Analysis Overview
SHA256
192367011ec5a6699bea5a195d64492d0f822b18bc0a8a3d5a6dd216101130c8
Threat Level: Likely malicious
The file Emotional Jensi.mp3 was found to be: Likely malicious.
Malicious Activity Summary
Sets file execution options in registry
Modifies Installed Components in the registry
Downloads MZ/PE file
Loads dropped DLL
Registers COM server for autorun
Executes dropped EXE
Adds Run key to start application
Checks installed software on the system
Enumerates connected drives
Drops desktop.ini file(s)
Checks whether UAC is enabled
Installs/modifies Browser Helper Object
Checks system information in the registry
Drops file in System32 directory
Suspicious use of NtSetInformationThreadHideFromDebugger
Suspicious use of NtCreateThreadExHideFromDebugger
Drops file in Windows directory
Drops file in Program Files directory
Enumerates physical storage devices
Suspicious use of FindShellTrayWindow
Modifies registry class
Suspicious behavior: AddClipboardFormatListener
Suspicious behavior: EnumeratesProcesses
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
Suspicious use of SetWindowsHookEx
Suspicious use of UnmapMainImage
Suspicious use of AdjustPrivilegeToken
Enumerates system info in registry
Suspicious behavior: GetForegroundWindowSpam
Suspicious use of WriteProcessMemory
System policy modification
Checks processor information in registry
Suspicious use of SendNotifyMessage
Modifies data under HKEY_USERS
Modifies Internet Explorer settings
NTFS ADS
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-04-14 11:46
Signatures
Analysis: behavioral1
Detonation Overview
Submitted
2024-04-14 11:46
Reported
2024-04-14 12:32
Platform
win11-20240412-en
Max time kernel
2700s
Max time network
2706s
Command Line
Signatures
Downloads MZ/PE file
Modifies Installed Components in the registry
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE} | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\ = "Microsoft Edge" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\StubPath = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\123.0.2420.97\\Installer\\setup.exe\" --configure-user-settings --verbose-logging --system-level --msedge --channel=stable" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Localized Name = "Microsoft Edge" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\IsInstalled = "1" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Version = "43,0,0,0" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
Sets file execution options in registry
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe | C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" | C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe | C:\Program Files (x86)\Microsoft\Temp\EU6589.tmp\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" | C:\Program Files (x86)\Microsoft\Temp\EU6589.tmp\MicrosoftEdgeUpdate.exe | N/A |
Executes dropped EXE
Loads dropped DLL
Registers COM server for autorun
| Description | Indicator | Process | Target |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\123.0.2420.97\\notification_click_helper.exe\"" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32\ServerExecutable = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\123.0.2420.97\\notification_click_helper.exe" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\123.0.2420.97\\EBWebView\\x64\\EmbeddedBrowserWebView.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\123.0.2420.97\\notification_helper.exe\"" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\123.0.2420.97\\BHO\\ie_to_edge_bho_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32\ThreadingModel = "Apartment" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\INPROCSERVER32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ThreadingModel = "Apartment" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\123.0.2420.97\\PdfPreview\\PdfPreviewHandler.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
Adds Run key to start application
| Description | Indicator | Process | Target |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\!BCILauncher = "\"C:\\Windows\\Temp\\MUBSTemp\\BCILauncher.EXE\" bgaupmi=64F7FF2CAD784AF8AF35BEB4DA4A3B08" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{74DA4EE6-E792-4EF1-A99D-FD4EC2BD2D9B}\BGAUpdate.exe | N/A |
Checks installed software on the system
Checks whether UAC is enabled
| Description | Indicator | Process | Target |
| Key value queried | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA | C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe | N/A |
Drops desktop.ini file(s)
| Description | Indicator | Process | Target |
| File opened for modification | C:\Users\Admin\Videos\Captures\desktop.ini | C:\Windows\system32\svchost.exe | N/A |
Enumerates connected drives
| Description | Indicator | Process | Target |
| File opened (read-only) | \??\T: | C:\Windows\system32\unregmp2.exe | N/A |
| File opened (read-only) | \??\W: | C:\Windows\system32\unregmp2.exe | N/A |
| File opened (read-only) | \??\X: | C:\Windows\system32\unregmp2.exe | N/A |
| File opened (read-only) | \??\H: | C:\Windows\system32\unregmp2.exe | N/A |
| File opened (read-only) | \??\Q: | C:\Windows\system32\unregmp2.exe | N/A |
| File opened (read-only) | \??\M: | C:\Windows\system32\unregmp2.exe | N/A |
| File opened (read-only) | \??\P: | C:\Windows\system32\unregmp2.exe | N/A |
| File opened (read-only) | \??\U: | C:\Windows\system32\unregmp2.exe | N/A |
| File opened (read-only) | \??\Y: | C:\Windows\system32\unregmp2.exe | N/A |
| File opened (read-only) | \??\B: | C:\Windows\system32\unregmp2.exe | N/A |
| File opened (read-only) | \??\E: | C:\Windows\system32\unregmp2.exe | N/A |
| File opened (read-only) | \??\O: | C:\Windows\system32\unregmp2.exe | N/A |
| File opened (read-only) | \??\R: | C:\Windows\system32\unregmp2.exe | N/A |
| File opened (read-only) | \??\Z: | C:\Windows\system32\unregmp2.exe | N/A |
| File opened (read-only) | \??\K: | C:\Windows\system32\unregmp2.exe | N/A |
| File opened (read-only) | \??\L: | C:\Windows\system32\unregmp2.exe | N/A |
| File opened (read-only) | \??\I: | C:\Windows\system32\unregmp2.exe | N/A |
| File opened (read-only) | \??\J: | C:\Windows\system32\unregmp2.exe | N/A |
| File opened (read-only) | \??\N: | C:\Windows\system32\unregmp2.exe | N/A |
| File opened (read-only) | \??\S: | C:\Windows\system32\unregmp2.exe | N/A |
| File opened (read-only) | \??\V: | C:\Windows\system32\unregmp2.exe | N/A |
| File opened (read-only) | \??\A: | C:\Windows\system32\unregmp2.exe | N/A |
| File opened (read-only) | \??\G: | C:\Windows\system32\unregmp2.exe | N/A |
Installs/modifies Browser Helper Object
| Description | Indicator | Process | Target |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
Checks system information in the registry
| Description | Indicator | Process | Target |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\Temp\EU6589.tmp\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\Temp\EU6589.tmp\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
Drops file in System32 directory
| Description | Indicator | Process | Target |
| File created | C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
Suspicious use of NtCreateThreadExHideFromDebugger
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe | N/A |
Suspicious use of NtSetInformationThreadHideFromDebugger
Drops file in Program Files directory
| Description | Indicator | Process | Target |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\GraphQL\GraphQL\jsutils\invariant.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\content\textures\ui\Controls\DesignSystem\ButtonB.png | C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\textures\MaterialGenerator\Materials\WoodPlanks.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Lua\AvatarCompatibilityPreviewer\Dark\Large\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Lua\FileSync\Dark\Standard\Import.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\scripts\CoreScripts\CoreScripts\SocialContextToast.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\GraphQL\GraphQL\utilities\__tests__\coerceInputValue.spec.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\avatar\compositing\CompositExtraSlot4.mesh | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Shared\WidgetIcons\Light\Standard\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\scripts\CoreScripts\Modules\Common\PerfUtils.spec.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft\EdgeCore\123.0.2420.97\Trust Protection Lists\Mu\Advertising | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\content\textures\ui\Controls\DefaultController\ButtonR1.png | C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\ExtraContent\textures\ui\LuaApp\icons\ic-more-message.png | C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\textures\ui\LuaChat\graphic\gr-game-border-60x60.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\scripts\CoreScripts\Modules\DevConsole\Components\Network\NetworkSummary.spec.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\scripts\CoreScripts\Modules\PurchasePrompt\Utils\getPaymentPlatform.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\scripts\CoreScripts\Modules\Common\renderWithCoreScriptsStyleProvider.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\scripts\CoreScripts\Modules\PurchasePrompt\Actions\RequestProductPurchase.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\EditProfile\Analytics.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\content\textures\ui\PlayerList\[email protected] | C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\Qml\QtQuick\Controls.2\designer\images\stackview-icon.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\textures\DeveloperFramework\checkbox_indeterminate_light.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\textures\DeveloperFramework\PageNavigation\button_control_end.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Lua\AvatarCompatibilityPreviewer\Light\Standard\rate_feedback.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\UGCValidation\UGCValidation\util\Types.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\InvisibleMode\Dev\Style.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\ExtraContent\textures\ui\LuaChat\icons\[email protected] | C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Lua\AvatarCompatibilityPreviewer\Dark\Large\star.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Lua\Notifications\Light\Large\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\Promise340\lock.toml | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\roblox_lua-roact-policy-provider\lua-roact-policy-provider\getPolicyImplementations\fromStaticSource.spec.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\RoduxContacts-d3dec4b0-3cde6d38\lock.toml | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\PlatformContent\pc\textures\diamondplate\normaldetail.dds | C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\Qml\QtQuick\Controls.2\designer\images\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Shared\WidgetIcons\Dark\Large\BuildRig.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\scripts\CoreScripts\Modules\BlockingUtility.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\JestUtil-edcba0e9-2.4.1\JestUtil\isPromise.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\AudioListener.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\Thumbnailing\Thumbnailing\ColorUtility.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\ApolloPresence\Dev\JestConfigs.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\GameTile\Dev\PlayabilityRodux.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\textures\advCursor-white.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\textures\ui\NetworkPause\no [email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\textures\ui\TopBar\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Shared\Navigation\Light\Large\ZoomIn.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\scripts\CoreScripts\Modules\DevConsole\Reducers\DevConsoleReducer.spec.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\App\Loading\Enum\RetrievalStatus.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\GraphQlShared\GraphQlShared\default.rbxp | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Shared\DraggerTools\Dark\Standard\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Shared\InsertableObjects\Light\Large\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\JestDiff-edcba0e9-2.4.1\JestDiff\JoinAlignedDiffs.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\JestSnapshot-edcba0e9-3.5.0\JestSnapshot\printSnapshot.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File opened for modification | C:\Program Files (x86)\Microsoft\EdgeCore\123.0.2420.97\Trust Protection Lists\Mu\Entities | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\content\textures\ui\Emotes\EmotesRadialIcon.png | C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\GameDetailRodux\GameIconRodux.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\NotificationsCommon\t.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\content\studio_svg_textures\Shared\Navigation\Light\Standard\ScrollbarUp.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\scripts\CoreScripts\Modules\AvatarEditorPrompts\Thunks\PerformRenameOutfit.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\scripts\CoreScripts\Modules\VR\Controllers\IndexController.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\ExtraContent\LuaPackages\Packages\_Index\JestDiff-edcba0e9-3.5.0\ChalkLua.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\ExtraContent\textures\ui\LuaApp\category\ic-popular.png | C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe | N/A |
Drops file in Windows directory
Enumerates physical storage devices
Checks processor information in registry
| Description | Indicator | Process | Target |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 | C:\Windows\system32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString | C:\Windows\system32\svchost.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 | C:\Windows\system32\svchost.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 | C:\Windows\system32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString | C:\Windows\system32\svchost.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 | C:\Windows\system32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString | C:\Windows\system32\svchost.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 | C:\Windows\system32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString | C:\Windows\system32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString | C:\Windows\system32\svchost.exe | N/A |
Enumerates system info in registry
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe | N/A |
Modifies Internet Explorer settings
| Description | Indicator | Process | Target |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge\WarnOnOpen = "0" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox | C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth\WarnOnOpen = "0" | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\123.0.2420.97\\BHO" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main\EnterpriseMode | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\EnterpriseMode\MSEdgePath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player | C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge\WarnOnOpen = "0" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations\C:\Program Files (x86)\Microsoft\Edge\Application = "1" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\123.0.2420.97\\BHO" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-player\WarnOnOpen = "0" | C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox\WarnOnOpen = "0" | C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0" | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
Modifies data under HKEY_USERS
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "1" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
Modifies registry class
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}\NumMethods | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{69E11C9D-4974-41A2-B067-9F26953CF52A}\InprocHandler32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3}\NumMethods\ = "4" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\ProxyStubClsid32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Classes\TypeLib\{C9C2B807-7731-4F34-81B7-44FF7779522B} | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\ProxyStubClsid32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD} | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE} | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\ = "IJobObserver" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\NumMethods\ = "5" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F} | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB}\NumMethods | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E421557C-0628-43FB-BF2B-7C9F8A4D067C}\Elevation | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ProxyStubClsid32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\NumMethods\ = "9" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{77857D02-7A25-4B67-9266-3E122A8F39E4}\Elevation\IconReference = "@C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\msedgeupdate.dll,-1004" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4}\ProxyStubClsid32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A} | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\ie_to_edge_bho.IEToEdgeBHO.1\CLSID\ = "{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{492E1C30-A1A2-4695-87C8-7A8CAD6F936F}\ = "Microsoft Edge Update Broker Class Factory" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\NumMethods\ = "24" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\MSEdgeHTM\Application\ApplicationCompany = "Microsoft Corporation" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusMachine.1.0\ = "Microsoft Edge Update Broker Class Factory" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF}\NumMethods\ = "23" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A6556DFF-AB15-4DC3-A890-AB54120BEAEC}\NumMethods | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17}\NumMethods | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7B3B7A69-7D88-4847-A6BC-90E246A41F69}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD}\NumMethods | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\ProxyStubClsid32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1B9063E4-3882-485E-8797-F28A0240782F}\NumMethods\ = "4" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ = "IProgressWndEvents" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3} | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\NumMethods\ = "16" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FF419FF9-90BE-4D9F-B410-A789F90E5A7C} | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A6B716CB-028B-404D-B72C-50E153DD68DA} | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3} | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ = "IProgressWndEvents" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\123.0.2420.97\\PdfPreview\\PdfPreviewHandler.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\ = "IAppBundle" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\ProxyStubClsid32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\ProxyStubClsid32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FF419FF9-90BE-4D9F-B410-A789F90E5A7C}\ = "Microsoft Edge Update Legacy On Demand" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusSvc\CLSID\ = "{9F3F5F5D-721A-4B19-9B5D-69F664C1A591}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E}\NumMethods\ = "41" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\CLASSES\MIME\Database\Content Type\ | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\NumMethods | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB}\NumMethods | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3A49F783-1C7D-4D35-8F63-5C1C206B9B6E}\ProxyStubClsid32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A} | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C20433B3-0D4B-49F6-9B6C-6EE0FAE07837}\ = "ICoCreateAsync" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1B9063E4-3882-485E-8797-F28A0240782F} | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\123.0.2420.97\\EBWebView\\x64\\EmbeddedBrowserWebView.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A6B716CB-028B-404D-B72C-50E153DD68DA}\AppID = "{A6B716CB-028B-404D-B72C-50E153DD68DA}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\ = "PSFactoryBuffer" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF}\NumMethods | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{450CF5FF-95C4-4679-BECA-22680389ECB9}\NumMethods | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FCBE96C-1697-43AF-9140-2897C7C69767}\AppID = "{1FCBE96C-1697-43AF-9140-2897C7C69767}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\MSEdgeHTM\Application\ApplicationName = "Microsoft Edge" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe | N/A |
NTFS ADS
| Description | Indicator | Process | Target |
| File opened for modification | C:\Users\Admin\Downloads\Unconfirmed 282943.crdownload:SmartScreen | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| File opened for modification | C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe:Zone.Identifier | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| File opened for modification | C:\Users\Admin\Downloads\Unconfirmed 238851.crdownload:SmartScreen | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| File opened for modification | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe:Zone.Identifier | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious behavior: AddClipboardFormatListener
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe | N/A |
Suspicious behavior: EnumeratesProcesses
Suspicious behavior: GetForegroundWindowSpam
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe | N/A |
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
Suspicious use of AdjustPrivilegeToken
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
Suspicious use of SetWindowsHookEx
Suspicious use of UnmapMainImage
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe | N/A |
Suspicious use of WriteProcessMemory
System policy modification
Processes
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "C:\Users\Admin\AppData\Local\Temp\Emotional Jensi.mp3"
C:\Program Files (x86)\Windows Media Player\setup_wm.exe
"C:\Program Files (x86)\Windows Media Player\setup_wm.exe" /RunOnce:"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "C:\Users\Admin\AppData\Local\Temp\Emotional Jensi.mp3"
C:\Windows\SysWOW64\unregmp2.exe
"C:\Windows\System32\unregmp2.exe" /AsyncFirstLogon
C:\Windows\system32\unregmp2.exe
"C:\Windows\SysNative\unregmp2.exe" /AsyncFirstLogon /REENTRANT
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa7e773cb8,0x7ffa7e773cc8,0x7ffa7e773cd8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1868 /prefetch:2
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 /prefetch:3
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2548 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1812 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4848 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3368 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5444 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4828 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5292 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=3368 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4584 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3856 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5280 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3368 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5092 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5896 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6064 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6092 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5728 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5600 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1924 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5876 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4584 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6680 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6832 /prefetch:8
C:\Users\Admin\Downloads\RobloxStudioInstaller.exe
"C:\Users\Admin\Downloads\RobloxStudioInstaller.exe"
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=5860 /prefetch:2
C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe
MicrosoftEdgeWebview2Setup.exe /silent /install
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MDBEQkE2NTctNERDRC00Q0U2LUE3QkYtNEI5NjczNDNFMENDfSIgdXNlcmlkPSJ7MkM1MUIyNUEtRDQxMC00ODNFLUJCMzUtQzY5MkIxMjVDNEUxfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins2ODBGNDA1Qy05RThDLTRCOUUtOTNGOC1DRTAyMUNENUJCMjd9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE0My41NyIgbmV4dHZlcnNpb249IjEuMy4xNzEuMzkiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjY0NDk0NDY3NTUiIGluc3RhbGxfdGltZV9tcz0iMTQxNiIvPjwvYXBwPjwvcmVxdWVzdD4
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{00DBA657-4DCD-4CE6-A7BF-4B967343E0CC}" /silent
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MDBEQkE2NTctNERDRC00Q0U2LUE3QkYtNEI5NjczNDNFMENDfSIgdXNlcmlkPSJ7MkM1MUIyNUEtRDQxMC00ODNFLUJCMzUtQzY5MkIxMjVDNEUxfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9InswQzIwMjU0OC1GQjQ0LTQwNTItOEIxNS0wNjFCMTMxRUI4RkJ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtyNDUydDErazJUZ3EvSFh6anZGTkJSaG9wQldSOXNialh4cWVVREg5dVgwPSZxdW90OyIvPjxhcHAgYXBwaWQ9Ins4QTY5RDM0NS1ENTY0LTQ2M2MtQUZGMS1BNjlEOUU1MzBGOTZ9IiB2ZXJzaW9uPSIxMTAuMC41NDgxLjEwNCIgbmV4dHZlcnNpb249IjExMC4wLjU0ODEuMTA0IiBsYW5nPSJlbiIgYnJhbmQ9IkdHTFMiIGNsaWVudD0iIj48ZXZlbnQgZXZlbnR0eXBlPSIzMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iNSIgc3lzdGVtX3VwdGltZV90aWNrcz0iNjQ1NDk2NjUzOCIvPjwvYXBwPjwvcmVxdWVzdD4
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\MicrosoftEdge_X64_123.0.2420.97.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\MicrosoftEdge_X64_123.0.2420.97.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\MicrosoftEdge_X64_123.0.2420.97.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=123.0.6312.123 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B0CD1DDE-0C50-4C1E-A5C3-D4DD57759362}\EDGEMITMP_5C71E.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=123.0.2420.97 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x7ff7cf44baf8,0x7ff7cf44bb04,0x7ff7cf44bb10
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MDBEQkE2NTctNERDRC00Q0U2LUE3QkYtNEI5NjczNDNFMENDfSIgdXNlcmlkPSJ7MkM1MUIyNUEtRDQxMC00ODNFLUJCMzUtQzY5MkIxMjVDNEUxfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9InszRkVCRjNBQy04RENCLTQyQjAtOEFCNi01REFCN0FEQjVDRTV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtWUFFvUDFGK2ZxMTV3UnpoMWtQTDRQTXBXaDhPUk1CNWl6dnJPQy9jaGpRPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGMzAxNzIyNi1GRTJBLTQyOTUtOEJERi0wMEMzQTlBN0U0QzV9IiB2ZXJzaW9uPSIiIG5leHR2ZXJzaW9uPSIxMjMuMC4yNDIwLjk3IiBsYW5nPSIiIGJyYW5kPSIiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSI-PHVwZGF0ZWNoZWNrLz48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI2NDYzNDU3MzI1IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMTk2NzU3IiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI3NDM0Njg2OTgzIiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiB1cGRhdGVfY2hlY2tfdGltZV9tcz0iMzQ1IiBkb3dubG9hZF90aW1lX21zPSIyMjE4NCIgZG93bmxvYWRlZD0iMTcyMDc2MDg4IiB0b3RhbD0iMTcyMDc2MDg4IiBwYWNrYWdlX2NhY2hlX3Jlc3VsdD0iMCIgaW5zdGFsbF90aW1lX21zPSI3Mjc4NSIvPjwvYXBwPjwvcmVxdWVzdD4
C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe
"C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe" -startEvent www.roblox.com/robloxQTStudioStartedEvent -firstLaunch
C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 620, 0, 6200463" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=2704.2880.9271086520913292915
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=123.0.6312.123 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=123.0.2420.97 --initial-client-data=0x17c,0x180,0x184,0x158,0x18c,0x7ffa652c4e48,0x7ffa652c4e54,0x7ffa652c4e60
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 620, 0, 6200463" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1724,i,6391270752603661407,16229802140066291706,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=1744 /prefetch:2
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 620, 0, 6200463" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=1824,i,6391270752603661407,16229802140066291706,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:3
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 620, 0, 6200463" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=2112,i,6391270752603661407,16229802140066291706,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:8
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 620, 0, 6200463" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3296,i,6391270752603661407,16229802140066291706,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3324 /prefetch:1
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 620, 0, 6200463" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3644,i,6391270752603661407,16229802140066291706,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=4004 /prefetch:1
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 620, 0, 6200463" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=4088,i,6391270752603661407,16229802140066291706,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=4072 /prefetch:1
C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004C4 0x00000000000004A8
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6352 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6980 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6284 /prefetch:1
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{AAA7C0FF-9B0F-4461-B14D-2B09EA0CBA30}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{AAA7C0FF-9B0F-4461-B14D-2B09EA0CBA30}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe" /update /sessionid "{D1BBA147-1F3E-4728-93D6-4CC2FEEA28A1}"
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RDFCQkExNDctMUYzRS00NzI4LTkzRDYtNENDMkZFRUEyOEExfSIgdXNlcmlkPSJ7MkM1MUIyNUEtRDQxMC00ODNFLUJCMzUtQzY5MkIxMjVDNEUxfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9Ins3NjFERjcwNS05NzE2LTQ3N0UtQjA2MC01MDU3NzVCNzJFMEZ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtyNDUydDErazJUZ3EvSFh6anZGTkJSaG9wQldSOXNialh4cWVVREg5dVgwPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIxLjMuMTcxLjM5IiBuZXh0dmVyc2lvbj0iMS4zLjE4NS4yOSIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGluc3RhbGxhZ2U9IjAiPjx1cGRhdGVjaGVjay8-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-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-PHBpbmcgcj0iLTEiIHJkPSItMSIvPjwvYXBwPjxhcHAgYXBwaWQ9Ins1NkVCMThGOC1CMDA4LTRDQkQtQjZEMi04Qzk3RkU3RTkwNjJ9IiB2ZXJzaW9uPSI5MC4wLjgxOC42NiIgbmV4dHZlcnNpb249IiIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGV4cGVyaW1lbnRzPSJjb25zZW50PWZhbHNlIiBsYXN0X2xhdW5jaF90aW1lPSIxMzM1NzU2ODg3NjU1NzY1NDAiPjx1cGRhdGVjaGVjay8-PHBpbmcgYWN0aXZlPSIxIiBhPSItMSIgcj0iLTEiIGFkPSItMSIgcmQ9Ii0xIi8-PC9hcHA-PGFwcCBhcHBpZD0ie0YzMDE3MjI2LUZFMkEtNDI5NS04QkRGLTAwQzNBOUE3RTRDNX0iIHZlcnNpb249IjEyMy4wLjI0MjAuOTciIG5leHR2ZXJzaW9uPSIiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSIgdXBkYXRlX2NvdW50PSIxIiBsYXN0X2xhdW5jaF90aW1lPSIxMzM1NzU2OTEzNDM5ODg1NDAiPjx1cGRhdGVjaGVjay8-PHBpbmcgYWN0aXZlPSIxIiBhPSItMSIgcj0iLTEiIGFkPSItMSIgcmQ9Ii0xIiBwaW5nX2ZyZXNobmVzcz0iezBFRDNCQzJBLTEyNkYtNDEzMy05MkYwLUJEQjhCQzkzQTcwNn0iLz48L2FwcD48L3JlcXVlc3Q-
C:\Program Files (x86)\Microsoft\Temp\EU6589.tmp\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\Temp\EU6589.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{D1BBA147-1F3E-4728-93D6-4CC2FEEA28A1}"
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-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-PC9hcHA-PC9yZXF1ZXN0Pg
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4580 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7132 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7136 /prefetch:1
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7KzBqVW1ZZUt0WkFGNUMzZzIycEJCNUYwUnlkdGYxU0g3Ym53c25vVStmaz0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7OEE2OUQzNDUtRDU2NC00NjNjLUFGRjEtQTY5RDlFNTMwRjk2fSIgdmVyc2lvbj0iMTEwLjAuNTQ4MS4xMDQiIG5leHR2ZXJzaW9uPSIiIGxhbmc9ImVuIiBicmFuZD0iR0dMUyIgY2xpZW50PSIiIGluc3RhbGxhZ2U9IjEiIGluc3RhbGxkYXRldGltZT0iMTcxMjkzMjg1NCIgb29iZV9pbnN0YWxsX3RpbWU9IjEzMzU3NDMwMzkxMTYxNTgxNiI-PGV2ZW50IGV2ZW50dHlwZT0iMzEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjIxMTQwNjgiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEzMjY4ODAwOTA2Ii8-PC9hcHA-PC9yZXF1ZXN0Pg
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{74DA4EE6-E792-4EF1-A99D-FD4EC2BD2D9B}\BGAUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{74DA4EE6-E792-4EF1-A99D-FD4EC2BD2D9B}\BGAUpdate.exe" --edgeupdate-client --system-level
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODUuMjkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NjBEM0VCN0YtQUQwNC00MkRDLUIwRTEtQzE2MzgxMzM0QzE4fSIgdXNlcmlkPSJ7MkM1MUIyNUEtRDQxMC00ODNFLUJCMzUtQzY5MkIxMjVDNEUxfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9Ins5REJFRjFCMi04QzM1LTRFOEYtQTQzQS1DQjY2RTM3NjQzMzV9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiIGlzX2luX2xvY2tkb3duX21vZGU9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-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-PGV2ZW50IGV2ZW50dHlwZT0iNSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iMTMzODQzNTY4OTQiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIxIiBldmVudHJlc3VsdD0iMCIgZXJyb3Jjb2RlPSItMjE0NzAyMzgzOCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iMTM4MTg3NjEwNDciIHNvdXJjZV91cmxfaW5kZXg9IjAiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiIGRvd25sb2FkZXI9ImRvIiB1cmw9Imh0dHA6Ly9tc2VkZ2UuYi50bHUuZGwuZGVsaXZlcnkubXAubWljcm9zb2Z0LmNvbS9maWxlc3RyZWFtaW5nc2VydmljZS9maWxlcy9kYTAxN2RlYS0zNGY4LTRhOWYtYTNmZC0yN2YxYjk1Mzg2MDA_UDE9MTcxMzcwMDkxNiZhbXA7UDI9NDA0JmFtcDtQMz0yJmFtcDtQND1hMXlOeDdJTEElMmY3ZHZkc1RKUWolMmZQd3lJTkRpcGtYWE93SXowazlIUnFFMm0zd0hVSDdGQ1YzcWxPT3dyWUFWY0g2NTFUTCUyZmxSbk9zaSUyZng3ZzlkJTJiUlElM2QlM2QiIHNlcnZlcl9pcF9oaW50PSIiIGNkbl9jaWQ9Ii0xIiBjZG5fY2NjPSIiIGNkbl9tc2VkZ2VfcmVmPSIiIGNkbl9henVyZV9yZWZfb3JpZ2luX3NoaWVsZD0iIiBjZG5fY2FjaGU9IiIgY2RuX3AzcD0iIiBkb3dubG9hZGVkPSIwIiB0b3RhbD0iMCIgZG93bmxvYWRfdGltZV9tcz0iMzUyIi8-PGV2ZW50IGV2ZW50dHlwZT0iMSIgZXZlbnRyZXN1bHQ9IjAiIGVycm9yY29kZT0iLTIxNDUzODYzODUiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEzODE4NzgxMjY1IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiBkb3dubG9hZGVyPSJiaXRzIiB1cmw9Imh0dHA6Ly9tc2VkZ2UuYi50bHUuZGwuZGVsaXZlcnkubXAubWljcm9zb2Z0LmNvbS9maWxlc3RyZWFtaW5nc2VydmljZS9maWxlcy9kYTAxN2RlYS0zNGY4LTRhOWYtYTNmZC0yN2YxYjk1Mzg2MDA_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_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-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-PC9hcHA-PC9yZXF1ZXN0Pg
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\MicrosoftEdge_X64_123.0.2420.97.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\MicrosoftEdge_X64_123.0.2420.97.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6296 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6964 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7076 /prefetch:1
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\MicrosoftEdge_X64_123.0.2420.97.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=123.0.6312.123 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=123.0.2420.97 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff75bdfbaf8,0x7ff75bdfbb04,0x7ff75bdfbb10
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7136 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6984 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6224 /prefetch:1
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k AppReadiness -p -s AppReadiness
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe" --msedge --channel=stable --system-level --verbose-logging --create-shortcuts=3 --install-level=1
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=123.0.6312.123 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=123.0.2420.97 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff75bdfbaf8,0x7ff75bdfbb04,0x7ff75bdfbb10
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7036 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5136 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7020 /prefetch:1
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODUuMjkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RUJERTY5MUItNkNGQi00M0JELThGMjgtQjU4MzY0ODExOUMzfSIgdXNlcmlkPSJ7MkM1MUIyNUEtRDQxMC00ODNFLUJCMzUtQzY5MkIxMjVDNEUxfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9Ins3MDBFRkEwRS1ERTY4LTQ3NkItQkQ1OS0yQzhCQkQ1RTJBQzR9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiIGlzX2luX2xvY2tkb3duX21vZGU9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-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-PGV2ZW50IGV2ZW50dHlwZT0iMTIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjE0NDcwOTcwMTAwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTMiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjE0NDcxMTYwNjcxIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTQiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjE0OTA3NzYwMjk2IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjE1MDM2MzEyMjE2IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMyIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMTk2NzU3IiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIxOTEzMzI2NTI4NyIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIgdXBkYXRlX2NoZWNrX3RpbWVfbXM9IjI1NjgiIGRvd25sb2FkZWQ9IjE3MjA3NjA4OCIgdG90YWw9IjE3MjA3NjA4OCIgcGFja2FnZV9jYWNoZV9yZXN1bHQ9IjIiIGluc3RhbGxfdGltZV9tcz0iNDA5NjgyIi8-PHBpbmcgYWN0aXZlPSIxIiBhZD0iNjMxMyIgcmQ9IjYzMTMiIHBpbmdfZnJlc2huZXNzPSJ7Mzg3Q0Q5NTctNTNFOC00MjQ5LUJCRUYtQkM4NDQ2NjIzOTk0fSIvPjwvYXBwPjxhcHAgYXBwaWQ9IntGMzAxNzIyNi1GRTJBLTQyOTUtOEJERi0wMEMzQTlBN0U0QzV9IiB2ZXJzaW9uPSIxMjMuMC4yNDIwLjk3IiBuZXh0dmVyc2lvbj0iIiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9ImNvbnNlbnQ9ZmFsc2UiIGNvaG9ydD0icnJmQDAuMDciIHVwZGF0ZV9jb3VudD0iMSIgbGFzdF9sYXVuY2hfY291bnQ9IjEiIGxhc3RfbGF1bmNoX3RpbWU9IjEzMzU3NTY5MTM0Mzk4ODU0MCI-PHVwZGF0ZWNoZWNrLz48cGluZyBhY3RpdmU9IjAiIHJkPSI2MzEzIiBwaW5nX2ZyZXNobmVzcz0ie0IzMUFEQzk0LUMzRDQtNDE1Ny1BODBFLTQ3MzBBQTAyQUE1OH0iLz48L2FwcD48L3JlcXVlc3Q-
C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\RobloxStudioBeta.exe
"C:/Program Files (x86)/Roblox/Versions/version-e2bc56a1e4374ca0/RobloxStudioBeta.exe" -task EditPlace -placeId 17144245639 -universeId 5872555972 -userid 4957272940 -parentPid 2704 -parentSessionGuid FC6FB4D5-E218-4688-B7EF-95E4F7222DE2
C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_2.50.24002.0_x64__8wekyb3d8bbwe\GameBar.exe
"C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_2.50.24002.0_x64__8wekyb3d8bbwe\GameBar.exe" -ServerName:App.AppXbdkk0yrkwpcgeaem8zk81k8py1eaahny.mca
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4928 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6264 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2776 /prefetch:1
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4976 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6272 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7120 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1652 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3572 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6568 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4872 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6512 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=media.mojom.MediaService --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --service-sandbox-type=mf_cdm --mojo-platform-channel-handle=5020 /prefetch:8
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8128 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7972 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7244 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7260 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7748 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1708,991931788132152223,12339640114220585754,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7432 /prefetch:8
C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe
"C:\Users\Admin\Downloads\RobloxPlayerInstaller.exe"
C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe
"C:\Program Files (x86)\Roblox\Versions\version-8950870ea20941f9\RobloxPlayerBeta.exe" -app -isInstallerLaunch
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /c
Network
| Country | Destination | Domain | Proto |
| GB | 104.86.110.90:443 | tcp | |
| GB | 2.18.66.179:443 | tcp | |
| GB | 2.18.66.179:443 | tcp | |
| GB | 2.18.66.179:443 | tcp | |
| GB | 2.18.66.179:443 | tcp | |
| GB | 2.18.66.179:443 | tcp | |
| GB | 2.18.66.179:443 | tcp | |
| US | 52.168.117.169:443 | browser.pipe.aria.microsoft.com | tcp |
| US | 8.8.8.8:53 | 240.221.184.93.in-addr.arpa | udp |
| NL | 23.62.61.185:443 | www.bing.com | tcp |
| NL | 23.62.61.185:443 | www.bing.com | tcp |
| N/A | 224.0.0.251:5353 | udp | |
| NL | 23.62.61.106:443 | r.bing.com | tcp |
| NL | 23.62.61.106:443 | r.bing.com | tcp |
| NL | 23.62.61.192:443 | www.bing.com | tcp |
| NL | 23.62.61.192:443 | www.bing.com | tcp |
| IE | 20.190.159.0:443 | login.microsoftonline.com | tcp |
| US | 13.107.5.80:443 | services.bingapis.com | tcp |
| US | 13.107.5.80:443 | services.bingapis.com | tcp |
| FR | 128.116.122.4:443 | www.roblox.com | tcp |
| FR | 128.116.122.4:443 | www.roblox.com | tcp |
| US | 8.8.8.8:53 | js.rbxcdn.com | udp |
| BE | 2.17.107.145:443 | css.rbxcdn.com | tcp |
| BE | 2.17.107.145:443 | css.rbxcdn.com | tcp |
| BE | 2.17.107.145:443 | css.rbxcdn.com | tcp |
| BE | 2.17.107.145:443 | css.rbxcdn.com | tcp |
| BE | 2.17.107.145:443 | css.rbxcdn.com | tcp |
| BE | 2.17.107.145:443 | css.rbxcdn.com | tcp |
| NL | 18.239.18.116:443 | static.rbxcdn.com | tcp |
| NL | 18.65.39.82:443 | js.rbxcdn.com | tcp |
| NL | 18.65.39.82:443 | js.rbxcdn.com | tcp |
| NL | 18.65.39.82:443 | js.rbxcdn.com | tcp |
| NL | 18.65.39.82:443 | js.rbxcdn.com | tcp |
| NL | 18.65.39.82:443 | js.rbxcdn.com | tcp |
| NL | 18.65.39.82:443 | js.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | 116.18.239.18.in-addr.arpa | udp |
| US | 128.116.99.4:443 | roblox.com | tcp |
| US | 172.64.154.86:443 | roblox-api.arkoselabs.com | tcp |
| FR | 128.116.122.3:443 | client-telemetry.roblox.com | tcp |
| US | 8.8.8.8:53 | 3.122.116.128.in-addr.arpa | udp |
| US | 8.8.8.8:53 | apis.roblox.com | udp |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| BE | 23.14.90.88:443 | apis.rbxcdn.com | tcp |
| BE | 2.17.107.145:443 | css.rbxcdn.com | tcp |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| BE | 23.14.90.88:443 | apis.rbxcdn.com | tcp |
| BE | 2.17.107.145:443 | css.rbxcdn.com | tcp |
| NL | 18.239.94.33:443 | images.rbxcdn.com | tcp |
| NL | 18.239.94.33:443 | images.rbxcdn.com | tcp |
| NL | 18.239.94.33:443 | images.rbxcdn.com | tcp |
| NL | 18.239.94.33:443 | images.rbxcdn.com | tcp |
| NL | 18.239.94.33:443 | images.rbxcdn.com | tcp |
| NL | 18.239.94.33:443 | images.rbxcdn.com | tcp |
| NL | 18.239.94.66:443 | create.roblox.com | tcp |
| NL | 18.239.94.66:443 | create.roblox.com | tcp |
| US | 8.8.8.8:53 | 8.169.217.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | users.roblox.com | udp |
| BE | 104.68.69.233:443 | clientsettingscdn.roblox.com | tcp |
| US | 34.120.195.249:443 | o293668.ingest.sentry.io | tcp |
| NL | 18.239.94.124:443 | fonts.roblox.com | tcp |
| NL | 18.239.94.124:443 | fonts.roblox.com | tcp |
| US | 8.8.8.8:53 | 238.179.250.142.in-addr.arpa | udp |
| GB | 23.73.139.64:443 | tr.rbxcdn.com | tcp |
| GB | 23.73.139.64:443 | tr.rbxcdn.com | tcp |
| GB | 23.73.139.64:443 | tr.rbxcdn.com | tcp |
| GB | 23.73.139.64:443 | tr.rbxcdn.com | tcp |
| GB | 23.73.139.64:443 | tr.rbxcdn.com | tcp |
| GB | 23.73.139.64:443 | tr.rbxcdn.com | tcp |
| NL | 18.239.94.116:443 | setup.rbxcdn.com | tcp |
| NL | 18.239.94.116:443 | setup.rbxcdn.com | tcp |
| FR | 128.116.122.3:443 | realtime-signalr.roblox.com | tcp |
| FR | 128.116.122.3:443 | realtime-signalr.roblox.com | tcp |
| BE | 104.68.69.233:443 | clientsettingscdn.roblox.com | tcp |
| NL | 18.239.94.116:443 | setup.rbxcdn.com | tcp |
| NL | 18.239.94.116:443 | setup.rbxcdn.com | tcp |
| NL | 18.239.94.116:443 | setup.rbxcdn.com | tcp |
| N/A | 127.0.0.1:50666 | tcp | |
| N/A | 127.0.0.1:50670 | tcp | |
| N/A | 127.0.0.1:50673 | tcp | |
| N/A | 127.0.0.1:50676 | tcp | |
| IE | 20.166.2.191:443 | msedge.api.cdp.microsoft.com | tcp |
| GB | 87.248.205.0:80 | msedge.f.tlu.dl.delivery.mp.microsoft.com | tcp |
| FR | 128.116.122.3:443 | realtime-signalr.roblox.com | tcp |
| N/A | 127.0.0.1:51003 | tcp | |
| BE | 104.68.69.233:443 | clientsettingscdn.roblox.com | tcp |
| FR | 128.116.122.4:443 | thumbnails.roblox.com | tcp |
| N/A | 127.0.0.1:51015 | tcp | |
| N/A | 127.0.0.1:51023 | tcp | |
| N/A | 127.0.0.1:51026 | tcp | |
| FR | 128.116.122.3:443 | realtime-signalr.roblox.com | tcp |
| FR | 128.116.122.4:443 | thumbnails.roblox.com | tcp |
| FR | 128.116.122.3:443 | realtime-signalr.roblox.com | tcp |
| N/A | 127.0.0.1:51030 | tcp | |
| N/A | 127.0.0.1:51034 | tcp | |
| US | 8.8.8.8:53 | dns.google | udp |
| US | 8.8.8.8:53 | dns.google | udp |
| US | 8.8.8.8:53 | dns.google | udp |
| US | 8.8.8.8:53 | dns.google | udp |
| US | 8.8.4.4:443 | dns.google | tcp |
| US | 8.8.4.4:443 | dns.google | tcp |
| US | 8.8.8.8:53 | dns.google | udp |
| US | 8.8.8.8:53 | dns.google | udp |
| US | 8.8.8.8:443 | dns.google | tcp |
| US | 8.8.4.4:443 | dns.google | udp |
| US | 8.8.8.8:443 | dns.google | udp |
| FR | 128.116.122.4:443 | thumbnails.roblox.com | tcp |
| FR | 128.116.122.4:443 | thumbnails.roblox.com | tcp |
| NL | 18.239.83.69:443 | tcp | |
| NL | 18.239.83.69:443 | tcp | |
| NL | 18.239.83.69:443 | tcp | |
| NL | 18.239.83.69:443 | tcp | |
| NL | 18.239.83.69:443 | tcp | |
| NL | 18.239.83.69:443 | tcp | |
| BE | 2.17.107.35:443 | tcp | |
| BE | 2.17.107.35:443 | tcp | |
| BE | 2.17.107.35:443 | tcp | |
| BE | 2.17.107.35:443 | tcp | |
| BE | 2.17.107.35:443 | tcp | |
| BE | 2.17.107.35:443 | tcp | |
| BE | 2.17.107.241:443 | tcp | |
| NL | 18.239.18.72:443 | static.rbxcdn.com | tcp |
| NL | 18.239.18.72:443 | static.rbxcdn.com | tcp |
| NL | 18.239.83.69:443 | tcp | |
| GB | 128.116.119.4:443 | tcp | |
| US | 172.64.154.86:443 | roblox-api.arkoselabs.com | tcp |
| FR | 128.116.122.4:443 | thumbnails.roblox.com | tcp |
| US | 172.64.154.86:443 | roblox-api.arkoselabs.com | udp |
| BE | 23.14.90.88:443 | apis.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | 4.119.116.128.in-addr.arpa | udp |
| FR | 128.116.122.3:443 | realtime-signalr.roblox.com | tcp |
| FR | 128.116.122.3:443 | realtime-signalr.roblox.com | tcp |
| FR | 128.116.122.4:443 | thumbnails.roblox.com | tcp |
| FR | 128.116.122.4:443 | thumbnails.roblox.com | tcp |
| FR | 128.116.122.4:443 | thumbnails.roblox.com | tcp |
| FR | 128.116.122.3:443 | realtime-signalr.roblox.com | tcp |
| FR | 128.116.122.4:443 | thumbnails.roblox.com | tcp |
| FR | 128.116.122.4:443 | thumbnails.roblox.com | tcp |
| N/A | 127.0.0.1:51516 | tcp | |
| N/A | 127.0.0.1:51697 | tcp | |
| N/A | 127.0.0.1:51703 | tcp | |
| N/A | 127.0.0.1:51705 | tcp | |
| N/A | 127.0.0.1:51707 | tcp | |
| FR | 128.116.122.4:443 | thumbnails.roblox.com | tcp |
| FR | 128.116.122.4:443 | thumbnails.roblox.com | tcp |
| FR | 128.116.122.4:443 | thumbnails.roblox.com | tcp |
| FR | 128.116.122.4:443 | thumbnails.roblox.com | tcp |
| FR | 128.116.122.4:443 | thumbnails.roblox.com | tcp |
| FR | 128.116.122.4:443 | thumbnails.roblox.com | tcp |
| FR | 128.116.122.4:443 | thumbnails.roblox.com | tcp |
| FR | 128.116.122.4:443 | thumbnails.roblox.com | tcp |
| FR | 128.116.122.4:443 | thumbnails.roblox.com | tcp |
| GB | 23.73.139.67:443 | tr.rbxcdn.com | tcp |
| GB | 23.73.139.67:443 | tr.rbxcdn.com | tcp |
| GB | 23.73.139.67:443 | tr.rbxcdn.com | tcp |
| GB | 23.73.139.67:443 | tr.rbxcdn.com | tcp |
| GB | 23.73.139.67:443 | tr.rbxcdn.com | tcp |
| NL | 108.156.60.101:443 | c5.rbxcdn.com | tcp |
| GB | 23.73.139.67:443 | tr.rbxcdn.com | tcp |
| GB | 23.73.139.67:443 | tr.rbxcdn.com | tcp |
| NL | 18.239.18.70:443 | t4.rbxcdn.com | tcp |
| N/A | 127.0.0.1:52977 | tcp | |
| N/A | 127.0.0.1:52980 | tcp | |
| US | 8.8.8.8:53 | 101.60.156.108.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 67.139.73.23.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 70.18.239.18.in-addr.arpa | udp |
| N/A | 127.0.0.1:52983 | tcp | |
| N/A | 127.0.0.1:53095 | tcp | |
| N/A | 127.0.0.1:53108 | tcp | |
| N/A | 127.0.0.1:53114 | tcp | |
| N/A | 127.0.0.1:53130 | tcp | |
| N/A | 127.0.0.1:53135 | tcp | |
| N/A | 127.0.0.1:53167 | tcp | |
| N/A | 127.0.0.1:53206 | tcp | |
| GB | 23.73.139.67:443 | tr.rbxcdn.com | tcp |
| NL | 18.239.18.90:443 | c1.rbxcdn.com | tcp |
| FR | 128.116.122.4:443 | games.roblox.com | tcp |
| FR | 128.116.122.4:443 | games.roblox.com | tcp |
| FR | 128.116.122.4:443 | games.roblox.com | tcp |
| FR | 128.116.122.4:443 | games.roblox.com | tcp |
| FR | 128.116.122.4:443 | games.roblox.com | tcp |
| FR | 128.116.122.4:443 | games.roblox.com | tcp |
| FR | 128.116.122.4:443 | games.roblox.com | tcp |
| NL | 108.156.60.42:443 | c0.rbxcdn.com | tcp |
| N/A | 127.0.0.1:53386 | tcp | |
| N/A | 127.0.0.1:53404 | tcp | |
| N/A | 127.0.0.1:53419 | tcp | |
| N/A | 127.0.0.1:53425 | tcp | |
| N/A | 127.0.0.1:53427 | tcp | |
| US | 8.8.8.8:53 | c3.rbxcdn.com | udp |
| NL | 18.239.69.87:443 | t7.rbxcdn.com | tcp |
| NL | 18.239.69.14:443 | t6.rbxcdn.com | tcp |
| NL | 18.239.69.14:443 | t6.rbxcdn.com | tcp |
| NL | 18.239.69.87:443 | t7.rbxcdn.com | tcp |
| BE | 2.17.107.240:443 | c2.rbxcdn.com | tcp |
| NL | 108.156.60.80:443 | c3.rbxcdn.com | tcp |
| NL | 18.239.18.75:443 | t3.rbxcdn.com | tcp |
| N/A | 127.0.0.1:53437 | tcp | |
| N/A | 127.0.0.1:53439 | tcp | |
| N/A | 127.0.0.1:53441 | tcp | |
| N/A | 127.0.0.1:53443 | tcp | |
| US | 8.8.8.8:53 | 87.69.239.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 14.69.239.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 80.60.156.108.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 240.107.17.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 75.18.239.18.in-addr.arpa | udp |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| NL | 18.239.69.6:443 | t2.rbxcdn.com | tcp |
| N/A | 127.0.0.1:53515 | tcp | |
| N/A | 127.0.0.1:53518 | tcp | |
| N/A | 127.0.0.1:53521 | tcp | |
| N/A | 127.0.0.1:53524 | tcp | |
| FR | 128.116.122.3:443 | realtime-signalr.roblox.com | tcp |
| N/A | 127.0.0.1:53527 | tcp | |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| N/A | 127.0.0.1:53529 | tcp | |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| N/A | 127.0.0.1:53531 | tcp | |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| N/A | 127.0.0.1:53533 | tcp | |
| N/A | 127.0.0.1:53535 | tcp | |
| N/A | 127.0.0.1:53537 | tcp | |
| N/A | 127.0.0.1:53539 | tcp | |
| N/A | 127.0.0.1:53541 | tcp | |
| N/A | 127.0.0.1:53543 | tcp | |
| N/A | 127.0.0.1:53545 | tcp | |
| N/A | 127.0.0.1:53547 | tcp | |
| FR | 128.116.122.3:443 | realtime-signalr.roblox.com | tcp |
| FR | 128.116.122.3:443 | realtime-signalr.roblox.com | tcp |
| FR | 128.116.122.3:443 | realtime-signalr.roblox.com | tcp |
| FR | 128.116.122.3:443 | realtime-signalr.roblox.com | tcp |
| N/A | 127.0.0.1:53566 | tcp | |
| N/A | 127.0.0.1:53568 | tcp | |
| N/A | 127.0.0.1:53570 | tcp | |
| N/A | 127.0.0.1:53572 | tcp | |
| BE | 2.17.107.136:443 | c6.rbxcdn.com | tcp |
| NL | 18.239.18.101:443 | c7.rbxcdn.com | tcp |
| N/A | 127.0.0.1:53626 | tcp | |
| N/A | 127.0.0.1:53628 | tcp | |
| N/A | 127.0.0.1:53760 | tcp | |
| N/A | 127.0.0.1:53762 | tcp | |
| N/A | 127.0.0.1:53764 | tcp | |
| BE | 2.17.107.224:443 | t1.rbxcdn.com | tcp |
| BE | 2.17.107.224:443 | t1.rbxcdn.com | tcp |
| BE | 2.17.107.224:443 | t1.rbxcdn.com | tcp |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| N/A | 127.0.0.1:54142 | udp | |
| N/A | 127.0.0.1:53810 | tcp | |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| NL | 18.239.18.89:443 | c7.rbxcdn.com | tcp |
| NL | 18.239.18.28:443 | c1.rbxcdn.com | tcp |
| NL | 108.156.60.101:443 | c5.rbxcdn.com | tcp |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| N/A | 127.0.0.1:53820 | tcp | |
| N/A | 127.0.0.1:53840 | tcp | |
| N/A | 127.0.0.1:53848 | tcp | |
| N/A | 127.0.0.1:53850 | tcp | |
| N/A | 127.0.0.1:53853 | tcp | |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| N/A | 127.0.0.1:53877 | tcp | |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| N/A | 127.0.0.1:53879 | tcp | |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| N/A | 127.0.0.1:53887 | tcp | |
| NL | 18.238.243.28:443 | c4.rbxcdn.com | tcp |
| NL | 18.238.243.28:443 | c4.rbxcdn.com | tcp |
| NL | 18.238.243.28:443 | c4.rbxcdn.com | tcp |
| NL | 18.238.243.28:443 | c4.rbxcdn.com | tcp |
| NL | 18.238.243.28:443 | c4.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | c0.rbxcdn.com | udp |
| NL | 108.156.60.71:443 | c3.rbxcdn.com | tcp |
| NL | 108.156.60.71:443 | c3.rbxcdn.com | tcp |
| NL | 108.156.60.71:443 | c3.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | c2.rbxcdn.com | udp |
| NL | 108.156.60.108:443 | c0.rbxcdn.com | tcp |
| NL | 108.156.60.71:443 | c3.rbxcdn.com | tcp |
| BE | 2.17.107.185:443 | c2.rbxcdn.com | tcp |
| BE | 2.17.107.185:443 | c2.rbxcdn.com | tcp |
| NL | 108.156.60.108:443 | c0.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | apis.roblox.com | udp |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| US | 8.8.8.8:53 | economy.roblox.com | udp |
| FR | 128.116.122.4:443 | economy.roblox.com | tcp |
| FR | 128.116.122.4:443 | economy.roblox.com | tcp |
| FR | 128.116.122.4:443 | economy.roblox.com | tcp |
| US | 8.8.8.8:53 | t7.rbxcdn.com | udp |
| US | 8.8.8.8:53 | 28.243.238.18.in-addr.arpa | udp |
| FR | 128.116.122.4:443 | clientsettings.roblox.com | tcp |
| FR | 128.116.122.4:443 | clientsettings.roblox.com | tcp |
| NL | 18.239.69.87:443 | t7.rbxcdn.com | tcp |
| FR | 128.116.122.4:443 | clientsettings.roblox.com | tcp |
| FR | 128.116.122.4:443 | clientsettings.roblox.com | tcp |
| FR | 128.116.122.4:443 | clientsettings.roblox.com | tcp |
| FR | 128.116.122.4:443 | clientsettings.roblox.com | tcp |
| FR | 128.116.122.4:443 | clientsettings.roblox.com | tcp |
| FR | 128.116.122.4:443 | clientsettings.roblox.com | tcp |
| FR | 128.116.122.4:443 | clientsettings.roblox.com | tcp |
| FR | 128.116.122.4:443 | clientsettings.roblox.com | tcp |
| NL | 18.65.39.118:443 | c6.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | 108.60.156.108.in-addr.arpa | udp |
| N/A | 127.0.0.1:53891 | tcp | |
| N/A | 127.0.0.1:53894 | tcp | |
| N/A | 127.0.0.1:53896 | tcp | |
| N/A | 127.0.0.1:53904 | tcp | |
| N/A | 127.0.0.1:53906 | tcp | |
| N/A | 127.0.0.1:53908 | tcp | |
| N/A | 127.0.0.1:53948 | tcp | |
| N/A | 127.0.0.1:54015 | tcp | |
| N/A | 127.0.0.1:54018 | tcp | |
| N/A | 127.0.0.1:54020 | tcp | |
| N/A | 127.0.0.1:54029 | tcp | |
| N/A | 127.0.0.1:54050 | tcp | |
| N/A | 127.0.0.1:54052 | tcp | |
| FR | 128.116.122.3:443 | ecsv2.roblox.com | tcp |
| N/A | 127.0.0.1:54059 | tcp | |
| N/A | 127.0.0.1:54064 | tcp | |
| N/A | 127.0.0.1:54086 | tcp | |
| N/A | 127.0.0.1:54210 | tcp | |
| N/A | 127.0.0.1:54212 | tcp | |
| N/A | 127.0.0.1:54214 | tcp | |
| N/A | 127.0.0.1:54216 | tcp | |
| N/A | 127.0.0.1:54218 | tcp | |
| N/A | 127.0.0.1:54220 | tcp | |
| N/A | 127.0.0.1:54222 | tcp | |
| N/A | 127.0.0.1:54374 | tcp | |
| N/A | 127.0.0.1:54377 | tcp | |
| N/A | 127.0.0.1:54379 | tcp | |
| N/A | 127.0.0.1:54381 | tcp | |
| FR | 128.116.122.3:443 | ecsv2.roblox.com | tcp |
| FR | 128.116.122.3:443 | ecsv2.roblox.com | tcp |
| FR | 128.116.122.3:443 | ecsv2.roblox.com | tcp |
| IE | 20.166.2.191:443 | msedge.api.cdp.microsoft.com | tcp |
| FR | 128.116.122.4:443 | clientsettings.roblox.com | tcp |
| BE | 104.68.69.233:443 | clientsettingscdn.roblox.com | tcp |
| N/A | 127.0.0.1:54415 | tcp | |
| N/A | 127.0.0.1:54418 | tcp | |
| GB | 23.73.139.75:80 | msedge.b.tlu.dl.delivery.mp.microsoft.com | tcp |
| FR | 128.116.122.4:443 | clientsettings.roblox.com | tcp |
| N/A | 127.0.0.1:54444 | tcp | |
| N/A | 127.0.0.1:54566 | tcp | |
| FR | 128.116.122.4:443 | ephemeralcounters.api.roblox.com | tcp |
| N/A | 127.0.0.1:54569 | tcp | |
| FR | 128.116.122.4:443 | ephemeralcounters.api.roblox.com | tcp |
| FR | 128.116.122.4:443 | ephemeralcounters.api.roblox.com | tcp |
| N/A | 127.0.0.1:54572 | tcp | |
| N/A | 127.0.0.1:54575 | tcp | |
| US | 8.8.8.8:53 | avatar.roblox.com | udp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| N/A | 127.0.0.1:54580 | tcp | |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| N/A | 127.0.0.1:54583 | tcp | |
| N/A | 127.0.0.1:54585 | tcp | |
| N/A | 127.0.0.1:54590 | tcp | |
| N/A | 127.0.0.1:54593 | tcp | |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| N/A | 127.0.0.1:54643 | tcp | |
| N/A | 127.0.0.1:54649 | tcp | |
| BE | 2.17.107.171:443 | t4.rbxcdn.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| GB | 128.116.33.33:63967 | udp | |
| N/A | 127.0.0.1:54656 | tcp | |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| GB | 23.73.139.26:443 | tr.rbxcdn.com | tcp |
| N/A | 127.0.0.1:54667 | tcp | |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| N/A | 127.0.0.1:54697 | tcp | |
| N/A | 127.0.0.1:54700 | tcp | |
| N/A | 127.0.0.1:54702 | tcp | |
| N/A | 127.0.0.1:54704 | tcp | |
| N/A | 127.0.0.1:54706 | tcp | |
| N/A | 127.0.0.1:54708 | tcp | |
| N/A | 127.0.0.1:54710 | tcp | |
| N/A | 127.0.0.1:54712 | tcp | |
| N/A | 127.0.0.1:54714 | tcp | |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| GB | 23.73.139.26:443 | tr.rbxcdn.com | tcp |
| GB | 23.73.139.26:443 | tr.rbxcdn.com | tcp |
| GB | 23.73.139.26:443 | tr.rbxcdn.com | tcp |
| GB | 23.73.139.26:443 | tr.rbxcdn.com | tcp |
| GB | 23.73.139.26:443 | tr.rbxcdn.com | tcp |
| GB | 23.73.139.26:443 | tr.rbxcdn.com | tcp |
| GB | 23.73.139.26:443 | tr.rbxcdn.com | tcp |
| N/A | 127.0.0.1:54817 | tcp | |
| N/A | 127.0.0.1:54819 | tcp | |
| N/A | 127.0.0.1:54821 | tcp | |
| N/A | 127.0.0.1:54823 | tcp | |
| N/A | 127.0.0.1:54825 | tcp | |
| N/A | 127.0.0.1:54827 | tcp | |
| FR | 128.116.122.3:443 | ecsv2.roblox.com | tcp |
| FR | 128.116.122.3:443 | ecsv2.roblox.com | tcp |
| FR | 128.116.122.3:443 | ecsv2.roblox.com | tcp |
| FR | 128.116.122.3:443 | ecsv2.roblox.com | tcp |
| FR | 128.116.122.3:443 | ecsv2.roblox.com | tcp |
| FR | 128.116.122.3:443 | ecsv2.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| US | 8.8.8.8:53 | c6.rbxcdn.com | udp |
| NL | 18.65.39.25:443 | c6.rbxcdn.com | tcp |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| N/A | 127.0.0.1:54835 | tcp | |
| NL | 18.65.39.20:443 | t0.rbxcdn.com | tcp |
| NL | 18.239.69.33:443 | t6.rbxcdn.com | tcp |
| N/A | 127.0.0.1:54838 | tcp | |
| N/A | 127.0.0.1:54852 | tcp | |
| N/A | 127.0.0.1:54862 | tcp | |
| US | 8.8.8.8:53 | 20.39.65.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 33.69.239.18.in-addr.arpa | udp |
| NL | 108.156.60.71:443 | c3.rbxcdn.com | tcp |
| N/A | 127.0.0.1:54883 | tcp | |
| NL | 18.238.243.24:443 | c4.rbxcdn.com | tcp |
| N/A | 127.0.0.1:54893 | tcp | |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| FR | 128.116.122.4:443 | itemconfiguration.roblox.com | tcp |
| BE | 2.17.107.211:443 | c0ak.rbxcdn.com | tcp |
| N/A | 127.0.0.1:54910 | tcp | |
| N/A | 127.0.0.1:54913 | tcp | |
| N/A | 127.0.0.1:54916 | tcp | |
| N/A | 127.0.0.1:54918 | tcp | |
| N/A | 127.0.0.1:54924 | tcp | |
| N/A | 127.0.0.1:54926 | tcp | |
| BE | 2.17.107.147:443 | c7.rbxcdn.com | tcp |
| N/A | 127.0.0.1:64217 | udp | |
| DE | 3.78.22.124:443 | b.ns1p.net | tcp |
| US | 8.8.8.8:53 | 147.107.17.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 124.22.78.3.in-addr.arpa | udp |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| N/A | 127.0.0.1:54943 | tcp | |
| N/A | 127.0.0.1:54946 | tcp | |
| N/A | 127.0.0.1:54948 | tcp | |
| N/A | 127.0.0.1:54980 | tcp | |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| N/A | 127.0.0.1:54996 | tcp | |
| N/A | 127.0.0.1:54998 | tcp | |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| N/A | 127.0.0.1:55194 | tcp | |
| N/A | 127.0.0.1:55199 | tcp | |
| N/A | 127.0.0.1:55283 | tcp | |
| N/A | 127.0.0.1:55285 | tcp | |
| NL | 13.95.26.4:443 | msedge.api.cdp.microsoft.com | tcp |
| N/A | 127.0.0.1:55512 | tcp | |
| N/A | 127.0.0.1:55514 | tcp | |
| N/A | 127.0.0.1:55516 | tcp | |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| N/A | 127.0.0.1:55521 | tcp | |
| GB | 23.73.139.35:80 | msedge.b.tlu.dl.delivery.mp.microsoft.com | tcp |
| N/A | 127.0.0.1:55525 | tcp | |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| NL | 13.95.26.4:443 | msedge.api.cdp.microsoft.com | tcp |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| N/A | 127.0.0.1:55549 | tcp | |
| N/A | 127.0.0.1:55559 | tcp | |
| US | 8.8.8.8:53 | gameinternationalization.roblox.com | udp |
| FR | 128.116.122.4:443 | locale.roblox.com | tcp |
| FR | 128.116.122.4:443 | locale.roblox.com | tcp |
| FR | 128.116.122.4:443 | locale.roblox.com | tcp |
| N/A | 127.0.0.1:55561 | tcp | |
| FR | 128.116.122.4:443 | locale.roblox.com | tcp |
| FR | 128.116.122.4:443 | locale.roblox.com | tcp |
| FR | 128.116.122.4:443 | locale.roblox.com | tcp |
| NL | 18.239.18.101:443 | c7.rbxcdn.com | tcp |
| FR | 128.116.122.4:443 | locale.roblox.com | tcp |
| N/A | 127.0.0.1:55565 | tcp | |
| N/A | 127.0.0.1:55568 | tcp | |
| N/A | 127.0.0.1:55570 | tcp | |
| N/A | 127.0.0.1:58254 | udp | |
| N/A | 127.0.0.1:55578 | tcp | |
| N/A | 127.0.0.1:55596 | tcp | |
| FR | 128.116.122.4:443 | locale.roblox.com | tcp |
| FR | 128.116.122.4:443 | locale.roblox.com | tcp |
| FR | 128.116.122.4:443 | locale.roblox.com | tcp |
| FR | 128.116.122.4:443 | locale.roblox.com | tcp |
| FR | 128.116.122.4:443 | locale.roblox.com | tcp |
| FR | 128.116.122.4:443 | locale.roblox.com | tcp |
| FR | 128.116.122.3:443 | ecsv2.roblox.com | tcp |
| FR | 128.116.122.4:443 | locale.roblox.com | tcp |
| FR | 128.116.122.4:443 | locale.roblox.com | tcp |
| FR | 128.116.122.4:443 | locale.roblox.com | tcp |
| FR | 128.116.122.4:443 | locale.roblox.com | tcp |
| FR | 128.116.122.4:443 | locale.roblox.com | tcp |
| FR | 128.116.122.4:443 | locale.roblox.com | tcp |
| FR | 128.116.122.4:443 | locale.roblox.com | tcp |
| US | 8.8.8.8:53 | economy.roblox.com | udp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| N/A | 127.0.0.1:55600 | tcp | |
| N/A | 127.0.0.1:55633 | tcp | |
| FR | 128.116.122.3:443 | ecsv2.roblox.com | tcp |
| FR | 128.116.122.3:443 | ecsv2.roblox.com | tcp |
| FR | 128.116.122.3:443 | ecsv2.roblox.com | tcp |
| N/A | 127.0.0.1:55661 | tcp | |
| N/A | 127.0.0.1:55663 | tcp | |
| N/A | 127.0.0.1:55665 | tcp | |
| N/A | 127.0.0.1:55675 | tcp | |
| N/A | 127.0.0.1:55995 | tcp | |
| N/A | 127.0.0.1:55997 | tcp | |
| N/A | 127.0.0.1:62689 | udp | |
| FR | 128.116.122.3:443 | ecsv2.roblox.com | tcp |
| N/A | 127.0.0.1:56792 | tcp | |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| GB | 23.73.139.19:443 | tr.rbxcdn.com | tcp |
| GB | 23.73.139.19:443 | tr.rbxcdn.com | tcp |
| GB | 23.73.139.19:443 | tr.rbxcdn.com | tcp |
| GB | 23.73.139.19:443 | tr.rbxcdn.com | tcp |
| GB | 23.73.139.19:443 | tr.rbxcdn.com | tcp |
| GB | 23.73.139.19:443 | tr.rbxcdn.com | tcp |
| GB | 23.73.139.19:443 | tr.rbxcdn.com | tcp |
| GB | 23.73.139.19:443 | tr.rbxcdn.com | tcp |
| N/A | 127.0.0.1:56795 | tcp | |
| N/A | 127.0.0.1:56797 | tcp | |
| N/A | 127.0.0.1:56799 | tcp | |
| N/A | 127.0.0.1:56801 | tcp | |
| N/A | 127.0.0.1:56803 | tcp | |
| N/A | 127.0.0.1:56805 | tcp | |
| N/A | 127.0.0.1:56807 | tcp | |
| N/A | 127.0.0.1:56809 | tcp | |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| N/A | 127.0.0.1:56861 | tcp | |
| NL | 108.156.60.71:443 | c3.rbxcdn.com | tcp |
| N/A | 127.0.0.1:56951 | tcp | |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| N/A | 127.0.0.1:56963 | tcp | |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| N/A | 127.0.0.1:56980 | tcp | |
| US | 8.8.8.8:53 | apis.roblox.com | udp |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| N/A | 127.0.0.1:56989 | tcp | |
| FR | 128.116.122.4:443 | apis.roblox.com | tcp |
| N/A | 127.0.0.1:57010 | tcp | |
| US | 8.8.8.8:53 | assetdelivery.roblox.com | udp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| BE | 2.17.107.171:443 | c4.rbxcdn.com | tcp |
| N/A | 127.0.0.1:57021 | tcp | |
| N/A | 127.0.0.1:57024 | tcp | |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetdelivery.roblox.com | tcp |
| US | 8.8.8.8:53 | t1.rbxcdn.com | udp |
| N/A | 127.0.0.1:57038 | tcp | |
| N/A | 127.0.0.1:57044 | tcp | |
| N/A | 127.0.0.1:57046 | tcp | |
| N/A | 127.0.0.1:57048 | tcp | |
| FR | 52.222.201.96:443 | t1.rbxcdn.com | tcp |
| FR | 52.222.201.96:443 | t1.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | t6.rbxcdn.com | udp |
| US | 8.8.8.8:53 | t5.rbxcdn.com | udp |
| FR | 13.249.9.84:443 | t5.rbxcdn.com | tcp |
| BE | 2.17.107.168:443 | t6.rbxcdn.com | tcp |
| N/A | 127.0.0.1:57132 | tcp | |
| FR | 128.116.122.3:443 | ecsv2.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| NL | 18.239.18.65:443 | c7.rbxcdn.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| N/A | 127.0.0.1:57143 | tcp | |
| N/A | 127.0.0.1:57145 | tcp | |
| N/A | 127.0.0.1:57153 | tcp | |
| N/A | 127.0.0.1:57158 | tcp | |
| N/A | 127.0.0.1:57165 | tcp | |
| N/A | 127.0.0.1:65013 | udp | |
| N/A | 127.0.0.1:57202 | tcp | |
| N/A | 127.0.0.1:57211 | tcp | |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| N/A | 127.0.0.1:57252 | tcp | |
| N/A | 127.0.0.1:57294 | tcp | |
| N/A | 127.0.0.1:57296 | tcp | |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| N/A | 127.0.0.1:57621 | tcp | |
| N/A | 127.0.0.1:57623 | tcp | |
| N/A | 127.0.0.1:57625 | tcp | |
| N/A | 127.0.0.1:57627 | tcp | |
| N/A | 127.0.0.1:57636 | tcp | |
| FR | 128.116.122.3:443 | ecsv2.roblox.com | tcp |
| FR | 128.116.122.3:443 | ecsv2.roblox.com | tcp |
| N/A | 127.0.0.1:57996 | tcp | |
| N/A | 127.0.0.1:57998 | tcp | |
| N/A | 127.0.0.1:58000 | tcp | |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| N/A | 127.0.0.1:58005 | tcp | |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| N/A | 127.0.0.1:58016 | tcp | |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| N/A | 127.0.0.1:58019 | tcp | |
| FR | 128.116.122.3:443 | ecsv2.roblox.com | tcp |
| N/A | 127.0.0.1:58022 | tcp | |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| N/A | 127.0.0.1:58029 | tcp | |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| BE | 104.68.69.233:443 | clientsettingscdn.roblox.com | tcp |
| N/A | 127.0.0.1:58038 | tcp | |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| N/A | 127.0.0.1:58045 | tcp | |
| N/A | 127.0.0.1:58048 | tcp | |
| GB | 128.116.119.3:443 | ecsv2.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| N/A | 127.0.0.1:58051 | tcp | |
| US | 8.8.8.8:53 | users.roblox.com | udp |
| GB | 128.116.119.4:443 | users.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| US | 8.8.8.8:53 | realtime-signalr.roblox.com | udp |
| GB | 128.116.119.3:443 | realtime-signalr.roblox.com | tcp |
| GB | 128.116.119.4:443 | ephemeralcounters.api.roblox.com | tcp |
| GB | 128.116.119.4:443 | ephemeralcounters.api.roblox.com | tcp |
| GB | 128.116.119.4:443 | ephemeralcounters.api.roblox.com | tcp |
| GB | 128.116.119.4:443 | ephemeralcounters.api.roblox.com | tcp |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| GB | 128.116.119.4:443 | ephemeralcounters.api.roblox.com | tcp |
| GB | 128.116.119.3:443 | realtime-signalr.roblox.com | tcp |
| GB | 128.116.119.3:443 | realtime-signalr.roblox.com | tcp |
| N/A | 127.0.0.1:58066 | tcp | |
| GB | 128.116.119.3:443 | realtime-signalr.roblox.com | tcp |
| GB | 128.116.119.4:443 | ephemeralcounters.api.roblox.com | tcp |
| US | 8.8.8.8:53 | client-telemetry.roblox.com | udp |
| GB | 128.116.119.3:443 | client-telemetry.roblox.com | tcp |
| N/A | 127.0.0.1:58070 | tcp | |
| N/A | 127.0.0.1:58075 | tcp | |
| FR | 128.116.122.4:443 | assetgame.roblox.com | tcp |
| GB | 128.116.119.4:443 | gamejoin.roblox.com | tcp |
| GB | 128.116.119.4:443 | gamejoin.roblox.com | tcp |
| N/A | 127.0.0.1:58427 | tcp | |
| N/A | 127.0.0.1:58429 | tcp | |
| N/A | 127.0.0.1:58757 | tcp | |
| N/A | 127.0.0.1:59359 | tcp | |
| N/A | 127.0.0.1:59362 | tcp | |
| N/A | 127.0.0.1:59365 | tcp | |
| US | 8.8.8.8:53 | thumbnails.roblox.com | udp |
| GB | 128.116.119.4:443 | thumbnails.roblox.com | tcp |
| GB | 128.116.119.3:443 | client-telemetry.roblox.com | tcp |
| US | 8.8.8.8:53 | avatar.roblox.com | udp |
| GB | 128.116.119.4:443 | avatar.roblox.com | tcp |
| GB | 128.116.119.4:443 | avatar.roblox.com | tcp |
| GB | 128.116.33.33:63967 | udp | |
| GB | 23.73.139.17:443 | tr.rbxcdn.com | tcp |
| GB | 128.116.119.4:443 | avatar.roblox.com | tcp |
| GB | 23.73.139.17:443 | tr.rbxcdn.com | tcp |
| FR | 13.249.9.87:443 | t4.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | t2.rbxcdn.com | udp |
| BE | 2.17.107.184:443 | t2.rbxcdn.com | tcp |
| GB | 128.116.119.4:443 | locale.roblox.com | tcp |
| GB | 128.116.119.4:443 | locale.roblox.com | tcp |
| BE | 104.68.69.233:443 | clientsettingscdn.roblox.com | tcp |
| N/A | 127.0.0.1:59487 | tcp | |
| N/A | 127.0.0.1:59497 | tcp | |
| GB | 128.116.119.3:443 | client-telemetry.roblox.com | tcp |
| GB | 128.116.119.3:443 | client-telemetry.roblox.com | tcp |
| GB | 128.116.119.4:443 | locale.roblox.com | tcp |
| GB | 128.116.119.4:443 | locale.roblox.com | tcp |
| N/A | 127.0.0.1:59500 | tcp | |
| N/A | 127.0.0.1:59505 | tcp | |
| GB | 128.116.119.4:443 | locale.roblox.com | tcp |
| GB | 128.116.119.4:443 | locale.roblox.com | tcp |
| GB | 128.116.119.4:443 | locale.roblox.com | tcp |
| GB | 128.116.119.4:443 | locale.roblox.com | tcp |
| GB | 128.116.119.4:443 | locale.roblox.com | tcp |
| GB | 128.116.119.4:443 | locale.roblox.com | tcp |
| GB | 128.116.119.3:443 | client-telemetry.roblox.com | tcp |
| GB | 128.116.119.3:443 | client-telemetry.roblox.com | tcp |
| GB | 128.116.119.3:443 | client-telemetry.roblox.com | tcp |
| GB | 128.116.119.3:443 | client-telemetry.roblox.com | tcp |
| N/A | 127.0.0.1:59599 | tcp | |
| N/A | 127.0.0.1:59608 | tcp | |
| N/A | 127.0.0.1:59772 | tcp | |
| N/A | 127.0.0.1:59776 | tcp | |
| GB | 128.116.119.4:443 | locale.roblox.com | tcp |
| N/A | 127.0.0.1:59866 | tcp | |
| N/A | 127.0.0.1:59876 | tcp | |
| N/A | 127.0.0.1:59878 | tcp | |
| N/A | 127.0.0.1:59909 | tcp | |
| N/A | 127.0.0.1:59911 | tcp | |
| N/A | 127.0.0.1:59913 | tcp | |
| N/A | 127.0.0.1:59915 | tcp | |
| N/A | 127.0.0.1:59917 | tcp | |
| N/A | 127.0.0.1:59919 | tcp | |
| N/A | 127.0.0.1:59940 | tcp | |
| N/A | 127.0.0.1:59942 | tcp | |
| N/A | 127.0.0.1:59944 | tcp | |
| N/A | 127.0.0.1:59946 | tcp | |
| N/A | 127.0.0.1:59952 | tcp | |
| NL | 23.62.61.106:443 | th.bing.com | tcp |
| US | 8.8.8.8:53 | r.bing.com | udp |
| NL | 23.62.61.138:443 | r.bing.com | tcp |
| NL | 23.62.61.138:443 | r.bing.com | tcp |
| NL | 23.62.61.75:443 | th.bing.com | tcp |
| NL | 23.62.61.75:443 | th.bing.com | tcp |
| IE | 40.126.31.71:443 | login.microsoftonline.com | tcp |
| US | 8.8.8.8:53 | css.rbxcdn.com | udp |
| FR | 18.244.28.55:443 | js.rbxcdn.com | tcp |
| FR | 52.222.201.77:443 | css.rbxcdn.com | tcp |
| GB | 128.116.119.4:443 | assetgame.roblox.com | tcp |
| FR | 3.162.38.58:443 | static.rbxcdn.com | tcp |
| US | 172.64.154.86:443 | roblox-api.arkoselabs.com | tcp |
| GB | 128.116.119.4:443 | assetgame.roblox.com | tcp |
| BE | 23.14.90.81:443 | apis.rbxcdn.com | tcp |
| GB | 128.116.119.3:443 | ecsv2.roblox.com | tcp |
| US | 8.8.8.8:53 | static.rbxcdn.com | udp |
| NL | 23.63.101.177:443 | js.rbxcdn.com | tcp |
| FR | 52.222.201.122:443 | css.rbxcdn.com | tcp |
| FR | 3.162.38.18:443 | static.rbxcdn.com | tcp |
| FR | 13.32.145.74:443 | images.rbxcdn.com | tcp |
| GB | 128.116.119.3:443 | realtime-signalr.roblox.com | tcp |
| US | 8.8.8.8:53 | contacts.roblox.com | udp |
| GB | 23.73.139.67:443 | tr.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | accountsettings.roblox.com | udp |
| US | 8.8.8.8:53 | economy.roblox.com | udp |
| US | 8.8.8.8:53 | friends.roblox.com | udp |
| US | 8.8.8.8:53 | privatemessages.roblox.com | udp |
| US | 8.8.8.8:53 | lhr2-128-116-119-3.roblox.com | udp |
| FR | 3.162.38.18:443 | static.rbxcdn.com | tcp |
| US | 128.116.32.3:443 | lga2-128-116-32-3.roblox.com | tcp |
| US | 128.116.116.3:443 | lax2-128-116-116-3.roblox.com | tcp |
| AU | 128.116.51.3:443 | syd1-128-116-51-3.roblox.com | tcp |
| GB | 128.116.119.3:443 | lhr2-128-116-119-3.roblox.com | tcp |
| PL | 128.116.124.3:443 | pulsar.roblox.com | tcp |
| US | 128.116.95.3:443 | dfw2-128-116-95-3.roblox.com | tcp |
| NL | 128.116.21.3:443 | ams2-128-116-21-3.roblox.com | tcp |
| US | 34.203.158.12:443 | aws-us-east-1b-lms.rbx.com | tcp |
| US | 128.116.115.3:443 | sea1-128-116-115-3.roblox.com | tcp |
| JP | 52.192.8.211:443 | aws-ap-northeast-1c-lms.rbx.com | tcp |
| AU | 128.116.51.3:443 | syd1-128-116-51-3.roblox.com | tcp |
| US | 128.116.115.3:443 | sea1-128-116-115-3.roblox.com | tcp |
| US | 34.203.158.12:443 | aws-us-east-1b-lms.rbx.com | tcp |
| JP | 52.192.8.211:443 | aws-ap-northeast-1c-lms.rbx.com | tcp |
| US | 8.8.8.8:53 | 3.116.116.128.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 3.95.116.128.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 12.158.203.34.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 3.115.116.128.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 3.51.116.128.in-addr.arpa | udp |
| DE | 3.78.22.124:443 | s.ns1p.net | tcp |
| DE | 3.121.72.41:443 | s.ns1p.net | tcp |
| US | 8.8.8.8:53 | presence.roblox.com | udp |
| HK | 128.116.118.3:443 | hkg1-128-116-118-3.roblox.com | tcp |
| HK | 128.116.118.3:443 | hkg1-128-116-118-3.roblox.com | tcp |
| HK | 128.116.118.3:443 | hkg1-128-116-118-3.roblox.com | tcp |
| GB | 128.116.119.3:443 | lhr2-128-116-119-3.roblox.com | tcp |
| NL | 128.116.21.3:443 | ams2-128-116-21-3.roblox.com | tcp |
| PL | 128.116.124.3:443 | pulsar.roblox.com | tcp |
| US | 128.116.32.3:443 | lga2-128-116-32-3.roblox.com | tcp |
| US | 128.116.115.3:443 | sea1-128-116-115-3.roblox.com | tcp |
| US | 34.203.158.12:443 | aws-us-east-1b-lms.rbx.com | tcp |
| US | 128.116.116.3:443 | lax2-128-116-116-3.roblox.com | tcp |
| AU | 128.116.51.3:443 | syd1-128-116-51-3.roblox.com | tcp |
| US | 128.116.95.3:443 | dfw2-128-116-95-3.roblox.com | tcp |
| JP | 52.192.8.211:443 | aws-ap-northeast-1c-lms.rbx.com | tcp |
| US | 151.101.0.176:443 | js.stripe.com | tcp |
| US | 8.8.8.8:53 | mia4-128-116-45-3.roblox.com | udp |
| US | 8.8.8.8:53 | fra2-128-116-123-3.roblox.com | udp |
| US | 8.8.8.8:53 | silver.roblox.com | udp |
| US | 8.8.8.8:53 | gold.roblox.com | udp |
| US | 8.8.8.8:53 | iad4-128-116-102-3.roblox.com | udp |
| US | 128.116.45.3:443 | mia4-128-116-45-3.roblox.com | tcp |
| DE | 128.116.123.3:443 | fra2-128-116-123-3.roblox.com | tcp |
| US | 8.8.8.8:53 | aws-eu-west-2c-lms.rbx.com | udp |
| US | 128.116.102.3:443 | iad4-128-116-102-3.roblox.com | tcp |
| US | 54.241.119.217:443 | aws-us-west-1c-lms.rbx.com | tcp |
| GB | 13.42.225.121:443 | aws-eu-west-2c-lms.rbx.com | tcp |
| FR | 18.155.129.94:443 | c0aws.rbxcdn.com | tcp |
| US | 44.215.249.147:443 | aws-us-east-1c-lms.rbx.com | tcp |
| US | 8.8.8.8:53 | 147.249.215.44.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 217.119.241.54.in-addr.arpa | udp |
| US | 44.237.125.219:443 | m.stripe.com | tcp |
| GB | 128.116.119.3:443 | ecsv2.roblox.com | tcp |
| FR | 3.162.38.49:443 | setup.rbxcdn.com | tcp |
| GB | 128.116.119.3:443 | ecsv2.roblox.com | tcp |
| N/A | 127.0.0.1:61509 | tcp | |
| N/A | 127.0.0.1:61512 | tcp | |
| GB | 128.116.119.3:443 | ecsv2.roblox.com | tcp |
| N/A | 127.0.0.1:61524 | tcp | |
| BE | 104.68.69.233:443 | clientsettingscdn.roblox.com | tcp |
| FR | 3.162.38.49:443 | setup.rbxcdn.com | tcp |
| FR | 3.162.38.49:443 | setup.rbxcdn.com | tcp |
| FR | 3.162.38.49:443 | setup.rbxcdn.com | tcp |
| N/A | 127.0.0.1:61527 | tcp |
Files
C:\Users\Admin\AppData\Local\Temp\wmsetup.log
| MD5 | 38e6733e1ead9d042af435f18b6665b6 |
| SHA1 | 6b2caff1e6b991a0f14558d9f693196caebdcf11 |
| SHA256 | 562cb7ff684f755dc864178ccfc2856cf5e24138ffb61c290ac38c8968f4e781 |
| SHA512 | e1b0364f1aa7b04ebde8d1410b5baadae992e63113d6924726dc226f7644a7cb612b0718fe64fb84231236482645578fb5f2554e3ee156190776ee31919ca46c |
C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML
| MD5 | 7050d5ae8acfbe560fa11073fef8185d |
| SHA1 | 5bc38e77ff06785fe0aec5a345c4ccd15752560e |
| SHA256 | cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b |
| SHA512 | a7a295ac8921bb3dde58d4bcde9372ed59def61d4b7699057274960fa8c1d1a1daff834a93f7a0698e9e5c16db43af05e9fd2d6d7c9232f7d26ffcff5fc5900b |
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb
| MD5 | d2ef79666180e535690b6c2cac188b72 |
| SHA1 | 47e9bad5f130d9c78d59d34e06eff9d80ae534d3 |
| SHA256 | 9913254ed01bdd8987c352aeea8e2bfdf79c55cd26314300c03d3b0bbbfd2f02 |
| SHA512 | c77b0b44e5797467c5ddca1de8bb6c63633e05a1e30101948cf0ee581ddc6507d05f66bd709e666f5785f46838d5fdaf602172186189fcdadcfb626c40c61e4e |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | 15fe2ca7fbb19bce73b3127d3ce38b40 |
| SHA1 | 3b6d7bb9a2a45706b41570c3237620977f91bfe3 |
| SHA256 | fdc0d483560fd857db4fd1f96c8dd963c4400095e8191206cc1400e07cfbe097 |
| SHA512 | 8a2ed9de98c5e82d7924695caf8350a4cb702fe52bd6183f929966bfa9909e4b55471cccde3c0324024061bc4d6ea50076708fed9fe4e0cd976106784caf5fda |
\??\pipe\LOCAL\crashpad_4024_LHKRJWRMZJFPOGLB
| MD5 | d41d8cd98f00b204e9800998ecf8427e |
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
| SHA512 | cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | 387bda50a259f550e0a5b9c3f441359d |
| SHA1 | 9e0a87fad07a1fc8e67b5f44244aee8c49289a28 |
| SHA256 | f7a53d094bdb8498f4a5edf5dbfa6f1f04e62013a9173d48cab6f31e7fdc4f68 |
| SHA512 | 060019710d5059241e00e23d6780ff44a016774f4658d16443d1ca7b7187aa4ab4ec484b18d380692f75dda19b882411749cc29545c9e3e57488a758bf618e24 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 1b55376241f69aa1774840046921736d |
| SHA1 | cf4ab1e30cb74eff894973f6e85a667acdf89cc2 |
| SHA256 | 90bec582c125f49a7529c908c5c9d9c293d7e5ea1ab1c369d387db8ef0742b5f |
| SHA512 | 75b50eabf01698ee715360201ccdb48a7508d200d4346e1fa02f178f65fc79ac3a45cd31741a8ecae921170ddf6bc18f156df5bd96a9689e91c335dee726c157 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
| MD5 | 46295cac801e5d4857d09837238a6394 |
| SHA1 | 44e0fa1b517dbf802b18faf0785eeea6ac51594b |
| SHA256 | 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443 |
| SHA512 | 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
| MD5 | 206702161f94c5cd39fadd03f4014d98 |
| SHA1 | bd8bfc144fb5326d21bd1531523d9fb50e1b600a |
| SHA256 | 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167 |
| SHA512 | 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | 30219be7a4cfc6cf738fce5045bfc77a |
| SHA1 | 2f540955b9839850733ef5e38812dceefbdd9320 |
| SHA256 | 49f0aa175d55701b8a1024cbd00ebe0a01a04d0063af449a94e6b97f9ae4ddd2 |
| SHA512 | c5b5b89d76b80e39be146d1772da4c7e95eaad2b15ecc5863ddc85e10e272613b26209cef005f325267249448238e2a7b731d17d8f66807eecbf97c14b3617c3 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 22575acadc650122eb3145be5d22f977 |
| SHA1 | 66aeecd77ccc3117935f5b4ed63b6a0e9dfce811 |
| SHA256 | c3b3b2a22077878438909ec6934ddb3b19ef624a4291d13cb0d25a0b2bb8922c |
| SHA512 | 8dcf161a133eac4794a39fd118c4f1f45cae86a3594b14b7ba912fc3a832382c39a8ed357eab4af3aa6f32bf6990a412bde4615b90364a5fe07514aa1892d9f9 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | dead6dfd9a21d41734bbb68c9d86d52f |
| SHA1 | b6f2de60d48c4a0eecb0b595a6a662a924915ed2 |
| SHA256 | 7b4f30dde157d8671c73be9ac553a3aecbaa9b9315ce512aca79c9063db47e97 |
| SHA512 | 80bb184835cd454e839c2b39c91cb1a38bebd46eafa9b4b427bdbd814333a73aab3c5bb46588f5e56ad88eefb70047d01e2c199092a80a272ddcc5a794850efb |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe587ac9.TMP
| MD5 | 61b68eeaa9ae78e96df2294bcf0000a8 |
| SHA1 | 2ef7314994473cb113d9e37a796af777cd63d705 |
| SHA256 | 3b8072b5c7d2752797653b21193aab7a973782f5c5c1c97524693ca6e3a3fb0f |
| SHA512 | e0966fb535b36d310ca93e97a12cd9ef6bb944a7d180dc0001949981dfeaa445f59925aa5dabd487933222e6d7714d90eb1477fda9d16e7b588f003aa181f0aa |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 1f5696f3e955430cf95cd98958198772 |
| SHA1 | de5759d9d3bec5f5ee07c903c8ef826cb73a59f2 |
| SHA256 | 8b7513773e67cd4ed6aaf92b2410aca834487f12b85e3d25d3a7a3b570883ed6 |
| SHA512 | 14e0995219ed945b04cd4f40e4b13917ce4e85db42c8d192bb20efc48023b3cb6b4e0fec1ac09c2e8ff5d8b6eaa4465a9192e9b7f6d5556637fe13860782f0ff |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 5bdcfbed9d7e19fbe9baf0e529e4bb40 |
| SHA1 | 762b2239998fa2e1eed3e57b3993ab5637d520f6 |
| SHA256 | 8a13f51214561ba09a8bfe7d94dd8bdf5c153ee36748c56f76fefaf7b5e1b763 |
| SHA512 | bb8484bb4f3c268850ab5cb01741830eb1d01486f1346f60420dc39ba58de936d12251ca9e571bb0f774760db28cb8ba976cbcf3c87df7e8a2644b7627f5df2e |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | d60014d304d88d4dc9a2aa7cfd7c0cfe |
| SHA1 | 0afcca53bb82178155058b0a29b2460905128fa2 |
| SHA256 | 6a566c3d44edbc8d77646293970192a6b703855648e898f3d1760f9245e528a9 |
| SHA512 | 073e515ed61218040e3108efd0352a15d69f395587ecb57d20531d0efc614f285bf5a9c5bbd58ab1294df51ddaa9c99dbb432914b87ff3e8f3865e2772a78381 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | a5fd9917fe8735a14e2d555dda40fa33 |
| SHA1 | 7e6e7e65e9c636007e9ca4f32acc80e23e9bc234 |
| SHA256 | d607bb64eeb807cdb43deb443ae98475e94e15d425a0f7707265c95301af30cf |
| SHA512 | ab3545591a7acf73dd0cf385c4c8861ceabc8639895537110e57796aafa41c3304eb33f4789fefc8af24dad063236359be797ebd81714f50773eafd1896e886b |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
| MD5 | 300533ccac9a1f18e1cf10e1b251b5db |
| SHA1 | 9b0384e4264e80d8b59afa26d6906c6f36c74112 |
| SHA256 | 25e2ae30acc5d61a8e16b90bb5bf179e55b4c1ac04b4660f62b4dd6090aee53b |
| SHA512 | 524cd02388336d153b1597edf3f2ec0baf4582291568d9b2081fd992d8a5cbfe289215bbac3ab651529cfaca108929bc54113d169849f39c1d3fec209657cc91 |
C:\Users\Admin\Downloads\Unconfirmed 238851.crdownload
| MD5 | 4f9d28edc0c431adbfcc19d8fa47702f |
| SHA1 | 37a6e145fec66acce633199ea7261bf5dd3d855b |
| SHA256 | 17e5cfe0cd5e01c1cf679b2fb7da7f3eae6cac2481c41f355c23df375ee0b48d |
| SHA512 | bb7a5f33e2ef384347f8ffa09381aee5609a5b4997a205c972e7d431effa8c89f47e065b41f3acd86c2a395e0fdcd2fa656b57c84c3b94bb2fbde52ed2284dc3 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 0e841c12b3dbf9f681f1da2aae2e5e23 |
| SHA1 | d2798ec9196accf2f38bc03881c7641f5919389e |
| SHA256 | 90f3841293b985cee0a9d40566b956e16275bceaf31f41cec04c8fe11b9296b5 |
| SHA512 | 9053f63633f144a0b649104141facab4a546e2ac91164548612735c674694a822798f54a9b804ae633dcf434c818d74741399fdc6df850cf05ef3d0e696b6a89 |
C:\Users\Admin\Downloads\RobloxStudioInstaller.exe:Zone.Identifier
| MD5 | fbccf14d504b7b2dbcb5a5bda75bd93b |
| SHA1 | d59fc84cdd5217c6cf74785703655f78da6b582b |
| SHA256 | eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913 |
| SHA512 | aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | f19cd8c4b39fe34808694280a059ec8f |
| SHA1 | c46ef1bcc2c01e40f0a2810c99d1a8f782960c17 |
| SHA256 | a983592ff62debb1655532b9cb27111c2f006d2e081e6ba349eb022cc415a45d |
| SHA512 | ddd8a36e9ebf0b1d0d1d3ae46df53113b3ae3ffa2f36458cfced86557cc69612a4c52aa077cb47d148bebe67da41de6923c2e431c1b34367c859fb80d0b0ee54 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
| MD5 | dacf570191c946be3949ef595a297c11 |
| SHA1 | 5525b2858bfdd00a81a9bcb859021939f59f4e26 |
| SHA256 | c0830f0fd3af2285fca51a303ad8be0b493326b01122ebadb7ff2ef5a77a85dd |
| SHA512 | 4bb457fcdb91b981247c168d38fd592cf0689a0d4abd0a8d76392f221afdbd25de2c7ac4b9e75aca628d81d0d62092888f17533a6f572c38bb944e1939bfac6c |
C:\Program Files (x86)\Roblox\Versions\version-e2bc56a1e4374ca0\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe
| MD5 | 610b1b60dc8729bad759c92f82ee2804 |
| SHA1 | 9992b7ae7a9c4e17a0a6d58ffd91b14cbb576552 |
| SHA256 | 921d51979f3416ca19dca13a057f6fd3b09d8741f3576cad444eb95af87ebe08 |
| SHA512 | 0614c4e421ccd5f4475a690ba46aac5bbb7d15caea66e2961895724e07e1ec7ee09589ca9394f6b2bcfb2160b17ac53798d3cf40fb207b6e4c6381c8f81ab6b4 |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdate.exe
| MD5 | 4dc57ab56e37cd05e81f0d8aaafc5179 |
| SHA1 | 494a90728d7680f979b0ad87f09b5b58f16d1cd5 |
| SHA256 | 87c6f7d9b58f136aeb33c96dbfe3702083ec519aafca39be66778a9c27a68718 |
| SHA512 | 320eeed88d7facf8c1f45786951ef81708c82cb89c63a3c820ee631c52ea913e64c4e21f0039c1b277cfb710c4d81cd2191878320d00fd006dd777c727d9dc2b |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdate.dll
| MD5 | 965b3af7886e7bf6584488658c050ca2 |
| SHA1 | 72daabdde7cd500c483d0eeecb1bd19708f8e4a5 |
| SHA256 | d80c512d99765586e02323a2e18694965eafb903e9bc13f0e0b4265f86b21a19 |
| SHA512 | 1c57dc7b89e7f13f21eaec7736b724cd864c443a2f09829308a4f23cb03e9a5f2a1e5bcdc441301e33119767e656a95d0f9ede0e5114bf67f5dce6e55de7b0a4 |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_en.dll
| MD5 | 4a1e3cf488e998ef4d22ac25ccc520a5 |
| SHA1 | dc568a6e3c9465474ef0d761581c733b3371b1cd |
| SHA256 | 9afbbe2a591250b80499f0bf02715f02dbcd5a80088e129b1f670f1a3167a011 |
| SHA512 | ce3bffb6568ff2ef83ef7c89fd668f6b5972f1484ce3fbd5597dcac0eaec851d5705ed17a5280dd08cd9812d6faec58a5561217b897c9209566545db2f3e1245 |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdateCore.exe
| MD5 | c044dcfa4d518df8fc9d4a161d49cece |
| SHA1 | 91bd4e933b22c010454fd6d3e3b042ab6e8b2149 |
| SHA256 | 9f79fe09f57002ca07ae0b2a196e8cc002d2be6d5540ee857217e99b33fa4bb2 |
| SHA512 | f26b89085aa22ac62a28610689e81b4dfe3c38a9015ec56dfeaff02fdb6fa64e784b86a961509b52ad968400faa1ef0487f29f07a41e37239fe4c3262a11ac2c |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe
| MD5 | 60dba9b06b56e58f5aea1a4149c743d2 |
| SHA1 | a7e456acf64dd99ca30259cf45b88cf2515a69b3 |
| SHA256 | 4d01f5531f93ab2af9e92c4f998a145c94f36688c3793845d528c8675697e112 |
| SHA512 | e98088a368d4c4468e325a1d62bee49661f597e5c1cd1fe2dabad3911b8ac07e1cc4909e7324cb4ab39f30fa32a34807685fcfba767f88884ef84ca69a0049e7 |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\MicrosoftEdgeComRegisterShellARM64.exe
| MD5 | 7a160c6016922713345454265807f08d |
| SHA1 | e36ee184edd449252eb2dfd3016d5b0d2edad3c6 |
| SHA256 | 35a14bd84e74dd6d8e2683470243fb1bb9071178d9283b12ebbfb405c8cd4aa9 |
| SHA512 | c0f1d5c8455cf14f2088ede062967d6dfa7c39ca2ac9636b10ed46dfbea143f64106a4f03c285e89dd8cf4405612f1eef25a8ec4f15294ca3350053891fc3d7e |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\NOTICE.TXT
| MD5 | 6dd5bf0743f2366a0bdd37e302783bcd |
| SHA1 | e5ff6e044c40c02b1fc78304804fe1f993fed2e6 |
| SHA256 | 91d3fc490565ded7621ff5198960e501b6db857d5dd45af2fe7c3ecd141145f5 |
| SHA512 | f546c1dff8902a3353c0b7c10ca9f69bb77ebd276e4d5217da9e0823a0d8d506a5267773f789343d8c56b41a0ee6a97d4470a44bbd81ceaa8529e5e818f4951e |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\EdgeUpdate.dat
| MD5 | 369bbc37cff290adb8963dc5e518b9b8 |
| SHA1 | de0ef569f7ef55032e4b18d3a03542cc2bbac191 |
| SHA256 | 3d7ec761bef1b1af418b909f1c81ce577c769722957713fdafbc8131b0a0c7d3 |
| SHA512 | 4f8ec1fd4de8d373a4973513aa95e646dfc5b1069549fafe0d125614116c902bfc04b0e6afd12554cc13ca6c53e1f258a3b14e54ac811f6b06ed50c9ac9890b1 |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_am.dll
| MD5 | f6c1324070b6c4e2a8f8921652bfbdfa |
| SHA1 | 988e6190f26e4ca8f7ea3caabb366cf1edcdcbbf |
| SHA256 | 986b0654a8b5f7b23478463ff051bffe1e9bbdeb48744e4aa1bd3d89a7520717 |
| SHA512 | 63092cf13e8a19966181df695eb021b0a9993afe8f98b1309973ea999fdf4cd9b6ffd609968d4aa0b2cde41e872688a283fd922d8b22cb5ad06339fe18221100 |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_af.dll
| MD5 | 567aec2d42d02675eb515bbd852be7db |
| SHA1 | 66079ae8ac619ff34e3ddb5fb0823b1790ba7b37 |
| SHA256 | a881788359b2a7d90ac70a76c45938fb337c2064487dcb8be00b9c311d10c24c |
| SHA512 | 3a7414e95c2927d5496f29814556d731aef19efa531fb58988079287669dfc033f3e04c8740697571df76bfecfe3b75659511783ce34682d2a2ea704dfa115b3 |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_as.dll
| MD5 | a8d3210e34bf6f63a35590245c16bc1b |
| SHA1 | f337f2cbec05b7e20ca676d7c2b1a8d5ae8bf693 |
| SHA256 | 3b82de846ad028544013383e3c9fb570d2a09abf2c854e8a4d641bd7fc3b3766 |
| SHA512 | 6e47ffe8f7c2532e7854dcae3cbd4e6533f0238815cb6af5ea85087c51017ea284542b988f07692d0297ebab1bad80d7613bf424ff532e10b01c8e528ab1043a |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_bg.dll
| MD5 | 8375b1b756b2a74a12def575351e6bbd |
| SHA1 | 802ec096425dc1cab723d4cf2fd1a868315d3727 |
| SHA256 | a12df15afac4eb2695626d7a8a2888bdf54c8db671043b0677180f746d8ad105 |
| SHA512 | aec4bb94fde884db79a629abcff27fd8afb7f229d055514f51fa570fb47a85f8dfc9a54a8f69607d2bcaf82fae1ec7ffab0b246795a77a589be11fad51b24d19 |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_bn-IN.dll
| MD5 | a94cf5e8b1708a43393263a33e739edd |
| SHA1 | 1068868bdc271a52aaae6f749028ed3170b09cce |
| SHA256 | 5b01fe11016610d5606f815281c970c86025732fc597b99c031a018626cd9f3c |
| SHA512 | 920f7fed1b720afdb569aec2961bd827a6fc54b4598c0704f65da781d142b1707e5106a459f0c289e0f476b054d93c0b733806af036b68f46377dde0541af2e7 |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_bs.dll
| MD5 | e338dccaa43962697db9f67e0265a3fc |
| SHA1 | 4c6c327efc12d21c4299df7b97bf2c45840e0d83 |
| SHA256 | 99b1b7e25fbc2c64489c0607cef0ae5ff720ab529e11093ed9860d953adeba04 |
| SHA512 | e0c15b166892433ef31ddf6b086680c55e1a515bed89d51edbdf526fcac71fb4e8cb2fadc739ac75ae5c2d9819fc985ca873b0e9e2a2925f82e0a456210898f9 |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_ar.dll
| MD5 | 570efe7aa117a1f98c7a682f8112cb6d |
| SHA1 | 536e7c49e24e9aa068a021a8f258e3e4e69fa64f |
| SHA256 | e2cc8017bc24e73048c7ee68d3787ed63c3898eec61299a9ca1bab8aeaa8da01 |
| SHA512 | 5e963dd55a5739a1da19cec7277dc3d07afdb682330998fd8c33a1b5949942019521967d8b5af0752a7a8e2cf536faa7e62982501170319558ceaa21ed657ae8 |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_cy.dll
| MD5 | 34d991980016595b803d212dc356d765 |
| SHA1 | e3a35df6488c3463c2a7adf89029e1dd8308f816 |
| SHA256 | 252b6f9bf5a9cb59ad1c072e289cc9695c0040b363d4bfbcc9618a12df77d18e |
| SHA512 | 8a6cbcf812af37e3ead789fbec6cba9c4e1829dbeea6200f0abbdae15efd1eda38c3a2576e819d95ed2df0aafd2370480daa24a3fe6aeb8081a936d5e1f8d8ed |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_cs.dll
| MD5 | 16c84ad1222284f40968a851f541d6bb |
| SHA1 | bc26d50e15ccaed6a5fbe801943117269b3b8e6b |
| SHA256 | e0f0026ddcbeafc6c991da6ba7c52927d050f928dba4a7153552efcea893a35b |
| SHA512 | d3018619469ed25d84713bd6b6515c9a27528810765ed41741ac92caf0a3f72345c465a5bda825041df69e1264aada322b62e10c7ed20b3d1bcde82c7e146b7e |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_el.dll
| MD5 | ac275b6e825c3bd87d96b52eac36c0f6 |
| SHA1 | 29e537d81f5d997285b62cd2efea088c3284d18f |
| SHA256 | 223d2db0bc2cc82bda04a0a2cd2b7f6cb589e2fa5c0471a2d5eb04d2ffcfcfa0 |
| SHA512 | bba581412c4297c4daf245550a2656cdc2923f77158b171e0eacf6e933c174eac84580864813cf6d75d73d1a58e0caf46170aee3cee9d84dc468379252b16679 |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_de.dll
| MD5 | aab01f0d7bdc51b190f27ce58701c1da |
| SHA1 | 1a21aabab0875651efd974100a81cda52c462997 |
| SHA256 | 061a7cdaff9867ddb0bd3de2c0760d6919d8d2ca7c7f889ec2d32265d7e7a75c |
| SHA512 | 5edbda45205b61ac48ea6e874411bb1031989001539650de6e424528f72ec8071bd709c037c956450bb0558ee37d026c26fdb966efceb990ed1219f135b09e6e |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_en-GB.dll
| MD5 | d749e093f263244d276b6ffcf4ef4b42 |
| SHA1 | 69f024c769632cdbb019943552bac5281d4cbe05 |
| SHA256 | fd90699e7f29b6028a2e8e6f3ae82d26cdc6942bd39c4f07b221d87c5dbbfe1e |
| SHA512 | 48d51b006ce0cd903154fa03d17e76591db739c4bfb64243725d21d4aa17db57a852077be00b9a51815d09664d18f9e6ad61d9bc41b3d013ed24aaec8f477ad9 |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_eu.dll
| MD5 | a7e1f4f482522a647311735699bec186 |
| SHA1 | 3b4b4b6e6a5e0c1981c62b6b33a0ca78f82b7bbd |
| SHA256 | e5615c838a71b533b26d308509954907bcc0eb4032cdbaa3db621eede5e6bfa4 |
| SHA512 | 22131600bbac8d9c2dab358e244ec85315a1aaebfc0fb62aaa1493c418c8832c3a6fbf24a6f8cf4704fdc4bc10a66c88839a719116b4a3d85264b7ad93c54d57 |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_et.dll
| MD5 | b78cba3088ecdc571412955742ea560b |
| SHA1 | bc04cf9014cec5b9f240235b5ff0f29dbdb22926 |
| SHA256 | f0a4cfd96c85f2d98a3c9ecfadd41c0c139fdb20470c8004f4c112dd3d69e085 |
| SHA512 | 04c8ab8e62017df63e411a49fb6218c341672f348cb9950b1f0d2b2a48016036f395b4568da70989f038e8e28efea65ddd284dfd490e93b6731d9e3e0e0813cf |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_fa.dll
| MD5 | cbe3454843ce2f36201460e316af1404 |
| SHA1 | 0883394c28cb60be8276cb690496318fcabea424 |
| SHA256 | c66c4024847d353e9985eb9b2f060b2d84f12cc77fb6479df5ffc55dbda97e59 |
| SHA512 | f39e660f3bfab288871d3ec40135c16d31c6eb1a84136e065b54ff306f6f8016a788c713d4d8e46ad62e459f9073d2307a6ed650919b2dd00577bbfd04e5bd73 |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_es.dll
| MD5 | 9db7f66f9dc417ebba021bc45af5d34b |
| SHA1 | 6815318b05019f521d65f6046cf340ad88e40971 |
| SHA256 | e652159a75cbab76217ecbb4340020f277175838b316b32cf71e18d83da4a819 |
| SHA512 | 943d8fc0d308c5ccd5ab068fc10e799b92465a22841ce700c636e7ae1c12995d99c0a93ab85c1ae27fefce869eabadbeafee0f2f5f010ad3b35fa4f748b54952 |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_es-419.dll
| MD5 | 28fefc59008ef0325682a0611f8dba70 |
| SHA1 | f528803c731c11d8d92c5660cb4125c26bb75265 |
| SHA256 | 55a69ce2d6fc4109d16172ba6d9edb59dbadbc8af6746cc71dc4045aa549022d |
| SHA512 | 2ec71244303beac7d5ce0905001fe5b0fb996ad1d1c35e63eecd4d9b87751f0633a281554b3f0aa02ee44b8ceaad85a671ef6c34589055797912324e48cc23ed |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_da.dll
| MD5 | d34380d302b16eab40d5b63cfb4ed0fe |
| SHA1 | 1d3047119e353a55dc215666f2b7b69f0ede775b |
| SHA256 | fd98159338d1f3b03814af31440d37d15ab183c1a230e6261fbb90e402f85d5f |
| SHA512 | 45ce58f4343755e392037a9c6fc301ad9392e280a72b9d4b6d328866fe26877b2988c39e05c4e7f1d5b046c0864714b897d35285e222fd668f0d71b7b10e6538 |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_ca-Es-VALENCIA.dll
| MD5 | 2929e8d496d95739f207b9f59b13f925 |
| SHA1 | 7c1c574194d9e31ca91e2a21a5c671e5e95c734c |
| SHA256 | 2726c48a468f8f6debc2d9a6a0706b640b2852c885e603e6b2dec638756160df |
| SHA512 | ea459305d3c3fa7a546194f649722b76072f31e75d59da149c57ff05f4af8f38a809066054df809303937bbca917e67441da2f0e1ea37b50007c25ae99429957 |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_ca.dll
| MD5 | 39551d8d284c108a17dc5f74a7084bb5 |
| SHA1 | 6e43fc5cec4b4b0d44f3b45253c5e0b032e8e884 |
| SHA256 | 8dbd55ed532073874f4fe006ef456e31642317145bd18ddc30f681ce9e0c8e07 |
| SHA512 | 6fa5013a9ce62deca9fa90a98849401b6e164bbad8bef00a8a8b228427520dd584e28cba19c71e2c658692390fe29be28f0398cb6c0f9324c56290bb245d06d2 |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_bn.dll
| MD5 | 7dc58c4e27eaf84ae9984cff2cc16235 |
| SHA1 | 3f53499ddc487658932a8c2bcf562ba32afd3bda |
| SHA256 | e32f77ed3067d7735d10f80e5a0aa0c50c993b59b82dc834f2583c314e28fa98 |
| SHA512 | bdec1300cf83ea06dfd351fe1252b850fecea08f9ef9cb1207fce40ce30742348db953107ade6cdb0612af2e774345faf03a8a6476f2f26735eb89153b4256dc |
C:\Program Files (x86)\Microsoft\Temp\EU378C.tmp\msedgeupdateres_az.dll
| MD5 | 7937c407ebe21170daf0975779f1aa49 |
| SHA1 | 4c2a40e76209abd2492dfaaf65ef24de72291346 |
| SHA256 | 5ab96e4e6e065dbce3b643c6be2c668f5570984ead1a8b3578bbd2056fbad4e9 |
| SHA512 | 8670746941660e6573732077f5ed1b630f94a825cf4ac9dbe5018772eaac1c48216334757a2aeaa561034b4d907162a370b8f0bae83b34a09457fafe165fb5d7 |
C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log
| MD5 | 598ce330acedf7c7572f8bf787417ae9 |
| SHA1 | c8c7a58492032ffcae1a5329de22b0c7c10706b9 |
| SHA256 | 2b9aa7789938127b8feeaeccf0709c4ee68726725ef09719cd7f8000fdaca6dc |
| SHA512 | 5e83d8048e663fc4d10dda7fa2ede37e6402a6fc79b40f6577978745d05f319c214466e84eb5aeafd1babce789ee35bf946b5ba9ae113200761954768dfd5d9a |
C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}\123.0.2420.97\MicrosoftEdge_X64_123.0.2420.97.exe
| MD5 | 300df46436ba5d076b227c32967ada91 |
| SHA1 | de9d47ef0c61fb04b7309875e2f03c8fa37d19f4 |
| SHA256 | 1614eb0c2697d74f2a05f8c973b2055e9cc158d94b19105e3a9d450adc9e333b |
| SHA512 | ba3053085da062ec32f87aec43f527624248a81b702c8cdb359c0fba7194556658b49aca8ef98d885de5da5b9b2eab3f1fac2c99891f91949d1b9a155e4a6971 |
C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat
| MD5 | 93a2ce34588a87f0b4db8fc87fd96fef |
| SHA1 | 46f0dbbd13cc07e1567986ac476c07e6ddf3efee |
| SHA256 | 5576237099738a74f018ebfa97687749cfbd38ff0bdc5f3eb547e98150771bd0 |
| SHA512 | dcbc28a747dcde9ccf7066a78179d56b7277d06cc6f55fba31628204a3ef34dbc6d4ab5dc77d1281aa14484b976ce36e16145490399b5a089a3cafb65443919b |
C:\Program Files (x86)\Microsoft\EdgeCore\123.0.2420.97\Installer\setup.exe
| MD5 | 31ddc9e1c11a44b88cf96c45b3551ffb |
| SHA1 | 811ccb9706f656e29d089e30a2ee1650302394e2 |
| SHA256 | 46cb58faa60db59cb8d145bf6493f7c01a8ea8895f812d65512e3c7340a054da |
| SHA512 | 67e5a4ec4b030e48ac06bdf79bfb2b9bfe7778f046a739f23b7be65e143a7181954c7587eb6841636a6e667aabfa292d6831bab709cd798d1de01987bc99aaf8 |
memory/2704-1162-0x00007FFA6A920000-0x00007FFA6AD22000-memory.dmp
memory/2704-1161-0x00007FFA69360000-0x00007FFA698AC000-memory.dmp
memory/2704-1163-0x00007FF640210000-0x00007FF641210000-memory.dmp
memory/2704-1164-0x00007FFA6A920000-0x00007FFA6AD22000-memory.dmp
memory/2704-1166-0x0000025131AB0000-0x0000025131AC0000-memory.dmp
memory/2704-1174-0x000002513C1B0000-0x000002513C5F0000-memory.dmp
memory/2704-1176-0x000002513C5F0000-0x000002513C7F0000-memory.dmp
memory/2704-1178-0x000002513EC50000-0x000002513EC51000-memory.dmp
memory/2704-1179-0x000002513EC50000-0x000002513EC51000-memory.dmp
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
| MD5 | 3cf4ebf02af1d8a8cba7847ee47543e2 |
| SHA1 | 6a959bcf1f2c8c0822ece4a3ecdfc9098521bd43 |
| SHA256 | 16c004fac0edc6e46c4c1038061835d7f6804a1244fd035b8a7a9ba1a965db9f |
| SHA512 | e711f8668fbdd0ae1799bdf76039c04d5de41ff08d20c250da033c912f95f6fb02f1761e853f2a0233f81ba5e583d0ea8b751da9c70273e8f4a4df03971df90d |
memory/5008-1214-0x00007FFA8CC10000-0x00007FFA8CC11000-memory.dmp
memory/4008-1215-0x00007FFA8D040000-0x00007FFA8D041000-memory.dmp
memory/4008-1217-0x00007FFA8CA00000-0x00007FFA8CA01000-memory.dmp
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
| MD5 | 4731c1b1713031509f156e0dd1d3297e |
| SHA1 | 58281386b3433c0e5916911e055f419dbfc78748 |
| SHA256 | 949563890f794c7cad0ffc79c2af25594ac2648bf82aeded9c95396e28cdfa5c |
| SHA512 | c81d4872a1c0681adfd7716344e3c48ef7b9a3d70f2bdda07c0904f8ed3f5deea61954161f857da3660e6fa6fb71c640882831fba4ab2bd14cb565e785727642 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State~RFe5c0111.TMP
| MD5 | 4b89f2ceb221bce55ee78256f6324ab5 |
| SHA1 | c2feaab893051095ce028f7ba52bac378ed15bac |
| SHA256 | 2e50fb45c10ba3ef2f6c177a2e7de1308c710341dfcd7edd59a166dab491aad3 |
| SHA512 | b56a87bf291209d2fee094360470b5956efdeb513d493f888a5781ad933b7b3d73f4f38fd4683e97fc414914ef9ffe5ce61eb613c1c255039f3b499c05a75c07 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
| MD5 | 5af87dfd673ba2115e2fcf5cfdb727ab |
| SHA1 | d5b5bbf396dc291274584ef71f444f420b6056f1 |
| SHA256 | f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4 |
| SHA512 | de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
| MD5 | f70d50960e7872db1c138e156e9323f0 |
| SHA1 | 10704fc436977e88b6faf4d2bc4d77fa470e663f |
| SHA256 | 8ed6cf3327545eb12f49dc054cf79712d887c0aa00e7c35b90648402d9e46635 |
| SHA512 | ca712eb9c34bba43724b7c8cb3f49526a69bff2c4dbe62d053913c478681823aa124258ed4f2c89c51a9c5439ab9974f49b63df23683d493948d65eb75d8c1e4 |
memory/1840-1259-0x00007FFA8CC10000-0x00007FFA8CC11000-memory.dmp
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_2
| MD5 | 0962291d6d367570bee5454721c17e11 |
| SHA1 | 59d10a893ef321a706a9255176761366115bedcb |
| SHA256 | ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7 |
| SHA512 | f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
| MD5 | d751713988987e9331980363e24189ce |
| SHA1 | 97d170e1550eee4afc0af065b78cda302a97674c |
| SHA256 | 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945 |
| SHA512 | b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af |
C:\Users\Admin\Videos\Captures\desktop.ini
| MD5 | b0d27eaec71f1cd73b015f5ceeb15f9d |
| SHA1 | 62264f8b5c2f5034a1e4143df6e8c787165fbc2f |
| SHA256 | 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2 |
| SHA512 | 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\data_3
| MD5 | 41876349cb12d6db992f1309f22df3f0 |
| SHA1 | 5cf26b3420fc0302cd0a71e8d029739b8765be27 |
| SHA256 | e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c |
| SHA512 | e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\data_1
| MD5 | d0d388f3865d0523e451d6ba0be34cc4 |
| SHA1 | 8571c6a52aacc2747c048e3419e5657b74612995 |
| SHA256 | 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b |
| SHA512 | 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\data_0
| MD5 | cf89d16bb9107c631daabf0c0ee58efb |
| SHA1 | 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b |
| SHA256 | d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e |
| SHA512 | 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\f_00000c
| MD5 | 6eafc48312528e2515d622428b6b95cc |
| SHA1 | 8c21c748004366757a93c587668ab55cb6a4bdf0 |
| SHA256 | dee6942321440ad24c989d45fd96bf0c0c11e63e04357af2128118eb75eb887b |
| SHA512 | c501160df9b93014d510cd22060704b434fac4c6ba242d3e625e1bb6e838aca31889197e74fd4d082f4333147ec18197b2a31619d55d37c9157ec275621ee64a |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\f_00001c
| MD5 | 66d562e3299ee732a53db150038c026e |
| SHA1 | f514a9e346cd443d196c1bc401f078a9fa147323 |
| SHA256 | 252d971616775193836fe6c0c057edc13c511ed2bdbdb61fbe3c4567a3a8e530 |
| SHA512 | ee24be2709cb98ccbde710654eb1ba533e432819caa8c6bf1fedfeceec452fa3c5f3b2402efc06e75d59e55b6e7beaa71f88bd049fad8e17449c0fde217a6468 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
| MD5 | 3e07a86e9ec7c06834c5b397e4baae82 |
| SHA1 | 72310ef04196578f6219e457076c2c0cce93a56f |
| SHA256 | 1672fbc14b8ade8113132186df05fb57961c4490c3ab08d0def1ff5c519df5b0 |
| SHA512 | dd4ab6ead2b6e0466662550658c66e30bd36d54db6d5c5a86662975c35cd77ae96ee06039abf20c148678f15569f88c8779dd444bfbca87d30698dfe350e15bd |
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
| MD5 | f3b25701fe362ec84616a93a45ce9998 |
| SHA1 | d62636d8caec13f04e28442a0a6fa1afeb024bbb |
| SHA256 | b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209 |
| SHA512 | 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84 |
memory/2704-1583-0x0000025131AB0000-0x0000025131AC0000-memory.dmp
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
| MD5 | 42bccd3530d4a3da50e822130e5fe2cc |
| SHA1 | c52d87e47d82c0ec50fb5b4e0ee7088dc4901e1f |
| SHA256 | 9d6135e5e6f40573873b6dfaccb020d6382ff314fb87cef16b906ec3c1e9b8a7 |
| SHA512 | e2d225356d9546200f302a8444c5e71861ddf160970b383f31ccbe829e3f417b0970fa52cc45eba1a1150aded453bb59885fe11beceb0347ff10796c73158230 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences~RFe5c5125.TMP
| MD5 | f02fe1d73369f42e64b9c55b5c7e84d9 |
| SHA1 | 7b5673a10263aac7b4721af7a23b956a7a550dc2 |
| SHA256 | 89da6fa0ca7b7d51ae58db483370de1a82bee8bdb0b9d9ddb13de6121c828888 |
| SHA512 | 138d9618aa5883e37025d9da256b277aa721b005b14d3f84d072cc4213ead28e0122227099975766fc3a42abc8f8c7065d88a5b9f07129e0fe5cd25447a9f3c0 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
| MD5 | 5e32bf5f14604ad69af876a2899aa55e |
| SHA1 | 66568e3de5a3e33281b013d039532c536fe39927 |
| SHA256 | cbde065799240c380d378981ecbf0198bcffa5f5f8585fc2dd2a527e8e3b06c9 |
| SHA512 | ef2ffa6051ffc2eac1f4b2209c9a9ba321a78805c3711ffe81e7f63a67bb553ebe22545e9e93c19fa6ae71be89c61ba021ecc92899258a867a3dfc68d437ef38 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity~RFe5c6ad7.TMP
| MD5 | 744e0563a122a6d61adb1a521bea95e5 |
| SHA1 | cc6db04af290592523a507c1294c449347d261ab |
| SHA256 | 41f9eb55b5a5dc97dc558451042a4274a9a07c6aa055684922b7b1b15b06ea4f |
| SHA512 | f45d9d6a4f6bbe77bd42bc9eb4257c49b72c1053545092b01632c20edcbcf4ad7c004f018530d180410f6c7a40f908127f05a80e9b5749674fcbbc07655b8ef7 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
| MD5 | 4e63395f16dc95236c13546f2fdce525 |
| SHA1 | 1abcee86f7d139120c2cfbfb2722c4e84cbe1357 |
| SHA256 | 69b190e929426302dfba9ff486f1439b186cf8786f1c216dd871f298fc600deb |
| SHA512 | f64aae0ab349c974f11ca440b58fc131361e68394403025e0d08f05aad86a9ebf77c70bac84139587d9de096573763cf273b9317dfe957aac09008f139c49898 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
| MD5 | 7ae592565275cd412d2d4b26073bb581 |
| SHA1 | 347ef8e4469c01d76420839ef3af7a8adaf57dcc |
| SHA256 | 6b41778577aaee3c60b194558fd8d0d2bc1f2f6de385108896d5f1dc8e8a7d54 |
| SHA512 | 2056d6ab1e1f8f4da99734e99d3a69fef9bf2d5ecfc404851b6b10a0ce3257ec90d579fad54c0a14681ee96236553fb3ad24078b86ece9176164aae795197f06 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
| MD5 | 4680f7742c7c52ef798fab65014eea6f |
| SHA1 | 480e2565d048a63366af9a735412ea0509ae0be3 |
| SHA256 | 3c9f7e60062c338fc4d4b1b1a48c5306a4069d66e9b9a47731b796c7df8d553f |
| SHA512 | 2a042034df6f61d46d97793ef90b4a560f32559204beeb224ea20871168f352ecfa9b0e71dd27217652c82a05baee675565e54a334fd5f694ebedff2a0fc9cf4 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
| MD5 | 708eff80ab815a4319679d51a2e08fc3 |
| SHA1 | e51b02e94ee801b4b2f7c3acdc45e6db746a876d |
| SHA256 | 2f69334614def0c24878cfed35cc6487735943d43b37698d2fd04f8a59b1ffdf |
| SHA512 | 7e4afc2609f5e6a95f48094f74b11f7e4e653a20630ab091ad99974ffd0a12958b063bda79a9613444c913f8deb5c4b9f1f26832bde2c780853f8a978ff09e5f |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
| MD5 | cce80132f7829267c20401ce1d0af016 |
| SHA1 | bae2ef4deca68a60286fdee671d3cc655ec2fd25 |
| SHA256 | 42db78bd700e954fba751ee7ab7d8326ac36b976b3d24030dc35a5065c0f3df9 |
| SHA512 | 59f91f82d041873266a6974460e77c128dcc561cf765ac0151dc073e9d63aafada3818ab170911047ddd1d9c2efd9d63363095fabcac64598b6e1d0485702950 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
| MD5 | 3c37ea355cc0c3edec823c0ad5844bd1 |
| SHA1 | 5c2c020960fe21f3b66e48a92020bda1a2ad1f1f |
| SHA256 | 29b3ec2363b459e8830dd6d8c820b8c8bdbaa5c66e12c09f186c365e55aadb27 |
| SHA512 | f3035961954ee774bfd5178164bd69357cad05cfcf427207ba62099406ed545eb491fd43f95331dfaf43468e9187ceb61dd5102326142d634123378154640394 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State~RFe5c7007.TMP
| MD5 | 2800881c775077e1c4b6e06bf4676de4 |
| SHA1 | 2873631068c8b3b9495638c865915be822442c8b |
| SHA256 | 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974 |
| SHA512 | e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
| MD5 | a4a0c4c3fe4bdf6d9b73e175b5e07007 |
| SHA1 | 1e55433e66a1e8f4f315ee5e2b40f4a4b7b5d6ef |
| SHA256 | ce43ea8758719950424551685fbf17f41cc2b23f0b4ff949ff56b63d6f25bd85 |
| SHA512 | 0b4c9c20d2e95aa05521dc55e47d08be18c71f26f4751a5ace48365fd8861da0cfb10c1214cb98f9fb5358e62ed2e7e27511dda3647e6c050e21a1a437fb03a1 |
memory/2704-1803-0x0000025134DF0000-0x0000025134DF1000-memory.dmp
memory/2704-1804-0x000002513EC50000-0x000002513EC51000-memory.dmp
memory/2704-1805-0x0000025134DF0000-0x0000025134DF1000-memory.dmp
memory/2704-1806-0x0000025134DF0000-0x0000025134DF1000-memory.dmp
memory/2704-1807-0x0000025134DF0000-0x0000025134DF1000-memory.dmp
memory/2704-1808-0x0000025134DF0000-0x0000025134DF1000-memory.dmp
memory/2704-1810-0x00000251390F0000-0x00000251390F1000-memory.dmp
memory/2704-1811-0x00000251390F0000-0x00000251390F1000-memory.dmp
memory/2704-1812-0x00000251390F0000-0x00000251390F1000-memory.dmp
memory/2704-1813-0x00000251390F0000-0x00000251390F1000-memory.dmp
memory/2704-1814-0x00000251390F0000-0x00000251390F1000-memory.dmp
memory/2704-1815-0x00000251390F0000-0x00000251390F1000-memory.dmp
memory/2704-1816-0x00000251390F0000-0x00000251390F1000-memory.dmp
memory/2704-1817-0x00000251390F0000-0x00000251390F1000-memory.dmp
memory/2704-1819-0x0000025139100000-0x0000025139101000-memory.dmp
memory/2704-1820-0x0000025139100000-0x0000025139101000-memory.dmp
memory/2704-1821-0x0000025139100000-0x0000025139101000-memory.dmp
memory/2704-1822-0x0000025139100000-0x0000025139101000-memory.dmp
memory/2704-1823-0x0000025139100000-0x0000025139101000-memory.dmp
memory/2704-1824-0x0000025139100000-0x0000025139101000-memory.dmp
memory/2704-1825-0x0000025139100000-0x0000025139101000-memory.dmp
memory/2704-1826-0x0000025139100000-0x0000025139101000-memory.dmp
memory/2704-1827-0x0000025139100000-0x0000025139101000-memory.dmp
memory/2704-1828-0x0000025139100000-0x0000025139101000-memory.dmp
memory/2704-1829-0x0000025139100000-0x0000025139101000-memory.dmp
memory/2704-1830-0x0000025139100000-0x0000025139101000-memory.dmp
memory/2704-1832-0x0000025139110000-0x0000025139111000-memory.dmp
memory/2704-1833-0x0000025139110000-0x0000025139111000-memory.dmp
memory/2704-1834-0x0000025139110000-0x0000025139111000-memory.dmp
memory/2704-1836-0x0000025139100000-0x0000025139101000-memory.dmp
memory/2704-1835-0x0000025139110000-0x0000025139111000-memory.dmp
memory/2704-1838-0x0000025139110000-0x0000025139111000-memory.dmp
memory/2704-1837-0x0000025139110000-0x0000025139111000-memory.dmp
memory/2704-1839-0x0000025139110000-0x0000025139111000-memory.dmp
memory/2704-1840-0x0000025139110000-0x0000025139111000-memory.dmp
memory/2704-1841-0x0000025139110000-0x0000025139111000-memory.dmp
memory/2704-1842-0x0000025139110000-0x0000025139111000-memory.dmp
memory/2704-1844-0x0000025139110000-0x0000025139111000-memory.dmp
memory/2704-1843-0x0000025139110000-0x0000025139111000-memory.dmp
memory/2704-1846-0x0000025139110000-0x0000025139111000-memory.dmp
memory/2704-1845-0x0000025139110000-0x0000025139111000-memory.dmp
memory/2704-1847-0x0000025139110000-0x0000025139111000-memory.dmp
memory/2704-1848-0x0000025139110000-0x0000025139111000-memory.dmp
C:\Users\Admin\AppData\Local\Temp\Roblox\http\45e20ecd29b50b9e8111963299275d4b
| MD5 | c6588ecb6c7ce000190bff2e80c2ce43 |
| SHA1 | 9dfc9727b448e084bc13f4235fe45578cca23012 |
| SHA256 | 744bedfe9fbfdc894c6eb3862ed095e2278e3e92bb730f3ab7f58c0aeb9d6b9c |
| SHA512 | c496f17df40e7c39646395589e89a7616ea3e16809517f7cff4699c0499753668731a90b27b4cbc7628343aad2872e4a5245870bc1958f627d14505c1c9650d2 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5d34a1f5416fdc978c6e0c7edc7d67a2
| MD5 | c76ac26f80988d0fcf03874d625b86af |
| SHA1 | b04a5e95018f8eca571daa4077e66626b9ba0de6 |
| SHA256 | 3dca66141315cdee30f7604013deab2fcc1dd74af93f9630fb700b7606f531ab |
| SHA512 | 23ba1357212eb135ad87fcbb81bf73fcf2e189da34f08ca1cccd40d763a856e9ca8ce5514af395caeefca2b0dd3a6fe3b8d43e060c5baf5139fb357fedb90a59 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\95d98e1cfee595f720d12856399cbd72
| MD5 | 39be6457e3ff988375205765c4660895 |
| SHA1 | 8e946b84ba320df9c28aaa6e759e24719ec38aba |
| SHA256 | 1194e8aa1e2ff45887bca03f3ddee55de61436c660e162ae343ee64e7d146da1 |
| SHA512 | 80f75601d5887291d0f2884945dd2ca197090431fb30dab6e6ee9ef601076950922a75f23a577dc58824a8ea7f57c48c1a742cdbc13a28215bead6b2b0b47033 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b0cd0725ce628c802aea646becfd46a5
| MD5 | b7c03229a5a8d6586e4532281bf1bcf6 |
| SHA1 | e2cf4dcb1a5ed9ec90882b05fd92a1cb2d9b7031 |
| SHA256 | 2f68626defe72fe2f0f653e4f329dc40a4da28ec0b6805b7e372df74503490e4 |
| SHA512 | 4b33587bd1e348c0c3c90ab22556c1a1634c9c16a7986d5ca92cf409a6bc9a2d4ef6ff29f1c56fbaeea7ea42b9e6bcac980f3a13869c7321dfa94b3d4c68498b |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\3acc8af1251b7ed321f9b36da661d9ed
| MD5 | 808cb55c51b6fc55fa6cdb17892dc876 |
| SHA1 | 4487b86a3a42ff05e109800b1827c100390245c0 |
| SHA256 | eed0725bdeac66a2e53e7daaa033f06c360314d751df70176a0af3f23eb08c7d |
| SHA512 | 0d2e6534792e7d417a6fa8403f22397f406352a38bfe1019d87e0308d041b3e69d7defae77e2bf6b87adb3b7d59718efea7d5fad340847c681eeb293beb0f24e |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\a1aac6bdbb2642f3f23fbed64d042c3f
| MD5 | 2c65a49f36fbe81aed88d7626a0112e3 |
| SHA1 | 832fc429cd021f288f5ef9531e7dad6c9c6507fc |
| SHA256 | eb8f138e67962a5c7db64722b78454da2e3c3d656ec8d72c9bec566f10a942de |
| SHA512 | 4fe7c7a7e439f6b43bc13af9291994ff913fa65ab1d77f162c97b18ae505b1c46ffb2c9236b7c9010580b095526a58204bf182aa5d476e3d0a006b2ca450d181 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0f10b6865c21c904e29f52a54a31f37a
| MD5 | 38b25c1089062288a7a9a8876138e465 |
| SHA1 | d7dc1955cdabe9a50ef4f6b345c9012e3efeb56c |
| SHA256 | e39aceee4952e730f1a101894520b046ff21156ebc79c0f8e070e87af20fdd29 |
| SHA512 | 198469bc9aa03de2c29b322cee7714a67b1b421a8fb0b6ade7148f54fb5ea0a37f6afe5e80f052f41815174363ca2b2dc8395534c624f0f87d2f7a0e9d773dd5 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\ceea000e430b7c9714bd62a61ef5eb0d
| MD5 | e6bf3b994b7bd85aa47c17406d367d2b |
| SHA1 | b18be2803acd9576aaa72bb19116b09680f0cbd0 |
| SHA256 | 92638ea5cef2b20242923fd21757df86c8c434ff12243d480250364b8480f2fa |
| SHA512 | 3e207bfe1b30c981fb533971769a4051c0c87ffbfcabc012606ec939c5b66f2bf59cefeb85c2b903856d6396584b2c96472965c11d90d6a1ac9f59b29cf3d664 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0cbacc9a3c6aa07deb13db83f658936d
| MD5 | e3690a37568ee9fe7f191a17a47e2146 |
| SHA1 | 476c939e0ca065001820946509e36ac2842fb1fa |
| SHA256 | b8da756d34febd98745815e7ee643c49dfdf1adeece7fbdeda22487c06472f28 |
| SHA512 | c7b777cb3616fbe210b58c1e2395ffb378ffb36c2fed3af8c634e7d39667b9b433386d1a284f936a1d4e10e76c7a678e97216fe801cf95a0fc3fb313fc4514a3 |
C:\Users\Admin\AppData\Local\Roblox\4957272940\InstalledPlugins\0\settings.json
| MD5 | 1d44007d13da3eecfc0386ffbd99f9ae |
| SHA1 | 060b4ce5674ca2881f685c5579fa8fb3e2530256 |
| SHA256 | b2c2cbcbdabd47765ca587e00a8e894d6fc78beb53448aaa1ac91aba793e299c |
| SHA512 | a555b98e65f1c064b91c4f5adf75b2bf249e251865807ad2d680018f78a0212ef5580e67cfdd00c30573a01cd8f02d7997ead726b4dc99b507a1483299dd4e1a |
C:\Users\Admin\AppData\Local\Roblox\4957272940\InstalledPlugins\0\settings.json
| MD5 | a124ac9f9f82ce9bfa4465e75bfad473 |
| SHA1 | 465ee8d621bdb73b9987dbe479b976e1cef6917b |
| SHA256 | 97c10ff6f86f63a5fe2097b8592321a600ee8415cd1822e441c0ff138139261e |
| SHA512 | 2e5205b90c7de76a8ff73163520fc36db7ced0f891209e6f2223ec5419b0a08b0aaf866d9f57ccc7f99a1209d9b94567f840374387282090f54b33f35fe367fa |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\ce509e8b9e297bfe237059275b80ee6f
| MD5 | 1f24bd72658bb247e9074fdabdd0c718 |
| SHA1 | 378ac82e3df1641524f98c9d45db159bbb267f00 |
| SHA256 | 5d11dde1b235b542a5528241af9b58cd634de84e3a883776a0f406438809cf39 |
| SHA512 | 15cce30bccb88aa63a6241cbeac3ef0785e07a0d12540c20223c995d61e8a288f622703df1356cb2305bb0f198dee142792f75031d4b4bbac84767ee67889ffc |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\3c85359d5c04bb92e62078d2a2b44b00
| MD5 | 24e91b67d30f6bf4e0b5b5b311bf5a10 |
| SHA1 | d5a793a3c576299d46c64f68b594127c66f9b1fc |
| SHA256 | d7f82dc10976402d42ca18ac2be546ff081f31b547808e73b5e655f19b6f2c09 |
| SHA512 | 904e13c841076e8313a3dc14d78b2cd52d026495b5b9d38f1b9181091a9a94dbea87d04376934e15c45d0796d77a77485d02b23a78ed5a6e82419af00bf7062b |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0f59e9fdf4da71481870424e6fc30a30
| MD5 | 7ae049c294f06b2a15cbe791a02197db |
| SHA1 | ce92dbb6757b92d9ed498c915232993e9102f7ab |
| SHA256 | 1d8a1edb4d4583538a4c3a27034c79de63a9263e60270dc6898acf398c905313 |
| SHA512 | ff2b26eb23aeabbb86dbf60a483e6539bb60a6506a3e8dea25187ea1ce7be808e6b13b0a0b21eb4227549a0e6fef0b32891f5d9ae12ad94d83c2f1422adaf8da |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b2c22e1e1eba57b7893baf1dbc05537b
| MD5 | a00d4d9130cba47efd21978dad83e33d |
| SHA1 | d4cb71778b0541f5f26f4e5873f6c76d45818f8e |
| SHA256 | c96dbcafe82cd6a795d2bf99f5fb064686aabc31ece2b759e111ebaccf6cee25 |
| SHA512 | 49bdf636a9e3987b7086561e6097271f42b788e726537f147ae7ed19954b52519276e4c8acc1715f930fc8df5053aeb487f237cc374c043e9bf9202e585c5556 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\26d7d12c3f91bacd3717ca2d83fedc6e
| MD5 | 4a811765c51eb9696dcc37a35efc400a |
| SHA1 | 9fc611fc419cbae7a16913ce6c55b1d75cbf199a |
| SHA256 | 926ba82a4fcae4db04877cadbb7cbb92f760cd10b51338d3eb5792bda708a361 |
| SHA512 | 743f9343c90a9dbc2b7710bda4de7634ec42b313935bf8df1ee3bd1e109a91a4eca5861c594fdc7fa96436d2be3c0248a886d0d5e3b7c90bbe21af2e7ec9d966 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\c597fbbd6748945312494e7870d59f10
| MD5 | f1f1398c7d12435f91f04dbadee3f9d0 |
| SHA1 | 3c26ef304254ea9724d4a6d67852159eca80966e |
| SHA256 | e19a834d7a00a0c800996a52d317271ada66b5ae07151484a6691061a7d7fe72 |
| SHA512 | cc679825bc90b4b53bc25fee142ebc99f7122fe005848aafc9e66b76d47882afcfceb1625bb27dc297cb4f93197436ec75d7928e77c5da2a9cbe98913f5079f3 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\14a9419ddd4a75cafe04c3c3667216d2
| MD5 | 0f05c3ff5bfdb89dcc1b83d5368e12c2 |
| SHA1 | d6f888157dec49eccb867ed10d677840147fb1f5 |
| SHA256 | fd71e9997753c2d54f1decda7d250d234ac8de4590a46485a155e3ad3841ec6a |
| SHA512 | fb0e6ae0fe72d8fa8646b1e0e9f7745d6b3ff91d25adc4b64e6c4f7d5ae64bf0e9bc5cbd6266408bd7c47fbbcc2694862686ec0d45ebb744ac50b7cfb0a2bd30 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\1a77c5a978a065905c380f1800860f47
| MD5 | 539b8613a0fc11ca7ceee5c8aa38ac43 |
| SHA1 | 3d793a894cfc0d03b2d202a920f1ed41d1a646be |
| SHA256 | 6d213a2887049a473ea0c7ad79ea695ac194f8e573e964b673de9baa5c92b5f6 |
| SHA512 | f459af2d252145dc6f9d046728c05c8503e7c3174c9ed10388edc465de5435e10346ed82edd2eb3a6b362651e613157cef36377c3014e4e7c5ec42b07a04e1ee |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\ccbc3d3b9a2024f180ff5ef3712055a9
| MD5 | f769d3aa60212d95e6b88d3a59f65f2b |
| SHA1 | f299779fbb3d6e54230b2767881bab9b580d4d20 |
| SHA256 | 7b1681baa589b144cfc04c9c5986f7aa16dcec0656dbdb2a05028ace0f51c728 |
| SHA512 | 15800e787037549e925f31fe02c91b2afc2e37ed1342d33c7a106be8d9a10523d603581b242b1a15df18fe240399752cf66be093f9b932c546f726da0644ce3a |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5477b96b8c7694aaab08397c539323cd
| MD5 | 74efd118f986358ad4cde9a57e61dc32 |
| SHA1 | 0cfe0335bb35298456edc9ed791e019b70266c31 |
| SHA256 | b973558fa71e5b3a07fe6ca6180c5bd0cffdb343af3a0d2e4e4e89b40b194ee5 |
| SHA512 | 357ad98fcdea45563ac733ff39aae16b103a1327a063445b6febb89616a61fbcd140c2148eeef122965cae78c2158bb39bd3eacac6d6c70a58546489687dd733 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\dbd61a11fcfb26392338fd2b1ff6a849
| MD5 | 7342a963fbe8b3a5bce98391f7c91497 |
| SHA1 | d937946afb025eb344dac220aa2d8d3494c759af |
| SHA256 | 3306f048a000d6a897405f05abfd4c6ea181af54c1b77f6db995e8e00a7a17cd |
| SHA512 | fbf1bc5dd2e4dd9a4bda60309ad0a9d891b60f5666d003af712028b28e740f060d6d745f1d33fbd8db95f0d6d8b4f1ba18a8c9622bf52fba1d14f2299ddc4053 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\78e2b6ce1224c7617a6a8c90174aa783
| MD5 | 22b25a819c414b6c626e5306888142d6 |
| SHA1 | e7d68968d0848af0e5203409227a1980dfeb4a0f |
| SHA256 | 275eacbd4554f5b0e4a4266514243c661edb1e4eea694a2fa01ac20a531dfcea |
| SHA512 | bd04fe05aedb2cf10fef09648566834b019d40a6ec8532b19edcbb2348059984dbd5c04d6fd9579dac55f99a6b4de820cda159256d236450b0d0a51594e3b15d |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\f469136d50a09240f313e4f48b35b40a
| MD5 | 81927a5a1612202db2ce511c62ced773 |
| SHA1 | 4414e92b078a515ca699a82cc3bc64a1e264e4bb |
| SHA256 | a8a2313bedad3d93a06ce01ca1abb579013d083e2fec866cc22342713b7b6b2e |
| SHA512 | 33918119fc071674aac79062c0e4bab978d04cc957189cffdb8c1bb1c7add1bf7d9a0ab03b08d9e997bd8734266bcbc7a312b316f8303347e2aba876022e7cad |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\9ebfa9ac9af1a7e825fa303c7cef0d00
| MD5 | 638f05a6d2e63c63ddf5bcde414cf4d1 |
| SHA1 | 3ccd4ea7034ab36116f5ecde1d3c96387a66e1c0 |
| SHA256 | 8e92748ed9b1257258bcf8096b6b162269f338113edd06ec498788cb4eace3a2 |
| SHA512 | d23e9e2a9144b3ead3b47e3d5dc08bfbcc4d3a083184520299c1cc3afbc608aea4179d16f0fd96ebfcbe34851c8dc66b941c62d7b84f5b823d3c40d6854eb992 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\ee967de1f839e1f82edf0dbfed505feb
| MD5 | 296e4fe06404d04a70c7d45bf96916e2 |
| SHA1 | 3ac545794ed0ddaeeef03e26c32b69f8267272bc |
| SHA256 | b00dc78cae24887e0fbeaa14a91749359c844cc4c6f03344daac077beb20cada |
| SHA512 | 3676b121baf31055dfb26cd29d919e797aec7ddd40058df93991a8cfe32883331eb794ea22e0ffb0537b6aef05d311336c44245aa837e1acc5c65513d54df270 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\c042bf256fdac2928dc9938bc0c24395
| MD5 | 9e732cb70fce6e130cf5a9b819c40961 |
| SHA1 | f1a9b14f84c38cba86641bda0ee167bf847d1cba |
| SHA256 | 5f05bfd1dd2ca04abf1e0035b0e0895057b6ac5a0a8d2c87813e1f51f4b5f457 |
| SHA512 | 6796cdb837b2e467cf1329833035ca57ec0639022778fce1738aa14f5d41a4a98e53304e94b7df3966ca50421bb8717d972efe18a6351408bd388c5b6aa12a26 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5d90ffffdade11fca3ab6d6173b10742
| MD5 | 8eb0fd433af7498b61d3380f812aa9f9 |
| SHA1 | 1c2fd03e11050b47c0b53d568292894bfa805438 |
| SHA256 | a400ccf6fadb706e69adcd72036d390b579925bb0f09bdeed0c278f7db125f66 |
| SHA512 | caf4f4b6269c6cb72f32b2eba515f83dbfd9c4de48d78c1c149a6b425a4c2ab8a8d5d1e02afd0c2ae7f11bedea1fadb60cd4f96a7deeb119640b48bc9d0dd6dd |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\def185f32cacafd8915bf1aed099bf25
| MD5 | a6ecdc2fdb84f478019e3f8eda5521f8 |
| SHA1 | 8a71a780bb394602f0c02389239b951e524d0e5f |
| SHA256 | 2a79a75446a3265dcca7a138526b5129d4ad00e1c0407b6aaeb527593859827b |
| SHA512 | f8af4561a79a9e404fbf76ff0a72971f08265631458f3af158ec531ab2de9c24450ae13035a5af5ffd4c6220fe5a2738e6b7fe1da34f437342b0446301e3b083 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX1E36AEA9AC9B48AE88A91706353A6FD3
| MD5 | 9de52d85b06da1acd48afa0d6d1d19aa |
| SHA1 | 6683b9c8eabeb1f315873fa6bcdfaaafa9353ad6 |
| SHA256 | 8b231ef4bd7d12979f583d8c1b89c66ae7e379d6557a1bb6bfeffcafc15f1a2b |
| SHA512 | f3c1210177102ad92dc8661720f12f4c6aed3a86991b59c823471464feb2eed41cc1512acc864cdace009852380701c20a694fdc0311d5a023c2b9298979c8fd |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e508bcc64367cf9b98fe28c4255655a9
| MD5 | 82b21f9bd843529c51bc0e290ca119e5 |
| SHA1 | 697c8e0ec246effbf2d047870b81f701756b591f |
| SHA256 | a7f86e25dfed056d6c9833e367cb58dec30c5707046b9941edb54726c78620d6 |
| SHA512 | 8e1ecbea17605f90660dff9c3918bf0ca7a4f661611ca0796bb875098f15d1c1e3dc595a0337162c26ff78949aa66c27f883a71c5c8077f9c29faca1c92c4889 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\8bc8142bf8cc1cf9651c8a362da64449
| MD5 | 19163b66086bbfdfbb675d3e29a8aa33 |
| SHA1 | 67131ed92b40233c14475a7829cee371eec3a323 |
| SHA256 | 1d4ba4bfd8dd8a532562d2c8bcfb23d9a82c8e7957e54a909e65f88242ef70c9 |
| SHA512 | 10f4a5a0aff7cb4e260b26fc313ee5d75a438c6ad4ae51327f6b9c8c20bdc1b3ab9a45b37314c03d148ec7629d580e895cb7938adac0cd219aab6ce184468a39 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\6dd68cb0200a2861cb23469d7520c837
| MD5 | 8f26da95fdf19254cf1520d4f2152923 |
| SHA1 | f095fc770579e744504718c46bf741893719528b |
| SHA256 | 9d1db83d9c0d686d3282252526c5c89a078bcb2fd93f6cb0d524d0659427c86a |
| SHA512 | 7c547d463c09d067be0376f8c10d51b3463d419f0f1420fdb195ec9667210e6f4d4742283cbd4a493a7a68f33ec1d244395bd8c4d2f3be63c7c76caa17e05af9 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\cc7ba4b03084890121f90573c08fe802
| MD5 | c519f35acb2b906a14843671b30c4dca |
| SHA1 | 4ca1f63a314e6f5fa8dfcfb3c65eb600140c0070 |
| SHA256 | 78b8f7a7bda9c66b90dbb716b639a800e1be42941743b145e0e91ed471dd8a54 |
| SHA512 | 97963fecfd7edf26f2211b8144ce9c71e494d29583a9fb07c98d0e76c01a2929d6556072f71eb2e4e8693af9361c2445d67d16bb2f1fc844140d122880cd3208 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5115104c7cffafdf5607ea77a3b35088
| MD5 | b65c1a6a506a176d3979b9f8f603b899 |
| SHA1 | c50bc108ca32c27c17d2bf9b3cd880cb84bada8a |
| SHA256 | d0fdeb0d693131e34fb0702794fedee4c703d8e3efaaf26a050cf8a142982c86 |
| SHA512 | 2126dca4251473b8f642b648d5eaa5d4bd59d87924c665513239772db2cf1c0002bbd75da6266506906bb29e63e7cebb7229fc632751e0a42c82c140fe138d48 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\7581a9a23735a343b4ecea67d1198bb1
| MD5 | c86448495cb7ca58e345f084f6f4ae73 |
| SHA1 | 0b2297c3dcd1d57fb8c9aa6532b0326fe301322b |
| SHA256 | a0839dc623c1330e766fdf2ff0069fc7516bcdd1bf347a72140086736eaa641e |
| SHA512 | 983ead14b37f91892e8bd7af0a49ea1c812e5dcb7fed67ce9448cc75ef2beb831d04b67bf138c717abd41ef1631cc338bb201d728f47ff25737194d4a155d57f |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\a5bd6e0a8e9a1b40fcbc08bad2a94559
| MD5 | 5c39923b473a18ba8dae0195512c7cb4 |
| SHA1 | a29abce36a5f2958f9b8324d51cf841ebca96f7e |
| SHA256 | 9d4427043c654eadb9c750d723ce47f64cc0199954eb664e78cb74b8af09a816 |
| SHA512 | f48f6c76dcffb5609c6bbc4bd485b8712968e860c7f5c26e2fa4b455eb4464c6f90e7bd551ee75131dd2e143799de3129a94c3041b32c51e8c3bf0b423126074 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\8f82ee24e69866dd3748305b9db72c06
| MD5 | 5d98e2e6c684700e5072e39285c6d339 |
| SHA1 | 4e6ac20c340ec562d48571d916381b932a73a7ae |
| SHA256 | 54b59bd6491d18e725b30d471397b7ff53caecb7fba5a5015e47b98e26806f56 |
| SHA512 | dc8e1fc18485a58312d953004b3736ca086fe3cd2b2038573789cfd52c7ce312c7838945f2b77617434e507121c8093af7b7a738ccf97f27548673f287aca1e4 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\81483c16864573e12066978b4073be55
| MD5 | 36de38aeedb87afb7cddc1f102f06c41 |
| SHA1 | 39a06764dcc888b494ad2bafa2acce144d04f269 |
| SHA256 | 9aa67701184a14317c7b98a5bb81ff8f84ad96662bcf6d2532eb71004227376a |
| SHA512 | 0ced959feae5685694e244b9b3f0acf6db3b4cf56035920532ffbe593b61208d316026844413d403a1376abc7143a613b32dfb7997dcacfc58491374e51459db |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\aaa39c5f3ff965de07f7a5e770ac084d
| MD5 | 4b6d67d7bbfae04c725d3c4557d039d1 |
| SHA1 | e701495ef58dbe92669ab88a440713697d4214bd |
| SHA256 | 55f1afe7970321562315838b3cd89dafa2362e5959a28178bc0d15d9922c4654 |
| SHA512 | c99a0f0ba4586617658432e299afd96e436c9ba403e7847bb0267de1933568c4771280325b121afa4d5957d0babd3c4d5bf9a5de3c1b96f1a01f3f4eb7e9e407 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\ae6f6da72d44994a0506f3c4e01409b7
| MD5 | 62935375a28b84784243e28c1a40b6bd |
| SHA1 | f43b81f8baa8eba79883d6f2109abe50e01397ae |
| SHA256 | 6cdfce5ad3e99eb76326b0acbf8cfff62cf461cc32750d4beb18d3875536aef4 |
| SHA512 | a2709de53cc2a4d88a59852e5519886e5f53b6603b974c3c0e74b2679020feb3e2a3da9807b01ebe0b4278a471f59a1d6e9b8e8181db7c98b5db896fd77b044b |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\14219a7b96e38fee831e9c4c8de6ee1d
| MD5 | 0796d0fa911d5bcc43ab5dd93b1e537e |
| SHA1 | fc72cf87bb2b508a4ac62ab9993086d4391877cd |
| SHA256 | 5bba985d1ecd0026d224c189de9607171866b540f10fa9c40c9e3411e579999e |
| SHA512 | 92436963c975517cb18acdcf12ec039c244e7d8690fb32f9a8d369ed1033b768f449b70329b849cfc7ebd1c2b76e5113a600a814d39b6ffa32dde61276f0cc2f |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\8105c44d3796161f1a3c919e0332c219
| MD5 | 3d7dad3e669918c636eb3e9504fc36d1 |
| SHA1 | 3ac8f47efc3fc71eaac2b6e494ef48070d2e6cb1 |
| SHA256 | baabb2d55fa437958ca20265ca1d93a615d1b67f97e6319a53f91f08c54e1f3c |
| SHA512 | 27c54c74de5528cb7829a96be8b6ddbeec99a14dadbf1bba19221a428997d2270cae1a1101f879bef1bbb6b87b26ef47ff8429ba3b37e8d09b3e022ba94688c6 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5ce80fa948bc10d8dc2ca7cce0f9b930
| MD5 | 571dee447dcc14c29a7e08767bd6b5c1 |
| SHA1 | f1941a993ab867b4fad22541ab26e1465a755123 |
| SHA256 | 8d1c95f5d55977063fcf247356b592f97f1f16243abce7b4687af10ae3effe08 |
| SHA512 | 5b200a1c1bbb43d34cc90455d30d4405f5381dee5af240904ceb0138fa22677646532498d8814195b2563f5778e6d95c8be6d910cbc695fc685a8b25545f8dd6 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\9476ac03bba4cf1df5ab53d02fe192dc
| MD5 | f3d82ea0933bb0bc73d520d65068047f |
| SHA1 | be4e1869b91842a748ac8b5b46dbc79e5cf65d37 |
| SHA256 | 05df0644a0efee34a5a0b5d494430ed6b82b49cd53ca72d938d7fb01c0003302 |
| SHA512 | 11b0077972690b5816ee16597e62408c7317e8bc1c091aad9e502abda4008cf7c10afe95ef20d33c90c6c50140a356721f6ae62e1ba268979ee1aa4dba6f5bfc |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\186c73fde9923acf466630a51ea37b1a
| MD5 | 24ed23e60b056f5d334e00088ae33836 |
| SHA1 | 75a42ae94a263bad5bbc482bdcc0844d82ad8206 |
| SHA256 | 366e81a80b5a1771169ef20531574e838fbc0d61a72ba8b21719cd38055b266b |
| SHA512 | 2b55c9b67248b5baa5db374ac59ff227c0753412f19c1ac6e9e51aa011b429ff2fb62e109bce576aac18c9b892d37487e2fff8057c1be6cb67fa662c8b8bdeab |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\2eb9ab36829994d11c65e82f546b5241
| MD5 | 6aa8bc268a75a675bc4c37a3b8bd48b9 |
| SHA1 | 7d5fdbb6c0f6e0b25dbade748580c564c893bd01 |
| SHA256 | 5da5a04d315061907bb274627ecc359d57414ac63698d2ac2404b4506368c397 |
| SHA512 | 4100afd1428ed410c6afe47306b8e98bdf302fc183afad9a52b575debf248443cd391ad5523ad1bdb69e5df82536dcdff246182b4e2f6aa7844a4d81ab9181b4 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\7eb9c2ada496c1f585e5b7b62ef7f10d
| MD5 | b247f71c66420a3ee186c782dc9989b0 |
| SHA1 | 5ecbf9e6fdcdc627bc80600350fe08eb70716c19 |
| SHA256 | ead4058cb5b7ed21ab7c3de643a9855c4df21c15affbc4e928c77d6a4546d418 |
| SHA512 | 652dcffd2cf9a721ff3034c9a79129ab4479b51252fbc4aaeab7e94efdf57469ebd4e6b03e482504cfbc40144607b02b8016c4aa33ae215ed8de7a3023030a88 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\9a1dede260c89ae126078ce683ec6e03
| MD5 | 9fa3b4ffe5e6abe8adefe470d2e429da |
| SHA1 | 2241d57ed79a933b55d08d61c6ba3be22b368e12 |
| SHA256 | f4d7262424ccb5efe80dca733cdc9bb5f715ce24be58977cf21b53d2856e97d2 |
| SHA512 | 5bbf910b26436dfe75dc39fcc2df1f26e3416ff5cd3f0487ad1ecc6cd59ad463dbe2714540e6cab98b40e3e02fa35713dc9a8705cbf8e1b3d922e78a0577e705 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\460c2f8a4b941819d81ee5e0aa43f732
| MD5 | 3927ee3a62d4fed5a032e0f676459ee8 |
| SHA1 | 3188b1c83d225bcaa1d8cb1c80e52f02589fe0d3 |
| SHA256 | d06e927d723cb60580af0eba10332f1d9bc7c05e94d24cfffe2be40c6b46c4ae |
| SHA512 | 29e82b44ac9bc632fc64f089464f392038a852dac563cee3c55845a963ed6b2f7fd4c85d264bbec6779088a273e8692f9889638ac50d901213187ce8b7760e43 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e81489ca248da128fe61473200c5d020
| MD5 | 520ab766bca67603b739d14545224a36 |
| SHA1 | f4034ed446290fc46ec6c34c2477b55d6a07476e |
| SHA256 | c7a8d3923046b6f77cedd9fe94b6dddb725568999a48265e7457c67ede70df5a |
| SHA512 | a13593c5e7f348838561d4afbd8cbb15fb413af7db59f462b0fb87727dca3393b8d1a470b18cfbae8161755f5558b84a23f7d814578882fb1c0fb51a11d0f2b1 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b2f20103cac5461a1d3547c6e14d7587
| MD5 | 1b9490b907af8da1fcdcca50c8f65b90 |
| SHA1 | cc193d424cf6411e6354fa24ab94a1edfd252cf4 |
| SHA256 | 7332f2665454eadc72aa894f2dbbe8369ed53b1462c8951d2c0f3e1f09616397 |
| SHA512 | bbc0bd3e165b69997bce74bf28349edd89dc8e7509457c8a40df3de21745f3e63d0026101b4a31bcdebe0411a620168b49ec0f0431b7ed2315f92e346cf458b9 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\373eb9f859dfb4f553b19748d262bbb1
| MD5 | e6ac2d485aad3b98341b7d126a034c04 |
| SHA1 | 4193eed9387a9645f6cb6323b48f31d4ae7096c7 |
| SHA256 | 05defb267e9ef077e09014672106fb227f7166552fbabb131ca26195fbd32b90 |
| SHA512 | 18ec7a42adabfd627061a45546b2499f9cd51650ee7d3d64b1c5eac1920771f093da37656ae8a07cbff974ef8f1328eb74392d87d6aca52da0d8dffbef4fc700 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0aaf6f7317997d554f4a87946e18f4bd
| MD5 | b7fcabc842e34093c2d79eddb9b0a14b |
| SHA1 | a6ac7bc76d847debd8851693a34c9d4652770ec9 |
| SHA256 | ea654e6a85aae695ed6a83519d28e14c497685a7d9a1e3113de375dfad9c0105 |
| SHA512 | 30bd3f1a0f400ec09fb702f60da46d66415fcfbeb38f0c4ccba33ad9ec0f31c536dfa514ab06a7f4fe96b7685195a69f9d30caca2244dda3ec8866193f2ce26c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\bbd32ecc5c32b11bcd2509d541b5579d
| MD5 | fcf7972a3c5bd7a9a8239778acbeef31 |
| SHA1 | ee81b0e3c6d7d6599776bc1d18c207d5264299c2 |
| SHA256 | 6854ba55b5f4061656e4660ceb37ef25a108dff6f96167c5b2a67e291ee9f56c |
| SHA512 | 48eea8ec572bd641c02e860baa0a11c47f65f1f450ca6be43f3502dc8294d9ac6d495ba3268990a867a271a6e2753aa2d2b80bd84bdf77d99cd1c6446a4e0209 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\84757e79ec2d4ea81334496509b1a323
| MD5 | 1c289c14c895dfdf05610074041c670e |
| SHA1 | 75ec8d8c4bf89b0d0ba0c1a3487c11988019e975 |
| SHA256 | 7041f621e57bb76b41d4b329081403cc6bd5a161f8a45ef494f90942762ebbe6 |
| SHA512 | 04c7d00b7225f604b32a9428860bde90a0a432044878c1060b638761ab8aba20dd41b8ff98e38f98687b587818a13a7f95f32da5ca839956ae56da54dfe3b079 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\912f5fc3f8ee84a59c48c411e53edbb1
| MD5 | c77201c032a8d835884aaef460a86426 |
| SHA1 | 65082a70376eceba181d6a51f0398813e9e3c8dd |
| SHA256 | 6d97a18d7dd1a3971760a44b5c85aef291e6338c1e926ebabca6f5fe31c675d9 |
| SHA512 | c66c74ed3df2b1f39f047cb8ae6ef52275b0a3ba2e631ee78ab5af54122fd8a2fcd9dbb9a4d8a70585f50edfd16ab95e4200ec2e3599c28adb8289a8e61afa21 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBXAD49A78AE3B54D8EB2776D981D0311EB
| MD5 | b04c0dc18c7d55cd67b193981117e8e5 |
| SHA1 | de1b8da5292626c82c5369243ab17e1fe87819e8 |
| SHA256 | 0e9e0d48cb004bf17d389dc2d43451e7c45546210703bf2c36048568477f538a |
| SHA512 | e6a2aea601a6cc021d9537fd56eaf034dbc5932f9dfeca57fa69921733af8d1c22fa4997a596f2895ca60a9a064ace6a135a8c5893381595521da9cdcfcfbef4 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0e72d04ad553b3d0c14270c19eab2986
| MD5 | 71998edfcaf6236c9cbb0100558e9e10 |
| SHA1 | 6efcd23ccc8e4db8814e5a2e6df0db27e198ba81 |
| SHA256 | eba46b16e0d6b6402fb3c4ae1ddb02615263f553b1102c0ff9c7d1b939f30754 |
| SHA512 | c81c7c5c19fcd4999b9b0a7abdf044621ebd75fc6ab4058472a7e61af90f2fa021e64040e179e98ab7d31bec33ffe042d93025ea01dccfccd014fa0f72588bde |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\642214bf9a59cbc56156898781347ce4
| MD5 | 08d84bf2f25a89392f1aabc36af862f2 |
| SHA1 | 613d3c85dc28113097a4d8d1f3f727729fdbeff6 |
| SHA256 | 6268b8c3fffa1759c68ce45a9080e80617ea54bf6651301be4c1cb06ca7bea74 |
| SHA512 | ea3c0cd6b18243750e85d10626332af4f9d05e628de062dcc2aa7dca8fd20616b338a39ffae72b09f0f64c0675c48b75d0fabaac88b1e33b8fd49a45b319d374 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\4bdacebda49ebc2c2d118b7ade154ab8
| MD5 | 46fe622ae1ed5e04c8e870d2955b0b5b |
| SHA1 | b53f9d01b0b5eed94f7e1efa209fc6fbc95e9006 |
| SHA256 | 3f64186c98498258f668809710386563ba357ebe3f72afe8da26681539ba6254 |
| SHA512 | bc03f8d6cbd1b1dc2a5d0c444d840dfafe51af93fc09b8393f921d5c1e26b58145280d4d51086c3ab9c4938191221c08f3636ad9f317ba718a45fe265b17f723 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b36482b1edea43f2633ea464f06858ab
| MD5 | d6f5e76b38b611737bea4df7021a180a |
| SHA1 | 180495d2c8f89bc65cea42c5cbf343e0f3e0db47 |
| SHA256 | cb53664e949e16db8ddb57ebb8146b13b785a6f57b9feaf12109670963efea8b |
| SHA512 | bda67757d47ae3e15b5278a8fdca0a73c1aaee595a27e664a936085ff742dca717b3a1981340589d0a270ea93cf3ccf05f61872fe006c33bd52dad8d61301789 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0da1eff9a99725e6873478bb53e6ad07
| MD5 | 20a9b87070a921eb6ca606f4b49e4ee5 |
| SHA1 | 500f261fd7bbcdaf2b4b2a3a6fa6f0cc69836e49 |
| SHA256 | 0cafb5b24a63bf21914494b4800b2ab0aaadadf01fd5413b85ba98b573b8cd61 |
| SHA512 | 65279869345c2add4d752e8db9b2b5d57f2f21f7441559a76a8c1dad56c8759a37bcc0741bb96164e874fa8062e89e2c200816625328126e019b377e79a973f3 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e60894907471600db01872a1741a0bdd
| MD5 | 5bc34a1c60d2a4bbe7441e8307189156 |
| SHA1 | 136eea02e3c374521146b9f530ad9c1151e20a37 |
| SHA256 | 563d0ba1f9dde1fa635ee6f29925712b5a162396d7681d8b4dae1fffabcf5626 |
| SHA512 | 5c542b3aa5f8036901247fee55c187958546966a9dc6b34c291af2d63fe0c3c8f92f3d87466e02e3b124f4972b1558a743e927520dc9c3fc5256ee8d066aafe6 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e6b482665e130d2c6c4c2f7990354e75
| MD5 | a70b131026d5831c371a7a89a1675551 |
| SHA1 | b00528f44c72b16bb826a8c12033d991a31e038d |
| SHA256 | 545e29a62fbc6ebed60ff126038d047185e2218af1b463e77400713a130f91f0 |
| SHA512 | 9bb8b9435cecea2e25adf616caadf4f9d7f2af2f905433a797e7be850cbafb9407b04efa5a2b99e7e95dc6a0a6fa56f709a38fd00a87676a22a58dcd6c6d77b6 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\8e15f36b2180497bcb0891bdfa9def53
| MD5 | 934a11b8eaef18e6790e660f167b251b |
| SHA1 | 1195e4573af3ac1c966de8210b162d76f57df7e4 |
| SHA256 | 8a8ffcca05368fdf6f8941aa5ebf50c565c4946e660dac731827703d5d36665a |
| SHA512 | 7b9ec190b7cbdaa40921a775beb6cc245f9e92b12785d0c1a9fc6285a996a809a2c80546a099fbdf5e2628404e4cedc2ab652f3e02c27012fd2fb3ea6d1ddaa1 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\576c7360d7dbf5c209ea184dee932ce8
| MD5 | 8b87e00e15e8b22c07fe61343b921def |
| SHA1 | 5275488ffd82741832f38ed90f0ba311e06a8c67 |
| SHA256 | e9bbf61c79723b15b5210f18154f102fc48902e154ef8feea2527b78e5941103 |
| SHA512 | 0aa79e6ac8b69bbfa10dd41ea6200ef2ba9c7354969a74deacbc36e5cdd79093d6f592aecf35280beef8fb51a520ad0f80a44d76e63135c1e2f5fb19bdd4ba23 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\774ad174c53c04e6b1a29c22a5f6e32e
| MD5 | 99bec00bfc46f3e950ee281f6c95acbb |
| SHA1 | 38ab6e7d03e5a58a32fa8b93cdfcf4fc1a959e48 |
| SHA256 | df51d04572d489f40be555b7273f7ed2e772480f2827e3bda6213fa38c909328 |
| SHA512 | 04d346260c3083e318e1b7025e78693f97ab7da9511927efe02e9dad7c96755df7b3dec8bafd175c53514bef532c24846b8e9c429ab0f7942bb9adcadb2c757d |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5965db33c00199c8da043230c1beea49
| MD5 | 3ae9eece15951e58cb3c3333675f16bd |
| SHA1 | f68f72eb957241ed71bf15acf71d515361c70398 |
| SHA256 | 262a1a8b853e44e5ea0f8a61549527c9d7ad4a61c43fe03c062297251ca0ef2f |
| SHA512 | c1c4a46bae66037adce49c680b42c91f8a8f3b91fa21da308db6e0070c605f0b6a072922adb7978c11b83912faa5c82fd134d3a38ad7b34842de4c0514dadb3b |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\22b19b20581c5f62166a73f4ed0991fb
| MD5 | 908169b22541e44d56f5d1909909805e |
| SHA1 | 40f82ea8fdfd3295706176ce7ba412e753f8eeab |
| SHA256 | d52f23e90b859cc5787fcd15679a6c5ac79ea5bc9b03d5f58e6a67f57afe5bfd |
| SHA512 | b4fef403d66bc05f31fc0929d38f44ac15ff6f2d3cb02160073a9d939ba28e985fa77521e558ece1c4ffc73c720c63ff263ae14adb2ec7b19d0cdde82513efcb |
C:\Users\Admin\AppData\Local\Temp\{FCC3977D-A6E2-448F-ABE6-AEA0DEFC1844}-MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe
| MD5 | b18c705b3c68cc49d9bf3649abc75c24 |
| SHA1 | 6dc8963dea0f3185368790dee2a346301b4fa24c |
| SHA256 | c2ca3135f3cafd79bf90d4cb3118943ca17f40e0d651d1fc32b1b3d22d1412aa |
| SHA512 | 7ac302c1e85c652bd897ce1af812950cd23a53c041af82fdcecb2314bbd1667bf2fc672dea40c21858e64befc9bf60190a4428f0b41c30317bb0e5ec7c00f71b |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\4483bc61535446a6bc2788d2b938f37c
| MD5 | 53ca0ee102e56412903504b4fa90b588 |
| SHA1 | 7b6e35b9bfee4a5087532883899e10edfbd9f079 |
| SHA256 | 748ff269a43c39266dab4e313529110f75cbacecde5070137db3f2d4f11592f6 |
| SHA512 | 580a107dc21dad9fb013755373f022c6329419bfc9086bba1bfec2807f7e2c8f6fa5acd0f3d601af30b1e9759eaead58d2688243c73e6435d8af9d7109eb8781 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\d8b4554062d011287069393d07af8706
| MD5 | a0c28b8252eda35f15ff0931e1817ac9 |
| SHA1 | 3fa429b9d0b8926907abc63b81a301bad2442eef |
| SHA256 | ee880812bbf7cc1f00cb363632e9746e7342cb5048765c483d56f4284e555a0d |
| SHA512 | e49af44a8fa6e0c0fe4a5f55df2910ff43a6a9360d6e0ba507375487526fa4fae8c974763e4bb757e0907036141123920024adfb312f9d53703bf6d45a83956f |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\4dd9b09ac0d9a7bb380a273db7cac4ac
| MD5 | d97f6e22eba42d95c89cfd439f36c1d4 |
| SHA1 | 3a439aff0b80708f6510643f70997b897500d2bd |
| SHA256 | 25f91091126b2855bcb9c2daa26fec21fe7cc6d25319925a95a55a37cc840b6e |
| SHA512 | 52ca405f845e8313b0a04657eaa9a22d1c4fbcf758d5796d2deaf41c7ed6abc28e3597dc1f5d803c009360a63db4e686e6622fac669c252b09d2a3d8dc451e72 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\9fd0b17a3402934b24f3b349c8d753a2
| MD5 | 59e7e73fef4a9df2680ff8fe1722014f |
| SHA1 | 2b9d42140ad6207b1e3f5cf8d66b345109cb1098 |
| SHA256 | 05f280e512673a8f1358b88e8706bf5a763727dc16e8c43abe1be6129a820b57 |
| SHA512 | 49edc88448345ee5bbb1093bbb62bb49b0ac3c1c0a29d4a862be76845fbbacff0347ea457d66e40f721dccb8071c18e4ca7f41cbce88d57a64a02ed400f4f783 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\f7a7f74d155bbe4b61dae83c787dc265
| MD5 | 2ef051948c7138e398679bf6040ced69 |
| SHA1 | 508b65472707ba8d47358984c321b15dc41010dd |
| SHA256 | 2213887214efa453eb1fd24e3221f5c5f27305e622b8cc9a5d8a71ec1aad9c2d |
| SHA512 | 4a3c6dae947be32e8a36e6db832ac5510156be28df291d8e224ac27e449945f81a2ff97511369eed4a850f165ccd1fe713ba7bde4e63b2f6a8671f205f60fa26 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\71f7eb2f3ae2271faf41067cb22b1201
| MD5 | 66ca570aee6f14614f504765fc324f1b |
| SHA1 | 888f25b4544484d0d4eed1052ef389bdd5feffb2 |
| SHA256 | a13f7601d6f4b40d722596071032796a50fa0a9fc9f7b3675cb87fb63cd0e618 |
| SHA512 | b068e1fe6d8da34e026f454ffcaaf818c89ef7fb23c7b8cc4de3cdfab22acbe44b633c1f2fdd1f223be0720b0df60951c50d65d880b62288ef3a9728705dc1f7 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\7fe0379da44b038f6b0b7f5e2d73e81a
| MD5 | 6b130be076d108daaf61bf250d4b7d1f |
| SHA1 | ff62f13e0657e1f76d844bd60547334efdc49123 |
| SHA256 | b196782b9c2d5161586392b52ae0e6031d2fcaffd503bbdac4dc2be5f6bb4a4f |
| SHA512 | ffe379fcd00e6282d9340203fa62ba172193c1bbe85882853c24f10aeec43f946bade9b7f8434a51e0dc02b824d41548443d8f3c1fa90def499720647fec0383 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\6308009873b6e28576872a25a9dcd1a8
| MD5 | cbc77a3567390e186697b317934a9f34 |
| SHA1 | 903a23d61339ec89ef076958368b6e6d3117d5b5 |
| SHA256 | fd2deef76d9fd8953722cc9b2867e1113c2613c7051d4b6ab39fb88a228b5377 |
| SHA512 | 12fa7b46755541d6a115008a0e088a52b58340c7c2b12c3cbd9741136a85b9d44a0494a0dcbce391731a7038239fdd8824525715994a9b492a08b7e2a9e8ffcd |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\c6d99f19053d2b7e8f1830e2f7e76285
| MD5 | fd49984658035378f89380ba6b335baa |
| SHA1 | 33d85ddb6373e70364b1b6347169e27084ea793f |
| SHA256 | f3a9843bd56b3035be2b1900245996ad5d978bc6d0426f15ccaa91adf14e245b |
| SHA512 | 6a2dd936bcfede9d75f2874b3f9efcf43d1a68e8dbddcf2d8e8ce0e1fe9f50c55d88fc0c37f336b81089aab10560cae61ab8668b9d84591069f5b691c1cfe779 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX6448E6BFA2B84B3CB67AB1C2EC843AB3
| MD5 | c9d7a5449c2416cea3dc4b8697273ad2 |
| SHA1 | 452f66798b4f15ae1c77aa6c20247d202fc09fa1 |
| SHA256 | 2b94005f0e346190d6ba38deb3763858acbdae197a6a200f0c7c1220f5f5644a |
| SHA512 | dd637977954052362cf59ab76b8d707243d519398fc51e188ebbd882d4b82abd3cb18f80d0faced0fcd37d06373748ebe493faa0b45b12d41f0af1700c6ece89 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\c1050ea1a543136425da772944c95167
| MD5 | d24aa5d6366eb21ac6bb5717a131d923 |
| SHA1 | d4b2ea91ad90966f32eec34daf9d9fa63c045457 |
| SHA256 | 929f036a889e8017595638c757b45c73d076eb75c3ea34eff2f2e3c5d5aba3b7 |
| SHA512 | e3f96e415e76c885dfe88901aa44bfbc58cc5a1339f57f15e786e927fd7fcb3f63644ad0484189663d5ed220d6686c3d48f333db3001f7f2f58a048e31260add |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\00017aecdf8bcdf3fa8898c25225bef2
| MD5 | 079dab1166536c4c63d09ba650dcb4e0 |
| SHA1 | 87ef68e37db2d854e94abe24f6a271d06d62b037 |
| SHA256 | 73758f88a122f8e0e20dfd4ce6839edd8e75f90801737490c430bd0a81e952d7 |
| SHA512 | 2558b57af41fdcceef165bba9f0057168559a515d94aad49fb5500f07873ed5c9dae4af91735c6bb0b91fd6323cfa373118472d9046633cb1055aaeb6d09d656 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\767fd1c86a6438f2df71a3ad990afaac
| MD5 | 217ff9acd4b2d95d27ac72c6fbea9c97 |
| SHA1 | d32bedd502544c93d749e9ad64be05f7f10256ed |
| SHA256 | f937023bae125acd72ec91cbad63dd8a9af332bc0cf384149b98c12181b26af2 |
| SHA512 | 9dda3d954b29da9de62514dcbdc93ae199b6c4193ca769342f0081806b520aa11e46fb583d4c95932f99449906945efc5b739d4c26a5966e6d617cdd4386dc0f |
C:\Users\Admin\AppData\Local\Temp\{0D5915F7-84AF-4737-8F4B-77F02F5AF238}-BGAUpdate.exe
| MD5 | 09fc5490d32c867927e960f673911ebf |
| SHA1 | 2ecbee3518fb701959d2539a88892391250dc010 |
| SHA256 | 9014827c68fd6a31ccd7ec1c8f182cfeeb60962760391446b45c264e062daad6 |
| SHA512 | cd295d344bba456cdb2394fbe736c7b52c8f20e2776bb6b37c0ecd7068c841a646208e4bd0ebb4cb7880fc15caa8b18da485340ac8f88154e61cf76fb16e8162 |
C:\Users\Admin\Documents\ROBLOX\AutoSaves\Place_AutoRecovery_0_AutoRecovery_scrdZo.rbxl
| MD5 | 777a9a6356027bc64aabe50d30f48379 |
| SHA1 | c4af6c703c73846c34979ea5206c3b337d24bd95 |
| SHA256 | 6e6bc6a30982043d3e7452997062f5b18b35d4ad4cb0982fdd60c600bf6d4d22 |
| SHA512 | 673f168544955455515fbd8cfbf4b2016a011fa4fe297aac3ac566df4b287d4381525d4b6b7115aa4036d89da496efa245ad8b6c46ac8a3f48e38f325106fa7c |
C:\Users\Admin\AppData\Local\Roblox\4957272940\InstalledPlugins\0\settings.json
| MD5 | 9f01d936c6cbc93d4e4653fae2ace5c4 |
| SHA1 | a59a4b261452161c2da0ef40297fb12f361222f8 |
| SHA256 | 1b7268a919c9f8afcce829ebd4da5d0be1052dcf8f308068a306dc57fd083ccc |
| SHA512 | 104275e32e1a36c92b431d1efd2b6046db2b88a89f243091c03ebe57ced5c55b707fc829500b5989c2b4baee2d32a6bc05730a27ff203587a935096cb2682823 |
C:\Users\Admin\Documents\ROBLOX\AutoSaves\Place_AutoRecovery_0.rbxl.lock
| MD5 | c807af70310cb90ee310c3570c34c444 |
| SHA1 | abf844839abf933e7a08512e47bf98fb480507be |
| SHA256 | 332fd382b6c284ab627abc67f6e363c608ef63a39d163bab6dd6a876aa48af0b |
| SHA512 | 83f0b632974f806a2736945db6734c86ca44a70269270c94ea246b93df9d73a742bfd603beea632836b90fad4a5bb176406a90eef2032a4d2e216adccd856312 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\df1cec9820fae171e458e4888c366a41
| MD5 | 935351bc5ee4b788019a43fc2a9aea2f |
| SHA1 | 0c4e6c8cee65e27dddcbc29ef98b8a62475a2e90 |
| SHA256 | bc3af783dd7c014cd15c2f800831d9097aebf14a016d700f261b886696eb8b5d |
| SHA512 | 54485954648048c49e893c47c43e2743005d9677983a17e237ea617fbca8d7dc5b7f735b59d369c36f8d14f253619302b7690d36d08bf0f12b2e58b9e19229da |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\10c3f73b0a75d33066b20087b17f825d
| MD5 | 2547eebd01251747892620ae4f35d820 |
| SHA1 | 03d7b5dbcbfc89a1cb72711492e27a654b915351 |
| SHA256 | f7ba909c00c07d0d220fd835ad591ca70bde5c2d077486b53902e97154d4447c |
| SHA512 | dc2d2cd56bf1292e7c39ddf9908a49a26936069f176c0a93d23fa29e4adbabd29a6590c53465d41c929c34308559de1fbd609dd07bc65e2d784a248fe0c55eb7 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5f272e84ffef3619baa8c9cdc79b1fd5
| MD5 | 7610fa53f4f58ec68f415036b3b549dd |
| SHA1 | d1503796699ca5b03c88c52137a602935b10c7a8 |
| SHA256 | 613f0f48eae7bc07f60769f4b4fa57e8b872db25b1143af73b98f78b10626014 |
| SHA512 | 7ee4d323f6897c0f20ea0ee74d75e9ed938dcf5b7d29ee8e3b795053257e100337b88e9b2a2f2f636fda3e048e0d7e5f07483e7b1e06280677134dbeb0c04643 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\68312c1293d56a84822e44be313eddb5
| MD5 | 9aa01bd62181259727cea3d4cc622baa |
| SHA1 | 607e0b332a3a4784f183051ea434852f88b9ca36 |
| SHA256 | fc4b71913f0802823c6651545acbf8777a7614b4f2a6df1222d5543e294e49f8 |
| SHA512 | d7149e31d8028b1fafdd605dd00adf9469526e0a8bb3f10c055103a1ec23c57278ea1618b5a1cfd5ad6d2106d913ef614e4860cc5c6ef5f30316225c8f13e142 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\d9a2813835649f5ff174c9ddd6335614
| MD5 | 163f562628a1ba5b685257297fd4d5bf |
| SHA1 | 8e2cde7e7d8896ebcc0eb35af4cd5b3767bbcdd9 |
| SHA256 | 65774e65641c29ec6bfd28ad0631dc11ef4c24710a76f5841bf77b2f1fb4f608 |
| SHA512 | 6e703203dc159dc0130d5333fcf00971027d7af220ec41837de00476cb66637bf582c309a9439be45d7282f1fcb28b444a9bdd04f8e139e38848f74ff05d17bb |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\75a2c62544ce7f3171dee8a865faf88a
| MD5 | 6a4067b80cfdb59d7e4c055b9d22e191 |
| SHA1 | d70c6253637d9a5cc9c03a9bbd7df7b0477bd276 |
| SHA256 | 45a435ac0e5f5fdc9ce056222703246252b3782c37932ec972be40467296d119 |
| SHA512 | 24e0f7a6d400c3b374f2a0a5dab4bdb99b7b5f1611b3d8e71f8405726b2d3f7c38c3c9d2937541245c0cb758b44d9a5ebd743b0b7c4de510d0d80698f7f027e9 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\ee042923d3bc6cc28d8a2102e01cc238
| MD5 | 6a3f533d2a5579bd172a9291f86bd25d |
| SHA1 | a11fd51a436e1fed77e054c0bcd9d3782bb18023 |
| SHA256 | 0aacfb084b389b366a570c0e4317778f939f0a2fd526350848f7113ca158fde2 |
| SHA512 | 5298652f9a9c3948287585288de66945d11a54681126a22510b044475982d708e38b31229604c548e911e93941b4f235b0200df085ac61ee4bd1824bc0d7344c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\8d3f2e81a971c4052b93c2d423d622a2
| MD5 | 84327556065f035fa6be07538029e10e |
| SHA1 | c4d0848f3893fac51e689b51594e51a46644026f |
| SHA256 | 9c658179a292e9ea15163bc430f52937ac2111de2e754172f7761a4e5f24c8cc |
| SHA512 | 09655871d0655c89a8e2fc3c2c1ba849b44feb72d471ab4b87bd657888693a7d2dc915d72e284ba22e89ac5e77b23120f6879d22c6844e8a42c76134abea47f4 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\7d9efb12ec919f3eb2f808cb32975f40
| MD5 | 4fff08828956b61e31085861a87f402e |
| SHA1 | 6cb5cb22727d22150ab12fb82410baa46b09af79 |
| SHA256 | a21a4b8b0258193b192212d60303cc42e6e7582b9ef6a33df08800aa0414d913 |
| SHA512 | 30491e700b78670145936f486fa3bd26c7724f0a8b91a3f2a419158faf02a76a51bccc3b0068a636b3f5f0c90f6c22c5650ffad20bef1970d06fadbaadff1ad2 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\d57516c06c5874347e36a29e3c95d715
| MD5 | ccdcd52b4291e1df12a5f255abe59f27 |
| SHA1 | 9a2ab3b989657d81a926ba848e02a8e74411ff60 |
| SHA256 | d06dffdbbbf96af701f2ddbc5ab1aa387b88a967257485d952d91e27a288cd28 |
| SHA512 | 4ff4044a1f25297ba175150e195a95872e1f3729576b3fae06d575407c3759cca259318cf336004709d5d89333f6d4bf3f2fab5ad69ef66a9a61ce504228d802 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\2d3b105b9e066bf39ed6aa9a3c989dad
| MD5 | b73a97efdb020693cbf55077ecd464d3 |
| SHA1 | ffcd7a7bad5416b2a8a430293a778153033db039 |
| SHA256 | 0217ae6cbba327a5817e7c1fc1972aa2911b3a61b79ef621bd031f3fd3aae686 |
| SHA512 | fddf4e05cf986086c44c41af963b52352f9ab5cb16757ce973dc73fae309b1eaff2f1e0cc27c0f3f8577db8c9ada21d94048b391c8224d6a26f67cf0ecfc02b1 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\697d9cbd90ed4adde7e3dd205d34cb0f
| MD5 | bd59c7c649aececc81ef96c24b801759 |
| SHA1 | a5d3146d1045e7455612d97dd275da1a68e268fa |
| SHA256 | f319533f859603376c8aab95f73f43f1e08a98461d05450266d0ce783245af7f |
| SHA512 | 7c32f0e42a9b787ab63cdeac0df60e74d9050d06bc9b09550d1a794209b8b9f3de2cc932ce890335a20e2ba1a72ff1ef86614d13d5ce88f8b3b15b4abba3e577 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\51bc3b232aac328005590ff244c7e78d
| MD5 | 94348cf359d6a9ec649297644d6cbdf5 |
| SHA1 | d86119ab126464a2329a4cca42c87f06bbb86c07 |
| SHA256 | 2be1ecd258a12be3058978efc36d5f1e58fe7cf3ec87212d9933fbf5151908d6 |
| SHA512 | 1bcb3979a078ae856c0a9752915c1e76562101a654b38d3e6f9fe3823456e94d1ab3c67c0682bac3e7055b80285c512f0e320b081127f634797563b992b4c1ba |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\2eb4a88240215df0484eea72c68462bc
| MD5 | ab5bce7905a44261533cc21a08812ebf |
| SHA1 | 4079dae676a4535e249bebf55a81f86c39c10fa6 |
| SHA256 | 2b8feb57938ac3b3b524bcf1ae6b76ecd412a8aaf21bff4bc0779a2277299d2e |
| SHA512 | 41541b0faefb27bd52106c2a20d62a07d88f2a1dae0401f730fc3160a6d852dfc19801fe5fae1061d82798b08bea23cc838468fd5628d9c5afebd20b0b3b84f6 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\be84133a4c07a764d50c8394ae140e46
| MD5 | 3e3db9441682aaa1091181bf1be0a39a |
| SHA1 | bd0a2b589a5b945437cf776cbf2fc68c9330b967 |
| SHA256 | 6c0c718649244f8eca979714d8caac60bd7c83c849b78c04f7bb2da8a181be99 |
| SHA512 | e01e864f5b21d45cb7c060cd082b1be0383595820ea8d79f190df0af63f503496774c2bbe427620e9390d32233de906f36c96e13e71bc89fb174c61c707d0621 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0eb49ebdea442cd79f343d8d7013666a
| MD5 | e5fdb1c6371bf4a5039bf3efcbcdfbef |
| SHA1 | 8e0115df44168d7ec7478063c60d39f5e3c8b260 |
| SHA256 | 506eae1bcf91781a57cf48f3588ddcffbe05369e38ed72801d94fefa4d855d83 |
| SHA512 | 893eb14c26c2e4b49a11faf96557cf1138708ac34d71d6d3b2f7fdfd4abbd1140aca931c6d252973f2a05b729e5699fc2154d83b197bf09ed6e43f46c0ab70ce |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\668217d91a1caafacf79244ea0cd72a0
| MD5 | 5c88b364bf41f7d181e8e6b657e751a6 |
| SHA1 | 07362d0e6650bb0ed9399d59c1f088b96a299029 |
| SHA256 | 06c34491e907fc9febdafcdb167cfe3d2b7f4b06a3cd0cc3c33a661be7ca62a2 |
| SHA512 | 10c084648ba96f9fc72c4ade772edb56ae644162ba4f38de1e75c666c61c1744d92af6eaa92dfbea2dfe3b8aa88e30c97a0faab7e70ec568c89a5fd2e69b7f5d |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\8e5bb86804e34844f22d2e000443f0cd
| MD5 | 2060250aee572bb7b21d5e634f7f4543 |
| SHA1 | d707d5c9d97427bf32b0488f6a41fd594bbae312 |
| SHA256 | db03067f067298c404d918a9bdc7e8a3add88983179a35a5512b6c17f302a8a8 |
| SHA512 | 375f9594ca5135571bf930da7587cfe807d3d480461e7f0489f77bf8e10b59d7da77b152d1a61201651e6d51622af1af857ce0e20e3987373b538e56420f8793 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\08746cd350b650930fa07d6c3e5bab4b
| MD5 | e93d596e138a83806cced33befcae89c |
| SHA1 | caba3c331c62856c2df03327ae6b0bd28fa16cef |
| SHA256 | 088ef27e86692379d8705e32a59606eec53ce0c01fee187cf3eb914271f5ee45 |
| SHA512 | a02b07f2985b27ece94eef12f525b1f348b9fa18f24c71961d35130aaa91ab32d07a52c6c83512a4df06a1cac739be0e5c65857d917ba697ecf584eb3942e730 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\ca2064275888a8463e096ca77bba6f71
| MD5 | 7ffda0a1a9d979063b93c105db224f9b |
| SHA1 | 93b7ce9a9882c7df47e6d74740ab1fc94e2fe975 |
| SHA256 | 2e68b93a10d470b7fcc7316ae6b041c260dfa3eb5dd131eb031a77b23ecfb305 |
| SHA512 | 2bc86ab559c69aa2823fcd68bb7ac7243832830bce3ea42bbaf11a896c849fc1b18758e92a50529aabd4aea23cd28028c76cd98e90f28c37c010705297fd8794 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\f46682265e3ba63e73dc3ae735ca03b7
| MD5 | 57312501ecee2b176bc7dd8f6bd53cc5 |
| SHA1 | 4e86dc68f0516e33d95ccd1fd248761acf67ef68 |
| SHA256 | a1edb6b8512f323b8f3a3bcd45a19623aa70c13a168d5dc4517dbeeb4552bfea |
| SHA512 | 9fe7278a4bee107f83d3afdae17ba635e174ec9cfc02743ba77253ef2ac15e7c72d66f80718cdc983efbdc9000a088aecde0ae7a8e652c58b312b0e3ad7389b2 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\812c3c5d65ef594641be9d8388fa044b
| MD5 | fdad40863f6783ca2efaddc8d618f482 |
| SHA1 | a1f4117f4f7e07a31cfefc827f6af9a9bef32766 |
| SHA256 | e072f03c818a5a191805f3bf9939c3da70deeb523f4b6c9c46a2ead7170cd233 |
| SHA512 | 002f5ac5bc2922e9e7271d659a2894f133a1bf06d5e816d7ee262262da8356e3317cbd25e463ae01932ad9e1bf1260b4e6004dfdcbe34aefd7a7dfd19170eda0 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\385bd488c17f95fd734aec062d64b7f6
| MD5 | 604d21c0e8ed5fb7bf0d236483469ed3 |
| SHA1 | 8eabb684c495f98d6595a59d0ce77046ef98c640 |
| SHA256 | c6549f53eef8c6770b3b45b54c3392f51a7d20527d83e4872023175de2911c54 |
| SHA512 | 70722b5bd001dc77e686fb53b563dbef6d98d0196e46c63dca63927060ff5062a8ff1ee64c12043c157226d1b8e25d0205a2405aaeab3fd298d888b67a671bde |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\a9319eaaa1c47e2060d3401f99cc5812
| MD5 | 4cf29ade36c1f3c6761cfe77661da34b |
| SHA1 | 5e23f78a71ee0cfbacecc80dcf520113356ec79d |
| SHA256 | 1138d33f8057141ad008d36c07adb3c6dc3dede2fb5d22fb4cf14d3e5c19d82a |
| SHA512 | 19c22f8f7b86d9242dd59c5b7777cfbd62beacdddb007a1da58ed8b3b3a9a1b1e57fa692bea2156ae21c36a9ada5e74e2e200a6cbfa7e1e34a149127c14e949e |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\3e658d9a1b0d687d1e2827ada95d1282
| MD5 | 1b6df4182b2f59bf24283425e10fcee3 |
| SHA1 | 899fb55f1ff7ae644da60b1d9c69af271fcdf74b |
| SHA256 | 204d54cfdce012d2080ca513f1829a5c0b383e90b329bb1ada61c850e061f0ad |
| SHA512 | 6560bdc5fca90854ed8df3aaa0988a0b723752a89c4c0e4b3795028f6f0b87b39cb1e159ecf0d02a938bce73b3ea39ba269e5973663ab7ea81d642e0855ccd90 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b2fbcee5c6e19fd9eaf62aa228b2ce34
| MD5 | 4ae0671aaca2e3746215f6d7e7e467df |
| SHA1 | 75143b926d9d188873100f434d408ba116d62b38 |
| SHA256 | ce89c906adff0282f8e37af289de2644474eca1f4ba287eced0e9b8761db2514 |
| SHA512 | 765774c4d6cd0ae7d27d105b3c30516ac367021dfef190a78d0723c76bf778bc5001689d3b84b7c52d065e549586a4042f4ef42a7e76d0f679f9d48e1d121cd6 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\adacbfdfe30534f13d9b7c707c7a2ea7
| MD5 | d72dc9032b98331002d8bee7bae0966a |
| SHA1 | bcc8ac36abbac92434a4c06f9ea2a08a967bbcbd |
| SHA256 | 153d4b043899a2a375819ba3e33f2c1ff71b61a69ae52233ed224306c5be42fd |
| SHA512 | 18cdf782ac1ff74274af4867db94df3baea87a4290ae1c6ee1674ea125c45273f09d308e0934b6651fe4ce80928edb465c1120d9bb4396e8eb2b76ce3cc047f0 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5eb65bbd0c13b69e572654ac58de6a1d
| MD5 | f3fed0fecac102d0a7e909d9d57a67c9 |
| SHA1 | 46df5770221487fea3c290742aa990ebfa38f6e3 |
| SHA256 | ff91c8625e2868a06c74ec208c299504877a5dc40a717779f0956c4749da3773 |
| SHA512 | f6c1dff4cc041ca6b5ebe590988593c2bfc38647c6ddaa48f8c8aa0894ca4cf3eceaa6f2354755f983fa2b9c06d8468526f5c3d1280c45cc4753c86cc47c95bd |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\397d69adf7e99bb671075432af507ad1
| MD5 | 68c469d960b790a49dda454113bcaae5 |
| SHA1 | bab37293d1d66542c6952857be853b20f60c9e56 |
| SHA256 | 30dae3e8a2bb3ac855d0144209300027300500c77aab5ec55239363dc912165c |
| SHA512 | bbc65ba3786eb1f34a035c4df2c1e358912772f9494ab4d5cc1be1a58bdcd9865356ff9cb32221d8b77c473013129ed9a67c7400453b58d1f2dbd9b0c5b7b62c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\805be2c2f67ac908d72bc3231f51f068
| MD5 | 65367e1d4ca3cd0eae2a0bcb311da20b |
| SHA1 | b51ed8e5f635edc1342d1360e5914580d3fda565 |
| SHA256 | fb653e1ddaed8223dd094f364932aad0dc00d623912d5e52ca8c027f4322482d |
| SHA512 | 6778df23d757b6a47bcf73feb65a50a0bf737cf254ab4855b748c38bbffecebc3570b18985228af203e2062873de77039da6e5a9df027a1980982896ee7ec38b |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b9b8330fbe1e9c0ed3747d27e31e2960
| MD5 | 17c711d45120a88702d7ca183f5aae43 |
| SHA1 | d37de8052e969152b2a2300a8326aa67374db713 |
| SHA256 | 46f995734288901f4695267c5034f713224a0044ad300ab2666d318c81ab4183 |
| SHA512 | 1d939cd7c9d3be69c659c8bc556da72c3d1c82cb3094593b305ebb62e32b7bd20f820f6cf2539b217b7c0aee417adbd0b29ac2bbdbf4996a3ce1932af98571f5 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\cbac17ba4527dbda3ca04a878619482f
| MD5 | 82a78dd3b592130c0a6c87881c927e05 |
| SHA1 | 977a4566c3ddc575c8c372fe5a15e0f99cf1e845 |
| SHA256 | 8a75d523164d1fcb35c4f43c2ea260add36f1bb32340de6c7fe68424082aeb90 |
| SHA512 | 26d5fd182f54b09eb07107e5a550582d7e866dfa2f7efa319728ca07fca2d3d08a6847d6ebe63c60b69270ffb0526e030870815240a065952f8b932771e268ae |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\9c63d0c53a67de4dbc2e64e9d7e33b39
| MD5 | b6cc975ebc9919c9d1bf35ae4d1141ad |
| SHA1 | 16a39518f1ea5ba6cef973b01a38c8fe1c8e47a3 |
| SHA256 | c4efd0b8bebd49e7ac0aa361e35ad7f16c946bac333c40b354ed524afe034fe1 |
| SHA512 | 352053b82b44af9719d1fde73e26dada17861a26b65408f5b2f96054ddfd71165cc5e0c7b8c596ed7aa5023a275165ef1e0686f4250173a7201aba63e2ad717b |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\49de801ce52b89762777ed3f5227811f
| MD5 | 74817744f4a0596c38c4052fa61cb3d2 |
| SHA1 | 0bf411f16b430439db263dd5c5cc629cdd948280 |
| SHA256 | 60108b041016eacc1ac4153e520de8258bb1a4e0c4b9c361033b7243a4e5797f |
| SHA512 | 86d64da87ac5b87d9bb41b5b313300be32fb2415123e4f67dce74d46770435c801a7843f89a3cda7c8cf8e9eb6998a722204656ddb1d2709f5ad0d57ee169d81 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\f30d6137ea6e1733c39d8d4af2fc2cae
| MD5 | b1e54bb72d9aa032b3ae3ef111ab1cdd |
| SHA1 | 0ada564edcfa29d8130f3032a4cda3cc50adc389 |
| SHA256 | d20f7f94de8712f7156955e4607657a19c275b8a4a8354032e59fac902787fcd |
| SHA512 | 57cf08395ac5fa6e8ddd5e13ef11a2d0272f9aa0f68cd536603ca6f79df959721d58a3bc4c22da4a951843f9cfd40c62e4640255c9f8f3841b75becb76e9623c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\3dfac88f838fa98fa32cc014787adbc3
| MD5 | ccb3993e279032c22828bf261a5c97e2 |
| SHA1 | ac6c958be05d32fdd34094f3146eee78ddf3997d |
| SHA256 | 80bc22c4db25eb4696a5c695156100ad55be959c69fc51f389d1b9ad99164f35 |
| SHA512 | 7c023f3538c5f71e581dae2d5c2db024917b2df1426bf78e83c065fbb91cb5c412ae8dacad9b33d5db55886b443b7153fd8624513e30fb9a8717c902ea609d2c |
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{1E57E1A8-8BB9-40AA-B7BA-E7E5603F00F1}\EDGEMITMP_48694.tmp\SETUP.EX_
| MD5 | 2415cb112f130a1382726afa58a0933e |
| SHA1 | 74ac041e6dc607e476dfeaff2d2bbf2b5c004b5c |
| SHA256 | 85679b3b17d42aa988b5c753b9cffe457c063d5186a94203b5e584f4156f2179 |
| SHA512 | a334cba72cb6ae4c4706ef3954e98771c4502ae5ee66d7b2d2dca759ac75890efe5a7fea46818760589a66f425a4bc9d463512bf359723685eba86ba4c1edd99 |
C:\Users\Admin\AppData\Local\Roblox\4957272940\InstalledPlugins\0\settings.json
| MD5 | 3de5af300354f68f48a92796070e0ba9 |
| SHA1 | fa8bd111fbc6b0cc3b6b76051bcbd377d556441e |
| SHA256 | ba857cbb36deaabf7e0f01a64f819f3a66f679672446168e67dde182243d63eb |
| SHA512 | d9bb0920558135115fceb82fe29c5b91c63f7207ee2491a19d19380fec1a83c9ff5c2f8d0bd905e522c04419d928d0c6121c33a4faa1a6bda5f26f8ba050d67c |
C:\Users\Admin\AppData\Local\Roblox\4957272940\InstalledPlugins\0\settings.json
| MD5 | 090cfce88410397f41083544442fa12f |
| SHA1 | a7cb128ede91cd0ac1b276573f8f365f47c483e7 |
| SHA256 | 82eaa8410247e693caaf7a8472e820061e9d3cf7614380646be139aed89856be |
| SHA512 | dde267802baaee29fe0d163a187fac825bd572251663b975cb53a727b4bb11735d47ed8145cb47a41f69e7dd6610d35e760e4164a486bf831dea0da0436e7359 |
C:\Users\Admin\AppData\Local\Roblox\4957272940\InstalledPlugins\0\settings.json
| MD5 | 8c2737f3625bf98c76fc544311cd2961 |
| SHA1 | ed3fc6b805e3e50b4909afb40d01350d29591582 |
| SHA256 | e0d1e631eaa6066818aab01f15ab2dd332f16f6d2e531a71c6c9867756feaca4 |
| SHA512 | 6b3f315acdd0a7cdba3f9208ddb50841a63dee27d6b00ad3060f64606fd352cbafc8d5f9f60fda6854c0c30045f4bebd4820135f4c1895ebd81a1d6aa60fc648 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b2df69703446eb692da2f898b3c48acb
| MD5 | 2c670c00848a1a152efc0d65be9eae9c |
| SHA1 | 3f862566ee4d83fd8641317e171f2542078708bb |
| SHA256 | a743441a54ea778361e9592773c944bb3301978946268dfa29512285ede756b7 |
| SHA512 | 8fa6adacb5371e9e583c429a0656d43d77427a8d118ae956d645ea78266d8ebd00b2e9891526ba9336b6b9fba83fc497d6c5079c188ab87f361f6dddb78e1d0a |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\2a88cec86c7026f64798b15b2384c49f
| MD5 | 72e8c3b5135ad9010a208a9424363ef9 |
| SHA1 | bbcb57a914f7e7a10d6161837a415e0ef8ee28c6 |
| SHA256 | ac968935212b99d82b42b4714b27718266cfa45fc66c5e22689021886cbf0008 |
| SHA512 | 3a0f590992f1ab1ac80d0cc1fc8dff1f0827d1cbdcc92eac91b8949994e7b82beed25d129eab3b490b658760bd0258e77324d251cafbe87ae9718c9ae99a2554 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\970e89c5adacb2361e95f6ff96d2d6d6
| MD5 | 15f2fa148bc7ea9550a8aaf77e428c0d |
| SHA1 | abfa8d0bde20f2b05fcef9ecbb6a66209b1897ae |
| SHA256 | 6c3ba9082c110a3f55a94ccc281100694cbeaae4623f94c42cf6e1446b79f00c |
| SHA512 | b006ddcc27a48cf6b5da235f2e867eb90b6aaa5feefdc4d001558ed6ac2490eb8513fecab83bea0aa9690080e06cf28711a10e19bf404d32101c071b27a5df63 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\18feb32a57efdfc03c16870f78af82e3
| MD5 | 8d4d1373e3341ac36d491fe3b99227ff |
| SHA1 | 1915e273213cd2f3f16cf3a6d10089fb1e7e7765 |
| SHA256 | 791c5e7f5de6a235d1570f23532df74e10d78cc3b0120bd3e6f289b47533fac6 |
| SHA512 | 7a414914fd7c2828ce79f699115857da75918060537634161b6a2a50bf98785faa04f6e3b933a61808c6ad8a38dd0d10ade9a42d523811951fb26818d3424c61 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\8664925e55f0fe4da66660353fb87e38
| MD5 | e9b1a938d1cde4be24cae027c65e22ce |
| SHA1 | 33d81d803d8c3313de5fd959bf7466f29dd430a6 |
| SHA256 | 33144e2ddc6f54f73b15a16fe2c3462c66d9ec84d7962f78708d6f9c9eaa6e29 |
| SHA512 | f7fb903bd5d0984fb9653894cc0abfdb83c2cff96cb2ecc5ecb39c700f6a08077143ecf2ea10357e46c38e1fbdb2d06332cd5a9855938702de0432bb419da7b9 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\828b69a61285e07a18b953fd0b9a224c
| MD5 | 3f7024eedc7ce19aa5873a28998c289d |
| SHA1 | b02ec3378d0f4444e0cc97135e915574d3e5d90d |
| SHA256 | cab5dec69d7d9c8bc497117c2c420d2e7f086172b82633a9776e703f0d13074b |
| SHA512 | 6aa45b44e1916105159b7c322d70eeb034a38edd0340350a9c7687b3f3d5cfe494784d4130d63ac2a3b1f08d90f8bd7d4a74256e55283eb54e9266e42066fec4 |
C:\Users\Admin\AppData\Local\Roblox\4957272940\InstalledPlugins\0\settings.json
| MD5 | 42722667c8f0433a86bb659e11056585 |
| SHA1 | 055b5ad483c19e3d7609a61bc86040cdfb8ac4b6 |
| SHA256 | e1c00ec01313291b60d843108fcf10a2ab2547a498fdc89d4425b310cf58fefb |
| SHA512 | b0f75b55584a7078fbad8dafa7a94f18d74d557e8607b84d677f18de4b32d01a7b572cc830ef6bf3ddd5b2faa04159463c9b5aacdd144553ad9a25a534db8a1a |
C:\Users\Admin\AppData\Local\Roblox\4957272940\InstalledPlugins\0\settings.json
| MD5 | 3edc073d6e6bb90155fc4b04682933c1 |
| SHA1 | b0f34a83a38ade0f79b00c6a60a71592dfd7dab1 |
| SHA256 | 40c3ea937a539a1bd69980378a359fe4f771d47eb86b0cd818eefe502196c0a8 |
| SHA512 | 745a16908d89507aefe6ac9d60da88b6a35fddb329274fb2a52cc10292d658d11400e836ae8c5b607400c9afd19afde3dfcaeccc68d422c26ad652e779b52881 |
C:\Users\Admin\Documents\ROBLOX\AutoSaves\Place_AutoRecovery_0_AutoRecovery_haYoTK.rbxl
| MD5 | 99d87ce2bc76fc85a569cbc34927def7 |
| SHA1 | b9a85cd4ac889497de0d8ea779ebb9a4022e753b |
| SHA256 | 755cf9f5084939103c5182a7e07f15e29a39882ad04e3d174cdf0ab6c7b82414 |
| SHA512 | ac20203040099b22ad069faf0659555d161720cd7c2f1cf7c4d7972dfab302f3ba455d2c67c628be5629cd306a585b5454805102d66a2b079085ad0045c226da |
memory/4336-7420-0x000001E520940000-0x000001E520950000-memory.dmp
memory/4336-7813-0x000001E520940000-0x000001E520950000-memory.dmp
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | c61f88e5b21c11d7a5943b6d77160422 |
| SHA1 | 4aae79ca22b152b3c533a21ab964f36b86c76c0a |
| SHA256 | 4568551875a7dfbad65470242a5a2180622d3b35ecebd5149248da0106714591 |
| SHA512 | 605d16d0645da756e81c0dd335fed60c2349bec7e6bb03bdabd0bacdd69cdb3ba31c4c6196fe0650f8eac9d2e574dc97bfb3b0460138349bf9e87cfeee5f3bcf |
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
| MD5 | 54ef6c31cab3881f4b1b8d37ff6203f8 |
| SHA1 | a132cff93d11b0a0b33bb4b3cd0d4d38d4822055 |
| SHA256 | 3c5488b452b0ca6c913987ecffbf93edc67a5758c74cd42b7c5c8890a2436972 |
| SHA512 | 72cedad25fc59ed0ee33949dd53ef04005cf479e9ec20e3a31ae4803ff9431ce2797f51e690b06e84e81283f8b6f9182f04149668a7822276801def7ab03b8e4 |
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
| MD5 | bb0c227c078c8ddc337b5a4eff22fe89 |
| SHA1 | 3a81996e173c3beb60e7125df40d163e6f64fe45 |
| SHA256 | 44cb70d9892f0b4e367360b054d850d93cb2f6950d993fcc2f70c9182d766eed |
| SHA512 | c28920c5c0bd21e15afca7c1cea40cdfe836b3b4a7f996957911fd621d773412573c8a9762526bff62d539af820061c4aefa489e568a2a17909052c2468892ec |
C:\Users\Admin\AppData\Local\Roblox\4957272940\InstalledPlugins\0\settings.json
| MD5 | 8eb446e529887187d658d7df123a318b |
| SHA1 | dfdefaf85b46c186596d23f8860f44ddd1da07b6 |
| SHA256 | 46b62a8dbd669cc3b43425dc12355d92714d972d8edcc1568c1d8d190ffcde0b |
| SHA512 | 8e3019d84dddc13b890fb770cc54f7153da9b0aa69c7fe9d317e93b9adae029c9d1252e8ad7ec3b1e2d105948465c363697d7a24fcf227df057325d45ab3565a |
C:\Users\Admin\AppData\Local\Roblox\placeIDEState\placeIDEState_17144245639_DebuggerData.xml
| MD5 | cd0f3ddac5434868dd098599ac017cc5 |
| SHA1 | 33c095040b0528b3d59e2ebf69f1f0dbd9e6db50 |
| SHA256 | 0f509d82cdaad6c918a7c0d346c604e11eb96ec28be4ea38fa7fa67b9d50e32f |
| SHA512 | ef1a4d870a322afb2dfe19eb6c1c3bfbde17737d809d3f29d7a2b06084d6e12679a0c4e91385ed47b2dd396a8782666480eee905d5dcbfdd42f5c4338ce0841b |
C:\Users\Admin\AppData\Local\Roblox\placeIDEState\placeIDEState1318587694.xml
| MD5 | a4218883a9b554e5c59991e2df8b85d9 |
| SHA1 | b11dbb9f7f2af8e8923696bd17f96acf09a396e0 |
| SHA256 | 855f00971a3740d0f44169ae1b7dd56029bd232d8f8d86695374921949101df3 |
| SHA512 | 825293eedfcb6adaf7f84f7e647b5eaa8ab5aba1c5b9c2c2d1e39a0070de68a761d16debf1eff2bf6bd9f701b6ab629791d934d51fe605e71474cbd7f0ac9fda |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005
| MD5 | aac57f6f587f163486628b8860aa3637 |
| SHA1 | b1b51e14672caae2361f0e2c54b72d1107cfce54 |
| SHA256 | 0cda72f2d9b6f196897f58d5de1fe1b43424ce55701eac625e591a0fd4ce7486 |
| SHA512 | 0622796aab85764434e30cbe78b4e80e129443744dd13bc376f7a124ed04863c86bb1dcd5222bb1814f6599accbd45c9ee2b983da6c461b68670ae59141a6c1a |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004
| MD5 | 1548c5f675f1d1fb0e51d7c1f506aa78 |
| SHA1 | 4170f4215c2c9ea4eadcf3770dac2ced5e11f413 |
| SHA256 | 2149403b038e0b92af4544cabd1b5b0cebe5b3caf3bfd17b0a4d8fe96fb3bc48 |
| SHA512 | b724040d3d6228f9b08c3f4a94148585ce385ee25af0eb83ccb78edbaaaf4efb94a81e19e27770adc5f34f34a8fd5ef90234e02f25d773aa09b4fd3f13c2664e |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006
| MD5 | d6b36c7d4b06f140f860ddc91a4c659c |
| SHA1 | ccf16571637b8d3e4c9423688c5bd06167bfb9e9 |
| SHA256 | 34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92 |
| SHA512 | 2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008
| MD5 | 56d57bc655526551f217536f19195495 |
| SHA1 | 28b430886d1220855a805d78dc5d6414aeee6995 |
| SHA256 | f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4 |
| SHA512 | 7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007
| MD5 | 2e86a72f4e82614cd4842950d2e0a716 |
| SHA1 | d7b4ee0c9af735d098bff474632fc2c0113e0b9c |
| SHA256 | c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f |
| SHA512 | 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a
| MD5 | b38fbbd0b5c8e8b4452b33d6f85df7dc |
| SHA1 | 386ba241790252df01a6a028b3238de2f995a559 |
| SHA256 | b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd |
| SHA512 | 546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b
| MD5 | 1f557ae943b3a1e823b56cf9d410e7c3 |
| SHA1 | 1340fc7fa2cf9fade7bebcc8b4dc62a1686aad54 |
| SHA256 | 40f47bca0281df7ada22465ba6c706a9ccf9580288915aad5d42c2949521a7bb |
| SHA512 | 32d8f83a30ed7179a74ebc7bdcd454d2f5895592f078910564c8bf40490d92c24a836f50b359345cdf4f0288f9a922b0185beeccbc4007205ba50f585de20169 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 27becf867b5530c0f5426413448a5cb8 |
| SHA1 | c21ac75e0b683fc8df68d58b8d9c8b5251b23178 |
| SHA256 | 8f2d614d81c198359c5452e9e58ea49a06e4c1eeb66a7b4fc025a7aae51a94c9 |
| SHA512 | 1e45985b121349c8b75b3afd20f1299f918d80d610881fd99bba7b5a8d243b6348fffbeb5e257a9314943ef587ea9ef3043879d4d57fb787f50f741a54e3a9c1 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018
| MD5 | 9026c1a039bfb1796b34eeb74a8a716a |
| SHA1 | 0fff9a37ca34aa4811e4e48f4022f1e3bb5f95d0 |
| SHA256 | 4a3b444e966106bf9551108f259d543858a36d28acd8d2dd2f38e522ec922cca |
| SHA512 | 51704c92f1a4fdb55604faabae333157526fb93f3b669aeccdd04a9f728122cf81bc2c8ee0df2efa23661666a697e8f4daa491b25a64282aaf68a4420d341da8 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 0a067f683ece206f650914838263224a |
| SHA1 | 203a31fb20fc08f16b837d5c1cf1f04fc1786280 |
| SHA256 | 83297ad07ded521827fa2c9cc0fe4a8feb10eccd84e498376f8c368f37768790 |
| SHA512 | 73551d56919251a0bae0c37077d3d5cca3fe1e40fdeda587c1c443606e497f6bda67bb723a4dc2f73be92616b06555c31b780d2fcfd8215b61fd1c9d6eb4b081 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000032
| MD5 | 38e00f7de6f417aa3a458560a15e2b8a |
| SHA1 | b451a3a2ab0b04170804d6cf823c6465f33f6f44 |
| SHA256 | cafe3fe334035fb21ebef6484cfbe1efa85c46f02113c57f8047c875fb9928c5 |
| SHA512 | 659f0a9a53e98b2e5dd3256c55b96e5cff82f6b323edd5f92f8eb9897e1376329454734c6c799963ae392833d948eac84fb9b483a5a099c9ab942990a18e7f91 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d
| MD5 | 793b639f0483074bf878fcf19c131678 |
| SHA1 | b1a2ef0fd4d7944a9519e54e3201a05c62c90415 |
| SHA256 | b214fce2614aec5046a24ad48e5023ae8d29fda0d8c510f6dfa116f684566869 |
| SHA512 | 1aa25f77f1075f79f9d188ee9bb4a5569db406f2cbde550c7eb6c3377d3bbea5cfe86f1328248f8772020a90093c133de90c09cd2e50048fe2d400e807526238 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 845ec16cc9d13b402ded9d7b9e05c032 |
| SHA1 | bbb28dc1e2377ccc0d4c0c282b302a17f3b8200d |
| SHA256 | 151ef4c15c0d8f351f8d422c659576e2991ec52fd7d37b683f04c6c0476be6d2 |
| SHA512 | c06aa0b38c50040400052c9e4bf5291932e03c2f9c1a59867c2c6c942199c3c091f9ee59094adc8c1bae78944c082e64f5b30d66e865bc5b6ce67b3d00787167 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | fb84b25117bc0a545001c496ef61c427 |
| SHA1 | 8db1e895662719367c7025fa810e2795fe94e24a |
| SHA256 | 996f4323b6b6b926401202c9f705e1a468d3f30a8f681b028e57a49f2f27f7ed |
| SHA512 | cc648ac2f28c67020876a876d083e1e5182e0c0e493ecfb4da3bab4fd0b2dbf9d79dbec905e602aa6f24e6d616bbe5b1ccc988f11bb62f9c91200f7d190cb765 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | b9fa77c1c7838dbd27cc05bbbd23e937 |
| SHA1 | 96871ac4b168dfd6c1ff02fd5b1946dcf9f168bd |
| SHA256 | 643907365b435edae4cf51458aa1e295b1ac544a34d309efc4d0309676af852b |
| SHA512 | 9d625b5485e7a6f1b6c5a8ab95f583b7280d8d1a655fa0c585283dba2bd3aa7d60348dce5dce896465d918ed7c7513cbc6a3dcaf974c61ba5c62a9f58538e2cb |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | 13c23f51b91e637023ec210d0fbf70da |
| SHA1 | e05060d48ab0cb2b8f832a66a6bb7dbe59a45e75 |
| SHA256 | 96c0a0bf1dfc0ad2747f43551ecd111ed378b37b051aa2e68f31a5376eac6a46 |
| SHA512 | 7ffa1d1e69daa8743f9d66493fe28a20b1f0e07a6d06fdee4b5ae2b04555a537b857e84a6e4db5bf4da6d0bb2543e855111a67c4e485165fa8dd23fe1c65aa8f |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 31bc9a1334175f5596716bc7e02d2a8f |
| SHA1 | 61307ee6e74b6fafc61dc86ab49d3929ce6f1441 |
| SHA256 | 558bf1aaacacd47b7405725963ffb792f3a1ba0080dda2b637c7482b62ea0723 |
| SHA512 | 62e0f0f399636c679e89d217527567e6f52077aa46792ee358cd7ea4099948d9781dc352a8e1d7b0dcd674f5080d0eff83876d993441c3128b66796c097cc4ac |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 4bfe68503d3cc25602048da03f5bc7cb |
| SHA1 | 4fa155139d54f47dc2e55d34c8be7eaca11226f6 |
| SHA256 | b382531860e114e8da483beafe130b6a15cfb654fc93387bc93f6c08202c7625 |
| SHA512 | 6687d716e4d20e2ea05d7f46894d6f23c2963753587924a02592f0576f57b777740ec285c840fc5106b38565793bf03617c70d2c3eabc6b161192e6cdd28b1b1 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 237c5a69f1f79bc265ae76019fc4d018 |
| SHA1 | 2198e18e667c00a8d9d646b9c5d99db93b73c46d |
| SHA256 | 8be8b8395a9b5f8374849455fa775b52e025d5c73563f9bc7ddad3b5fcda83c8 |
| SHA512 | 465f63f08f888ed05cc0123d51b1b0351db38e1238566f17ca241535d62400fcef5cee8fe08332efc61dc5129d433f919ac36d63ce221871c974d65b04972d1a |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 7b999fcd474b29ba2530a6d5ea757438 |
| SHA1 | b328bb5fb0b96e22b0caef5f474bb934e7fd8873 |
| SHA256 | f0855a74fc2cd09681ad3cd6d8925bb9f11a2d6d2efbf8a3ebbb17883e6a2074 |
| SHA512 | 69aa13d511b216cd4a96ca915999ca07837eb4358aedfeb0ec882f5d5847073d42743eec1e648fbe88a75f3b495c29ac3a153ab1f7d4cd99e195e654fa95ae80 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 95014b183492064f1770b2c36bb276bf |
| SHA1 | e80922e2e55b3025bd6803b4865bd7843f5ab9dd |
| SHA256 | 3ce3ebed617bfe2e8ee30585f4dc57ae39e72d37033b55b280b845931906736a |
| SHA512 | 74ea0b838bf0fab64f3f2861790093789851a3688cd9a3c3cb68e74a3f5c4961602cc53752e83f120997e05ff398b2c28f2028939a129570ebba2a2f9da54805 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | c87feb160f520792519a61e4586d73d4 |
| SHA1 | 5261e3dd736da31f466bd3e93413061d02e85192 |
| SHA256 | 8a241fc4faa234bee8540431d858cf0f00bdd9f3b9a35d1965a501dcfec9e89e |
| SHA512 | 14ce348f1d21cf49d81a2757e965a11d42d81aacfce5814a0bbb4b569a31b73b18fe18937a757f592351f5dec837a1370961462a6ff5553adb2b9af83fa60d3f |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | be8ccb74f1c271f5cfba43e2d373c0c8 |
| SHA1 | dbba61171ca3dc1ef680a7c6ba684a6b3012aa37 |
| SHA256 | b1f7eef67b6c7e4ccba89a4c0f5658b0ae95ee77eb8c50197d47f7ee07e6ee6c |
| SHA512 | b478c8d6a60dbe4c01c3357516609b35a851f42bbf52988eb80d626a2383c3bfc832767dcb246a6593001f60525cdb401b852c9e7c93ee39cdea4324f230ddf5 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001
| MD5 | 3fd11ff447c1ee23538dc4d9724427a3 |
| SHA1 | 1335e6f71cc4e3cf7025233523b4760f8893e9c9 |
| SHA256 | 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed |
| SHA512 | 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003d
| MD5 | 0acd8ff34f3a5c177d02e9011ee74eb3 |
| SHA1 | 7985774d3676c27586c71bbf28b1f53598951a05 |
| SHA256 | ecc55e4682a2b83956e183e86dc4d475e91bf192ea71faab52a8ed8cde83a3a3 |
| SHA512 | bd5402b5214bbe9e499ec5cd9c6933592e1d3599ee80f72fd2ce2076fcd50dbc355cf3d58e923ae2400d09742768bbe9086c7cebc8d2560e741726bb37374ac2 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | f7cfe571aaf4d145727228d562608b2e |
| SHA1 | dcec6e797f1c84d69364e8653bfcd7e97721561b |
| SHA256 | e08836485fc0775aebe33f8ba3d2d061631bec7b2a0b3e6afd21b53ab9e3afe2 |
| SHA512 | f0e5c8d6330a79ca641ae5023e52b8b7cea390033c5e78b14ee757fa0126ca6ffb6ebb96a38edab43f2fd25cc117e13a0dc8a71dcea94ed75ef6ef94f1996f4c |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 9013560e7632a125e46d7e9c08031bcf |
| SHA1 | 778c0d25fe0d3cd9d19bbb06f3d577db8ae0ef36 |
| SHA256 | 0249cc7680cf559ac5ff3fd9693f8e2b4f6cef5f4fd997bfe7c8dca8dafd8fe5 |
| SHA512 | b3b391ee6ece7949b0584ace6f9b0f2f8d0d62d04a3e28c6bc9561ceb36a55faa9ba5dc60ca57373ad3b992979f0994ee19c8006cdf639dba5e3b0ea5ed6bfb1 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 971ba01770f113f900f29d8fca45c70a |
| SHA1 | 629361df12ca50847bf11d037ff8f4c316c79d7c |
| SHA256 | b88a58975a017372e181ebfde3df8b0be96b1ae699139ed5ffc7ff58a46b999c |
| SHA512 | f0eb0c61024cd8ce559b2b7c2c10f170f1f25c9b17cd8f76a41a9bcd4eb77dd5925ad65c71621bc224e957d11011c68d6f45125ee679d9711f1e579680a75967 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | 1e4014f4ff07604e7a7537a78da1c75a |
| SHA1 | 3c0d85d7d8b2555ffe997617c39aa15adc00db0c |
| SHA256 | 23a4fa57a6ea774997d69fb8500aff250ee512e81c10330c4011e9607d331fbe |
| SHA512 | 0ef0544f800913cb98835f7a88979d4603274b6a78f215db39c21631140c109d3df625d214eb700a8439c8256bd1f7ac31ac729f73fc56b658b2dfc359df68f3 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 27718040b640b272c06b40f6682246d7 |
| SHA1 | 721858b2307d37f6a5d9ed485a34973785ba189d |
| SHA256 | 47e18db3af7a1d044bd432b59307b54b941fb504dcb86576b0d3991cb80be87a |
| SHA512 | e2c22d21651c1b1ca27fc23bcdd6629660c434005800d54685869ea5f1ca995d2be195b555c96ef285a01b33a1541a60b8a0a08f4b78d82fce2fdd46f6a967a7 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | b89a4b1cf9d3842504c62b0966c99f78 |
| SHA1 | 7e75eacb25f585ef4908b556d26d2cfc58c6072a |
| SHA256 | e6959ebc857f798281d240b88508716ddcda4e0b27df23374263f77efdeb782e |
| SHA512 | 124a90e800759fd938cb72537fcbe17fa51eb40db728eee0fb354cd63df026c4379383b68c337f6d24536b2e7a0fb205b3bb17fcdc365278a0c902df912bf3dc |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 76bd44fe621e96dea8bcca557af7b1cc |
| SHA1 | 92c579f43ee8ac179ec89c1193881c95c265b605 |
| SHA256 | 806b1887b668e81b2992d17f975ad1a7b9e27a38d40458974846aa5b9e548ba2 |
| SHA512 | a66a46c5ff4f882f9403e0b6ece8bfba95e526f19eca6fb12df2caadd9b3380a20e0a571eb538e5edc0a263b1e53c46266a4a154471b4bfb6266e1a24bb177aa |
C:\Users\Admin\Downloads\Unconfirmed 282943.crdownload
| MD5 | 9fb66ffa1e1f4dedfd16eb3a8170bafd |
| SHA1 | 69b5d57ddda6b97adde820b9ceaddae9c33d53bd |
| SHA256 | 7953b28b736795aaa54e6cd5cb591e794e2f770c1045ca2e33af5ff19f480eaa |
| SHA512 | 4b141802e7a4cb6bd4a7498d30086a9d83c62d37f2137f4910ca7d3fb7009079d4dc59b95050849cfc720210b0cb44bf588d15c08e3ba830aae19c0a27e8e6d5 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 0856fef44330763fa7cc3b12363358c7 |
| SHA1 | de9e8009a93ebf5a781b07bdc7ceb59573cdc942 |
| SHA256 | b12c72f714d0953e76817a97331d66db751cda658ae86029bbe935dd71f5917b |
| SHA512 | dc81dc962f875e01c14bb3d32ceedb15e4c2c19273b1a8d4aa326950b5fa788c4e839aa8eb4ea672b542b7fe4d77be4e6fafd9492a00bd7523471fceb02605a1 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | 2df954e406dc437d0941ebd5e1042710 |
| SHA1 | ec8e7bffa6f18629269ab7b633c898fbad8a3f62 |
| SHA256 | dd64b9dbc526ddd28aa07340758fe26b8e0380929342f9b58573ac65f988f2fe |
| SHA512 | 1950f0180b8ed1b83eebdc2ab8ef194dfaaafa61ac3cc3a10aa4bd793e474789a72d5d358bb59fe896ebe1d36736514fd9fb44ce390fd8ef18d114668f4cb1d4 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | ae03d1b88fefcf1a2e53dae26d03376f |
| SHA1 | c75550e81b4f9408085969e0573c31cca485e059 |
| SHA256 | 09ec17c2cdb0f04e56b710d87bff6868428e31c3dc28a5e4172ece2c6e70dfea |
| SHA512 | e0bb581dcb09661ac34334f229bdea523987d59bfc57cf57d92319983e24e7df85ba405371eaf59a15d299d90821ecf9da6879aa8a265795eae8da90dd670073 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 1e0336fee5e9ec230e6135209e9b2e52 |
| SHA1 | 8f82eed62a5f74dd926f031d1fa8c61dd5977e31 |
| SHA256 | 9f6b3a3377805ae6619f23641e8ef1db94f4cab40b262afa1030bd910e565c69 |
| SHA512 | 6421083711d0974ddaf72a9570913be48982a068824789276974e98d2f0191ee9c889de22a9ca3c5991113e704c1d277418cb8eef18c9b486988db1447e7945d |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 751f25124005f4aa429198defd2ce065 |
| SHA1 | 00601a9477e30bc3a0c86ec40748d1513170d0d6 |
| SHA256 | 051e9f85608f084f1db1f402365776bbb488acb39b964ad8685c88358acc7be9 |
| SHA512 | 4a26b621ac328a461ba94f1f67f4ceaa699a65e3369fb866198771050df4436b7436443c58fb4a5067be8f4dfba47d662e3f51bdca333c5ee7b478af0eaaa088 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
| MD5 | f64de7200f93f5e9d93ca6b73f7d5cda |
| SHA1 | cd0149b6bcbc246b01ca5417e79b2a9cca5028b6 |
| SHA256 | 5a6a2bc9460b50ecbd21448c38faa964350b4100ffa1e52bbc41470433e03e95 |
| SHA512 | c5a94fe47a6d06c5caf4e3361d963f28ba96ec414c4f1d21a40882320bf764166f48b9319ff40bbbe279be98a84ef552a1aee9289b745966d54b8a3fa42ccfe9 |
C:\Users\Admin\AppData\Local\Roblox\Downloads\roblox-player\f3b8e82c20c4bb3f94a2d7bcd2a82cd1
| MD5 | f3b8e82c20c4bb3f94a2d7bcd2a82cd1 |
| SHA1 | 89618596be7cb90317eaaf2d09b05d522d008260 |
| SHA256 | 7de6a5a45227b0f21ac7dd50af250e37f20b8bf2d6f4aa53a7f643d77515bd07 |
| SHA512 | 82f15e37366efd29879add4f50cedbdc27d4eb885e190dd54c8e89787b51d59ccc21473f431292da679c7e8aa7cf2d0ce7219e1503d59a0f356e078f9feece55 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 2cc58a762473a2a4e694b038d3a0ce0e |
| SHA1 | 68ab3531cb61668ca9e8da22bbb38537514e4557 |
| SHA256 | 55f2a01ad376a41d8343b4463d7e119a8d190221e9986f6f84a844354a3cfab8 |
| SHA512 | 95c0cec0da385888f06562b4b5fd01863430e7871cdc38d5c9c9a87711f4304aac854dbe82f9bb87f2124e03547be2eda107749bf2e8db1b15d33ed51ee78571 |
memory/2636-10783-0x000001E520940000-0x000001E520950000-memory.dmp
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | eb79b14433e76a652784cdf1a3b3234c |
| SHA1 | 75187e64137888bce33990fc7c60eab01f0f5218 |
| SHA256 | 86d76e1c8b8737b22ab7ec8d50f493c72d5c10c0d8ab4b3f2bc284533837f0ab |
| SHA512 | a04b8c5fc9d64ce07a6b27015781dc6b4ee8aa8218c705abe58b1aff20a411dcfc2afe127c180745cc6c23be15746e28e57722aa94da6017635dbc7bf8b64eb9 |
memory/2636-10803-0x00007FFA8DD90000-0x00007FFA8DD91000-memory.dmp
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | bc231659aac02df172071f1c919812bf |
| SHA1 | d4e62a48a1aba333ea690917c940ba0bea586164 |
| SHA256 | f734514f90e1ea2c57c28bbef5eebfad0117f29ca3a370befe0098d1f94b5090 |
| SHA512 | 8ad4f969fc72b59499734507fe34ce61cfef3536c321d1f66ec76335ade4a4b319828a9831d07ab07ba2dab355c9320920bd35b8811295d4bd1450469168e219 |
memory/2636-10881-0x000001E520940000-0x000001E520950000-memory.dmp
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 4779cefbb76dac132f07d37e13b6844a |
| SHA1 | 9d0fd623dcdf767c34e9715a1f44b0aa9a2953d9 |
| SHA256 | 09736bab1c1111d0143c741ac1642d41dba289bc877b11ac024aa96298599c70 |
| SHA512 | 43dad3b8ce5a995fea5fa40ac1ca3b5b1d2cb006ec133d037c812b76ea3a0063b6a86496ac17b3c5946aeaca9559d28559eff6431ee768e24a256c6f8deacf8d |
memory/2636-10891-0x00007FFA8DD90000-0x00007FFA8DD91000-memory.dmp
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | e7a0617b6730a46213de46871a4f8008 |
| SHA1 | 4a141ff6963f4c6257d2208a0546b84de7e4193d |
| SHA256 | 5c0f22d208f70d3710c6d6587e218964e0fd5e5ed4cd11573d2ffd815ef4815e |
| SHA512 | 91fc3a2be6c6bcaf6241ecd11866696af7bae9e1cdd43c6de46e6d0f45d56e28388bd13b4af4a6aaf63b2c12a7fd38aa0db9c0bd234c3ad4cfde192e4c0e20e0 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 20db3338b256d4d697951da4e54cb2c2 |
| SHA1 | d887164c5f08078b256bbdc757978927865784b7 |
| SHA256 | bd0ef967e3c0f211d9fdaca3bbd0611a7dea79cb8dbc4049323b59aafff178ef |
| SHA512 | 8211aa3bebdd69829037d1a14b9882d312ad0eb07347239fddf1f21783e56c1fd7c7f77971c9c0b13c675ddfc3a35e841b9722928f255df22123946278bd3ec6 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | e27463d0ece117a99b862eaf478f7f7b |
| SHA1 | 171417dda73f9e721fef327eab86fa75d966ffca |
| SHA256 | 836ad811abf742c585ea1f962735e1671105e68ecc936115f8a8be4bf8c4b3bb |
| SHA512 | 2294f5187521aa47a515813b9269155ac9b9b26f963932ed851825d452a3c260c182fe6648761880abf195dee0b59f5217e988db034d10d16f59dda41dcd3d8f |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 2e6ac39f8e6f88aa3c14e798d3d89853 |
| SHA1 | 9455e7d5a2e7ad6f4acc847c018a362a61325dad |
| SHA256 | 2bfc5ab49094fdc7a5085dd3197cb5b890db89c5110c110fabc41baa351e8e4d |
| SHA512 | 925316b28731dd5a48c22eb58fa737c68bcd754cfeaf4908cdcc082df77a8ecfd933759981b302f3a868d34eb9cd63c2b1328e5fa6a06378b7edc6559636c529 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 740876b10dafd62c559790c61cbe158f |
| SHA1 | c49877af3cf5f2292351278fddaad4953a204e24 |
| SHA256 | 1a68d50a5cd06368942efc39e5d415f7717dca7d2f405ea10877f000a6dfc800 |
| SHA512 | a3a2e797f232d341c2a52b9b9291806d88e409247a7f203f2776d1b0d6b71f800b48dd10b984c2b71ec6856efffefd2ef404d16991b50f183a0ce01a029b3182 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 92ad63f6358b31008b01caf6c0697395 |
| SHA1 | a5f2d5236951481a99a6b9fec57170197766b7f9 |
| SHA256 | d5707e7c92b70a1fd3c48f00b238e3a53b94a0bcbc6857c144204374d87e6e97 |
| SHA512 | 9d9e9f2957fe138b1ad48d800b9159dc0aebe7e007466472e4be20f4955c6bb671f43919be270513505b9c33d1bbdacbb08122356920bcd7e91d5f2011f70e71 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | e93bf83c7f1331f19b5891d145dfc9ca |
| SHA1 | 73fbfc1ca53e6f39e8a480c299df55cc2fda58a2 |
| SHA256 | 53ca369dde8f917d230318d8a2e99a293024a9c7c82b1dffc74858a2226d402c |
| SHA512 | cc7076bb79e351961313728e386363a1b988e13a9a5a2a0807958ca3c4254766d66f32043ef1dc3858315221685fe5fe9295cf298a520473d3ebfceab420a370 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 6a58c53d96e28aa3879bc2646ded6da3 |
| SHA1 | 4f5e5d495ce482db4eb55b3ab704fb5c8534c453 |
| SHA256 | 7068b7e91eccbbfc73cc3c3edf4ed40b35f9317e571c84c2c72a3ad77556a07e |
| SHA512 | 6e61c1c1d378a2a3864ad274d4842ad5ed54b21f42515f94cad5b0decc7372fe34bf35664630e84d373fd92aa7066581af6ae2d80f37043d2fc6402bcbce67c0 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | e7e3381025d639c7e5d2c353f36cbe7f |
| SHA1 | 8c38452d0186fabe03877814489bffe196c3954a |
| SHA256 | c1f8026c37baa036596fe43f0e16782788b1f44398d128a45a3f1cbed0eb668e |
| SHA512 | 42e39fb81fe6b6f379ce908895bb8f0ce92f72811420b31d243f51d863d31a662c6b32d73fbbb037a78fb353a2004735d117a4b87f8ea6b1d7c57e26b0c16901 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 5301649eb795d638f337948b52400e33 |
| SHA1 | ac1793f50294bffee0021ed288e6c2dd33caeeff |
| SHA256 | 239ff143071b821e6f0253cf24d8ed15687b737307a91506b98ba758d628ac01 |
| SHA512 | 3d78b1f4ab2e6eeabd234a29a605da1391f3215d1ce54665ae6af83ed05a870c8dfff37f9aa4e1d45fbf34d99a4b900281f62e6b28cdb041f93b30c3338facfe |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | c4a677c443e28e0dd59782553f52160f |
| SHA1 | 84d29d59818d3ccbc6a1dba4162cb37e512bf926 |
| SHA256 | d22739ff7cfafe6cae31284bbaf161a57f9d5edcd702eecdfd560fd260f82ef7 |
| SHA512 | d039f6e932b14c6637479a3bee7fec0e92f9fd4cb9cfd247b273f575ad196ae405744c896c427c21eb83108e4a4a7189ec066f9d36e2cf25908468e1c803c5bc |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | c557e45b892ac124b7eb08d1f4c41a19 |
| SHA1 | 38e95da5eb16e71bae69b58d92c6d7b51d990f13 |
| SHA256 | fc82054fbd969b07f309a8b9a0bd2e4ee7bb1afa9750c24fad8a5a4b3d06ab94 |
| SHA512 | f131c47c818b97ffec330c3c2d4757ddc7b3339199a2d960d1af4fde0e6160a0c7c927134143036f7815a23e1dc933cc4acb9a4a3aeb89100d88c5afdb517c84 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 9f77554a05c74326097e9c1693f769d5 |
| SHA1 | 8c932e638c8796d668802e6c8f31e023e0df436d |
| SHA256 | c753ca0b2d53fb5d245510fc703255055bc3fbef4609f76b100d9393ab1b5e24 |
| SHA512 | 5d61a25dc44fc117b116d2e276d7640d8fcbd26b6d10a81bc6306772a29b06b0b22a49837908f4a4485ce3e6d358c1d1de8082656fc241d0c2ccdcb30031a270 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 5bdfb61494152a5221862c73dd64c1f6 |
| SHA1 | f98562a1204ad2833fb1b2c07a8dc0c0fe4d0ccf |
| SHA256 | 521ea5614d026238ef64e520afebcaa96ba404df8badd684eae7c8f7f80a0106 |
| SHA512 | d89e171ebb62bf1b56edac0a8a058f70c37c374f605425aca3e3e66a55f18b5e99ef421d6a38434b85d23ee75de2eedf8c60126414c96b16ed23b26415c67bf3 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | b34633761ba35ec2313fb137fcf2fb9d |
| SHA1 | 507d46d9e4b02abf84ac68b604d0ff8c8b312c09 |
| SHA256 | 949aab0fa85d73668366396ff42f2f8e864feba47d6f113e6e35096995a0e32d |
| SHA512 | fdc45d1d434eab0bc42d9fd2e6a5e6cb8a3d926672c902496579c12bf0489134349f2114eda2d05669309afce69eeaeef17feb92b76747cff6bef393f825ec68 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 93cb553c16053ec06d243be0cf3eca9b |
| SHA1 | 29bbf2c2c9cea626f22ec363917d6b98899ca458 |
| SHA256 | ebe5cfee6de095af3b45ffe3a3e4f09b635ef5a4e8af503da7c73f511e9070ae |
| SHA512 | aecd9632905d38866b36e0227af7bc8448d557db9c21f059df267e5cf4f2f6dda63b7e6201d5c35bb7dd8b53b8a585a1aaa6bb0001bfb9444fd09cb0d991119b |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 4604d6cd10b3190c2396150d40efcc80 |
| SHA1 | eb1622d980236e46627d4fa849c1836bf1c63975 |
| SHA256 | 8faae8b2200c02e673cb40591fef80d175e5100a4853bd1a73584667eddcfe30 |
| SHA512 | 8a382237111c70748f7c66e4c5524489f25b3bdd1cd5f55f4fa2d048969df4e79ddcd5b53df52a2b0cbc2f5fa9566d8997fc3538b81956ac80973dc2846e330a |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 05ecd32e7c4f360dd661abcf9f72de03 |
| SHA1 | dbb004f3a7cfb1858b62493950788d11826a2231 |
| SHA256 | ee533bbb7adc8f8d5200b4f503550f7c421912ced66c04f27900a344eebc7fbc |
| SHA512 | b4d84ad101f3c4569f426ae7d64bee0eb8a9f3e7e3bd3728891029a2533c84731a5f084c521a3b6d2943a68268fff9e7cf4db89b0f000d24c6e886c6b418f41d |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 96cef6fdf4b226eef6219353840e8832 |
| SHA1 | 38ed189ace878726cdd0ccbca5669b1e65d8b2d8 |
| SHA256 | 80e54658be4e5a20e0db8af2e9530068002fe1f9498ddba64b93b114ec45d28b |
| SHA512 | 60aed017fd065d151b14b0d649258200d39669b38174b75e5e3400cf22f59978e8f64d927669f3323925a73eedd914702cd05f187177745aa31cec792f1e9550 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | dd5bd72dd43f33d1105d3d05bff71672 |
| SHA1 | 285a4549e98e9358e7e6d3803b1f411232590caa |
| SHA256 | f14f6bb312c64bffb982fdd9fadc6716f817a8399f976751b39b0ed9d4db653d |
| SHA512 | 53ebdff4ff07573d6fa15396534549ee668f27e59285bc6332b5e41692a97b0e8fbf7e6057577362b90825fca6314eea64befbbe361716295ccd487cc0bd7c0c |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 04656c986c51c41c592195660f0cf8b2 |
| SHA1 | 6cd0edd62a7c7d768adf040409a1e269049b4f16 |
| SHA256 | 9aa826532f06873a404ed450718a967f8de4ae50362b625f8be85f8ad93537db |
| SHA512 | dd25cf7d23bc0061ae297da7cfcf700c7ad92636441c048fb70db91e48eb37a1b3072778ffca6f029749413549941dc371a53477909c419bec97f548edc86684 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | eeb7cc9e5cdd57a51ec00d7f0d5b7e24 |
| SHA1 | 254b46e33f1070b9bcf780f8f4aecda8986b03a3 |
| SHA256 | c2dd94aa1f43074bdf5a732090361f0389e16305271eb763d63738e9b4956816 |
| SHA512 | b36257eac43999b09018f8bc544df7953b93ee1c892f43dfbd39ae335a2bbcd67c803a0966f1f9e4804509fed1f54cc871cb2cb16c3562367c727f7669740558 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 7c7e34081cdea051cf5bef4de97149dd |
| SHA1 | d0e566c78a88680b7bb96c7812d21b61cf876394 |
| SHA256 | 08e128aba5c36aa127373ca41776baf5c9e13d27d0be653ad528703247406e5e |
| SHA512 | 031368c7695fb9f35281cc704648b84953685e863bcaf54fa5b3868b770c83c462f0b4bac2f47bbe7e28a8607fc1218fc6575745fd8ba906a1b7d14d8dcb549a |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | ee1075da1eeecb01d60d277a20387a62 |
| SHA1 | 4ff4b389e34da3826a7c2981c3c090581b3ce026 |
| SHA256 | ab260671106cb041e13624db39b3df26cace6a1643dc88576591d302bace2430 |
| SHA512 | 22ae2a42464ca8770b740462c0534568622c57ed9909eca2eaf189517e48a536e4cc98553c140b5f9ca7bf5a5b6dc5846f2215f49a9471146819e28d372015a6 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 0d95d944cc4a501d941b0d697a307e1f |
| SHA1 | d15872fb235c382d38035954e899f9fd715de492 |
| SHA256 | 1b323230c022315f4b5499c7c6db6c7299578662e624401ab8f11ce40577f3d4 |
| SHA512 | 8c7df642909e4bf769e1e0e634a81fd0124ac25627616249d589928e186e5b15004354c82813fc5dbadbde220c6606e492d2eddee81eb730e32a8d713576ca32 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 5907eb94eabaf56dc467de1f494383d4 |
| SHA1 | a48e83979b50ba9e9a4e9a4006a648ebfcf3e1de |
| SHA256 | af19be87b848dc9b647fc64e8252e06d3d51c2343080089f72a44e0cc07dd5b8 |
| SHA512 | 4e5e59d5fc4dae11991f7fc8fff5e9fc28b94e33e4712815d121447e30ad5e02d295207c7a09f34fe9de4eebf9f9cd79eadd0cc4422a61db33a45afb091af0f5 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 75c78dfb13c102eb2f0bce44163ca7ba |
| SHA1 | 93d14ba132c142ccf3f4fe94d918be970d012e3d |
| SHA256 | b66ceb20ed48b27827afc2cfb36dd7fbd637b7fd46a49a26bc7b50ae6aad7ae7 |
| SHA512 | dc84019c89bad853b6a524edc0835a537ce2729202fd0174b44ec5b115c14810cd2bcdc16c194ac71a75ac3e1852e7460e058a94ff23cb173f75e99d37231d44 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | f447336742e0c5899870773eb75002a5 |
| SHA1 | 52bfe5ea7460b60fb07986c11172a457416fa99e |
| SHA256 | d7b7c71e5334191b0a17b8399307ff41ced77ae8c7b4893bc074618e15a2036e |
| SHA512 | 4304bd86278e46fcc35f59982d6bfb4aa0d23067bf47a5262394cc710ef02c6ef05341466c9a3bde8944582ecf5e7aa3afe78c19c459e9bb5695ebbd169b9d64 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 36c032ed487c3f3efda8a4cc004a5a45 |
| SHA1 | ccfb78a49402935a25e9ec1b1e00c768fb88197c |
| SHA256 | e997f59f05f13c422a0836719b4e89878ba6a1d35c08fa4493bf04c85d07e3ce |
| SHA512 | 7c873d314ce54b6abd9f5267b09d916dc06c58f81a88de8cfa2238c2f569bd827ebd5c84f16a28a81c9e3e254fce6991107eca508bbd26ace95cfa36bde09d7a |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | be839ec2ef93b000e6c81c375e20ee31 |
| SHA1 | 6fa13c43b16afebec798cf3a269959f872979695 |
| SHA256 | aa3230c7f795865b6c163800093bc68108357009f3e467d37e32f4418a473ddb |
| SHA512 | 96c3c6b69bf39ef4d5cc28af7b50cf932e76134675ce3192c204ce9960dd985d1e2297785a34968fa89f83319c86d15c6b8602851a7327253a122d5bcff3f2ea |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 2e0be73f9b4dcbd0da57ce99d2044c09 |
| SHA1 | d400e0bfb705cad832ad74e0528a3223dfd4df4d |
| SHA256 | 43bb5bfd1479e5da9ef5d98a1ac1e8701f835c4748e63d2a0a13387d15caba35 |
| SHA512 | ec06993f30f01e14ac603b894b0b5655891a76828119ec05b8e6ac40fc95baf609718d2b171529ad6f32fe3264eda18e649ee7cd472e34ec2bd2234426c29e0d |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 678742a8d8be6783b41abf392c170493 |
| SHA1 | 14fa8dbe26c7d2b295ba9e3d01fde745c49ab70b |
| SHA256 | 83013c0e23115cc89a722abbe713fda7b31b1443d53c75fa185757aee2c19ad0 |
| SHA512 | 0498a03e9d158132677b4ebefafe6c29fedc239ce10b4a794bad3ba2964885a60fe904aba4d704af81edde8b46335349c0bcba2bd558ca456db6f0ec7e4c8ad1 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 068052045d9690a69bde9af6f59de781 |
| SHA1 | a8eb48b28a8ebc10bd2dfdc2812b5a34b6da9677 |
| SHA256 | a22811b9d7779ab016436ce757ed4b46d92e8c313d159461892302ca0ca73a30 |
| SHA512 | 5762ad8b8654d76d5b478a656d9237fa305660b354c265d6ad3b1060aa7dcf06082384e8afb2caacdd2f6c2129568e112d95bf4c2050d826499d67bee48aeed6 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 14811d7f97e40384f464d321370e671f |
| SHA1 | 62408663d4bb7b559d84195c46cf8b2e31851056 |
| SHA256 | d565b9f7cf4fd6ce920a5857116bcd6fd0c332ace4270e75b1e99ff2de1203b3 |
| SHA512 | 7105f532f1031b11fbb9d96b338351039dcfb5d118313a2d7ff695baa5d092a1acf539ae6c9059754e04f66dd1d2e02177b0cfc89dc73237e56f9fa66b97ac05 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 0ef7ce8d6f042a93a43e65965f95aa8e |
| SHA1 | ba485e938b4fd03bc6448661ac978a94edfa0939 |
| SHA256 | fccaf578fa27b822016371427a257d09d819b80a0ff9dfbd1fbc1158a506529d |
| SHA512 | 913daf2683a3e2377a7d766103b096339e02804d02b22a9abe5395257a96557426773bbd5b22ce0b4bd631de1b7bf6b567b68800b73ff85a0d1491d6bddf97bc |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | a7a384ee90f5a980938ceaeb8dd790c0 |
| SHA1 | dbff72f3b8e8ffae81acf9a6fc7c434e469385e3 |
| SHA256 | 6f4e9a3a4753f2a7404269f67b388fc43b862abd80ad07852912ebcf2b632c8b |
| SHA512 | 1b952a68697329c6eb73dc5d658493e202e17690038c17ec1f9a10773f51e461a95cabd3a60f44addcb73c3f3be605774ce0c296b2d5deb816561f479b85c668 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 6eeaf568135c9c2d41d31b887190be29 |
| SHA1 | e8aa507eda1f86d3939c36d4c8e550c893a02ffd |
| SHA256 | 438249162d399ec9a37f6d02c5673d263eee911886824b243fb79a9898ee28e6 |
| SHA512 | 8c472c67c6ac099859cba5be6011e3c5e2fc01b9a0fde99d11fc692da7f362ff2dc59b11efc4dfabc2623504e8ea408741b4436c38f4a664d67674b1d6728984 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 6506e6a6a99770a4a40583d806523aa5 |
| SHA1 | 2169a8f2a19b5ce67297c06bae0dbde5214bb70e |
| SHA256 | 7421dabb5dac8d6706cf92af218f2c6c50c9fad1d74cd0f9abf68402c217ec6c |
| SHA512 | fee22c2b09c52b60ebc68a6db94d6579fef85eed9610f383d8f6071cf2be2a08ea945084eafc7ef179e702de7bba991d72e180a9ceadc4c6235b8a29071cd20b |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 0dc653252307cdc56331948ca35d0c70 |
| SHA1 | 4573728415227af0399fcd564eb02fedc9e898e1 |
| SHA256 | dd4c500d58fd98ba8ceccc956bb0bd0ce116345576e4d666b284f79347a21d17 |
| SHA512 | 9878b6f98c5fb9956ae3a96fe894bc6e497b33167dd3fb6c7a1d4dbf5caed4006b3c511850efa492031fbf70915ab02514f175ddf326dcc1fc4a4162bd92a8c8 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 9ca8b80c40c0e79c9951a29993472c32 |
| SHA1 | 05e0b292f3656acbd341134a3e2088d25dba9847 |
| SHA256 | 56569bd26dec291d14b5d2864a3e938ec605d49c8a02de0d4706b960dd5d2cb8 |
| SHA512 | 2d33b6df2c3d407f865634c0f68abb4ce7266bbc61f53010bae5da7ac741cbf84958eff48e8e7ad9840afdaf7aab63b7faa03e71d3a5eaa95bafa35e90a5a809 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | e629621615d678e860bd11a51578ccbf |
| SHA1 | 9a83b525454c075c24c315f610bbd197f28a8e12 |
| SHA256 | c52cb99b666444e2e715b2ec45e7266540302fe0d5ff5d9436154f7c0319370f |
| SHA512 | c64ace5795e4aad4f81d31c68b9a54183a08e6230f4bd77ea143940c80f4d6cc14ee05bbc3f7cab738154faac428ed13c7c9cc6df9fd79e1261187e31d53b3b9 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 2aa5f01527727f222c3f8e4eee25afea |
| SHA1 | 1619f110ec237829e9511c9d6bcb860d71df0645 |
| SHA256 | 6cb561e569b1b3f10851ed4c9b26b9cdb329b01d865a79056775246a3e025dd6 |
| SHA512 | 065a02acd2bd955b6f19298dce8400813e038aa439d7d89db8e1c41f4b6dc51b051553d36e87487acb5329261cb30b9093bc1837f11d6be3c21ac4b1dc3b7724 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 34ccb3ff7d7e017ec5c3fb4d16b569d3 |
| SHA1 | c7fabd6a5711dca2f4772fa89041b5ce0e4308ed |
| SHA256 | 594fe8d6f7e7b22cd3788a2572c5d83422a43f9459f278841077263fe4fc98a5 |
| SHA512 | 6a312142a55b26ad2ea1a6d9884400719e1d1012a239ad5237c418a189aeb6c8aecb53bffa8349143a2725da055986a19bd4d96c9c6753a0bd14233fab713bfc |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 546c14fccd59cfc8dc9bdc5f15b54da3 |
| SHA1 | 6ecbab03fa0204d8629fdb9a4e282fe5d04b4cf0 |
| SHA256 | e2840d381bdd2fb2457659a003d5cd9c1a94b4f50fecf72e107844852f97eddf |
| SHA512 | 1fe604a77274ce74dfa3f8424ddf0a86688e92133f6686e164d99722e00b0d1ae3681672956c2fe0ef3412167a7d3c045aa482e6246d6e7a892cba3d6bf9d066 |