab302f3ba455d2c67c628be5629cd306a585b5454805102d66a2b079085ad0045c226da

memory/4336-7420-0x000001E520940000-0x000001E520950000-memory.dmp

memory/4336-7813-0x000001E520940000-0x000001E520950000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c61f88e5b21c11d7a5943b6d77160422
SHA1 4aae79ca22b152b3c533a21ab964f36b86c76c0a
SHA256 4568551875a7dfbad65470242a5a2180622d3b35ecebd5149248da0106714591
SHA512 605d16d0645da756e81c0dd335fed60c2349bec7e6bb03bdabd0bacdd69cdb3ba31c4c6196fe0650f8eac9d2e574dc97bfb3b0460138349bf9e87cfeee5f3bcf

C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

MD5 54ef6c31cab3881f4b1b8d37ff6203f8
SHA1 a132cff93d11b0a0b33bb4b3cd0d4d38d4822055
SHA256 3c5488b452b0ca6c913987ecffbf93edc67a5758c74cd42b7c5c8890a2436972
SHA512 72cedad25fc59ed0ee33949dd53ef04005cf479e9ec20e3a31ae4803ff9431ce2797f51e690b06e84e81283f8b6f9182f04149668a7822276801def7ab03b8e4

C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

MD5 bb0c227c078c8ddc337b5a4eff22fe89
SHA1 3a81996e173c3beb60e7125df40d163e6f64fe45
SHA256 44cb70d9892f0b4e367360b054d850d93cb2f6950d993fcc2f70c9182d766eed
SHA512 c28920c5c0bd21e15afca7c1cea40cdfe836b3b4a7f996957911fd621d773412573c8a9762526bff62d539af820061c4aefa489e568a2a17909052c2468892ec

C:\Users\Admin\AppData\Local\Roblox\4957272940\InstalledPlugins\0\settings.json

MD5 8eb446e529887187d658d7df123a318b
SHA1 dfdefaf85b46c186596d23f8860f44ddd1da07b6
SHA256 46b62a8dbd669cc3b43425dc12355d92714d972d8edcc1568c1d8d190ffcde0b
SHA512 8e3019d84dddc13b890fb770cc54f7153da9b0aa69c7fe9d317e93b9adae029c9d1252e8ad7ec3b1e2d105948465c363697d7a24fcf227df057325d45ab3565a

C:\Users\Admin\AppData\Local\Roblox\placeIDEState\placeIDEState_17144245639_DebuggerData.xml

MD5 cd0f3ddac5434868dd098599ac017cc5
SHA1 33c095040b0528b3d59e2ebf69f1f0dbd9e6db50
SHA256 0f509d82cdaad6c918a7c0d346c604e11eb96ec28be4ea38fa7fa67b9d50e32f
SHA512 ef1a4d870a322afb2dfe19eb6c1c3bfbde17737d809d3f29d7a2b06084d6e12679a0c4e91385ed47b2dd396a8782666480eee905d5dcbfdd42f5c4338ce0841b

C:\Users\Admin\AppData\Local\Roblox\placeIDEState\placeIDEState1318587694.xml

MD5 a4218883a9b554e5c59991e2df8b85d9
SHA1 b11dbb9f7f2af8e8923696bd17f96acf09a396e0
SHA256 855f00971a3740d0f44169ae1b7dd56029bd232d8f8d86695374921949101df3
SHA512 825293eedfcb6adaf7f84f7e647b5eaa8ab5aba1c5b9c2c2d1e39a0070de68a761d16debf1eff2bf6bd9f701b6ab629791d934d51fe605e71474cbd7f0ac9fda

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

MD5 aac57f6f587f163486628b8860aa3637
SHA1 b1b51e14672caae2361f0e2c54b72d1107cfce54
SHA256 0cda72f2d9b6f196897f58d5de1fe1b43424ce55701eac625e591a0fd4ce7486
SHA512 0622796aab85764434e30cbe78b4e80e129443744dd13bc376f7a124ed04863c86bb1dcd5222bb1814f6599accbd45c9ee2b983da6c461b68670ae59141a6c1a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

MD5 1548c5f675f1d1fb0e51d7c1f506aa78
SHA1 4170f4215c2c9ea4eadcf3770dac2ced5e11f413
SHA256 2149403b038e0b92af4544cabd1b5b0cebe5b3caf3bfd17b0a4d8fe96fb3bc48
SHA512 b724040d3d6228f9b08c3f4a94148585ce385ee25af0eb83ccb78edbaaaf4efb94a81e19e27770adc5f34f34a8fd5ef90234e02f25d773aa09b4fd3f13c2664e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

MD5 d6b36c7d4b06f140f860ddc91a4c659c
SHA1 ccf16571637b8d3e4c9423688c5bd06167bfb9e9
SHA256 34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92
SHA512 2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 56d57bc655526551f217536f19195495
SHA1 28b430886d1220855a805d78dc5d6414aeee6995
SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
SHA512 7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

MD5 b38fbbd0b5c8e8b4452b33d6f85df7dc
SHA1 386ba241790252df01a6a028b3238de2f995a559
SHA256 b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd
SHA512 546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

MD5 1f557ae943b3a1e823b56cf9d410e7c3
SHA1 1340fc7fa2cf9fade7bebcc8b4dc62a1686aad54
SHA256 40f47bca0281df7ada22465ba6c706a9ccf9580288915aad5d42c2949521a7bb
SHA512 32d8f83a30ed7179a74ebc7bdcd454d2f5895592f078910564c8bf40490d92c24a836f50b359345cdf4f0288f9a922b0185beeccbc4007205ba50f585de20169

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 27becf867b5530c0f5426413448a5cb8
SHA1 c21ac75e0b683fc8df68d58b8d9c8b5251b23178
SHA256 8f2d614d81c198359c5452e9e58ea49a06e4c1eeb66a7b4fc025a7aae51a94c9
SHA512 1e45985b121349c8b75b3afd20f1299f918d80d610881fd99bba7b5a8d243b6348fffbeb5e257a9314943ef587ea9ef3043879d4d57fb787f50f741a54e3a9c1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018

MD5 9026c1a039bfb1796b34eeb74a8a716a
SHA1 0fff9a37ca34aa4811e4e48f4022f1e3bb5f95d0
SHA256 4a3b444e966106bf9551108f259d543858a36d28acd8d2dd2f38e522ec922cca
SHA512 51704c92f1a4fdb55604faabae333157526fb93f3b669aeccdd04a9f728122cf81bc2c8ee0df2efa23661666a697e8f4daa491b25a64282aaf68a4420d341da8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0a067f683ece206f650914838263224a
SHA1 203a31fb20fc08f16b837d5c1cf1f04fc1786280
SHA256 83297ad07ded521827fa2c9cc0fe4a8feb10eccd84e498376f8c368f37768790
SHA512 73551d56919251a0bae0c37077d3d5cca3fe1e40fdeda587c1c443606e497f6bda67bb723a4dc2f73be92616b06555c31b780d2fcfd8215b61fd1c9d6eb4b081

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000032

MD5 38e00f7de6f417aa3a458560a15e2b8a
SHA1 b451a3a2ab0b04170804d6cf823c6465f33f6f44
SHA256 cafe3fe334035fb21ebef6484cfbe1efa85c46f02113c57f8047c875fb9928c5
SHA512 659f0a9a53e98b2e5dd3256c55b96e5cff82f6b323edd5f92f8eb9897e1376329454734c6c799963ae392833d948eac84fb9b483a5a099c9ab942990a18e7f91

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d

MD5 793b639f0483074bf878fcf19c131678
SHA1 b1a2ef0fd4d7944a9519e54e3201a05c62c90415
SHA256 b214fce2614aec5046a24ad48e5023ae8d29fda0d8c510f6dfa116f684566869
SHA512 1aa25f77f1075f79f9d188ee9bb4a5569db406f2cbde550c7eb6c3377d3bbea5cfe86f1328248f8772020a90093c133de90c09cd2e50048fe2d400e807526238

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 845ec16cc9d13b402ded9d7b9e05c032
SHA1 bbb28dc1e2377ccc0d4c0c282b302a17f3b8200d
SHA256 151ef4c15c0d8f351f8d422c659576e2991ec52fd7d37b683f04c6c0476be6d2
SHA512 c06aa0b38c50040400052c9e4bf5291932e03c2f9c1a59867c2c6c942199c3c091f9ee59094adc8c1bae78944c082e64f5b30d66e865bc5b6ce67b3d00787167

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 fb84b25117bc0a545001c496ef61c427
SHA1 8db1e895662719367c7025fa810e2795fe94e24a
SHA256 996f4323b6b6b926401202c9f705e1a468d3f30a8f681b028e57a49f2f27f7ed
SHA512 cc648ac2f28c67020876a876d083e1e5182e0c0e493ecfb4da3bab4fd0b2dbf9d79dbec905e602aa6f24e6d616bbe5b1ccc988f11bb62f9c91200f7d190cb765

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b9fa77c1c7838dbd27cc05bbbd23e937
SHA1 96871ac4b168dfd6c1ff02fd5b1946dcf9f168bd
SHA256 643907365b435edae4cf51458aa1e295b1ac544a34d309efc4d0309676af852b
SHA512 9d625b5485e7a6f1b6c5a8ab95f583b7280d8d1a655fa0c585283dba2bd3aa7d60348dce5dce896465d918ed7c7513cbc6a3dcaf974c61ba5c62a9f58538e2cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 13c23f51b91e637023ec210d0fbf70da
SHA1 e05060d48ab0cb2b8f832a66a6bb7dbe59a45e75
SHA256 96c0a0bf1dfc0ad2747f43551ecd111ed378b37b051aa2e68f31a5376eac6a46
SHA512 7ffa1d1e69daa8743f9d66493fe28a20b1f0e07a6d06fdee4b5ae2b04555a537b857e84a6e4db5bf4da6d0bb2543e855111a67c4e485165fa8dd23fe1c65aa8f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 31bc9a1334175f5596716bc7e02d2a8f
SHA1 61307ee6e74b6fafc61dc86ab49d3929ce6f1441
SHA256 558bf1aaacacd47b7405725963ffb792f3a1ba0080dda2b637c7482b62ea0723
SHA512 62e0f0f399636c679e89d217527567e6f52077aa46792ee358cd7ea4099948d9781dc352a8e1d7b0dcd674f5080d0eff83876d993441c3128b66796c097cc4ac

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4bfe68503d3cc25602048da03f5bc7cb
SHA1 4fa155139d54f47dc2e55d34c8be7eaca11226f6
SHA256 b382531860e114e8da483beafe130b6a15cfb654fc93387bc93f6c08202c7625
SHA512 6687d716e4d20e2ea05d7f46894d6f23c2963753587924a02592f0576f57b777740ec285c840fc5106b38565793bf03617c70d2c3eabc6b161192e6cdd28b1b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 237c5a69f1f79bc265ae76019fc4d018
SHA1 2198e18e667c00a8d9d646b9c5d99db93b73c46d
SHA256 8be8b8395a9b5f8374849455fa775b52e025d5c73563f9bc7ddad3b5fcda83c8
SHA512 465f63f08f888ed05cc0123d51b1b0351db38e1238566f17ca241535d62400fcef5cee8fe08332efc61dc5129d433f919ac36d63ce221871c974d65b04972d1a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7b999fcd474b29ba2530a6d5ea757438
SHA1 b328bb5fb0b96e22b0caef5f474bb934e7fd8873
SHA256 f0855a74fc2cd09681ad3cd6d8925bb9f11a2d6d2efbf8a3ebbb17883e6a2074
SHA512 69aa13d511b216cd4a96ca915999ca07837eb4358aedfeb0ec882f5d5847073d42743eec1e648fbe88a75f3b495c29ac3a153ab1f7d4cd99e195e654fa95ae80

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 95014b183492064f1770b2c36bb276bf
SHA1 e80922e2e55b3025bd6803b4865bd7843f5ab9dd
SHA256 3ce3ebed617bfe2e8ee30585f4dc57ae39e72d37033b55b280b845931906736a
SHA512 74ea0b838bf0fab64f3f2861790093789851a3688cd9a3c3cb68e74a3f5c4961602cc53752e83f120997e05ff398b2c28f2028939a129570ebba2a2f9da54805

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c87feb160f520792519a61e4586d73d4
SHA1 5261e3dd736da31f466bd3e93413061d02e85192
SHA256 8a241fc4faa234bee8540431d858cf0f00bdd9f3b9a35d1965a501dcfec9e89e
SHA512 14ce348f1d21cf49d81a2757e965a11d42d81aacfce5814a0bbb4b569a31b73b18fe18937a757f592351f5dec837a1370961462a6ff5553adb2b9af83fa60d3f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 be8ccb74f1c271f5cfba43e2d373c0c8
SHA1 dbba61171ca3dc1ef680a7c6ba684a6b3012aa37
SHA256 b1f7eef67b6c7e4ccba89a4c0f5658b0ae95ee77eb8c50197d47f7ee07e6ee6c
SHA512 b478c8d6a60dbe4c01c3357516609b35a851f42bbf52988eb80d626a2383c3bfc832767dcb246a6593001f60525cdb401b852c9e7c93ee39cdea4324f230ddf5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003d

MD5 0acd8ff34f3a5c177d02e9011ee74eb3
SHA1 7985774d3676c27586c71bbf28b1f53598951a05
SHA256 ecc55e4682a2b83956e183e86dc4d475e91bf192ea71faab52a8ed8cde83a3a3
SHA512 bd5402b5214bbe9e499ec5cd9c6933592e1d3599ee80f72fd2ce2076fcd50dbc355cf3d58e923ae2400d09742768bbe9086c7cebc8d2560e741726bb37374ac2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f7cfe571aaf4d145727228d562608b2e
SHA1 dcec6e797f1c84d69364e8653bfcd7e97721561b
SHA256 e08836485fc0775aebe33f8ba3d2d061631bec7b2a0b3e6afd21b53ab9e3afe2
SHA512 f0e5c8d6330a79ca641ae5023e52b8b7cea390033c5e78b14ee757fa0126ca6ffb6ebb96a38edab43f2fd25cc117e13a0dc8a71dcea94ed75ef6ef94f1996f4c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9013560e7632a125e46d7e9c08031bcf
SHA1 778c0d25fe0d3cd9d19bbb06f3d577db8ae0ef36
SHA256 0249cc7680cf559ac5ff3fd9693f8e2b4f6cef5f4fd997bfe7c8dca8dafd8fe5
SHA512 b3b391ee6ece7949b0584ace6f9b0f2f8d0d62d04a3e28c6bc9561ceb36a55faa9ba5dc60ca57373ad3b992979f0994ee19c8006cdf639dba5e3b0ea5ed6bfb1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 971ba01770f113f900f29d8fca45c70a
SHA1 629361df12ca50847bf11d037ff8f4c316c79d7c
SHA256 b88a58975a017372e181ebfde3df8b0be96b1ae699139ed5ffc7ff58a46b999c
SHA512 f0eb0c61024cd8ce559b2b7c2c10f170f1f25c9b17cd8f76a41a9bcd4eb77dd5925ad65c71621bc224e957d11011c68d6f45125ee679d9711f1e579680a75967

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 1e4014f4ff07604e7a7537a78da1c75a
SHA1 3c0d85d7d8b2555ffe997617c39aa15adc00db0c
SHA256 23a4fa57a6ea774997d69fb8500aff250ee512e81c10330c4011e9607d331fbe
SHA512 0ef0544f800913cb98835f7a88979d4603274b6a78f215db39c21631140c109d3df625d214eb700a8439c8256bd1f7ac31ac729f73fc56b658b2dfc359df68f3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 27718040b640b272c06b40f6682246d7
SHA1 721858b2307d37f6a5d9ed485a34973785ba189d
SHA256 47e18db3af7a1d044bd432b59307b54b941fb504dcb86576b0d3991cb80be87a
SHA512 e2c22d21651c1b1ca27fc23bcdd6629660c434005800d54685869ea5f1ca995d2be195b555c96ef285a01b33a1541a60b8a0a08f4b78d82fce2fdd46f6a967a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b89a4b1cf9d3842504c62b0966c99f78
SHA1 7e75eacb25f585ef4908b556d26d2cfc58c6072a
SHA256 e6959ebc857f798281d240b88508716ddcda4e0b27df23374263f77efdeb782e
SHA512 124a90e800759fd938cb72537fcbe17fa51eb40db728eee0fb354cd63df026c4379383b68c337f6d24536b2e7a0fb205b3bb17fcdc365278a0c902df912bf3dc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 76bd44fe621e96dea8bcca557af7b1cc
SHA1 92c579f43ee8ac179ec89c1193881c95c265b605
SHA256 806b1887b668e81b2992d17f975ad1a7b9e27a38d40458974846aa5b9e548ba2
SHA512 a66a46c5ff4f882f9403e0b6ece8bfba95e526f19eca6fb12df2caadd9b3380a20e0a571eb538e5edc0a263b1e53c46266a4a154471b4bfb6266e1a24bb177aa

C:\Users\Admin\Downloads\Unconfirmed 282943.crdownload

MD5 9fb66ffa1e1f4dedfd16eb3a8170bafd
SHA1 69b5d57ddda6b97adde820b9ceaddae9c33d53bd
SHA256 7953b28b736795aaa54e6cd5cb591e794e2f770c1045ca2e33af5ff19f480eaa
SHA512 4b141802e7a4cb6bd4a7498d30086a9d83c62d37f2137f4910ca7d3fb7009079d4dc59b95050849cfc720210b0cb44bf588d15c08e3ba830aae19c0a27e8e6d5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0856fef44330763fa7cc3b12363358c7
SHA1 de9e8009a93ebf5a781b07bdc7ceb59573cdc942
SHA256 b12c72f714d0953e76817a97331d66db751cda658ae86029bbe935dd71f5917b
SHA512 dc81dc962f875e01c14bb3d32ceedb15e4c2c19273b1a8d4aa326950b5fa788c4e839aa8eb4ea672b542b7fe4d77be4e6fafd9492a00bd7523471fceb02605a1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 2df954e406dc437d0941ebd5e1042710
SHA1 ec8e7bffa6f18629269ab7b633c898fbad8a3f62
SHA256 dd64b9dbc526ddd28aa07340758fe26b8e0380929342f9b58573ac65f988f2fe
SHA512 1950f0180b8ed1b83eebdc2ab8ef194dfaaafa61ac3cc3a10aa4bd793e474789a72d5d358bb59fe896ebe1d36736514fd9fb44ce390fd8ef18d114668f4cb1d4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ae03d1b88fefcf1a2e53dae26d03376f
SHA1 c75550e81b4f9408085969e0573c31cca485e059
SHA256 09ec17c2cdb0f04e56b710d87bff6868428e31c3dc28a5e4172ece2c6e70dfea
SHA512 e0bb581dcb09661ac34334f229bdea523987d59bfc57cf57d92319983e24e7df85ba405371eaf59a15d299d90821ecf9da6879aa8a265795eae8da90dd670073

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1e0336fee5e9ec230e6135209e9b2e52
SHA1 8f82eed62a5f74dd926f031d1fa8c61dd5977e31
SHA256 9f6b3a3377805ae6619f23641e8ef1db94f4cab40b262afa1030bd910e565c69
SHA512 6421083711d0974ddaf72a9570913be48982a068824789276974e98d2f0191ee9c889de22a9ca3c5991113e704c1d277418cb8eef18c9b486988db1447e7945d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 751f25124005f4aa429198defd2ce065
SHA1 00601a9477e30bc3a0c86ec40748d1513170d0d6
SHA256 051e9f85608f084f1db1f402365776bbb488acb39b964ad8685c88358acc7be9
SHA512 4a26b621ac328a461ba94f1f67f4ceaa699a65e3369fb866198771050df4436b7436443c58fb4a5067be8f4dfba47d662e3f51bdca333c5ee7b478af0eaaa088

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 f64de7200f93f5e9d93ca6b73f7d5cda
SHA1 cd0149b6bcbc246b01ca5417e79b2a9cca5028b6
SHA256 5a6a2bc9460b50ecbd21448c38faa964350b4100ffa1e52bbc41470433e03e95
SHA512 c5a94fe47a6d06c5caf4e3361d963f28ba96ec414c4f1d21a40882320bf764166f48b9319ff40bbbe279be98a84ef552a1aee9289b745966d54b8a3fa42ccfe9

C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\f3b8e82c20c4bb3f94a2d7bcd2a82cd1

MD5 f3b8e82c20c4bb3f94a2d7bcd2a82cd1
SHA1 89618596be7cb90317eaaf2d09b05d522d008260
SHA256 7de6a5a45227b0f21ac7dd50af250e37f20b8bf2d6f4aa53a7f643d77515bd07
SHA512 82f15e37366efd29879add4f50cedbdc27d4eb885e190dd54c8e89787b51d59ccc21473f431292da679c7e8aa7cf2d0ce7219e1503d59a0f356e078f9feece55

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2cc58a762473a2a4e694b038d3a0ce0e
SHA1 68ab3531cb61668ca9e8da22bbb38537514e4557
SHA256 55f2a01ad376a41d8343b4463d7e119a8d190221e9986f6f84a844354a3cfab8
SHA512 95c0cec0da385888f06562b4b5fd01863430e7871cdc38d5c9c9a87711f4304aac854dbe82f9bb87f2124e03547be2eda107749bf2e8db1b15d33ed51ee78571

memory/2636-10783-0x000001E520940000-0x000001E520950000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 eb79b14433e76a652784cdf1a3b3234c
SHA1 75187e64137888bce33990fc7c60eab01f0f5218
SHA256 86d76e1c8b8737b22ab7ec8d50f493c72d5c10c0d8ab4b3f2bc284533837f0ab
SHA512 a04b8c5fc9d64ce07a6b27015781dc6b4ee8aa8218c705abe58b1aff20a411dcfc2afe127c180745cc6c23be15746e28e57722aa94da6017635dbc7bf8b64eb9

memory/2636-10803-0x00007FFA8DD90000-0x00007FFA8DD91000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 bc231659aac02df172071f1c919812bf
SHA1 d4e62a48a1aba333ea690917c940ba0bea586164
SHA256 f734514f90e1ea2c57c28bbef5eebfad0117f29ca3a370befe0098d1f94b5090
SHA512 8ad4f969fc72b59499734507fe34ce61cfef3536c321d1f66ec76335ade4a4b319828a9831d07ab07ba2dab355c9320920bd35b8811295d4bd1450469168e219

memory/2636-10881-0x000001E520940000-0x000001E520950000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4779cefbb76dac132f07d37e13b6844a
SHA1 9d0fd623dcdf767c34e9715a1f44b0aa9a2953d9
SHA256 09736bab1c1111d0143c741ac1642d41dba289bc877b11ac024aa96298599c70
SHA512 43dad3b8ce5a995fea5fa40ac1ca3b5b1d2cb006ec133d037c812b76ea3a0063b6a86496ac17b3c5946aeaca9559d28559eff6431ee768e24a256c6f8deacf8d

memory/2636-10891-0x00007FFA8DD90000-0x00007FFA8DD91000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e7a0617b6730a46213de46871a4f8008
SHA1 4a141ff6963f4c6257d2208a0546b84de7e4193d
SHA256 5c0f22d208f70d3710c6d6587e218964e0fd5e5ed4cd11573d2ffd815ef4815e
SHA512 91fc3a2be6c6bcaf6241ecd11866696af7bae9e1cdd43c6de46e6d0f45d56e28388bd13b4af4a6aaf63b2c12a7fd38aa0db9c0bd234c3ad4cfde192e4c0e20e0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 20db3338b256d4d697951da4e54cb2c2
SHA1 d887164c5f08078b256bbdc757978927865784b7
SHA256 bd0ef967e3c0f211d9fdaca3bbd0611a7dea79cb8dbc4049323b59aafff178ef
SHA512 8211aa3bebdd69829037d1a14b9882d312ad0eb07347239fddf1f21783e56c1fd7c7f77971c9c0b13c675ddfc3a35e841b9722928f255df22123946278bd3ec6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e27463d0ece117a99b862eaf478f7f7b
SHA1 171417dda73f9e721fef327eab86fa75d966ffca
SHA256 836ad811abf742c585ea1f962735e1671105e68ecc936115f8a8be4bf8c4b3bb
SHA512 2294f5187521aa47a515813b9269155ac9b9b26f963932ed851825d452a3c260c182fe6648761880abf195dee0b59f5217e988db034d10d16f59dda41dcd3d8f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2e6ac39f8e6f88aa3c14e798d3d89853
SHA1 9455e7d5a2e7ad6f4acc847c018a362a61325dad
SHA256 2bfc5ab49094fdc7a5085dd3197cb5b890db89c5110c110fabc41baa351e8e4d
SHA512 925316b28731dd5a48c22eb58fa737c68bcd754cfeaf4908cdcc082df77a8ecfd933759981b302f3a868d34eb9cd63c2b1328e5fa6a06378b7edc6559636c529

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 740876b10dafd62c559790c61cbe158f
SHA1 c49877af3cf5f2292351278fddaad4953a204e24
SHA256 1a68d50a5cd06368942efc39e5d415f7717dca7d2f405ea10877f000a6dfc800
SHA512 a3a2e797f232d341c2a52b9b9291806d88e409247a7f203f2776d1b0d6b71f800b48dd10b984c2b71ec6856efffefd2ef404d16991b50f183a0ce01a029b3182

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 92ad63f6358b31008b01caf6c0697395
SHA1 a5f2d5236951481a99a6b9fec57170197766b7f9
SHA256 d5707e7c92b70a1fd3c48f00b238e3a53b94a0bcbc6857c144204374d87e6e97
SHA512 9d9e9f2957fe138b1ad48d800b9159dc0aebe7e007466472e4be20f4955c6bb671f43919be270513505b9c33d1bbdacbb08122356920bcd7e91d5f2011f70e71

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e93bf83c7f1331f19b5891d145dfc9ca
SHA1 73fbfc1ca53e6f39e8a480c299df55cc2fda58a2
SHA256 53ca369dde8f917d230318d8a2e99a293024a9c7c82b1dffc74858a2226d402c
SHA512 cc7076bb79e351961313728e386363a1b988e13a9a5a2a0807958ca3c4254766d66f32043ef1dc3858315221685fe5fe9295cf298a520473d3ebfceab420a370

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6a58c53d96e28aa3879bc2646ded6da3
SHA1 4f5e5d495ce482db4eb55b3ab704fb5c8534c453
SHA256 7068b7e91eccbbfc73cc3c3edf4ed40b35f9317e571c84c2c72a3ad77556a07e
SHA512 6e61c1c1d378a2a3864ad274d4842ad5ed54b21f42515f94cad5b0decc7372fe34bf35664630e84d373fd92aa7066581af6ae2d80f37043d2fc6402bcbce67c0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e7e3381025d639c7e5d2c353f36cbe7f
SHA1 8c38452d0186fabe03877814489bffe196c3954a
SHA256 c1f8026c37baa036596fe43f0e16782788b1f44398d128a45a3f1cbed0eb668e
SHA512 42e39fb81fe6b6f379ce908895bb8f0ce92f72811420b31d243f51d863d31a662c6b32d73fbbb037a78fb353a2004735d117a4b87f8ea6b1d7c57e26b0c16901

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5301649eb795d638f337948b52400e33
SHA1 ac1793f50294bffee0021ed288e6c2dd33caeeff
SHA256 239ff143071b821e6f0253cf24d8ed15687b737307a91506b98ba758d628ac01
SHA512 3d78b1f4ab2e6eeabd234a29a605da1391f3215d1ce54665ae6af83ed05a870c8dfff37f9aa4e1d45fbf34d99a4b900281f62e6b28cdb041f93b30c3338facfe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c4a677c443e28e0dd59782553f52160f
SHA1 84d29d59818d3ccbc6a1dba4162cb37e512bf926
SHA256 d22739ff7cfafe6cae31284bbaf161a57f9d5edcd702eecdfd560fd260f82ef7
SHA512 d039f6e932b14c6637479a3bee7fec0e92f9fd4cb9cfd247b273f575ad196ae405744c896c427c21eb83108e4a4a7189ec066f9d36e2cf25908468e1c803c5bc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c557e45b892ac124b7eb08d1f4c41a19
SHA1 38e95da5eb16e71bae69b58d92c6d7b51d990f13
SHA256 fc82054fbd969b07f309a8b9a0bd2e4ee7bb1afa9750c24fad8a5a4b3d06ab94
SHA512 f131c47c818b97ffec330c3c2d4757ddc7b3339199a2d960d1af4fde0e6160a0c7c927134143036f7815a23e1dc933cc4acb9a4a3aeb89100d88c5afdb517c84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9f77554a05c74326097e9c1693f769d5
SHA1 8c932e638c8796d668802e6c8f31e023e0df436d
SHA256 c753ca0b2d53fb5d245510fc703255055bc3fbef4609f76b100d9393ab1b5e24
SHA512 5d61a25dc44fc117b116d2e276d7640d8fcbd26b6d10a81bc6306772a29b06b0b22a49837908f4a4485ce3e6d358c1d1de8082656fc241d0c2ccdcb30031a270

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5bdfb61494152a5221862c73dd64c1f6
SHA1 f98562a1204ad2833fb1b2c07a8dc0c0fe4d0ccf
SHA256 521ea5614d026238ef64e520afebcaa96ba404df8badd684eae7c8f7f80a0106
SHA512 d89e171ebb62bf1b56edac0a8a058f70c37c374f605425aca3e3e66a55f18b5e99ef421d6a38434b85d23ee75de2eedf8c60126414c96b16ed23b26415c67bf3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b34633761ba35ec2313fb137fcf2fb9d
SHA1 507d46d9e4b02abf84ac68b604d0ff8c8b312c09
SHA256 949aab0fa85d73668366396ff42f2f8e864feba47d6f113e6e35096995a0e32d
SHA512 fdc45d1d434eab0bc42d9fd2e6a5e6cb8a3d926672c902496579c12bf0489134349f2114eda2d05669309afce69eeaeef17feb92b76747cff6bef393f825ec68

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 93cb553c16053ec06d243be0cf3eca9b
SHA1 29bbf2c2c9cea626f22ec363917d6b98899ca458
SHA256 ebe5cfee6de095af3b45ffe3a3e4f09b635ef5a4e8af503da7c73f511e9070ae
SHA512 aecd9632905d38866b36e0227af7bc8448d557db9c21f059df267e5cf4f2f6dda63b7e6201d5c35bb7dd8b53b8a585a1aaa6bb0001bfb9444fd09cb0d991119b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4604d6cd10b3190c2396150d40efcc80
SHA1 eb1622d980236e46627d4fa849c1836bf1c63975
SHA256 8faae8b2200c02e673cb40591fef80d175e5100a4853bd1a73584667eddcfe30
SHA512 8a382237111c70748f7c66e4c5524489f25b3bdd1cd5f55f4fa2d048969df4e79ddcd5b53df52a2b0cbc2f5fa9566d8997fc3538b81956ac80973dc2846e330a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 05ecd32e7c4f360dd661abcf9f72de03
SHA1 dbb004f3a7cfb1858b62493950788d11826a2231
SHA256 ee533bbb7adc8f8d5200b4f503550f7c421912ced66c04f27900a344eebc7fbc
SHA512 b4d84ad101f3c4569f426ae7d64bee0eb8a9f3e7e3bd3728891029a2533c84731a5f084c521a3b6d2943a68268fff9e7cf4db89b0f000d24c6e886c6b418f41d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 96cef6fdf4b226eef6219353840e8832
SHA1 38ed189ace878726cdd0ccbca5669b1e65d8b2d8
SHA256 80e54658be4e5a20e0db8af2e9530068002fe1f9498ddba64b93b114ec45d28b
SHA512 60aed017fd065d151b14b0d649258200d39669b38174b75e5e3400cf22f59978e8f64d927669f3323925a73eedd914702cd05f187177745aa31cec792f1e9550

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 dd5bd72dd43f33d1105d3d05bff71672
SHA1 285a4549e98e9358e7e6d3803b1f411232590caa
SHA256 f14f6bb312c64bffb982fdd9fadc6716f817a8399f976751b39b0ed9d4db653d
SHA512 53ebdff4ff07573d6fa15396534549ee668f27e59285bc6332b5e41692a97b0e8fbf7e6057577362b90825fca6314eea64befbbe361716295ccd487cc0bd7c0c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 04656c986c51c41c592195660f0cf8b2
SHA1 6cd0edd62a7c7d768adf040409a1e269049b4f16
SHA256 9aa826532f06873a404ed450718a967f8de4ae50362b625f8be85f8ad93537db
SHA512 dd25cf7d23bc0061ae297da7cfcf700c7ad92636441c048fb70db91e48eb37a1b3072778ffca6f029749413549941dc371a53477909c419bec97f548edc86684

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 eeb7cc9e5cdd57a51ec00d7f0d5b7e24
SHA1 254b46e33f1070b9bcf780f8f4aecda8986b03a3
SHA256 c2dd94aa1f43074bdf5a732090361f0389e16305271eb763d63738e9b4956816
SHA512 b36257eac43999b09018f8bc544df7953b93ee1c892f43dfbd39ae335a2bbcd67c803a0966f1f9e4804509fed1f54cc871cb2cb16c3562367c727f7669740558

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7c7e34081cdea051cf5bef4de97149dd
SHA1 d0e566c78a88680b7bb96c7812d21b61cf876394
SHA256 08e128aba5c36aa127373ca41776baf5c9e13d27d0be653ad528703247406e5e
SHA512 031368c7695fb9f35281cc704648b84953685e863bcaf54fa5b3868b770c83c462f0b4bac2f47bbe7e28a8607fc1218fc6575745fd8ba906a1b7d14d8dcb549a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ee1075da1eeecb01d60d277a20387a62
SHA1 4ff4b389e34da3826a7c2981c3c090581b3ce026
SHA256 ab260671106cb041e13624db39b3df26cace6a1643dc88576591d302bace2430
SHA512 22ae2a42464ca8770b740462c0534568622c57ed9909eca2eaf189517e48a536e4cc98553c140b5f9ca7bf5a5b6dc5846f2215f49a9471146819e28d372015a6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0d95d944cc4a501d941b0d697a307e1f
SHA1 d15872fb235c382d38035954e899f9fd715de492
SHA256 1b323230c022315f4b5499c7c6db6c7299578662e624401ab8f11ce40577f3d4
SHA512 8c7df642909e4bf769e1e0e634a81fd0124ac25627616249d589928e186e5b15004354c82813fc5dbadbde220c6606e492d2eddee81eb730e32a8d713576ca32

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5907eb94eabaf56dc467de1f494383d4
SHA1 a48e83979b50ba9e9a4e9a4006a648ebfcf3e1de
SHA256 af19be87b848dc9b647fc64e8252e06d3d51c2343080089f72a44e0cc07dd5b8
SHA512 4e5e59d5fc4dae11991f7fc8fff5e9fc28b94e33e4712815d121447e30ad5e02d295207c7a09f34fe9de4eebf9f9cd79eadd0cc4422a61db33a45afb091af0f5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 75c78dfb13c102eb2f0bce44163ca7ba
SHA1 93d14ba132c142ccf3f4fe94d918be970d012e3d
SHA256 b66ceb20ed48b27827afc2cfb36dd7fbd637b7fd46a49a26bc7b50ae6aad7ae7
SHA512 dc84019c89bad853b6a524edc0835a537ce2729202fd0174b44ec5b115c14810cd2bcdc16c194ac71a75ac3e1852e7460e058a94ff23cb173f75e99d37231d44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f447336742e0c5899870773eb75002a5
SHA1 52bfe5ea7460b60fb07986c11172a457416fa99e
SHA256 d7b7c71e5334191b0a17b8399307ff41ced77ae8c7b4893bc074618e15a2036e
SHA512 4304bd86278e46fcc35f59982d6bfb4aa0d23067bf47a5262394cc710ef02c6ef05341466c9a3bde8944582ecf5e7aa3afe78c19c459e9bb5695ebbd169b9d64

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 36c032ed487c3f3efda8a4cc004a5a45
SHA1 ccfb78a49402935a25e9ec1b1e00c768fb88197c
SHA256 e997f59f05f13c422a0836719b4e89878ba6a1d35c08fa4493bf04c85d07e3ce
SHA512 7c873d314ce54b6abd9f5267b09d916dc06c58f81a88de8cfa2238c2f569bd827ebd5c84f16a28a81c9e3e254fce6991107eca508bbd26ace95cfa36bde09d7a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 be839ec2ef93b000e6c81c375e20ee31
SHA1 6fa13c43b16afebec798cf3a269959f872979695
SHA256 aa3230c7f795865b6c163800093bc68108357009f3e467d37e32f4418a473ddb
SHA512 96c3c6b69bf39ef4d5cc28af7b50cf932e76134675ce3192c204ce9960dd985d1e2297785a34968fa89f83319c86d15c6b8602851a7327253a122d5bcff3f2ea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2e0be73f9b4dcbd0da57ce99d2044c09
SHA1 d400e0bfb705cad832ad74e0528a3223dfd4df4d
SHA256 43bb5bfd1479e5da9ef5d98a1ac1e8701f835c4748e63d2a0a13387d15caba35
SHA512 ec06993f30f01e14ac603b894b0b5655891a76828119ec05b8e6ac40fc95baf609718d2b171529ad6f32fe3264eda18e649ee7cd472e34ec2bd2234426c29e0d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 678742a8d8be6783b41abf392c170493
SHA1 14fa8dbe26c7d2b295ba9e3d01fde745c49ab70b
SHA256 83013c0e23115cc89a722abbe713fda7b31b1443d53c75fa185757aee2c19ad0
SHA512 0498a03e9d158132677b4ebefafe6c29fedc239ce10b4a794bad3ba2964885a60fe904aba4d704af81edde8b46335349c0bcba2bd558ca456db6f0ec7e4c8ad1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 068052045d9690a69bde9af6f59de781
SHA1 a8eb48b28a8ebc10bd2dfdc2812b5a34b6da9677
SHA256 a22811b9d7779ab016436ce757ed4b46d92e8c313d159461892302ca0ca73a30
SHA512 5762ad8b8654d76d5b478a656d9237fa305660b354c265d6ad3b1060aa7dcf06082384e8afb2caacdd2f6c2129568e112d95bf4c2050d826499d67bee48aeed6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 14811d7f97e40384f464d321370e671f
SHA1 62408663d4bb7b559d84195c46cf8b2e31851056
SHA256 d565b9f7cf4fd6ce920a5857116bcd6fd0c332ace4270e75b1e99ff2de1203b3
SHA512 7105f532f1031b11fbb9d96b338351039dcfb5d118313a2d7ff695baa5d092a1acf539ae6c9059754e04f66dd1d2e02177b0cfc89dc73237e56f9fa66b97ac05

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0ef7ce8d6f042a93a43e65965f95aa8e
SHA1 ba485e938b4fd03bc6448661ac978a94edfa0939
SHA256 fccaf578fa27b822016371427a257d09d819b80a0ff9dfbd1fbc1158a506529d
SHA512 913daf2683a3e2377a7d766103b096339e02804d02b22a9abe5395257a96557426773bbd5b22ce0b4bd631de1b7bf6b567b68800b73ff85a0d1491d6bddf97bc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a7a384ee90f5a980938ceaeb8dd790c0
SHA1 dbff72f3b8e8ffae81acf9a6fc7c434e469385e3
SHA256 6f4e9a3a4753f2a7404269f67b388fc43b862abd80ad07852912ebcf2b632c8b
SHA512 1b952a68697329c6eb73dc5d658493e202e17690038c17ec1f9a10773f51e461a95cabd3a60f44addcb73c3f3be605774ce0c296b2d5deb816561f479b85c668

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6eeaf568135c9c2d41d31b887190be29
SHA1 e8aa507eda1f86d3939c36d4c8e550c893a02ffd
SHA256 438249162d399ec9a37f6d02c5673d263eee911886824b243fb79a9898ee28e6
SHA512 8c472c67c6ac099859cba5be6011e3c5e2fc01b9a0fde99d11fc692da7f362ff2dc59b11efc4dfabc2623504e8ea408741b4436c38f4a664d67674b1d6728984

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6506e6a6a99770a4a40583d806523aa5
SHA1 2169a8f2a19b5ce67297c06bae0dbde5214bb70e
SHA256 7421dabb5dac8d6706cf92af218f2c6c50c9fad1d74cd0f9abf68402c217ec6c
SHA512 fee22c2b09c52b60ebc68a6db94d6579fef85eed9610f383d8f6071cf2be2a08ea945084eafc7ef179e702de7bba991d72e180a9ceadc4c6235b8a29071cd20b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0dc653252307cdc56331948ca35d0c70
SHA1 4573728415227af0399fcd564eb02fedc9e898e1
SHA256 dd4c500d58fd98ba8ceccc956bb0bd0ce116345576e4d666b284f79347a21d17
SHA512 9878b6f98c5fb9956ae3a96fe894bc6e497b33167dd3fb6c7a1d4dbf5caed4006b3c511850efa492031fbf70915ab02514f175ddf326dcc1fc4a4162bd92a8c8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 9ca8b80c40c0e79c9951a29993472c32
SHA1 05e0b292f3656acbd341134a3e2088d25dba9847
SHA256 56569bd26dec291d14b5d2864a3e938ec605d49c8a02de0d4706b960dd5d2cb8
SHA512 2d33b6df2c3d407f865634c0f68abb4ce7266bbc61f53010bae5da7ac741cbf84958eff48e8e7ad9840afdaf7aab63b7faa03e71d3a5eaa95bafa35e90a5a809

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e629621615d678e860bd11a51578ccbf
SHA1 9a83b525454c075c24c315f610bbd197f28a8e12
SHA256 c52cb99b666444e2e715b2ec45e7266540302fe0d5ff5d9436154f7c0319370f
SHA512 c64ace5795e4aad4f81d31c68b9a54183a08e6230f4bd77ea143940c80f4d6cc14ee05bbc3f7cab738154faac428ed13c7c9cc6df9fd79e1261187e31d53b3b9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 2aa5f01527727f222c3f8e4eee25afea
SHA1 1619f110ec237829e9511c9d6bcb860d71df0645
SHA256 6cb561e569b1b3f10851ed4c9b26b9cdb329b01d865a79056775246a3e025dd6
SHA512 065a02acd2bd955b6f19298dce8400813e038aa439d7d89db8e1c41f4b6dc51b051553d36e87487acb5329261cb30b9093bc1837f11d6be3c21ac4b1dc3b7724

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 34ccb3ff7d7e017ec5c3fb4d16b569d3
SHA1 c7fabd6a5711dca2f4772fa89041b5ce0e4308ed
SHA256 594fe8d6f7e7b22cd3788a2572c5d83422a43f9459f278841077263fe4fc98a5
SHA512 6a312142a55b26ad2ea1a6d9884400719e1d1012a239ad5237c418a189aeb6c8aecb53bffa8349143a2725da055986a19bd4d96c9c6753a0bd14233fab713bfc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 546c14fccd59cfc8dc9bdc5f15b54da3
SHA1 6ecbab03fa0204d8629fdb9a4e282fe5d04b4cf0
SHA256 e2840d381bdd2fb2457659a003d5cd9c1a94b4f50fecf72e107844852f97eddf
SHA512 1fe604a77274ce74dfa3f8424ddf0a86688e92133f6686e164d99722e00b0d1ae3681672956c2fe0ef3412167a7d3c045aa482e6246d6e7a892cba3d6bf9d066