Malware Analysis Report

2025-01-18 22:17

Sample ID 240430-p4kqfafd6t
Target https://create.roblox.com/landing
Tags
adware discovery evasion persistence stealer trojan
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file https://create.roblox.com/landing was found to be: Likely malicious.

Malicious Activity Summary

adware discovery evasion persistence stealer trojan

Sets file execution options in registry

Modifies Installed Components in the registry

Downloads MZ/PE file

Executes dropped EXE

Loads dropped DLL

Registers COM server for autorun

Checks installed software on the system

Drops desktop.ini file(s)

Checks whether UAC is enabled

Installs/modifies Browser Helper Object

Checks system information in the registry

Drops file in System32 directory

Drops file in Program Files directory

Drops file in Windows directory

Enumerates physical storage devices

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of WriteProcessMemory

Suspicious behavior: EnumeratesProcesses

Checks processor information in registry

Enumerates system info in registry

Modifies data under HKEY_USERS

Suspicious behavior: AddClipboardFormatListener

Suspicious use of AdjustPrivilegeToken

System policy modification

Suspicious use of SendNotifyMessage

NTFS ADS

Suspicious behavior: GetForegroundWindowSpam

Modifies registry class

Suspicious use of SetWindowsHookEx

Modifies Internet Explorer settings

Suspicious use of FindShellTrayWindow

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-04-30 12:52

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-04-30 12:52

Reported

2024-04-30 13:39

Platform

win11-20240419-en

Max time kernel

2699s

Max time network

2702s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://create.roblox.com/landing

Signatures

Downloads MZ/PE file

Modifies Installed Components in the registry

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\ = "Microsoft Edge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\StubPath = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\Installer\\setup.exe\" --configure-user-settings --verbose-logging --system-level --msedge --channel=stable" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Localized Name = "Microsoft Edge" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\IsInstalled = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Version = "43,0,0,0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A

Sets file execution options in registry

persistence
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EU6A12.tmp\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe C:\Program Files (x86)\Microsoft\Temp\EU6A12.tmp\MicrosoftEdgeUpdate.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{D3432A4D-B9B1-4093-BD74-61E19728D761}\MicrosoftEdge_X64_124.0.2478.67.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{D3432A4D-B9B1-4093-BD74-61E19728D761}\EDGEMITMP_4893A.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{D3432A4D-B9B1-4093-BD74-61E19728D761}\EDGEMITMP_4893A.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{795CCA47-E3CA-4A2F-82D5-D974FE092F76}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU6A12.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\MicrosoftEdge_X64_124.0.2478.67.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A

Registers COM server for autorun

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\INPROCSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\PdfPreview\\PdfPreviewHandler.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_click_helper.exe\"" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO\\ie_to_edge_bho_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\INPROCSERVER32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32\ServerExecutable = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_click_helper.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ThreadingModel = "Apartment" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_helper.exe\"" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\EBWebView\\x64\\EmbeddedBrowserWebView.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32\ThreadingModel = "Apartment" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A

Checks installed software on the system

discovery

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\Users\Admin\Videos\Captures\desktop.ini C:\Windows\system32\svchost.exe N/A

Installs/modifies Browser Helper Object

stealer adware
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A

Checks system information in the registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\Temp\EU6A12.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\Temp\EU6A12.tmp\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_01cf530faf2f1752\display.PNF C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File created \??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_01cf530faf2f1752\display.PNF C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\GamePlayButton\GamePlayButton\default.rbxp C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\124.0.2478.67.manifest C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{D3432A4D-B9B1-4093-BD74-61E19728D761}\EDGEMITMP_4893A.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\textures\ui\InGameMenu\TouchControls\controls_phone_portrait.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\GraphQL\GraphQL\validation\rules\custom\NoDeprecatedCustomRule.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\IAPExperience\IAPExperience\Locale\Locales\pt-br.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\GameInvite\NotificationsCommon.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\Http\Http\default.rbxp C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\NotificationsTestSuite\NotificationsTestSuite\default.rbxp C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\PaymentsProtocol\PaymentsProtocol\default.rbxp C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\DiscoverabilityModal\Localization.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\ExpChat\Rodux.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\UserProfiles\SharedFlags.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\InputUi\RoactUtils.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\Scroll\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\InGameMenu\Localization\Locales\fr-fr.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\UGCValidation\UGCValidation\flags\getFFlagUGCValidationValidateTransparencyServer.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\Qml\QtQuick\Controls.2\designer\images\stackview-icon16.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\BuiltInPlugins\DepFiles\ConvertToPackage.d C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\JestConsole-edcba0e9-2.4.1\LuauPolyfill.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\Shared\Shared\ReactSharedInternals\ReactDebugCurrentFrame.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\DomTestingLibrary\lock.toml C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\GraphQL\GraphQL\validation\__tests__\NoUnusedVariablesRule.spec.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\IAPExperience\IAPExperience\Flags\getEnableCompensatingScrollingFrame.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\UGCValidation\UGCValidation\validation\validateLegacyAccessoryMeshPartAssetFormatMatch.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\Controls\DesignSystem\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\Emotes\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\InGameMenu\Components\Pages\PlayersPage.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\SocialTab\RobloxAppHooks.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\Qml\QtQuick\Particles.2\qmldir C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\InspectAndBuy\Components\DetailsButtons.spec.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\Locales\ur.pak C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{D3432A4D-B9B1-4093-BD74-61E19728D761}\EDGEMITMP_4893A.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\Experiment\.robloxrc C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\JestEach-edcba0e9-3.5.0\JestEach\table\format.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\TenFootUiCommon\AppCommonLib.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\20240430131407584_4156.pma C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\fonts\families\Oswald.json C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\Debugger\Light\Large\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\Flags\GetFFlagShareInviteLinkContextMenuABTestEnabled.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\PurchasePrompt\Thunks\resolvePromptState.spec.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\Controls\DesignSystem\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\RoactGamepad\React.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\Controls\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\Flags\GetFFlagFlashingDotUseAsyncInit.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\Screenshots\Dev\UnitTestHelpers.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\AnimationEditor\img_eventGroupMarker_border.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\Style\Dev\UnitTestHelpers.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\WidevineCdm\manifest.json C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{D3432A4D-B9B1-4093-BD74-61E19728D761}\EDGEMITMP_4893A.tmp\setup.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\act.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\ServerCoreScripts\ServerContactList.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\GraphQL\GraphQL\language\printLocation.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\React\React\None.roblox.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\Qml\QtQuick\Controls.2\ToolButton.qml C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Lua\Terrain\Dark\Large\Terrain_Grow.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\Clipboard\Dark\Standard\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\LocalizationService.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\DsaIllegalContentReporting\Rodux.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\ProfileQRCode\LuaSocialLibrariesDeps.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\PeekView\RoactServiceTags.lua C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\Debugger\Breakpoints\[email protected] C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
File created C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\ServerStorage.png C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{D3432A4D-B9B1-4093-BD74-61E19728D761}\EDGEMITMP_4893A.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
File created C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{D3432A4D-B9B1-4093-BD74-61E19728D761}\EDGEMITMP_4893A.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{D3432A4D-B9B1-4093-BD74-61E19728D761}\EDGEMITMP_4893A.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{D3432A4D-B9B1-4093-BD74-61E19728D761}\EDGEMITMP_4893A.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{D3432A4D-B9B1-4093-BD74-61E19728D761}\EDGEMITMP_4893A.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{D3432A4D-B9B1-4093-BD74-61E19728D761}\EDGEMITMP_4893A.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{D3432A4D-B9B1-4093-BD74-61E19728D761}\EDGEMITMP_4893A.tmp\setup.exe N/A
File created C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{D3432A4D-B9B1-4093-BD74-61E19728D761}\EDGEMITMP_4893A.tmp\setup.exe N/A
File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A

Enumerates physical storage devices

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Platform Specific Field 1 C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Platform Specific Field 1 C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Platform Specific Field 1 C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\system32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\System32\svchost.exe N/A
Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\System32\svchost.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Windows\SysWOW64\wermgr.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Windows\SysWOW64\wermgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Windows\SysWOW64\wermgr.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Windows\SysWOW64\wermgr.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations\C:\Program Files (x86)\Microsoft\Edge\Application = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge\WarnOnOpen = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main\EnterpriseMode C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\EnterpriseMode\MSEdgePath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge\WarnOnOpen = "0" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth\WarnOnOpen = "0" C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "53" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "71" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "9" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "84" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "90" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "2" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "25" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "75" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "55" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "99" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "14" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "38" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "96" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "108" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "27" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "65" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "31" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "58" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "101" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "5" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "76" C:\Windows\System32\svchost.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133589553285645608" C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "1" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "20" C:\Windows\System32\svchost.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\NumMethods\ = "11" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\MSEdgeMHT C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{D1E8B1A6-32CE-443C-8E2E-EBA90C481353}\Elevation C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{492E1C30-A1A2-4695-87C8-7A8CAD6F936F} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\ = "IAppCommand" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\ = "IAppCommand" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{837E40DA-EB1B-440C-8623-0F14DF158DC0}\ = "IAppBundleWeb" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3805CA06-AC83-4F00-8A02-271DCD89BDEB} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.CredentialDialogMachine C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8F09CD6C-5964-4573-82E3-EBFF7702865B}\AppID = "{A6B716CB-028B-404D-B72C-50E153DD68DA}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E3D94CEB-EC11-46BE-8872-7DDCE37FABFA}\InprocHandler32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{77857D02-7A25-4B67-9266-3E122A8F39E4}\VERSIONINDEPENDENTPROGID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\NumMethods\ = "11" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CECDDD22-2E72-4832-9606-A9B0E5E344B2} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}\NumMethods\ = "8" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{837E40DA-EB1B-440C-8623-0F14DF158DC0} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.CoreClass.1\ = "Microsoft Edge Update Core Class" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3A49F783-1C7D-4D35-8F63-5C1C206B9B6E}\NumMethods\ = "17" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\NumMethods\ = "4" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17}\NumMethods\ = "10" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB} C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{D1E8B1A6-32CE-443C-8E2E-EBA90C481353}\Elevation\IconReference = "@C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\msedgeupdate.dll,-1004" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF}\NumMethods\ = "23" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\TypeLib\{C9C2B807-7731-4F34-81B7-44FF7779522B}\1.0\0 C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ProgID\ = "ie_to_edge_bho.IEToEdgeBHO.1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3WebMachine.1.0\CLSID C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E421557C-0628-43FB-BF2B-7C9F8A4D067C}\Elevation\Enabled = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{77857D02-7A25-4B67-9266-3E122A8F39E4}\ = "Google Update Policy Status Class" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{69E11C9D-4974-41A2-B067-9F26953CF52A} C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B5977F34-9264-4AC3-9B31-1224827FF6E8}\Elevation\Enabled = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\NumMethods\ = "5" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4}\ProxyStubClsid32 C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{492E1C30-A1A2-4695-87C8-7A8CAD6F936F}\VersionIndependentProgID\ = "MicrosoftEdgeUpdate.Update3WebMachine" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB}\NumMethods C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497}\ = "IPolicyStatus4" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}\ = "IGoogleUpdate3" C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE}\NumMethods\ = "24" C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\RobloxStudioInstaller.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 124849.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 27670.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
N/A N/A C:\Users\Admin\Downloads\RobloxStudioInstaller.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\MicrosoftEdgeUpdate.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A
N/A N/A C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 124 wrote to memory of 2540 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 2540 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 4744 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 2700 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 2700 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 2888 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 2888 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 2888 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 2888 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 2888 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 2888 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 2888 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 2888 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 2888 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 2888 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 2888 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 2888 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 2888 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 2888 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 2888 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 2888 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 2888 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 2888 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 2888 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 124 wrote to memory of 2888 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

System policy modification

evasion
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} = "1" C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\ C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe N/A

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://create.roblox.com/landing

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffd4d5e3cb8,0x7ffd4d5e3cc8,0x7ffd4d5e3cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1908,15731670394446127843,12705372161157084889,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1916 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1908,15731670394446127843,12705372161157084889,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2352 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1908,15731670394446127843,12705372161157084889,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2660 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,15731670394446127843,12705372161157084889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,15731670394446127843,12705372161157084889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,15731670394446127843,12705372161157084889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4920 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,15731670394446127843,12705372161157084889,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3764 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1908,15731670394446127843,12705372161157084889,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5412 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,15731670394446127843,12705372161157084889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5308 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,15731670394446127843,12705372161157084889,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3384 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1908,15731670394446127843,12705372161157084889,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5612 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,15731670394446127843,12705372161157084889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4624 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,15731670394446127843,12705372161157084889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4916 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,15731670394446127843,12705372161157084889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4420 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,15731670394446127843,12705372161157084889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,15731670394446127843,12705372161157084889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5900 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,15731670394446127843,12705372161157084889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4424 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,15731670394446127843,12705372161157084889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5720 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,15731670394446127843,12705372161157084889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5956 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.106 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffd4cedcc40,0x7ffd4cedcc4c,0x7ffd4cedcc58

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1972,i,12558182488310828171,8703374339881281026,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=1968 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1788,i,12558182488310828171,8703374339881281026,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=2012 /prefetch:3

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2204,i,12558182488310828171,8703374339881281026,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=2228 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3100,i,12558182488310828171,8703374339881281026,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3260 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3196,i,12558182488310828171,8703374339881281026,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3396 /prefetch:1

C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3584,i,12558182488310828171,8703374339881281026,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4480 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4596,i,12558182488310828171,8703374339881281026,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4616 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4728,i,12558182488310828171,8703374339881281026,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4744 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4324,i,12558182488310828171,8703374339881281026,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4276 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4928,i,12558182488310828171,8703374339881281026,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4940 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=4828,i,12558182488310828171,8703374339881281026,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5108 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=4756,i,12558182488310828171,8703374339881281026,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=4932 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=3520,i,12558182488310828171,8703374339881281026,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3736 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=4380,i,12558182488310828171,8703374339881281026,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=3412 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=3504,i,12558182488310828171,8703374339881281026,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5256 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5412,i,12558182488310828171,8703374339881281026,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5424 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5592,i,12558182488310828171,8703374339881281026,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5552 /prefetch:8

C:\Users\Admin\Downloads\RobloxStudioInstaller.exe

"C:\Users\Admin\Downloads\RobloxStudioInstaller.exe"

C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MicrosoftEdgeWebview2Setup.exe /silent /install

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7OEE4NDk0OTctMEFBMy00ODY2LUIxMUQtREYxMEY1MzgyRTg5fSIgdXNlcmlkPSJ7MjUxNTVFNjItNkNEMi00NjM1LTlENTYtMDlCMTA3NzUzMTg3fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9InswMDU0NUFCOC0xNzQxLTRFQkEtOTFFQi0zRkIzRkVGN0ZENTZ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE0My41NyIgbmV4dHZlcnNpb249IjEuMy4xNzEuMzkiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjU4MDc3MDQ5NTEiIGluc3RhbGxfdGltZV9tcz0iNjcyIi8-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{8A849497-0AA3-4866-B11D-DF10F5382E89}" /silent

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7OEE4NDk0OTctMEFBMy00ODY2LUIxMUQtREYxMEY1MzgyRTg5fSIgdXNlcmlkPSJ7MjUxNTVFNjItNkNEMi00NjM1LTlENTYtMDlCMTA3NzUzMTg3fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9Ins4OUUwMzE3QS1DQ0UwLTQwMUEtQkRBMS1FN0ZBN0U5ODYzRjB9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7OEE2OUQzNDUtRDU2NC00NjNjLUFGRjEtQTY5RDlFNTMwRjk2fSIgdmVyc2lvbj0iMTIzLjAuNjMxMi4xMDYiIG5leHR2ZXJzaW9uPSIxMjMuMC42MzEyLjEwNiIgbGFuZz0iZW4iIGJyYW5kPSJHR0xTIiBjbGllbnQ9IiI-PGV2ZW50IGV2ZW50dHlwZT0iMzEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjUiIHN5c3RlbV91cHRpbWVfdGlja3M9IjU4MTEzNjAxMjMiLz48L2FwcD48L3JlcXVlc3Q-

C:\Windows\SysWOW64\wermgr.exe

"C:\Windows\system32\wermgr.exe" "-outproc" "0" "4980" "1588" "1532" "1584" "0" "0" "0" "0" "0" "0" "0" "0"

C:\Windows\SysWOW64\wermgr.exe

"C:\Windows\system32\wermgr.exe" "-outproc" "0" "5104" "1556" "1536" "1560" "0" "0" "0" "0" "0" "0" "0" "0"

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{D3432A4D-B9B1-4093-BD74-61E19728D761}\MicrosoftEdge_X64_124.0.2478.67.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{D3432A4D-B9B1-4093-BD74-61E19728D761}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{D3432A4D-B9B1-4093-BD74-61E19728D761}\EDGEMITMP_4893A.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{D3432A4D-B9B1-4093-BD74-61E19728D761}\EDGEMITMP_4893A.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{D3432A4D-B9B1-4093-BD74-61E19728D761}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{D3432A4D-B9B1-4093-BD74-61E19728D761}\EDGEMITMP_4893A.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{D3432A4D-B9B1-4093-BD74-61E19728D761}\EDGEMITMP_4893A.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{D3432A4D-B9B1-4093-BD74-61E19728D761}\EDGEMITMP_4893A.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x248,0x24c,0x250,0x220,0x254,0x7ff63eab88c0,0x7ff63eab88cc,0x7ff63eab88d8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=5876,i,12558182488310828171,8703374339881281026,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5264 /prefetch:8

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7OEE4NDk0OTctMEFBMy00ODY2LUIxMUQtREYxMEY1MzgyRTg5fSIgdXNlcmlkPSJ7MjUxNTVFNjItNkNEMi00NjM1LTlENTYtMDlCMTA3NzUzMTg3fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9InswQjA4NjJCMy04Njc3LTRBQTYtQUU2NS1CQTgyN0M2NzE0NjJ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7RjMwMTcyMjYtRkUyQS00Mjk1LThCREYtMDBDM0E5QTdFNEM1fSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMTI0LjAuMjQ3OC42NyIgbGFuZz0iIiBicmFuZD0iIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9ImNvbnNlbnQ9ZmFsc2UiPjx1cGRhdGVjaGVjay8-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_UDE9MTcxNTA4NjYwMCZhbXA7UDI9NDA0JmFtcDtQMz0yJmFtcDtQND1UTVJDOERTWnBESHolMmZZSG9nempTUzZpUnIlMmJMNWtFa003RDV6WFpXOWs5VksxNGkwJTJiS09qUkVaTGJ0cE04TG1DTCUyYndPYlg1dyUyZmtMQ0dpSVpoYjliNnclM2QlM2QiIHNlcnZlcl9pcF9oaW50PSIiIGNkbl9jaWQ9Ii0xIiBjZG5fY2NjPSIiIGNkbl9tc2VkZ2VfcmVmPSIiIGNkbl9henVyZV9yZWZfb3JpZ2luX3NoaWVsZD0iIiBjZG5fY2FjaGU9IiIgY2RuX3AzcD0iIiBkb3dubG9hZGVkPSIxNzI3MjM3NjgiIHRvdGFsPSIxNzI3MjM3NjgiIGRvd25sb2FkX3RpbWVfbXM9IjE1MzU3Ii8-PGV2ZW50IGV2ZW50dHlwZT0iMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iNjA0OTg0ODkxMyIgc291cmNlX3VybF9pbmRleD0iMCIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxldmVudCBldmVudHR5cGU9IjYiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjYwNjM1NzAzMzAiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIxOTY3NTciIHN5c3RlbV91cHRpbWVfdGlja3M9IjY1MzMwMjY1NjkiIHNvdXJjZV91cmxfaW5kZXg9IjAiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiIHVwZGF0ZV9jaGVja190aW1lX21zPSIxMjk3IiBkb3dubG9hZF90aW1lX21zPSIyMTk3MiIgZG93bmxvYWRlZD0iMTcyNzIzNzY4IiB0b3RhbD0iMTcyNzIzNzY4IiBwYWNrYWdlX2NhY2hlX3Jlc3VsdD0iMCIgaW5zdGFsbF90aW1lX21zPSI0Njk0NiIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe" -startEvent www.roblox.com/robloxQTStudioStartedEvent -firstLaunch

C:\Windows\SysWOW64\wermgr.exe

"C:\Windows\system32\wermgr.exe" "-outproc" "0" "2124" "1524" "1520" "1544" "0" "0" "0" "0" "0" "0" "0" "0"

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=2956.4632.5721472544853667676

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=124.0.2478.67 --initial-client-data=0x17c,0x180,0x184,0x158,0x18c,0x7ffd328eceb8,0x7ffd328ecec4,0x7ffd328eced0

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1792,i,5747438986294703499,670223174423396760,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=1780 /prefetch:2

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=1876,i,5747438986294703499,670223174423396760,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:3

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=2100,i,5747438986294703499,670223174423396760,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:8

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3508,i,5747438986294703499,670223174423396760,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3896,i,5747438986294703499,670223174423396760,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3908 /prefetch:1

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe

"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3860,i,5747438986294703499,670223174423396760,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004B8 0x00000000000004E0

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-chrome-cart --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=4956,i,12558182488310828171,8703374339881281026,262144 --variations-seed-version=20240418-180204.077000 --mojo-platform-channel-handle=5444 /prefetch:1

C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe

"C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe" roblox-studio:1+launchtime:1714481902023+avatar+browsertrackerid:1714481763940014+robloxLocale:en-US+gameLocale:en-US+channel:+browser:chrome+userId:4155035591+distributorType:Global+launchmode:edit+task:EditPlace+placeId:17337941876+universeId:5932483521

C:\Windows\System32\GameBarPresenceWriter.exe

"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{795CCA47-E3CA-4A2F-82D5-D974FE092F76}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{795CCA47-E3CA-4A2F-82D5-D974FE092F76}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe" /update /sessionid "{AC00FB48-2008-474F-A2F7-2EB1A7A37587}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7QUMwMEZCNDgtMjAwOC00NzRGLUEyRjctMkVCMUE3QTM3NTg3fSIgdXNlcmlkPSJ7MjUxNTVFNjItNkNEMi00NjM1LTlENTYtMDlCMTA3NzUzMTg3fSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9IntBMzQ5Q0VDOS02RDYwLTQ0MDQtOEMwMi1EQTNGODdBQ0JERjd9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE3MS4zOSIgbmV4dHZlcnNpb249IjEuMy4xODUuMjkiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSIwIj48dXBkYXRlY2hlY2svPjxldmVudCBldmVudHR5cGU9IjEyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI5MDM0MjIxNjg2IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTMiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjkwMzQ0MzE3MTMiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIxNCIgZXZlbnRyZXN1bHQ9IjAiIGVycm9yY29kZT0iLTIxNDcwMjM4MzgiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjkwOTkzODE3ODAiIHNvdXJjZV91cmxfaW5kZXg9IjAiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiIGRvd25sb2FkZXI9ImRvIiB1cmw9Imh0dHA6Ly9tc2VkZ2UuYi50bHUuZGwuZGVsaXZlcnkubXAubWljcm9zb2Z0LmNvbS9maWxlc3RyZWFtaW5nc2VydmljZS9maWxlcy83MmVkODA4Ny1lZTk4LTQyOWMtOTMzMC1jYTNjMTkzZDQxYWY_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-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-PHBpbmcgcj0iLTEiIHJkPSItMSIvPjwvYXBwPjxhcHAgYXBwaWQ9Ins1NkVCMThGOC1CMDA4LTRDQkQtQjZEMi04Qzk3RkU3RTkwNjJ9IiB2ZXJzaW9uPSI5MC4wLjgxOC42NiIgbmV4dHZlcnNpb249IiIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGV4cGVyaW1lbnRzPSJjb25zZW50PWZhbHNlIiBsYXN0X2xhdW5jaF90aW1lPSIxMzM1ODk1NTI2NDc3NjkzNzAiPjx1cGRhdGVjaGVjay8-PHBpbmcgYWN0aXZlPSIxIiBhPSItMSIgcj0iLTEiIGFkPSItMSIgcmQ9Ii0xIi8-PC9hcHA-PGFwcCBhcHBpZD0ie0YzMDE3MjI2LUZFMkEtNDI5NS04QkRGLTAwQzNBOUE3RTRDNX0iIHZlcnNpb249IjEyNC4wLjI0NzguNjciIG5leHR2ZXJzaW9uPSIiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSIgdXBkYXRlX2NvdW50PSIxIiBsYXN0X2xhdW5jaF90aW1lPSIxMzM1ODk1NTQ3NTcxNzQ2OTAiPjx1cGRhdGVjaGVjay8-PHBpbmcgYWN0aXZlPSIxIiBhPSItMSIgcj0iLTEiIGFkPSItMSIgcmQ9Ii0xIiBwaW5nX2ZyZXNobmVzcz0iezhERDhDNEY1LURCMUUtNDQ0Ni1CQTY5LURFRDg2N0E4RDE5RH0iLz48L2FwcD48L3JlcXVlc3Q-

C:\Program Files (x86)\Microsoft\Temp\EU6A12.tmp\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\Temp\EU6A12.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{AC00FB48-2008-474F-A2F7-2EB1A7A37587}"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODUuMjkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7QUMwMEZCNDgtMjAwOC00NzRGLUEyRjctMkVCMUE3QTM3NTg3fSIgdXNlcmlkPSJ7MjUxNTVFNjItNkNEMi00NjM1LTlENTYtMDlCMTA3NzUzMTg3fSIgaW5zdGFsbHNvdXJjZT0ic2VsZnVwZGF0ZSIgcmVxdWVzdGlkPSJ7OTY0QkFERUMtQUY4QS00MjFFLTgzNEEtNDEwMDM1MDRGQjNCfSIgZGVkdXA9ImNyIiBkb21haW5qb2luZWQ9IjAiPjxodyBsb2dpY2FsX2NwdXM9IjgiIHBoeXNtZW1vcnk9IjgiIGRpc2tfdHlwZT0iMiIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iMTAuMC4yMjAwMC40OTMiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIiBpc19pbl9sb2NrZG93bl9tb2RlPSIwIi8-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-

C:\Windows\SysWOW64\wermgr.exe

"C:\Windows\system32\wermgr.exe" "-outproc" "0" "5932" "1632" "1604" "1608" "0" "0" "0" "0" "0" "0" "0" "0"

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe

"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-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

C:\Windows\SysWOW64\wermgr.exe

"C:\Windows\system32\wermgr.exe" "-outproc" "0" "6948" "1596" "1592" "1616" "0" "0" "0" "0" "0" "0" "0" "0"

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\MicrosoftEdge_X64_124.0.2478.67.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff6436b88c0,0x7ff6436b88cc,0x7ff6436b88d8

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe" --msedge --channel=stable --system-level --verbose-logging --create-shortcuts=2 --install-level=1

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff6436b88c0,0x7ff6436b88cc,0x7ff6436b88d8

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODUuMjkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MUVGMTE2OEItNEYxOC00Mzg3LUE2M0MtQzMwM0ZGMzg2RjI5fSIgdXNlcmlkPSJ7MjUxNTVFNjItNkNEMi00NjM1LTlENTYtMDlCMTA3NzUzMTg3fSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9IntEQTk3MzNFMi1DNDNGLTREODItOTEyQS0xRjdGQjA3QTRBRDR9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiIGlzX2luX2xvY2tkb3duX21vZGU9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtyNDUydDErazJUZ3EvSFh6anZGTkJSaG9wQldSOXNialh4cWVVREg5dVgwPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIxLjMuMTg1LjI5IiBuZXh0dmVyc2lvbj0iIiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgaW5zdGFsbGFnZT0iMCIgY29ob3J0PSJycmZAMC40NyI-PHVwZGF0ZWNoZWNrLz48cGluZyByZD0iNjMyOSIgcGluZ19mcmVzaG5lc3M9IntDQzdBOEQwRS03REUwLTQ3OTQtODQ1MC03Njk1MjM2MDY5REZ9Ii8-PC9hcHA-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-PHVwZGF0ZWNoZWNrLz48cGluZyBhY3RpdmU9IjAiIHJkPSI2MzI5IiBwaW5nX2ZyZXNobmVzcz0iezM3N0E2NUNDLTQ4QkUtNDc3NS1CRkNCLUVCOTgyNjBFRTNDMH0iLz48L2FwcD48L3JlcXVlc3Q-

C:\Windows\SysWOW64\wermgr.exe

"C:\Windows\system32\wermgr.exe" "-outproc" "0" "3096" "1604" "1608" "1600" "0" "0" "0" "0" "0" "0" "0" "0"

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Windows\System32\svchost.exe

C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc

C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /c

Network

Country Destination Domain Proto
US 8.8.8.8:53 create.roblox.com udp
GB 3.162.20.119:443 create.roblox.com tcp
US 8.8.8.8:53 134.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 115.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 249.197.17.2.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
US 34.120.195.249:443 o293668.ingest.sentry.io tcp
GB 13.224.81.27:443 webblox.roblox.com tcp
GB 13.224.81.27:443 webblox.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com udp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com udp
FR 128.116.122.4:443 locale.roblox.com udp
GB 13.224.81.27:443 webblox.roblox.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
N/A 224.0.0.251:5353 udp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 18.172.89.129:443 setup.rbxcdn.com tcp
GB 18.172.89.129:443 setup.rbxcdn.com tcp
FR 128.116.122.4:443 locale.roblox.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 142.250.178.4:443 www.google.com udp
GB 142.250.178.4:443 www.google.com tcp
GB 216.58.201.110:443 apis.google.com udp
GB 172.217.16.238:443 consent.google.com tcp
GB 172.217.16.238:443 consent.google.com udp
GB 172.217.16.238:443 consent.google.com tcp
GB 172.217.16.238:443 consent.google.com tcp
GB 3.162.20.72:443 create.roblox.com tcp
GB 3.162.20.72:443 create.roblox.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 34.120.195.249:443 o293668.ingest.sentry.io tcp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
GB 13.224.81.92:443 webblox.roblox.com tcp
GB 13.224.81.92:443 webblox.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com udp
FR 128.116.122.4:443 locale.roblox.com tcp
FR 128.116.122.4:443 locale.roblox.com udp
FR 128.116.122.3:443 ecsv2.roblox.com udp
FR 128.116.122.4:443 locale.roblox.com udp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
GB 18.172.89.122:443 setup.rbxcdn.com tcp
GB 18.172.89.122:443 setup.rbxcdn.com tcp
N/A 127.0.0.1:50445 tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:50454 tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
GB 18.172.89.122:443 setup.rbxcdn.com tcp
GB 18.172.89.122:443 setup.rbxcdn.com tcp
GB 18.172.89.122:443 setup.rbxcdn.com tcp
N/A 127.0.0.1:50466 tcp
GB 13.224.81.80:443 js.rbxcdn.com tcp
GB 13.224.81.80:443 js.rbxcdn.com tcp
GB 13.224.81.80:443 js.rbxcdn.com tcp
GB 13.224.81.80:443 js.rbxcdn.com tcp
GB 13.224.81.80:443 js.rbxcdn.com tcp
GB 13.224.81.80:443 js.rbxcdn.com tcp
GB 3.162.20.13:443 static.rbxcdn.com tcp
GB 3.162.20.13:443 static.rbxcdn.com tcp
GB 13.224.81.99:443 css.rbxcdn.com tcp
GB 13.224.81.99:443 css.rbxcdn.com tcp
GB 13.224.81.99:443 css.rbxcdn.com tcp
GB 13.224.81.99:443 css.rbxcdn.com tcp
GB 13.224.81.99:443 css.rbxcdn.com tcp
GB 13.224.81.99:443 css.rbxcdn.com tcp
GB 3.162.20.57:443 images.rbxcdn.com tcp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
GB 13.224.81.99:443 css.rbxcdn.com tcp
US 172.64.154.86:443 roblox-api.arkoselabs.com tcp
GB 13.224.81.99:443 css.rbxcdn.com tcp
US 172.64.154.86:443 roblox-api.arkoselabs.com tcp
GB 13.224.81.99:443 css.rbxcdn.com tcp
US 8.8.8.8:53 13.20.162.3.in-addr.arpa udp
US 8.8.8.8:53 57.20.162.3.in-addr.arpa udp
US 8.8.8.8:53 99.81.224.13.in-addr.arpa udp
US 172.64.154.86:443 roblox-api.arkoselabs.com udp
US 2.18.190.76:443 apis.rbxcdn.com tcp
GB 216.58.213.10:443 content-autofill.googleapis.com tcp
US 34.120.195.249:443 o293668.ingest.sentry.io udp
GB 13.224.78.77:443 doy2mn9upadnk.cloudfront.net tcp
GB 216.58.213.10:443 content-autofill.googleapis.com udp
GB 13.224.78.77:443 doy2mn9upadnk.cloudfront.net tcp
US 8.8.8.8:53 t5.rbxcdn.com udp
GB 18.172.89.34:443 t1.rbxcdn.com tcp
GB 13.224.81.107:443 t5.rbxcdn.com tcp
GB 13.224.81.107:443 t5.rbxcdn.com tcp
US 20.114.58.89:443 msedge.api.cdp.microsoft.com tcp
GB 23.73.139.81:80 msedge.f.tlu.dl.delivery.mp.microsoft.com tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com udp
US 34.120.195.249:443 o293668.ingest.sentry.io udp
FR 128.116.122.4:443 premiumfeatures.roblox.com udp
GB 216.58.213.10:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 t7.rbxcdn.com udp
US 8.8.8.8:53 t6.rbxcdn.com udp
GB 13.224.81.61:443 t4.rbxcdn.com tcp
GB 13.224.81.22:443 t6.rbxcdn.com tcp
US 8.8.8.8:53 61.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 22.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 tr.rbxcdn.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
FR 128.116.122.4:443 clientsettings.roblox.com udp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
FR 128.116.122.4:443 clientsettings.roblox.com tcp
FR 128.116.122.3:443 client-telemetry.roblox.com tcp
FR 128.116.122.4:443 clientsettings.roblox.com tcp
N/A 127.0.0.1:51316 tcp
N/A 127.0.0.1:51324 tcp
N/A 127.0.0.1:51327 tcp
N/A 127.0.0.1:51331 tcp
N/A 127.0.0.1:51335 tcp
FR 128.116.122.3:443 client-telemetry.roblox.com tcp
US 8.8.8.8:53 apis.roblox.com udp
US 8.8.8.8:53 apis.roblox.com udp
US 8.8.8.8:53 apis.roblox.com udp
FR 128.116.122.4:443 apis.roblox.com tcp
FR 128.116.122.4:443 apis.roblox.com tcp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 www.roblox.com udp
US 8.8.8.8:53 css.rbxcdn.com udp
US 8.8.8.8:53 css.rbxcdn.com udp
GB 13.224.81.77:443 css.rbxcdn.com tcp
US 8.8.8.8:53 static.rbxcdn.com udp
US 8.8.8.8:53 static.rbxcdn.com udp
US 8.8.8.8:53 js.rbxcdn.com udp
US 8.8.8.8:53 js.rbxcdn.com udp
US 8.8.8.8:53 images.rbxcdn.com udp
US 8.8.8.8:53 images.rbxcdn.com udp
GB 3.162.20.32:443 static.rbxcdn.com tcp
GB 3.162.20.32:443 static.rbxcdn.com tcp
GB 3.162.20.57:443 images.rbxcdn.com tcp
GB 13.224.81.55:443 js.rbxcdn.com tcp
GB 13.224.81.55:443 js.rbxcdn.com tcp
GB 13.224.81.55:443 js.rbxcdn.com tcp
GB 13.224.81.55:443 js.rbxcdn.com tcp
GB 13.224.81.55:443 js.rbxcdn.com tcp
GB 13.224.81.55:443 js.rbxcdn.com tcp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 roblox.com udp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
US 8.8.8.8:53 roblox-api.arkoselabs.com udp
GB 13.224.81.77:443 css.rbxcdn.com tcp
US 104.18.33.170:443 roblox-api.arkoselabs.com tcp
US 8.8.8.8:53 metrics.roblox.com udp
US 8.8.8.8:53 metrics.roblox.com udp
FR 128.116.122.4:443 metrics.roblox.com udp
FR 128.116.122.4:443 metrics.roblox.com tcp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 8.8.8.8:53 apis.rbxcdn.com udp
US 2.18.190.83:443 apis.rbxcdn.com tcp
US 104.18.33.170:443 roblox-api.arkoselabs.com udp
FR 128.116.122.4:443 metrics.roblox.com udp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 auth.roblox.com udp
US 8.8.8.8:53 ecsv2.roblox.com udp
US 8.8.8.8:53 ecsv2.roblox.com udp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
US 8.8.8.8:53 32.20.162.3.in-addr.arpa udp
US 8.8.8.8:53 55.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 170.33.18.104.in-addr.arpa udp
US 8.8.8.8:53 83.190.18.2.in-addr.arpa udp
FR 128.116.122.3:443 realtime-signalr.roblox.com udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google udp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
N/A 127.0.0.1:51727 tcp
N/A 127.0.0.1:51928 tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
N/A 127.0.0.1:53159 tcp
N/A 127.0.0.1:53161 tcp
N/A 127.0.0.1:53163 tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com udp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 13.224.81.107:443 t7.rbxcdn.com tcp
GB 13.224.81.105:443 t6.rbxcdn.com tcp
GB 13.224.81.33:443 t4.rbxcdn.com tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
GB 18.172.89.114:443 c2.rbxcdn.com tcp
N/A 127.0.0.1:53177 tcp
N/A 127.0.0.1:53180 tcp
N/A 127.0.0.1:53294 tcp
N/A 127.0.0.1:53334 tcp
N/A 127.0.0.1:53363 tcp
N/A 127.0.0.1:53365 tcp
N/A 127.0.0.1:53399 tcp
N/A 127.0.0.1:53415 tcp
N/A 127.0.0.1:53417 tcp
N/A 127.0.0.1:53596 tcp
N/A 127.0.0.1:53598 tcp
N/A 127.0.0.1:53600 tcp
N/A 127.0.0.1:53608 tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
N/A 127.0.0.1:53634 tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com udp
US 34.120.195.249:443 o293668.ingest.sentry.io udp
FR 128.116.122.3:443 realtime-signalr.roblox.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
N/A 127.0.0.1:53694 tcp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
N/A 127.0.0.1:53701 tcp
FR 128.116.122.4:443 chat.roblox.com tcp
N/A 127.0.0.1:53704 tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
N/A 127.0.0.1:53707 tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
N/A 127.0.0.1:53716 tcp
N/A 127.0.0.1:53721 tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
N/A 127.0.0.1:54945 tcp
N/A 127.0.0.1:54947 tcp
N/A 127.0.0.1:54949 tcp
N/A 127.0.0.1:54969 tcp
N/A 127.0.0.1:54972 tcp
N/A 127.0.0.1:54975 tcp
N/A 127.0.0.1:55015 tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 13.224.81.107:443 t7.rbxcdn.com tcp
GB 13.224.81.105:443 t6.rbxcdn.com tcp
GB 13.224.81.33:443 t4.rbxcdn.com tcp
N/A 127.0.0.1:55368 tcp
N/A 127.0.0.1:55382 tcp
N/A 127.0.0.1:55385 tcp
N/A 127.0.0.1:55388 tcp
N/A 127.0.0.1:55410 tcp
DE 128.116.5.33:60000 udp
FR 128.116.122.4:443 chat.roblox.com tcp
N/A 127.0.0.1:55413 tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
GB 18.172.89.13:443 c1.rbxcdn.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
GB 18.172.89.116:443 c1.rbxcdn.com tcp
GB 18.172.89.57:443 c7.rbxcdn.com tcp
GB 13.224.81.114:443 c4.rbxcdn.com tcp
FR 128.116.122.4:443 chat.roblox.com tcp
US 8.8.8.8:53 116.89.172.18.in-addr.arpa udp
US 8.8.8.8:53 57.89.172.18.in-addr.arpa udp
US 8.8.8.8:53 114.81.224.13.in-addr.arpa udp
FR 128.116.122.4:443 economy.roblox.com tcp
N/A 127.0.0.1:55439 tcp
N/A 127.0.0.1:55446 tcp
N/A 127.0.0.1:55452 tcp
N/A 127.0.0.1:55458 tcp
N/A 127.0.0.1:55460 tcp
N/A 127.0.0.1:55476 tcp
N/A 127.0.0.1:55481 tcp
FR 128.116.122.4:443 economy.roblox.com tcp
FR 128.116.122.4:443 economy.roblox.com tcp
FR 128.116.122.4:443 economy.roblox.com tcp
FR 128.116.122.4:443 economy.roblox.com tcp
FR 128.116.122.4:443 economy.roblox.com tcp
GB 18.172.89.114:443 c2.rbxcdn.com tcp
GB 18.172.89.64:443 c5.rbxcdn.com tcp
GB 18.172.89.126:443 c6.rbxcdn.com tcp
GB 18.172.89.64:443 c5.rbxcdn.com tcp
GB 18.172.89.114:443 c2.rbxcdn.com tcp
GB 13.224.81.64:443 c0.rbxcdn.com tcp
GB 13.224.81.64:443 c0.rbxcdn.com tcp
GB 18.172.89.114:443 c2.rbxcdn.com tcp
GB 13.224.81.114:443 c4.rbxcdn.com tcp
GB 13.224.81.114:443 c4.rbxcdn.com tcp
GB 13.224.81.64:443 c0.rbxcdn.com tcp
N/A 127.0.0.1:55496 tcp
GB 13.224.81.105:443 t6.rbxcdn.com tcp
N/A 127.0.0.1:55505 tcp
GB 13.224.81.50:443 t0.rbxcdn.com tcp
GB 13.224.81.50:443 t0.rbxcdn.com tcp
GB 18.172.89.34:443 t1.rbxcdn.com tcp
GB 13.224.81.118:443 t5.rbxcdn.com tcp
GB 13.224.81.118:443 t5.rbxcdn.com tcp
GB 13.224.81.105:443 t6.rbxcdn.com tcp
GB 13.224.81.105:443 t6.rbxcdn.com tcp
GB 13.224.81.118:443 t5.rbxcdn.com tcp
N/A 127.0.0.1:55525 tcp
GB 13.224.81.118:443 t5.rbxcdn.com tcp
US 8.8.8.8:53 64.89.172.18.in-addr.arpa udp
US 8.8.8.8:53 126.89.172.18.in-addr.arpa udp
US 8.8.8.8:53 64.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 50.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 118.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 t2.rbxcdn.com udp
GB 13.224.81.47:443 t3.rbxcdn.com tcp
GB 13.224.81.10:443 t2.rbxcdn.com tcp
GB 13.224.81.47:443 t3.rbxcdn.com tcp
GB 13.224.81.10:443 t2.rbxcdn.com tcp
GB 13.224.81.47:443 t3.rbxcdn.com tcp
GB 13.224.81.47:443 t3.rbxcdn.com tcp
GB 13.224.81.10:443 t2.rbxcdn.com tcp
GB 13.224.81.10:443 t2.rbxcdn.com tcp
GB 18.172.89.34:443 t1.rbxcdn.com tcp
US 8.8.8.8:53 47.81.224.13.in-addr.arpa udp
US 8.8.8.8:53 10.81.224.13.in-addr.arpa udp
GB 13.224.81.33:443 t4.rbxcdn.com tcp
GB 13.224.81.33:443 t4.rbxcdn.com tcp
GB 18.172.89.34:443 t1.rbxcdn.com tcp
GB 18.172.89.34:443 t1.rbxcdn.com tcp
GB 13.224.81.107:443 t5.rbxcdn.com tcp
GB 13.224.81.107:443 t5.rbxcdn.com tcp
N/A 127.0.0.1:55577 tcp
N/A 127.0.0.1:55579 tcp
FR 128.116.122.4:443 economy.roblox.com tcp
FR 128.116.122.4:443 economy.roblox.com tcp
FR 128.116.122.4:443 economy.roblox.com tcp
US 8.8.8.8:53 itemconfiguration.roblox.com udp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
FR 128.116.122.4:443 itemconfiguration.roblox.com tcp
US 8.8.8.8:53 inventory.roblox.com udp
FR 128.116.122.4:443 inventory.roblox.com tcp
FR 128.116.122.4:443 inventory.roblox.com tcp
FR 128.116.122.4:443 inventory.roblox.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
GB 23.73.139.17:443 tr.rbxcdn.com tcp
N/A 127.0.0.1:55676 tcp
N/A 127.0.0.1:55678 tcp
N/A 127.0.0.1:55680 tcp
N/A 127.0.0.1:55682 tcp
N/A 127.0.0.1:55766 tcp
N/A 127.0.0.1:55769 tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
N/A 127.0.0.1:56855 tcp
N/A 127.0.0.1:56885 tcp
N/A 127.0.0.1:56887 tcp
N/A 127.0.0.1:56889 tcp
FR 128.116.122.4:443 inventory.roblox.com tcp
N/A 127.0.0.1:56960 tcp
FR 128.116.122.3:443 realtime-signalr.roblox.com tcp
N/A 127.0.0.1:56963 tcp
FR 128.116.122.4:443 inventory.roblox.com tcp
FR 128.116.122.4:443 inventory.roblox.com tcp
US 8.8.8.8:53 clientsettingscdn.roblox.com udp
BE 104.68.69.233:443 clientsettingscdn.roblox.com tcp
N/A 127.0.0.1:56966 tcp
N/A 127.0.0.1:56969 tcp
FR 128.116.122.3:443 ecsv2.roblox.com udp
FR 128.116.122.4:443 thumbnails.roblox.com udp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:57361 tcp
FR 128.116.122.4:443 thumbnails.roblox.com udp
FR 128.116.122.3:443 ecsv2.roblox.com udp
FR 128.116.122.4:443 thumbnails.roblox.com tcp
N/A 127.0.0.1:57411 tcp
FR 128.116.122.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:57432 tcp
US 23.102.129.60:443 msedge.api.cdp.microsoft.com tcp
GB 23.73.139.67:80 msedge.b.tlu.dl.delivery.mp.microsoft.com tcp
FR 128.116.122.4:443 ephemeralcounters.api.roblox.com tcp
FR 128.116.122.4:443 ephemeralcounters.api.roblox.com tcp
FR 128.116.122.4:443 ephemeralcounters.api.roblox.com tcp
FR 128.116.122.4:443 ephemeralcounters.api.roblox.com tcp
US 8.8.8.8:53 assetgame.roblox.com udp
FR 128.116.122.4:443 assetgame.roblox.com tcp
N/A 127.0.0.1:57630 tcp
N/A 127.0.0.1:57664 tcp
N/A 127.0.0.1:57666 tcp
N/A 127.0.0.1:57668 tcp
N/A 127.0.0.1:57673 tcp
FR 128.116.122.4:443 apis.roblox.com tcp
N/A 127.0.0.1:57723 tcp
N/A 127.0.0.1:57789 tcp
FR 128.116.122.4:443 apis.roblox.com tcp
PL 128.116.124.4:443 thumbnails.roblox.com tcp
N/A 127.0.0.1:57868 tcp
FR 128.116.122.4:443 apis.roblox.com tcp
N/A 127.0.0.1:57882 tcp
US 13.67.191.143:443 msedge.api.cdp.microsoft.com tcp
US 8.8.8.8:53 apis.roblox.com udp
PL 128.116.124.4:443 apis.roblox.com tcp
US 8.8.8.8:53 assetgame.roblox.com udp
PL 128.116.124.4:443 friends.roblox.com tcp
PL 128.116.124.3:443 client-telemetry.roblox.com tcp
PL 128.116.124.4:443 friends.roblox.com tcp
N/A 127.0.0.1:57997 tcp
PL 128.116.124.4:443 friends.roblox.com tcp
PL 128.116.124.4:443 friends.roblox.com tcp
PL 128.116.124.4:443 friends.roblox.com tcp
US 8.8.8.8:53 tr.rbxcdn.com udp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
GB 23.73.139.26:443 tr.rbxcdn.com tcp
N/A 127.0.0.1:58026 tcp
PL 128.116.124.4:443 assetgame.roblox.com tcp
PL 128.116.124.4:443 assetgame.roblox.com tcp
PL 128.116.124.4:443 assetgame.roblox.com tcp
N/A 127.0.0.1:58070 tcp
PL 128.116.124.3:443 client-telemetry.roblox.com tcp
N/A 127.0.0.1:58115 tcp
N/A 127.0.0.1:58151 tcp
N/A 127.0.0.1:58154 tcp
N/A 127.0.0.1:58157 tcp
N/A 127.0.0.1:58160 tcp
N/A 127.0.0.1:58162 tcp
PL 128.116.124.3:443 client-telemetry.roblox.com tcp
PL 128.116.124.4:443 assetgame.roblox.com tcp
PL 128.116.124.4:443 assetgame.roblox.com tcp
N/A 127.0.0.1:58229 tcp
N/A 127.0.0.1:58231 tcp
N/A 127.0.0.1:58235 tcp
US 8.8.8.8:53 thumbnails.roblox.com udp
PL 128.116.124.4:443 thumbnails.roblox.com tcp
US 8.8.8.8:53 ecsv2.roblox.com udp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:58476 tcp
PL 128.116.124.4:443 apis.roblox.com tcp
N/A 127.0.0.1:58664 tcp
N/A 127.0.0.1:58667 tcp
N/A 127.0.0.1:58671 tcp
N/A 127.0.0.1:58684 tcp
N/A 127.0.0.1:58718 tcp
N/A 127.0.0.1:58764 tcp
PL 128.116.124.4:443 apis.roblox.com tcp
PL 128.116.124.4:443 apis.roblox.com tcp
N/A 127.0.0.1:58808 tcp
N/A 127.0.0.1:58810 tcp
PL 128.116.124.4:443 apis.roblox.com tcp
N/A 127.0.0.1:58862 tcp
PL 128.116.124.4:443 apis.roblox.com tcp
N/A 127.0.0.1:58867 tcp
PL 128.116.124.4:443 apis.roblox.com tcp
N/A 127.0.0.1:58954 tcp
PL 128.116.124.4:443 apis.roblox.com tcp
N/A 127.0.0.1:59041 tcp
N/A 127.0.0.1:59092 tcp
PL 128.116.124.4:443 apis.roblox.com tcp
PL 128.116.124.4:443 inventory.roblox.com tcp
PL 128.116.124.4:443 inventory.roblox.com tcp
PL 128.116.124.4:443 inventory.roblox.com tcp
PL 128.116.124.4:443 inventory.roblox.com tcp
N/A 127.0.0.1:59148 tcp
N/A 127.0.0.1:59151 tcp
N/A 127.0.0.1:59153 tcp
N/A 127.0.0.1:59155 tcp
N/A 127.0.0.1:59157 tcp
PL 128.116.124.4:443 inventory.roblox.com tcp
PL 128.116.124.4:443 inventory.roblox.com tcp
PL 128.116.124.4:443 inventory.roblox.com tcp
PL 128.116.124.4:443 inventory.roblox.com tcp
N/A 127.0.0.1:59165 tcp
US 8.8.8.8:53 thumbnails.roblox.com udp
PL 128.116.124.4:443 thumbnails.roblox.com tcp
N/A 127.0.0.1:59168 tcp
US 8.8.8.8:53 tr.rbxcdn.com udp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
N/A 127.0.0.1:59170 tcp
N/A 127.0.0.1:59172 tcp
N/A 127.0.0.1:59174 tcp
US 8.8.8.8:53 29.143.109.104.in-addr.arpa udp
US 8.8.8.8:53 assetdelivery.roblox.com udp
PL 128.116.124.4:443 assetdelivery.roblox.com tcp
N/A 127.0.0.1:59227 tcp
N/A 127.0.0.1:59232 tcp
GB 18.172.89.127:443 c6.rbxcdn.com tcp
PL 128.116.124.4:443 assetdelivery.roblox.com tcp
PL 128.116.124.4:443 assetdelivery.roblox.com tcp
PL 128.116.124.4:443 assetdelivery.roblox.com tcp
PL 128.116.124.4:443 assetdelivery.roblox.com tcp
PL 128.116.124.4:443 assetdelivery.roblox.com tcp
PL 128.116.124.4:443 assetdelivery.roblox.com tcp
PL 128.116.124.4:443 assetdelivery.roblox.com tcp
PL 128.116.124.4:443 assetdelivery.roblox.com tcp
N/A 127.0.0.1:59320 tcp
N/A 127.0.0.1:59322 tcp
N/A 127.0.0.1:59324 tcp
PL 128.116.124.4:443 assetdelivery.roblox.com tcp
PL 128.116.124.4:443 assetdelivery.roblox.com tcp
PL 128.116.124.4:443 assetdelivery.roblox.com tcp
N/A 127.0.0.1:59326 tcp
PL 128.116.124.4:443 assetdelivery.roblox.com tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
NL 104.109.143.29:443 tr.rbxcdn.com tcp
PL 128.116.124.4:443 assetdelivery.roblox.com tcp
GB 18.172.89.22:443 c5.rbxcdn.com tcp
US 8.8.8.8:53 t5.rbxcdn.com udp
US 205.234.175.102:443 c4.rbxcdn.com tcp
GB 13.224.81.74:443 t5.rbxcdn.com tcp
N/A 127.0.0.1:59399 tcp
N/A 127.0.0.1:59410 tcp
N/A 127.0.0.1:59412 tcp
US 8.8.8.8:53 22.89.172.18.in-addr.arpa udp
US 8.8.8.8:53 102.175.234.205.in-addr.arpa udp
US 8.8.8.8:53 74.81.224.13.in-addr.arpa udp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:59449 tcp
N/A 127.0.0.1:59494 tcp
PL 128.116.124.4:443 thumbnails.roblox.com tcp
PL 128.116.124.4:443 thumbnails.roblox.com tcp
N/A 127.0.0.1:59539 tcp
N/A 127.0.0.1:59590 tcp
PL 128.116.124.4:443 thumbnails.roblox.com tcp
PL 128.116.124.4:443 thumbnails.roblox.com tcp
N/A 127.0.0.1:59604 tcp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:59680 tcp
PL 128.116.124.4:443 thumbnails.roblox.com tcp
N/A 127.0.0.1:59684 tcp
PL 128.116.124.4:443 thumbnails.roblox.com tcp
N/A 127.0.0.1:59749 tcp
N/A 127.0.0.1:59808 tcp
US 8.8.8.8:53 ephemeralcounters.api.roblox.com udp
PL 128.116.124.4:443 ephemeralcounters.api.roblox.com tcp
US 8.8.8.8:53 ecsv2.roblox.com udp
PL 128.116.124.3:443 ecsv2.roblox.com tcp
N/A 127.0.0.1:59875 tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 b5710c39b3d1cd6dd0e5d30fbe1146d6
SHA1 bf018f8a3e87605bfeca89d5a71776bfc8de0b47
SHA256 770d04df1484883a18accb258ecfa407d328c32c0ccbd8866c1203c5dfb4981f
SHA512 0f868e4ce284984662d8f0ff6e76f1a53e074a7223122a75efa7bb90d0204bc59bee4b36c215d219a03707c642e13f5efce0c3c57f46659a0cb1e7fd2f4d3cf1

\??\pipe\LOCAL\crashpad_124_WYWDDVYAGBGEXDVU

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 8d5e555f6429eb64461265a024abf016
SHA1 05a5dca6408d473d82fe45ebc8e4843653ad55af
SHA256 0344fd65882ba51695a10e1312e65f08d58afca83771c9d545e181829d6b5ed1
SHA512 be5edfdcda1ba0db9fbab48ee1b643f1b03821e24048892d18033094fec14171035179e987a08dd91a1c25d91d9256837a4105f6765afd225a868f3e95050b8f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 37aac91189c7e8d4cfc16ccf07e116f4
SHA1 79f7b328a16a86562532b7ad201aedca8e22c4aa
SHA256 fcf78a1c8e60eba7be808b83e39219f15adef26ca09387654c4f56b4f62c8624
SHA512 7f6f27a6722816b37c56256969624de90028785889079326edcee78586d63827c2bbb8abdbb5cb2e98ef976a8f5c5db1262df13bf98806e4052a9d850fd40e85

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 cbbd21218500a55c2b2fa41928311421
SHA1 04373d0810a5f68673f0dc3ab3680793fb6a496a
SHA256 ef03ae204476c068a8b31677c6728c090e65fcb45719635eb04af12809479b76
SHA512 6a297885adb3fd4c65b4dec5082e47ee93c2399312f18dc1b845c845db52ece2a3093ec3085a968b2217e3ed6643e9a1b4c6a2530f0f5e21137befcf2f630d7c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c1551ed57354a18b9ba81c20696efd4a
SHA1 a640df7f59333d2dac29d42151dce894cb360d0a
SHA256 d3046b22fb32302111ebbc3bede9194ddb06ff06a0cfa09adb7f8f0b310e088c
SHA512 aff746e991a5d8a5ad8db36f8f8dac761f338cea32d2f17eef0335c6c51956e56b27da1d67c01d26cded1f6c222dd837ad84f58232d6c9e9dd9cdf70d3edc584

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

C:\Users\Admin\Downloads\Unconfirmed 124849.crdownload

MD5 911c020a364b10fe1de664c01de4534c
SHA1 8731aee51722d2e1604864eb8f03abe3e6d35441
SHA256 cb84418aa6ff71e927125f05cd74b10cef07b40fe19a17f9ba5c3bd57f2d9591
SHA512 7e2c2259dde1fcb1a10a3864b1e24f892fb28d1c0a9a8b1b32d6b512d9f49b031cf6119f55dad008f0b2a5dc87ae606ee0c2918fdc44fc307d56bc933537db7b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 928432f077f4b61b43ad2c83e45c4494
SHA1 4c955c06c729d3a9e7ba13f1ec1fdd0db9626a32
SHA256 e625107c1231d26fc0a291bed6a96dccad5b344a8a0b6294eff54c5d9b5f24ec
SHA512 0548b53ec153f4b45a1c17cd6ac9badbbc3d0ca8869d9634b0817ff78616c9dd6f6cb87b5fd5bb9e193eb42a04681f3993d897452e37b243251bb4bdd8d09ca5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1715141ee572e93a8cce3351de52dafe
SHA1 257da40987e08ac29db423dde0106483c510c2c0
SHA256 888d80e19013037aa0f218d195bae044675fff88e38727a86e6d24649123f011
SHA512 c6abf5dcf534d28f4a6b8f41ec2616610f1f6415435f8c9f837888fcdb62f85512b47019b82799f8e59ef1d4f7aaca4f496d11e064b81243873fdc285ddf5b4c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57ad95.TMP

MD5 f4fabc6e1a36abb3d520f4699ab860eb
SHA1 c7b6dd68f857ede123ec4b8149290f02f7df26f7
SHA256 8bcc7ff29467fb230889cb2d23c4a3c47cc8dde1ecd03cd8db09d84cf836d027
SHA512 76a0c19251e21ed74ee8d692c15bc8ac0985db6a8a6bc37cbb234ef8a85f846de918bbec34885b7c46e5dbcb9a1cf9f0912fff9938c818ed1064b769f1c11330

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 aa3a46fc105dc8c8a886dc9bf9b57453
SHA1 e3a8d3f67aa841fc0a3cdad26d6d7fbf43e88945
SHA256 b11b33f66d61a4d5b155e3a96299a79c245017e5c25cc7afc91561545ff9bfe5
SHA512 b9b3f0834211de2f51bab99b118c867345ae1d53644c3c7257054544c52842f569733caaa12abb78ef56065b1af0ec64142b71615719aef57f21514b621b6592

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 50fee6bf7e7d68f590a9139a24634204
SHA1 8854eb56509955a2d604a5ca89c710d4baaa6d66
SHA256 9c3817487294566265c59388072b73bf2ed7be3199a3fe898bfc8f62e18a1769
SHA512 71bd0e5284ddfa60324f1e144fa5b3ca14cdb758fc4429d220bd60ec97bb5dec969e1488df101970eac1c2846db2b11dc45c0a356bba14bf04ba9430585e12f4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5a3fd794-24a7-4153-aad3-402526969d6c.tmp

MD5 c670143c9944c1fa8b7b611180983f60
SHA1 82c194be9b1355a9105c53a97643c9d77c9fd50f
SHA256 37377867d0b764cad64677da08e710262434043936c048fc67547c142244f964
SHA512 d9da3bcb505e6ed36df49cec43f6ffa9ea8a4a570b8099b741aac442a07d2fb7de6f61120c5cfaa08632093f5a360ceead67f7867af58bf31f798f1999d45c18

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 4ef530aa7427bf0c4726489b8ca3c5be
SHA1 ea1b38a45c532e1cd11d30d47c995bc765ec702d
SHA256 b540a302d3687f94dce5daa413cca3e27555ecaf56696603feaa84bc54a0e948
SHA512 f5d99515c7a5c61fb7b76428125e94763c93dd53e4df40e4f5d637c9ab3a587da18a8dc5ecb466c423c463186e7253c3597fa3f2435cb1431eb5682b6f4b2058

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 9c1a245142b55c55d8ea001c66547b45
SHA1 5a3eb75cb7ecc40d7bf249a025d2d70828677b8b
SHA256 1dc5d78a402fb3af20b79a92c51b9974d6f110aafc503efbcb609611c8f98f0b
SHA512 710e7754b8de92ffb2d8b62ed92d1665489c240048f1d2a49ad7855519ddd19f022fe0105fb7489f5c0eb133a88dfd5fc8eccb9c828ffcf757bd211d46500f19

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

MD5 d7734800d2b2755d8d8cb16f185cfe84
SHA1 1eef7a1a50bf475d5d59ccea7e1bcf2697d3aab1
SHA256 fe2c2a79f063ae410990981c7c51d08e4a7845887f5a21d37206e546ceaf20c6
SHA512 055e9ace6752709c70c824a79889a753b9974c2cb62100f2bb0eb0b4b652ae0ee5147f4bb74766e8303a3926c8ad5e01ce639368c62935c6391395aac2a78d37

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 474c96aee8ec3466848e0b07039f8ebb
SHA1 d92d5db417f4ecbae15a11f31251dbb7abc17f4a
SHA256 be917ded0ea50871edb03e8cf252ff650ae44760fe68a7cd8b11320b9724138f
SHA512 3b91916bb9aa287c6f6f918482dd5bd3c30d6c071e17e9e521b050efe813b6ab5f8696afba39fa3606a294882cc2c5aa95342855a120e14e0d01fa4d964996ea

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ec363c13e01430bd5164a0dfc45d21a4
SHA1 ceb75eb0997fc6b38cbd614f516a847a3aff1f73
SHA256 a29a4b188b469bb0451aad9d7a630f2b54b44af550b605253602d1776369bd2d
SHA512 190fd3636e96a0759c070a4f5fc7ed5789b54128b2ef650b5768c02749751de5e8e07e539c2b4cf24f988bc639de91b3789e00722b6a975d5376f5d8cd930696

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 057d7dad47e76b7eebb8b97659d4f138
SHA1 4229ba44e62fb912fa57cfd90061ab2ea0ae1570
SHA256 c287a92f0e00ce9ada62641a777bc06a2190effb51335e184850acf181444078
SHA512 a8cde706bf8eb140a3c4e61b722a96dd2fa4e868be4e9c19edd9ec97a5205bef0ef49f5c62adf32ed2bbd33fea57e5439c068f1c5b7ed4f542142d4d5e0ee4c2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5 005575341e71c40d7e75d4438fb42d55
SHA1 a4f47258f48a53227931b91dfc6f66d4bfd0540f
SHA256 9525672b828f4b4cd883bb22acc3e908e5b7753cc58970b05042494902405ed0
SHA512 a420fe5fdbfab3a2916909a459bd45fbadc84e1da45b21193c702efb12252bcf89e0197a5220b9f8e02b2bf7bc18cbe82bcbae551f7a7636d6f267621d9d3a7c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 607db168f3ff756f9df5bc118e5b603e
SHA1 cbe2b147feebf2838bec717d057e159a96e57d53
SHA256 2a7a8b3e2074b93b5ba85cf26e6d3329f7dc0d421ce871d1102fff1053be85ac
SHA512 0a611f4735e0d86a466794138b8b0c81a5dba4aced2a5e2eb201abb9989db2e41253d82fa40fb32b922304d79a5ca7cac6088897b489cdd8d6b176cdad4bee8e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 1478c96703c6923c1ca302591b149d17
SHA1 bbc6aba56383787417c0a09cb6a9f63c9c27b152
SHA256 36df289faa76c45382ffbe3710d9ac2084fa697383bbb080a16d0fcf51780de4
SHA512 b3e50c1c7bb5dcbd2e840a3d21b14b4f0bf3442ef39f832d1360eee849db3af1005e963a8f5d6f7ff85b370c57266c9b094714b71d9522f13ce88a900e509469

C:\Users\Admin\Downloads\RobloxStudioInstaller.exe:Zone.Identifier

MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512 aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 d2b8293fd2688c7c2e8a51f1ff82dbd9
SHA1 40c6b0c5b3f5e873e230a7be3a4b7805e856896d
SHA256 c9f895c937bb405cd0137b64baa46d996c8ea25ea53d109d6fcaf3825a05afff
SHA512 a48a02da5570899e3c6cb749ae458bdd33fc2d672cd255e38f8e6b0a08db8d947f9b05de1c20c7a814fae11f842da39ca304b7d87d07dc33566115df69283aaa

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8EC9B1D0ABBD7F98B401D425828828CE_10534D407DF32865AC15C5208A74F233

MD5 3dc1f9753364d4b161708b8eb16901d6
SHA1 16518ac2e78e5ff3cc1cd4202d7a0b56a0669bf0
SHA256 c3086b9e2aaec66488019c6873ed5ca7dac90cf8731b31000e18a79c066b2613
SHA512 9b8f39d9d670049a15e5939e98bf76728093fe66b8c2b0a3e9960bb23a09f1e8434084ae23266fabff81605a633862eeccda5fe5212ca600cffca62f8d3c0ad4

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8EC9B1D0ABBD7F98B401D425828828CE_10534D407DF32865AC15C5208A74F233

MD5 694986ecc4af0ee93ee4789b4c00fd7c
SHA1 4f3c681440e11894e80e9d8552dc5dbd6d6222b7
SHA256 b00aa94b92d6d21c9f4c98f99d49720fb960133b41bc3f0e4fe48eac079c830f
SHA512 555f001d24f0fd8a2512f4680079fdd1bc22b0c1ae998643426b8169e2635625b0fefb1fcfa8236b63579238082c85f85a99b99bdc278d7073cc2f12ff8779d2

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141

MD5 19bb76ad6e47addd97d3d9a6a86361ff
SHA1 820d8b27c57afd81442d137007a3b76192ec50a8
SHA256 5e54fccf0aab0af464f041605252fdda579c92cffe0d09cb4ec5c079b7644384
SHA512 0d2658c095631c5b4c8fc20cc6e5b894ba073dd05ada2eb0382d7bc7fdba959fdf5a3a0a83822e49eaf2657f731ffaa7badd1dfc620da2748f63587a30da008d

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141

MD5 daddc21c3fad8cf4b5eed574ad38ebc1
SHA1 71d6554623910db84b485b126a91758ba6f1b808
SHA256 212e40708e4489b14850aa722483c3ca619955284b4eab5edf64230698ce52b0
SHA512 48402deece4f4ea46e5b9160f8dd052d5ea0def00f7905e24dbd51b4c842cacac1cea72966a0cc70fd0d2f4afd70d576516867a9d67160c2e5514696563bb99a

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB

MD5 370df56ef88159f373275e388ac4f28d
SHA1 a4475fdfaf9ae9a27cc3d79c4979f65af1c87948
SHA256 61fc080f1f4084008a764b146fc555d3d8236ae6935c47c11edc451e9ab8684f
SHA512 fb2fffb2884ba78e6c5763815ef278090ff414635fd1a9ddcdac721247674ac0898383e42a34718e34e0b171b301ff75d55566cde2a60f6c1d1124a872b8cc2c

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB

MD5 6ba7f55c0d7203af24819803027d4764
SHA1 9567fb32f658256dec69a3f7f8fe4dfbfad682a4
SHA256 8b0ffa8fcbcbb6d3e8603e22f243e2a523d6de1eba1b4baabfeb934e3cca814d
SHA512 dd671245ba71f5dc5f72bdbffe86d1c861189a78cf62668a5ebd44bcc6d03ca5572ddaa80fd0a8cd57158bee566c9c28882097142f84ed5b6233979010e08ae8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 cc4df10ad5a81509a6cb78e7824c1ced
SHA1 e51b59f2a204ed03f9a9912c1b9ca02310230360
SHA256 8940ed9dc38fa75809370b4ed2a3bcd99908c0baf2522b690c22eb37841ff9a8
SHA512 7feb04e0c4bb3911ad262182b93501e3a327b4a93f72744dcea1c98fbeba39351e466fdeee0f3e2bb5471c8b0a7d88eecf8030ea376175ad30b0be54be74a4fc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8bd264b82eb08333b81f464d9f16b38e
SHA1 e859f8360bf87848996aafb60bb304efaa2580e3
SHA256 2fb8faf4069baaa9270fa66fb772f0d57fe67b0efbaf424fcec5d0cb8fd28428
SHA512 7abe1c85c3fc2650d4f02335e438ef5494e9c917c03f21795a7f72ce4b038b00aab2cbfe396221bc51f4817bb795420411d61c84c51f823ea2df5a848da72937

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ba67b2842872e48e137b4ca18f5b457d
SHA1 8198fdc1b0ab1b8475376ae9f344efa7065b765a
SHA256 72b43d1a2e333d04089c1687f50177aad6be5adab0f70efbfe97c5bda0fe018d
SHA512 266afaeebe4ac687fdc859b14c5ca8c0e2dfc04f3dfc4d7877ed4d0bf448d7c194cb92e793a1b564e7a9d4f4b2945ee9b26f841fc43da48d9fbd071a1fdecbe0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 4cbe7f1a94bac8650cf4b1f878bf4854
SHA1 ee7e0eb2c20ceda58df1c2158a35761fa3b11b31
SHA256 01b8e8e11527c72b403ab22ce1778a85491832594e273a4c7373e8dfd0ae3a77
SHA512 bc447fff32a0e5bc0f5b879a4b88ef15417023578adfdd3d12b5addc07dfda29e8a96310803aa8dcba8d5493dd3583080a197131dbc8f77c799c54c1899f895c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000019

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 6ff35e68ac628f05d40fbfa7c77489a6
SHA1 cd0d75fd525cbaed8b8b7feeb8b1ee33a9154436
SHA256 5f5039b9b9441fd3e66404195404f872ffd176d54eae5376238b903e7e668b7c
SHA512 8c22675047d38e85c8223d5481b1bb0c944c845636a0973259246bad5f0d8ec8388cd5791b151887b9de9b27b53cb8dc3ba9254c5aeb8067d61b395c0cbcd3be

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fc5e6fb69435cf47760f77eefa606cbe
SHA1 41b3a5d08ffbcb49b922226af2a8bc77357626d9
SHA256 d8cf88f4b57ad697162369e3d725c98fd0e777a968e8b4b741319e549b821ea9
SHA512 345d3b46e8350e96148b21d3fc91a30c75b461042f63143cf1f54883593f8febbc54797ff0a4df2a79f8970d0a110d38fa7457a5ccaeada12bcead393c631b5a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 32fe5f6e084ecdbb5925f8848de07019
SHA1 1758df5df3d7a58afa0db4f00cbb7caa9d216dad
SHA256 b30c4b701222ada30705b67774824ac0bb2556d99a8d9083230d73e54a978eb7
SHA512 a76c1546bd51f19f15f3474b5625da83f8535c45c11ed76a6aecd300b81773bb1db1009e15efe1d7270383e28def0629a3ea741d9ec84657aa86b4810dfc0315

C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe

MD5 610b1b60dc8729bad759c92f82ee2804
SHA1 9992b7ae7a9c4e17a0a6d58ffd91b14cbb576552
SHA256 921d51979f3416ca19dca13a057f6fd3b09d8741f3576cad444eb95af87ebe08
SHA512 0614c4e421ccd5f4475a690ba46aac5bbb7d15caea66e2961895724e07e1ec7ee09589ca9394f6b2bcfb2160b17ac53798d3cf40fb207b6e4c6381c8f81ab6b4

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\MicrosoftEdgeUpdate.exe

MD5 4dc57ab56e37cd05e81f0d8aaafc5179
SHA1 494a90728d7680f979b0ad87f09b5b58f16d1cd5
SHA256 87c6f7d9b58f136aeb33c96dbfe3702083ec519aafca39be66778a9c27a68718
SHA512 320eeed88d7facf8c1f45786951ef81708c82cb89c63a3c820ee631c52ea913e64c4e21f0039c1b277cfb710c4d81cd2191878320d00fd006dd777c727d9dc2b

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\msedgeupdate.dll

MD5 965b3af7886e7bf6584488658c050ca2
SHA1 72daabdde7cd500c483d0eeecb1bd19708f8e4a5
SHA256 d80c512d99765586e02323a2e18694965eafb903e9bc13f0e0b4265f86b21a19
SHA512 1c57dc7b89e7f13f21eaec7736b724cd864c443a2f09829308a4f23cb03e9a5f2a1e5bcdc441301e33119767e656a95d0f9ede0e5114bf67f5dce6e55de7b0a4

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\msedgeupdateres_en.dll

MD5 4a1e3cf488e998ef4d22ac25ccc520a5
SHA1 dc568a6e3c9465474ef0d761581c733b3371b1cd
SHA256 9afbbe2a591250b80499f0bf02715f02dbcd5a80088e129b1f670f1a3167a011
SHA512 ce3bffb6568ff2ef83ef7c89fd668f6b5972f1484ce3fbd5597dcac0eaec851d5705ed17a5280dd08cd9812d6faec58a5561217b897c9209566545db2f3e1245

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\MicrosoftEdgeUpdateCore.exe

MD5 c044dcfa4d518df8fc9d4a161d49cece
SHA1 91bd4e933b22c010454fd6d3e3b042ab6e8b2149
SHA256 9f79fe09f57002ca07ae0b2a196e8cc002d2be6d5540ee857217e99b33fa4bb2
SHA512 f26b89085aa22ac62a28610689e81b4dfe3c38a9015ec56dfeaff02fdb6fa64e784b86a961509b52ad968400faa1ef0487f29f07a41e37239fe4c3262a11ac2c

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\msedgeupdateres_ca.dll

MD5 39551d8d284c108a17dc5f74a7084bb5
SHA1 6e43fc5cec4b4b0d44f3b45253c5e0b032e8e884
SHA256 8dbd55ed532073874f4fe006ef456e31642317145bd18ddc30f681ce9e0c8e07
SHA512 6fa5013a9ce62deca9fa90a98849401b6e164bbad8bef00a8a8b228427520dd584e28cba19c71e2c658692390fe29be28f0398cb6c0f9324c56290bb245d06d2

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\msedgeupdateres_en-GB.dll

MD5 d749e093f263244d276b6ffcf4ef4b42
SHA1 69f024c769632cdbb019943552bac5281d4cbe05
SHA256 fd90699e7f29b6028a2e8e6f3ae82d26cdc6942bd39c4f07b221d87c5dbbfe1e
SHA512 48d51b006ce0cd903154fa03d17e76591db739c4bfb64243725d21d4aa17db57a852077be00b9a51815d09664d18f9e6ad61d9bc41b3d013ed24aaec8f477ad9

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\msedgeupdateres_cy.dll

MD5 34d991980016595b803d212dc356d765
SHA1 e3a35df6488c3463c2a7adf89029e1dd8308f816
SHA256 252b6f9bf5a9cb59ad1c072e289cc9695c0040b363d4bfbcc9618a12df77d18e
SHA512 8a6cbcf812af37e3ead789fbec6cba9c4e1829dbeea6200f0abbdae15efd1eda38c3a2576e819d95ed2df0aafd2370480daa24a3fe6aeb8081a936d5e1f8d8ed

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\msedgeupdateres_el.dll

MD5 ac275b6e825c3bd87d96b52eac36c0f6
SHA1 29e537d81f5d997285b62cd2efea088c3284d18f
SHA256 223d2db0bc2cc82bda04a0a2cd2b7f6cb589e2fa5c0471a2d5eb04d2ffcfcfa0
SHA512 bba581412c4297c4daf245550a2656cdc2923f77158b171e0eacf6e933c174eac84580864813cf6d75d73d1a58e0caf46170aee3cee9d84dc468379252b16679

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\msedgeupdateres_de.dll

MD5 aab01f0d7bdc51b190f27ce58701c1da
SHA1 1a21aabab0875651efd974100a81cda52c462997
SHA256 061a7cdaff9867ddb0bd3de2c0760d6919d8d2ca7c7f889ec2d32265d7e7a75c
SHA512 5edbda45205b61ac48ea6e874411bb1031989001539650de6e424528f72ec8071bd709c037c956450bb0558ee37d026c26fdb966efceb990ed1219f135b09e6e

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\msedgeupdateres_ca-Es-VALENCIA.dll

MD5 2929e8d496d95739f207b9f59b13f925
SHA1 7c1c574194d9e31ca91e2a21a5c671e5e95c734c
SHA256 2726c48a468f8f6debc2d9a6a0706b640b2852c885e603e6b2dec638756160df
SHA512 ea459305d3c3fa7a546194f649722b76072f31e75d59da149c57ff05f4af8f38a809066054df809303937bbca917e67441da2f0e1ea37b50007c25ae99429957

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\msedgeupdateres_bs.dll

MD5 e338dccaa43962697db9f67e0265a3fc
SHA1 4c6c327efc12d21c4299df7b97bf2c45840e0d83
SHA256 99b1b7e25fbc2c64489c0607cef0ae5ff720ab529e11093ed9860d953adeba04
SHA512 e0c15b166892433ef31ddf6b086680c55e1a515bed89d51edbdf526fcac71fb4e8cb2fadc739ac75ae5c2d9819fc985ca873b0e9e2a2925f82e0a456210898f9

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\msedgeupdateres_bn-IN.dll

MD5 a94cf5e8b1708a43393263a33e739edd
SHA1 1068868bdc271a52aaae6f749028ed3170b09cce
SHA256 5b01fe11016610d5606f815281c970c86025732fc597b99c031a018626cd9f3c
SHA512 920f7fed1b720afdb569aec2961bd827a6fc54b4598c0704f65da781d142b1707e5106a459f0c289e0f476b054d93c0b733806af036b68f46377dde0541af2e7

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\msedgeupdateres_bn.dll

MD5 7dc58c4e27eaf84ae9984cff2cc16235
SHA1 3f53499ddc487658932a8c2bcf562ba32afd3bda
SHA256 e32f77ed3067d7735d10f80e5a0aa0c50c993b59b82dc834f2583c314e28fa98
SHA512 bdec1300cf83ea06dfd351fe1252b850fecea08f9ef9cb1207fce40ce30742348db953107ade6cdb0612af2e774345faf03a8a6476f2f26735eb89153b4256dc

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\msedgeupdateres_bg.dll

MD5 8375b1b756b2a74a12def575351e6bbd
SHA1 802ec096425dc1cab723d4cf2fd1a868315d3727
SHA256 a12df15afac4eb2695626d7a8a2888bdf54c8db671043b0677180f746d8ad105
SHA512 aec4bb94fde884db79a629abcff27fd8afb7f229d055514f51fa570fb47a85f8dfc9a54a8f69607d2bcaf82fae1ec7ffab0b246795a77a589be11fad51b24d19

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\msedgeupdateres_az.dll

MD5 7937c407ebe21170daf0975779f1aa49
SHA1 4c2a40e76209abd2492dfaaf65ef24de72291346
SHA256 5ab96e4e6e065dbce3b643c6be2c668f5570984ead1a8b3578bbd2056fbad4e9
SHA512 8670746941660e6573732077f5ed1b630f94a825cf4ac9dbe5018772eaac1c48216334757a2aeaa561034b4d907162a370b8f0bae83b34a09457fafe165fb5d7

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\msedgeupdateres_as.dll

MD5 a8d3210e34bf6f63a35590245c16bc1b
SHA1 f337f2cbec05b7e20ca676d7c2b1a8d5ae8bf693
SHA256 3b82de846ad028544013383e3c9fb570d2a09abf2c854e8a4d641bd7fc3b3766
SHA512 6e47ffe8f7c2532e7854dcae3cbd4e6533f0238815cb6af5ea85087c51017ea284542b988f07692d0297ebab1bad80d7613bf424ff532e10b01c8e528ab1043a

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\msedgeupdateres_ar.dll

MD5 570efe7aa117a1f98c7a682f8112cb6d
SHA1 536e7c49e24e9aa068a021a8f258e3e4e69fa64f
SHA256 e2cc8017bc24e73048c7ee68d3787ed63c3898eec61299a9ca1bab8aeaa8da01
SHA512 5e963dd55a5739a1da19cec7277dc3d07afdb682330998fd8c33a1b5949942019521967d8b5af0752a7a8e2cf536faa7e62982501170319558ceaa21ed657ae8

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\msedgeupdateres_da.dll

MD5 d34380d302b16eab40d5b63cfb4ed0fe
SHA1 1d3047119e353a55dc215666f2b7b69f0ede775b
SHA256 fd98159338d1f3b03814af31440d37d15ab183c1a230e6261fbb90e402f85d5f
SHA512 45ce58f4343755e392037a9c6fc301ad9392e280a72b9d4b6d328866fe26877b2988c39e05c4e7f1d5b046c0864714b897d35285e222fd668f0d71b7b10e6538

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\msedgeupdateres_cs.dll

MD5 16c84ad1222284f40968a851f541d6bb
SHA1 bc26d50e15ccaed6a5fbe801943117269b3b8e6b
SHA256 e0f0026ddcbeafc6c991da6ba7c52927d050f928dba4a7153552efcea893a35b
SHA512 d3018619469ed25d84713bd6b6515c9a27528810765ed41741ac92caf0a3f72345c465a5bda825041df69e1264aada322b62e10c7ed20b3d1bcde82c7e146b7e

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\msedgeupdateres_am.dll

MD5 f6c1324070b6c4e2a8f8921652bfbdfa
SHA1 988e6190f26e4ca8f7ea3caabb366cf1edcdcbbf
SHA256 986b0654a8b5f7b23478463ff051bffe1e9bbdeb48744e4aa1bd3d89a7520717
SHA512 63092cf13e8a19966181df695eb021b0a9993afe8f98b1309973ea999fdf4cd9b6ffd609968d4aa0b2cde41e872688a283fd922d8b22cb5ad06339fe18221100

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\msedgeupdateres_af.dll

MD5 567aec2d42d02675eb515bbd852be7db
SHA1 66079ae8ac619ff34e3ddb5fb0823b1790ba7b37
SHA256 a881788359b2a7d90ac70a76c45938fb337c2064487dcb8be00b9c311d10c24c
SHA512 3a7414e95c2927d5496f29814556d731aef19efa531fb58988079287669dfc033f3e04c8740697571df76bfecfe3b75659511783ce34682d2a2ea704dfa115b3

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\EdgeUpdate.dat

MD5 369bbc37cff290adb8963dc5e518b9b8
SHA1 de0ef569f7ef55032e4b18d3a03542cc2bbac191
SHA256 3d7ec761bef1b1af418b909f1c81ce577c769722957713fdafbc8131b0a0c7d3
SHA512 4f8ec1fd4de8d373a4973513aa95e646dfc5b1069549fafe0d125614116c902bfc04b0e6afd12554cc13ca6c53e1f258a3b14e54ac811f6b06ed50c9ac9890b1

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\NOTICE.TXT

MD5 6dd5bf0743f2366a0bdd37e302783bcd
SHA1 e5ff6e044c40c02b1fc78304804fe1f993fed2e6
SHA256 91d3fc490565ded7621ff5198960e501b6db857d5dd45af2fe7c3ecd141145f5
SHA512 f546c1dff8902a3353c0b7c10ca9f69bb77ebd276e4d5217da9e0823a0d8d506a5267773f789343d8c56b41a0ee6a97d4470a44bbd81ceaa8529e5e818f4951e

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\MicrosoftEdgeComRegisterShellARM64.exe

MD5 7a160c6016922713345454265807f08d
SHA1 e36ee184edd449252eb2dfd3016d5b0d2edad3c6
SHA256 35a14bd84e74dd6d8e2683470243fb1bb9071178d9283b12ebbfb405c8cd4aa9
SHA512 c0f1d5c8455cf14f2088ede062967d6dfa7c39ca2ac9636b10ed46dfbea143f64106a4f03c285e89dd8cf4405612f1eef25a8ec4f15294ca3350053891fc3d7e

C:\Program Files (x86)\Microsoft\Temp\EU5431.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe

MD5 60dba9b06b56e58f5aea1a4149c743d2
SHA1 a7e456acf64dd99ca30259cf45b88cf2515a69b3
SHA256 4d01f5531f93ab2af9e92c4f998a145c94f36688c3793845d528c8675697e112
SHA512 e98088a368d4c4468e325a1d62bee49661f597e5c1cd1fe2dabad3911b8ac07e1cc4909e7324cb4ab39f30fa32a34807685fcfba767f88884ef84ca69a0049e7

C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log

MD5 2028c6f5aab98c3e8381af8759d299bf
SHA1 98c7c7f5589b592756124a79b21aea16804ee3ec
SHA256 7e79232d03e4dd0a199c4cec414b8b0e48693d28cfeaa9f9ff6e153384121370
SHA512 7a37198b8840b0a6103d3f9a295496e1658ca36829efe8aa36e04cd112ffdd5477a9af418d96a014589ffce04dcae6d3ea9619bb855c4633d9fce7e4e3c1c397

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 3242b62435f1cda71581218782036641
SHA1 be981bf6684de8bd1010b58b77fd7711fe8093e2
SHA256 70c3772f5b37a4488729f4d8ab8a9d9db04ed2698a4d429c1eca1a06ae0e7b3d
SHA512 0bb3451e7802a423c2f0647d91d17107a3536f55aa30199263df7c2e03e62c13ea4ddf3007badf8b2eb60b92a4e63e3c90a9a25a1ff55246bfb294d164ea1389

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d253886a86b9e1201cd2ce9564e05b14
SHA1 5503f4fdce1623f7cb9bf4c9edf96df2592b9f04
SHA256 ba99d4c7199aebea84a8bbb92a30aced07b8881c1c0027ef68ed78ea78b4826f
SHA512 8514dd7ea9965562a317cd3e21c55e212372de3be16839c7a6a2f24a1c494819feca9543121f2e7a1ab0d2fced2869bff6cb677d9019d998f4e8062c3a6a743f

memory/2808-1246-0x0000000000EC0000-0x0000000000EF5000-memory.dmp

memory/2808-1247-0x0000000073190000-0x00000000733A0000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c65139ba4a94cdf6b5cd19c4b20c4e10
SHA1 fa4eb0cf58a1cdd67b405e0e41a4ae2910a5f999
SHA256 dcccdfee1dcda03410e0332a9ed8bb18752f9ca57b3838d73ac8de166a98f14d
SHA512 0ec84799356e037cc4c1ca45fce538c9cf263c930fb277f413ceb71b3700834eae28746b8c88da38f87dd30e494cc61102c19f8a8f40b26d00d95875efdde2ba

C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}\124.0.2478.67\MicrosoftEdge_X64_124.0.2478.67.exe

MD5 dabc3160a804b9fadd89ceb0fcecf388
SHA1 b52f15e866a18637683bdf0ea4eaa326b787396f
SHA256 53eb39a92ee0d2eb94f6d33c015097bddd9cfe5c4129d3ac9a9facbfb5087bfe
SHA512 74fc0f21d7cf99e07c079224e2af8a4a51bff98a97bc471cfedfbd3a28d3ee681fbd63fa7239948c3c0bf4f9af56dc582dd128f8c08b54cb73389e85f949f431

C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat

MD5 d9c1b733feda26d4d46572ed48603042
SHA1 c53ac5d5b1273accac36416baecb69755bb9c271
SHA256 408e6d930b8eaaed10f47bd3366bf82ffc63de2fc9fa1fa0fadd151b9442447a
SHA512 f7221a61a72384d6123224150b2e7abf8495b17b9266b4e295059d5b54b9a8dd1d836829ef0f737255d2b92a13f10d6de5ce6efd32b64ddc30075aa0533510ec

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 3719a57424495920bb7dc09f37380670
SHA1 8fd721b9f2dba8864d81b0a696df5a0e6060100d
SHA256 f53f01e3fbe3ddf46b98975cbc6ed25dd5b241fec0d8e7fb025b26c6a62e8d8b
SHA512 2fad9681e158780e9ff394083aca483a0a2d831139407bcb97f1571925e589a9046b2f9a2535fdd6e7b5e7228aa39db5c9e82e8170bfa02c86d9960ff8028303

memory/2808-1308-0x0000000073190000-0x00000000733A0000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\d8a0ad22-b675-4f49-a28c-f58565bab6c3.tmp

MD5 0e41624506999815c6b2df39036f0c9e
SHA1 b6c1f7417b8459170f8fd012c8b73dd8e80e4fa3
SHA256 0bab67486b5404eade4594c4790c83518f6fc46b1e09dc719ebe6a07386f323a
SHA512 81bd9853b3627a8a348e0066839dc6c7c01b1f1cc120cb592d96238253960804504d853da68d71596bf5288106a77a4b07ac9fe379e4955c67561865559c7051

C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\Installer\setup.exe

MD5 c31297188ec9fbaa60449f769339963e
SHA1 8502d9e0cef18137529f0a46ad6e69a1577e6cae
SHA256 2e2eff110475dd3dfd732ab514e4692032e67b2d228d0081634a87f45cde5ff9
SHA512 9525e3e08b953fe36270c7b4868959e9bded055c5577e5ca94d79606b671e6660d180f763b54a276bf356e82d7073901c373e0b40cfca924cc4b38384c20e22a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 c5c8f9a13ccaac7aac7021275aa30d7b
SHA1 ffb5bd024d60036bb975ffa1d6ead6a8cbfe56fb
SHA256 c0f317cb302d5284af1c0b166ac51a5e9cfe0088c737386e8ad8917d6243afa8
SHA512 8e3fd2d04588d4f73df8c8bf1a4c3d16d607b8b2eb6da8e36690edc10a5618655df1bced3b065ee34397cf153c2502ccb446c99f8348b728222acf51756e1025

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 82afc7f0740bec72e5d1bf834f254fbe
SHA1 d2512b20bc03894637e4fab379f7369b0ac176c6
SHA256 9fe313398211be51df42de14f7e05d5c843a9d9e6fffc21ff5cbd4c34401fec6
SHA512 1e55cde07ccc05fa4bd717930e27cc7ae9a58ac8b235634ecfd88c78692b9885f4c885be8b196d6a735dc106773167cbdf9770e123f5bd6379ab23039ab6b2ec

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

MD5 d222b77a61527f2c177b0869e7babc24
SHA1 3f23acb984307a4aeba41ebbb70439c97ad1f268
SHA256 80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747
SHA512 d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

MD5 b5ad5caaaee00cb8cf445427975ae66c
SHA1 dcde6527290a326e048f9c3a85280d3fa71e1e22
SHA256 b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8
SHA512 92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

MD5 f49655f856acb8884cc0ace29216f511
SHA1 cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
SHA512 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 5e7778b9185aea929c8e0c062e579a11
SHA1 2eca7784bee9a374ffd1f3326826b994e1a1e3b5
SHA256 2a259409bec92bfbfd9c9f82790036ecb199511986d1a6cabced9d13d0903880
SHA512 59995645e9d4cd88816a1a51420773f339583d2ae58e6eab6c870c57e13d8ab7ec9af16b7afe61e3d61b7ed0570f806ddd610b6ca476b0642736c0af5e1d9fe5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9a18dce9130ea4af0f6b785eef4b436f
SHA1 bc7412acdf5c0ba0db15f0acbf4925644372cc63
SHA256 378fc39ed0c2b7b61ffaf50fdb0d734a3d63b651599d8369259a837419c2003b
SHA512 f7310258c391fdf291183d099c3df9ebf062de49e34f8dcf9827d82f1c282bc883472f4ed141e8baa3102b50050fd1524a8455728d24e783d8ddf479406eeb68

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 ff1a6e6197ffff968e670a68370b7357
SHA1 6c1591ffd2b8b63832b038733d223c321c442cee
SHA256 5fc2b512db978a5437e44ffb489d05c3266b4ff755e4dd4b2a5bf29352dec852
SHA512 ab12fc7e18dd2f8f8e1a72df02d7deeedf28ea8b2642462ff252364f18e31076a30e5bca83a4187c4de09aaaf33419fc64d3b0c0a1a242374015943726e613c2

memory/2808-1405-0x0000000000EC0000-0x0000000000EF5000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 cbdf684dff3e314e3d3f6d21849eac32
SHA1 cfe0ee16c895cb6d0729b13770f4a965bf5bacd3
SHA256 fb0ea6fb28a7cdf78a14aa8ad7274dea36b2f498a303a817ae0a600bcf49b74c
SHA512 c339a4f71039a788ebed3b30e78bae7c0d380d4a34fd9869bd092f7998fc637ed5923e8386813b30eb8bb837df3f992315e899be807434566c52b039fdf893d3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 7537295a2d553e4ccbc57bc57346f75f
SHA1 565ccbf28d99a821431e66c52b28b5d7d8b43231
SHA256 a88c1683d978f35eb878dbc480f6bfcd27144391d42fb824565b20b6c1d18b40
SHA512 b8207a1e2028927458d58dfa4ae7a0782c56ed2697ac184cfef85d4bee2446ae190aa30dd874904d1e1da0eaae901370f079e6fbc02b379dc78f05086b753fb5

memory/2956-1437-0x00007FFD36380000-0x00007FFD36782000-memory.dmp

memory/2956-1436-0x00007FFD35100000-0x00007FFD3564C000-memory.dmp

memory/2956-1439-0x00007FFD36380000-0x00007FFD36782000-memory.dmp

memory/2956-1438-0x00007FF6933C0000-0x00007FF6943C0000-memory.dmp

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\ShaderCache\data_1

MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

memory/864-1470-0x00007FFD5B4B0000-0x00007FFD5B4B1000-memory.dmp

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 15dd7521fccf3d4452bc1c180719cf65
SHA1 3b0e825c06ba4ad0a938c026e2457e90cd567cc5
SHA256 82429cc3a2c2a297891d31115ff1051cab2edb6b78fe8216526e177fa02aa29e
SHA512 595b54422077ef264dfd6ec84408fbbe7c745c69ed6e70218d21bd0f6a28d3b3d643c2893c07145bc832d53b9d6d13445b9a3a74d52272fcf946e7c709f21b64

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat

MD5 ef197efaeabe34d6df09e8414da7fb91
SHA1 e547284e6fc6fe4ea17f510bb7a8696c6c291170
SHA256 269ad87bc47f8ce92de85f0f51f32b985fbc17307b6c2e6d320acaaf50b8b8cd
SHA512 09bab8894bf0d4046980f8019c7c941f95dae4eed85d289327a902469c534111b1c9d61074d640dce471f963220d1cf403aacfcafeae7944462f1be8b5ee169f

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 a7111c130aecd3f1d8e0fbfda7a4fa30
SHA1 17c1c280997a60044ae941d64b5ac8395970eb78
SHA256 b7f49624ba9d2caf723d2f598a55da6a39d0be32592f15514bcdb920111f466a
SHA512 7564a268b82b92811665484b1c2b76b159b40ff612bb5a11e8931d28a224b7960c2c30e7d470d3683d7f8528ced9b36ebcbf3bc9fa2348b50aafddbed1a4d1ef

memory/2084-1559-0x00007FFD5B4B0000-0x00007FFD5B4B1000-memory.dmp

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State~RFe5a8bf5.TMP

MD5 c0e7333794491880ca09bea339058fcd
SHA1 b3e2e054571ae70bc91aa0d12733a9b76775b065
SHA256 f64e5236baa896888f5e564695c4688b5fb6eefe5923e609115aae9ed19412a5
SHA512 24f3ba740513588ae1c80f031a62c459cb8356a1018ad64f6e514215d4f73148ff9b662dd340143c8a80dc5ccc8c9db3bf9fe7e023cfb8e7abd5397fcc9d8481

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Cache\Cache_Data\data_0

MD5 13afe1218614d81faab7f38c86a797a6
SHA1 33ca069c2084b42f29bb960eaf8580120f2a4550
SHA256 80902ac25272755f7bc5b7adbc72dd170df4310bf9d2227fd29ce599863e1104
SHA512 9bbdd98f2faeb5c2373e7c77786b96d8ac33fad4a9419fe336edcb37d7ca392a2b944e68ebb2279a71690ffa3ff099d811bda1907788b713a3b0c47ea08f6c18

C:\Users\Admin\Videos\Captures\desktop.ini

MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 be7ffdf693ee7c142ff5c37a5bce94b0
SHA1 0f9db439cce2d9a901b943cae00a8738d86713d1
SHA256 7710d856eb5d16810f62c9188c247e9ba247d7a0e75f547ee6c9e00193b5dc86
SHA512 1e2bb318435e7a15755cfa099458de3ee94f1950666f00052983cba93d3c609786cf10929f635b2a95ff39fdd5be5401bf1c72b06fbbfde3d7dd0129efe813c8

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 47767094483698ca0bd901c2a67a2017
SHA1 c6389483cc5c4df6d6a883dc9fbcc5c50cf82876
SHA256 2703fb38aa7c802d7233ea03d4ee394b9922ae12ccb0d7069e50c0d21fd5d272
SHA512 cd15372cbc8b61411980614279ec6b1e38514ec043b78902dfb17367d84c0173be8dd1de42a4f73929e9170325cc90b5d6872564da5e67abbe8dacb8d8888ca7

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State

MD5 ae1facdb0397fb59e7bd6bc093a436fb
SHA1 20a12aa13070c408be79c243bfd346cba2812adf
SHA256 b3143862e4ff1698d7cc89736270726080abfa0def8c7c16291656030d731446
SHA512 fb27e52fc13d6cde0ca74b4a1e0ed83499be38e5143b3d1279dc8a582d0b7112a2ab9bacabffba1fc0544b91f537d68e2cb5c99a1c6146559be82d4ab8fddc2c

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index

MD5 6b2ec006272d226f2628edbb16d8c9f1
SHA1 e593a1f159261b14510a1281de60db2a7dcd3749
SHA256 3d12833fb55dc37a065100ed7015a66a823e2843782a808862cb3d77dc7343ba
SHA512 8b091481cd76c520bc2fb22e7ac80174e2426521c0d72df8b13d3858d60770e0dc87587766530bed3478c7b99f485ce57c3dd711eb95c64843048041840a6d91

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5ab9eb.TMP

MD5 fcf52b65a06a272e0cb3a55b5f182b27
SHA1 b03ccef38e1abad243d747fb14d2811e9f390197
SHA256 cc2fd03b27a3a3720d115fd02d575371779ae4e47427f9d5452f0c374bfac370
SHA512 1a44d3a4a4289fb9e16dcf8ff9bb1254aab618b837229fc7c2798585772ae8e21ef56be5340c360890da01f781d70c9b9bcbd3e20c1c5e7293fbe3739d4e60da

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences

MD5 e3d50fcb0bde442a1bf6846890521397
SHA1 de43aec2d1441a1daecd398311d2da6f477ab7a7
SHA256 98117fa89f84611def9c1c06c35725d683d852061f6d0d64e75a83ec3ed5a1c8
SHA512 33488f2df712ee4a6339510030d6c5250df38dd37e212101a8ac754268aa869238292cbdef1386022a4e812ca96b79a1aae2bdbde14e2eec36d72abfc39bf6c5

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences~RFe5ab9fb.TMP

MD5 6b90af18a9240300b03dd2a7b67defd3
SHA1 c8de5656d091dde6d57486c36656514aa28c27d1
SHA256 ea80258e266a1af2a09134a2ce2e375f4e9596b24296699713d2a6a271934302
SHA512 ac25c1f234cfe7df2c8317dbcdd2d5e6f020033b72ed59012f70290bed02b2f168a0aca5bbfe51e91e607fef8563b9b7f972441b8cdfbf3c18647c97539baf41

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State

MD5 30cd04e08ccbe7677032f34fc5d2eb80
SHA1 f8b6b114de1ef8dd7774dfd33df086682e81da00
SHA256 823c204f2ee5291a99712a800d53252c0b0cef3cb905403edb02534c52cea375
SHA512 53564894bd3e4ed94257d0385193afed69e3c7eb5bb66b339828e64627802ae81ae63ca0e29a75ec1540a6eba5f4910b5f57b1f1c0dadc4c527d59fd626db414

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State~RFe5aba1a.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity

MD5 150f254b3e26d9711d2780978c54dad1
SHA1 8fccfde056c000db32bc6988a94dc0c16172ca79
SHA256 8b82be369354b180021ac5f0e5bd759f12dae8bf3e02d9428a46bacab26ac637
SHA512 ac448591b82bed992b95e7cd340c957ed5b5e7f815acfe18b698ca95667911ef4b147476505dc439cb1a37d349bdfa8a02dec051e3e299b5caa4c2637bf08031

C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity~RFe5aba1a.TMP

MD5 906786fed2613ccff8470f2b7ec63d85
SHA1 8b864dee00c19905916b06bd3e51654c93cef5fe
SHA256 a48203940f26dd7c3cdf00d42a918b4573967e4e9fc6bf4438050e1d72c9b222
SHA512 77ac9a7e8bb4b75a83225d7600344375db76c048b7d3e3b62c5dfe1a14862f481913ea8d113ff21a9b180bbf3c27a53fbb8eb6cce41707500afc5ef637cca69b

memory/2956-2012-0x00000209952A0000-0x00000209956E0000-memory.dmp

memory/2956-2014-0x00000209844A0000-0x00000209846A0000-memory.dmp

memory/2956-2016-0x0000020980370000-0x0000020980371000-memory.dmp

memory/2956-2017-0x0000020980370000-0x0000020980371000-memory.dmp

memory/2956-2019-0x0000020980380000-0x0000020980381000-memory.dmp

memory/2956-2020-0x0000020980370000-0x0000020980371000-memory.dmp

memory/2956-2023-0x0000020980380000-0x0000020980381000-memory.dmp

memory/2956-2022-0x0000020980380000-0x0000020980381000-memory.dmp

memory/2956-2021-0x0000020980380000-0x0000020980381000-memory.dmp

memory/2956-2025-0x0000020995C90000-0x0000020995C91000-memory.dmp

memory/2956-2029-0x0000020995C90000-0x0000020995C91000-memory.dmp

memory/2956-2051-0x0000020995CB0000-0x0000020995CB1000-memory.dmp

memory/2956-2050-0x0000020995CB0000-0x0000020995CB1000-memory.dmp

memory/2956-2049-0x0000020995CB0000-0x0000020995CB1000-memory.dmp

memory/2956-2048-0x0000020995CB0000-0x0000020995CB1000-memory.dmp

memory/2956-2046-0x0000020995CA0000-0x0000020995CA1000-memory.dmp

memory/2956-2045-0x0000020995CA0000-0x0000020995CA1000-memory.dmp

memory/2956-2044-0x0000020995CA0000-0x0000020995CA1000-memory.dmp

memory/2956-2043-0x0000020995CA0000-0x0000020995CA1000-memory.dmp

memory/2956-2042-0x0000020995CA0000-0x0000020995CA1000-memory.dmp

memory/2956-2041-0x0000020995CA0000-0x0000020995CA1000-memory.dmp

memory/2956-2040-0x0000020995CA0000-0x0000020995CA1000-memory.dmp

memory/2956-2039-0x0000020995CA0000-0x0000020995CA1000-memory.dmp

memory/2956-2038-0x0000020995CA0000-0x0000020995CA1000-memory.dmp

memory/2956-2037-0x0000020995CA0000-0x0000020995CA1000-memory.dmp

memory/2956-2036-0x0000020995CA0000-0x0000020995CA1000-memory.dmp

memory/2956-2035-0x0000020995CA0000-0x0000020995CA1000-memory.dmp

memory/2956-2033-0x0000020995C90000-0x0000020995C91000-memory.dmp

memory/2956-2032-0x0000020995C90000-0x0000020995C91000-memory.dmp

memory/2956-2028-0x0000020995C90000-0x0000020995C91000-memory.dmp

memory/2956-2027-0x0000020995C90000-0x0000020995C91000-memory.dmp

memory/2956-2026-0x0000020980380000-0x0000020980381000-memory.dmp

memory/2956-2031-0x0000020995C90000-0x0000020995C91000-memory.dmp

memory/2956-2030-0x0000020995C90000-0x0000020995C91000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e1f1d96b68e3261cf312b541611c5539

MD5 3adb865c801399c412bc73840d3d8241
SHA1 267f8332eb7486bccd7a6730cfb4f5c2152b11c0
SHA256 10fb505b7ce30ce4bf5582248b17dd47f6a39635007bb77dc5d16b963baf9905
SHA512 609793331ce25c6667067b3616791f3ece470500f797343178948e4b7af18f275fdde226f542610d957b397651e12191aed58dbb88bc1c59eff4625e550160a5

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 30c7b2bdc35c650d2b65150241646816
SHA1 94d466a5f5159784155b6adcc9555bfdae4710c6
SHA256 0784d39379f0a4f971777844ba07550aff31a3d5e32ce1d1eff6f4c7d49b90b1
SHA512 8d51ef924b6c8f46a7ced69f188f2ea583ef3feb7fd84f51a8af8810c51e5099052e2c1513f15ac6fb83fecbef8c984fb4e124ff524c2b20a437943dc127465d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 02b1275a9f1b8635bcc345a80915764c
SHA1 f70960b382813146cb15c621df4cd84c9d0be50b
SHA256 e701be437b487fb3270428cb8e0ebca23232e4ff25a4982f487fd55d1bb7993a
SHA512 151bf8168dcc65f83f6a40e8eded7996ac3367808f376846e592d4e483e560ce7512f8405206c9ac7f7ed31cefbc7bdd3d52392c6c8f9d7e0fae0c8009971516

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 74b4f8603fa238600bd6aead71d9742c
SHA1 e89be3d12f56a3354f561de98dd813be19a277df
SHA256 eb82b50a4da1dbbe63721279d711a790dc8d4ef61ebe6f5910657978be5b0c5d
SHA512 7adacf62887fc853fd9a58ed38a4b2a5db5af1ad1a257620c8248d3157261e45c6ee6e42d8d0841a684b03f0f5cace309a309c73e8b923b96025353567d1933c

C:\Users\Admin\AppData\Local\Roblox\OTAPlugins\Downloaded\OTAData.json

MD5 7a39cae24c1d13e38fd10bcef98c80ce
SHA1 58d8a40b4d16215399749b563ba610c5cd3e4159
SHA256 72de5cd3124d642aafeb64a4562c31204bb506a5c4fe37de302849aef41f0d40
SHA512 8f51f5fe9890099039ef275e5148299a87bcbbc1a9aab5c279105b96efd795ef445803b4422060964b3b010c180c9b4526c82f84433669e4e365812f9642c80e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 895c39dd421df7ddfa4459d3542ba17d
SHA1 cf36b4a414dfa044a56414c24eb2b9ea9120eedf
SHA256 5d92bfa6466bc11dec4beef3d1354cbdbfd30a219cc86183aedb39c0149d120c
SHA512 c888be46375f747528990fa1cae141cdc1d41d714086ae662758def6be2e782225a4b39c6262998d51090629dd07fa0b8e06a1db93508c407bef93f53dd03f04

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\fca5c0c7-d2fd-429c-bc5e-8dca2a3f99d6.tmp

MD5 c4bd5d079716fa871703fa216126d4ea
SHA1 49db9ed482eac4b9d373f37aadadf0ef7e736edd
SHA256 36c174bdd4aca673d3f3943293c5f4005fc9fadf0313717ce9c9b8adca51d12b
SHA512 a7ab479dad06e9b61ec9b3cbf65db42fc5c6f0bc9f5fc19d64f9b3375e6431366e1341a827eaa143a0dd82baef530a435d416f2047aea39e8151132e66d2d4bc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ae6ec90b84cae90742ecb367fb518cf9
SHA1 9ef03e497812d91039bc1dcb195a50c33286ce8e
SHA256 a2e397d5347d8e1b72b3b6c8f9164e34914b1ae94e90e84861f698f89ff07f75
SHA512 d842d12595f166a8530b792dfd9aec4bd0d2c08007ddca7e93ec16fbecbf2743364973c1e1353a3c5b553b3da55c15c9a91f2cda42baf91dfa7ea10224211c0f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3550e936f78df67df5ed77ab4d652995

MD5 be19fbbf64dd152ba39b4db6d78d49a0
SHA1 689cb6e0002c41982d6da79237ff39c56e446837
SHA256 40d8f39bd10b01f82821dc285e0e7b1dd326ca096d23ccfe03b6473de6e4b566
SHA512 fa72fc5046a6715937575333233ddb5831af2d7ef8e05c1a90df4008190337bebf69269625adabfd8400602032bdc3eba05601c8816dbe6868a77c46b5667e63

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5e807e5b89e7b192f663bae222423bcc

MD5 74ed961f157830bce197a658196e2159
SHA1 fcff86e6ab5c6ba4c84b7634cfeff4b457e88e3c
SHA256 bfe9e0df603042bc4d8baf85c8438b6a8e8d5327a2ab05ffcd0a5fe2fd7ce9ff
SHA512 bb9298fbdb0966fa75c75766b35938f6881b9b2dcc91eef82b890015c0f888b4c0de2324498c39844ba1da770eb710c63b842a96f49dbc75e49fde20050aaba7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\248e8adff7e19cbd65597d5e21548b25

MD5 fa28dd2673c5a3b2db14fc5d8b2b6c51
SHA1 315a5ffe1fe4a58670bbfd1521329e321e430264
SHA256 322054c29e2a9f271a1d27f23bf861e9d01ecaeafecb53f9f66046a07e73f94b
SHA512 2bf631a73e4a9c30823d914618d53aa221cf8b50d67d4980dc3096dd1b7ee0515c7eadbb29b8718b6781e669383c8f1391c066c4eb62b913fb8f0677dfa3e53e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\55bbfac2af48ec0c9c886b20efc746cd

MD5 4ec89caef94d0cbf58718f9775f5358d
SHA1 335250cf8892c7831d69a3303af1d566ea33170b
SHA256 b536cc24ae3484ce695344296765a14b78a015d6a84c14e4425b96e2f55a982c
SHA512 ee94db3d6f5cea5f4f747b45de7b7f1c5a0611f992dc9a61763abfc446f0f10c360fa98c3dde62c4fb0daca57d2ea03b76860803fd017450435dcf4f9fc7c49e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e4be145cff99a30974386c98f7296a33

MD5 8b9b361f679551f668da39a5071ea77d
SHA1 7a399bd42d723bf8aabc53f4e93b24f79a0b3b11
SHA256 f06c3af7f24b7d0d9ff2c82442e145e3bee90d6b9480e953e190ae29fcda0c9b
SHA512 777ae84ef264b757b586c6087eef158adfbd7c007108e5c1f09d42716bc7358c0b01ef78de935e036cd39c0cd8dba7a47e47a301ccda7ae5f0f32047a9bfe954

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ec60a946bd0d75c2bb52cefa98e094ea

MD5 4c881751eb4c11717e9d5ea84a9ab6a5
SHA1 17a81d90c106f00d72c08ba41bf44ca5c2ed1024
SHA256 e9ce82b3b22a34beb7575f87c6287c283963077846c51aee93a153a9987c25be
SHA512 c8eb9cf3ba468926734218563d0de8559dcd7c968f7298e6b77cfa6b7ecf99e496c32ff94cfcc3208ee45217b06b7817d114662e125349218022593366a3bdda

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9ee5e549bca97206bd0946dad81785a6

MD5 78f596f05a2ab8693d5a48fd87b5eaac
SHA1 d01862d18c68c811335fff67e73fce710780b254
SHA256 a42d00ecb59b3af9da08f14f305547294143999b7dae42e6fb1204ce91b58162
SHA512 3b6feed826b1aacbf8e6ef118c2f2a55ff2b5ccc4bb834bddd70af9545d9c8d80d75ba0a0543bab7e4eb281a299f2a3cff30650bb586423ce0d2ad9ec07ecba8

C:\Users\Admin\AppData\Local\Temp\Roblox\http\57fce5e7a6192198e16caaa6cf8c32dd

MD5 e8cc4d7c842df731ab14c3c231975538
SHA1 058fbbc394ee2f042d9e6b91e8cd6b9a699ef1be
SHA256 8cf079ba6334114351f1839225f2364302000ea77554e1a818ff170e6c3c7c2c
SHA512 fa9aa6483f9ebb62c882a80daed9a546c8077c6df8b61068db65746e30c49cbeb980f5160cd0868c09dff8b24cd235f482c4ad474d15bbcfff9c0f1e0ba3181f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4c1ad91520866c077adc9239ace3b989

MD5 956ecf59f6a552a720f96688382c5371
SHA1 c107bfae6c3c0680920e8ae3a8e14c40aad2b8af
SHA256 b416d5377f75f66af357fd56af3a0bacaaab2fa3b83e93b4b942b17627005f25
SHA512 de89b25cbbdd0200ac55d9be61621b8efb594008a47bb07608cddfa3bb320adba139beb9fdff5f2b9eb20646e9ea7a7ddd5a74ae2124de30a6e0972825839925

C:\Users\Admin\AppData\Local\Temp\Roblox\http\acee1fc38134bc50c43d7591f34063a8

MD5 f6a087be76fa03b2956142117ba7564c
SHA1 fe018753517aac166aa770a4644acc0c85f2bc94
SHA256 a457f99d73a84e37f8eb16cbe9711209fc1541a4fc892b3a39b4d73befc23d13
SHA512 3ecf67f83c8efefe3203590b5bf91c8321b6105b92246484a1dbe6e8319ae9c846197284efeb94e761dae1d1c2399f64cd829f13e98eca0e9229825af197510c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7ec9eb36e665b51f3cf61b891b782cf0

MD5 057ef1334e2f871f5a9447200e36e1a0
SHA1 df64626052c07214d2e9626ad5c9e1e64d2f027e
SHA256 5c6141c13beed37fec015a7ca093db5dd4a783173fb2835e9166b95371998872
SHA512 89939b64cdec622d37801e1de628fd29de562abb8fd34b0c570149e73149afd2e35b3a2e2e16b1ffeffd4672d544fd922c1b7fea769379c6e25a3df230314586

C:\Users\Admin\AppData\Local\Temp\Roblox\http\36500f6ef47e41d4e04dbdd9e88f3a34

MD5 867ffb2900068467ec4dd798ffc067f4
SHA1 022373b7512bee869725f282cd3fba21fb628c7e
SHA256 b4efa9032bc8b185da65ffc9939e2e8791065d68ab62b31e518bb4150dcb8441
SHA512 6068f1658a52cd5d84dd309be061498e92797aba465e8269360b1b6d0dd9aea4a7080232b54d2c43fe3872f351774dacaffbc0228f89a532c2438b6dbe7a0e43

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3b26df30100e5fd617d857b00bac5ca3

MD5 ced0fabf5f8ba813f1c2db96470f914f
SHA1 c4c51af721b8be16ea4f89b48cf98971e9adfee3
SHA256 bb7d982ccfb7f82acebd126f95d911052ff58cf1507416ab96ebbebbca550f11
SHA512 5bff211c67396d53c504ff308ed2c0c7c2e402697b887cfdbe7741e92b04450eb9083afe2161aa910ac643f6cb18df3526f01b98cececaad1423916f6558e31a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\38cceea314a23155a1e840789f1beeb9

MD5 9c6350bfee87e04b4b232a2472fcdb0f
SHA1 afc5dd45e5ca409ba20e3d62b68d879b65b10129
SHA256 45e0cc2e8e7bc85dd99612aebd3b4de673719b29858a16dd58e31ca09a274f50
SHA512 9632ddbb79fb2e245285f7f700965f37789f313a8576b20ff70eade602eb2dcc6990fc346f9c7b34919aec1aacc545a33e9a016a1fe41830fc53d81a216d3bcc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0a7b57b946eb0713a46564bc29f4b46c

MD5 7eb94a6f1c6e28300ec974d4d662c0d8
SHA1 4ee6c1c1894073811b15987791b502b88959e45a
SHA256 827cb0dc0c4d3145a41d1e01aa4b6e8b423b29607c6b8ed7b2fed9d22b786313
SHA512 b693788b4ba4c01951ff39c7519dc7da3e6195a580b1ee4deacb927f79cd55b62698521fec636cf7858ab9a969e984517f940ef7f122c7002db8424604953d66

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fe96b6a66549d09108dcefff92b15237

MD5 1b7810b8e23780f6fb9e22f5c86bd3f6
SHA1 4218efb9083fa72ee8b369eb1b6e793cc3d1bae4
SHA256 db2b3c51f2cf283b3bd058f1f751c2a5c3a92c76b78255a7462edf5270c2a705
SHA512 3c3d3fe5f5887dd37e6237ff3e89edc32d52474e12922f62a6f2270a8596129f2c773f9901915239759177e2f2928871bc74decefd6fb0c4530294ef667433b7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\acac80f1a1298aa3113bdaa33ad41dc6

MD5 93aa3cdb6972daba5225b407fa9ad0bb
SHA1 5200d2562f13883dff2e6c1009981e22e3e8190e
SHA256 c7868577edc492252abb1ff2d0b481e0b7872137cf1c4a4a04d1632ec2bbb48f
SHA512 bc04a4ac2932a16731ef79642365531e75b1731a7d38a93d282c39695ffab640633476fecd52cae941a9dfde182b2deefbdcbc56c7b2937904afa2b89036353c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f98c4ae8de70329b4d98bcb5c60c07df

MD5 00923ef04dd781d8d283fc4015cad3c8
SHA1 574a8200a78ddb9bdf6bf4412efe13ce1fcb66e0
SHA256 b9da3a269d768d3de1464756824ed74bdb173ef8e3cc7b025e4dfa096c24d2b9
SHA512 6f2daa96d33cbc1242ebf1dc03b82bf1c9ded31d125fcfbcd16722028896f9c9bec62354992cd9a34c4fdd955e724460b292646faa207e82fee2386d913c1667

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5222a94f95c9f807ab8f077ac456809e

MD5 b8a9da307eab5217347d6003c4e85f12
SHA1 7214cc91e75297490318a251c904662f91f72450
SHA256 493288da03c693e87cb19e38b26ec81ee01318e72800341da72a218115d7176c
SHA512 61ce83f8dc302c0c561c62103fd27f4a281de716c9ac3bdbdb0d95e1ad2e09e327e1a37df42a0e1197620d15c527a7ad81699681ee7d2ae67304f69c089ba8d8

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a28a2175b8ecd64cec98102e1ddd3e87

MD5 05e2c712702d07370664b275990d75a7
SHA1 4007d84de0e8fd5244d2a4dbe3ec93c4a05a10d4
SHA256 8f50962d20109c7da748402c5d5c7ae9aad57e33a1ab4f9de797b6f75858c88f
SHA512 d797d39c4f9eb2e923cd5dba3ff64bd88a8c7c2988e074c8aa49aa9aed6abdc300ad98efa0037b92d230993fe49f6b83579b502bd7802095655175352e83ed67

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e64c4416dcabda023278e6070abf2d0d

MD5 e8ca21f7d44aefb58b188d8ff5f2cc27
SHA1 d0aea1799ed9760d337238ea0252f780a44c583b
SHA256 b9de2b6fd73472c4da62ecddfca83677a6b321b662067ff342a4dd295d11dbb2
SHA512 bbc6487d30bdc5f02e6fcc73c74f765a0a012cf67c7c36bb3af68b868f4c83fccd1e200f2902661cbe9a01a173f1764661fbfd84768642bf9ad903e3193481fc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bce19e22ee5ecf494c153697e90d8d8c

MD5 fec91664c3c48688c69c0fe6d7d83fe1
SHA1 433da77da7358e4130fa8f0a8f95d717ff3e1253
SHA256 b5641956f842d9635e4f4fd092fd9db9f3f3776dad3c768ee1bd6f301498813d
SHA512 79f9432721e09642efb1b31025ef77edd01b5c8f5b71819e8a5456eac490e88a170872d5fe218bff442079cdb62d86064a4d8fe303a74d09e36f42bb2c43c13b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\81356c5e3f25ec622628796733a1d4c8

MD5 091a982267fbf47412d2527e630696ce
SHA1 22998fce2e7182b74a1f050e099b8878e7ac341c
SHA256 43f91b09beeca220d1da02e5e4e641a6ebf42ab852d39ef716891d25d6d4c879
SHA512 15aa351ec41c33e21dab25182d2eeb62709d99d64837476cc1e47525bc3b5a2983f6e706002600075c7f422761124d8e2d3663db07c8d0d4025017053a0aae43

C:\Users\Admin\AppData\Local\Temp\Roblox\http\38c2d8084c07c0859a2b556949c2b9e3

MD5 ea9f88957e5415eca92f011c105a7c0f
SHA1 40e79e1981bdfbb763b7aa4b1c1211f46bc86be4
SHA256 f335b6922397675efae0a720e8ac32fd17d9e6237438a75be6766decda107a98
SHA512 9a749efdc26853ef04410d8a2e855592cb0a24acc82ce1e5d2772cbfc373764d010ababb027f9e749ed6356038f76a4e4466a6e6673cd36815508335bf9f1f2b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b9051e990b5096a3056a29f508153087

MD5 751a15acac6e6d7cb1af8fb1e4db15e4
SHA1 59c8c2a4ada2bcc47b34d03f08590ccdba0ab084
SHA256 de7639b169bc207c54454e867fe7209cad7e4b81adac8f96514751b4c19c7b12
SHA512 435543f6b39403e9fdb3b719f00da612783bdc7a0a7e85ff0561ee8b6193cdba950d50470f16dcd0423bd33435a91dd4a6ca0ebf632abf5cee8fadc3354dc8bb

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9896eb4d56f09582fbef8ed113edfea3

MD5 cd7e42eb1b842ccafad1317389ee5bcf
SHA1 26f09cb5e0e43aeeee9eb6f8fe198fc7a62390f4
SHA256 1996d4e15888a771fe324b846513bcd52d7d22ed209e063461b563db1953af5c
SHA512 5f682479993cb7c678ea35965c33b52c955444c4a9b5e1aca6fea8df4f63e56cbd3100e8f3798ea027afdd1ca8f52ca40bb7f3d59fbd95e24bb0395fec509679

C:\Users\Admin\AppData\Local\Temp\Roblox\http\89e7233ba5845b59eedd6306a5817bd7

MD5 95de1147e5c7ad2165939499e3c984fe
SHA1 a93c001e04d76b9b62b301b2fd477283985271c0
SHA256 c61d6142b7ddd41c4daf8d1a6bdf332caae44b6af2bd8e40ae1d2ba44a72ce09
SHA512 bdc0c4af051fb4dabf6563e2aa930b2b4177182409463fd6437ffe12f4a6c67ac9131d2d8791061135c657331fd9fbc4087729e6e9bd681dd72a03cff3817e4b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7101fef9ebd3525973c76611e83c0838

MD5 5e26d3a32d708ee24c2a9b6feb8e09ee
SHA1 d0690f44155ea27b7470171d340f35458488ef17
SHA256 cf9de7a583dd46cc81ad39a37a3351f0840abb802e0ac732181ae146180aff51
SHA512 b53f8b26df9b6567f4a9f8ac6351150e4e2262cb908df0a40e5e9743d5975db2ed733026e99cdf4156341031ab0541718241e5b869ca8df7113be95488f47f93

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d4183584d85d5021e21566ac350d9793

MD5 a0c7fae0bfdaf56f6b093cd6a4f24de2
SHA1 c6d99f787d59362eaa4714268a7025f9d53c0558
SHA256 72f7c593328cf7d97713084b007d8636dd0be592e40213965262f84ab97ec017
SHA512 e5a6e4c56810de566a97d014ccc6194644fffdd4f66f360e8a05c3dd12a1e75c4ec4128e3be601634c70090b4ab4f34c00c30afd2865f3c5db17f1c15b5bb119

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7d0f7729698f492ae7cba0f57c574165

MD5 4064af9f1ce2a20f96bce1f15217e00c
SHA1 f520818fb4d2399b228eb00c93de249aef41a1fe
SHA256 25913e9d83796f7650ce7fe2b33cf24ef53a5afe009e4be966208650951cead3
SHA512 0f8164a4f11006def13dcd45df92724c4cabcb54463871e07ea6c838ea80a9d8548fe54c507873051f0216ec617ee3a2a9a211c10190944daf57c8af74455600

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3c949acb128d865062aab3ca0a21f258

MD5 0b0d8279f448167ad92d8e16023384cd
SHA1 29c30f34dff8a59d4d7a447f08b308e4db3518ad
SHA256 ff942bbca9d2637312b18db341ef0032d6cd43cb3c37563e11c2913197eaee9b
SHA512 a7e55f90c0626b0f87a9eee3154b3507b453c8383e22dc9b73813f5429e6c599b064770c87a77446c1948c2a9d9ea15a0ac988fb3118ed7a103dafdb0fd7c861

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b26fe2fc136fe028334420660073c041

MD5 932ea1206b50561a0a507b4685478747
SHA1 90f22be80b8ed75acaa9ea5db68d34ef5f96dcc1
SHA256 0a3d06aa2c5e24e68ccbf19f59a9e3471d002640705dc80bc4a95ae966647c32
SHA512 0f5494e29c987fe346745094e3265d8ca1ac38f988f9406280eaa177aa5f431b3b3c2bc1228f480fdebd2f2724a8b4e0e89e8c2e7872459f6daff078418f009b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\cc25741a2b3fb8bb321263407a6dd478

MD5 d5fb889c44bc31778ff78ac578b1c14d
SHA1 f829fa8f243bbd667934345d8f6e5f6e259440fc
SHA256 996f7c5b39ec9559d35357fe3cfab93b3f7ff24a699de2f5b855c8b587b61b8a
SHA512 e64e7e98c3d0bb5158d77dd761f4a5e47b4b28ae6187973ad4f0877825b1409c3bfbfd0bd6c4f3906be51dea4db42ecf4787222afcd257152b80731c778c8200

C:\Users\Admin\AppData\Local\Temp\Roblox\http\16fbebea7d8822724cf357a804e0b69a

MD5 0419987450df957bfb24a5cd423ecf7e
SHA1 0a9accbb502ea9b30139a64d713388dbcee5f89a
SHA256 1bf64485bfe27b226f984e5c5a6b7dc29d7108cdf69cfca8e860c51383a436fb
SHA512 d40ced762d9c2b51d73c5a411add9b1adb8b1244d9c8221b342e5d219772c381519c4ef677e4e12f52de845513c776152dd339c3d8c3c3cbdbf48846d84931d6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\001bb9eb8e1494affad1a50e43c8c3c9

MD5 355063dec8a3eec2a49edf8945e8ce58
SHA1 797370427188744d7e62a0ad3db74e009ebb49aa
SHA256 a83e7800acb7a11fa111bf7400c1a2762022615737f19acc89bc8dc2d907ee8f
SHA512 b63ba388ffeb3c7f6db99d00cac0c8279774995757ba3f87f21072692792079d1141589c0cf022354b7e06d66d4be9cd51d8293fc0daa53660982e0a21ae029d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX09F3F785D6FF43B98902ADA694E0CBDD

MD5 94b44243d9e420ff19ff04f4e434b83f
SHA1 04687ed0f779c6873da97da0f16f042b2b459b69
SHA256 f76c45b8c4831588b971b25431b7b85f529a7214f99103ed82b4c2e97d9919e8
SHA512 b7778206ef730254f469214ace61b13f7031d0c4c751b2988decee93dd5a6c8336c40974af74b0aca6d42874d54e23dfcdfc743f5d633610aab2f05e948bea6e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\dbd61a11fcfb26392338fd2b1ff6a849

MD5 7342a963fbe8b3a5bce98391f7c91497
SHA1 d937946afb025eb344dac220aa2d8d3494c759af
SHA256 3306f048a000d6a897405f05abfd4c6ea181af54c1b77f6db995e8e00a7a17cd
SHA512 fbf1bc5dd2e4dd9a4bda60309ad0a9d891b60f5666d003af712028b28e740f060d6d745f1d33fbd8db95f0d6d8b4f1ba18a8c9622bf52fba1d14f2299ddc4053

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ae11fca931df1128f66fb8b075fdd47e

MD5 5716461799e03c40082529d77ce0457b
SHA1 37e4124691225e7ae117baf87fb07e8e2cc3df63
SHA256 f953e5f6008b079baf47d31b5ada698b8919c7a82b2190f940fdea9f4095d9b4
SHA512 4d3ad23dd8dfd6d19ed40dc492e28740ee3c788b9a8704330dc1b360d2c7052986d36c14641d7ee95ec3ea0120b2fd732fac5bebbdd09acaabe93a5518ca3cd0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e24c9ffba3806279c6b8ad296ab9b4a0

MD5 8520ece7ba7387266e1715693288416c
SHA1 1e80c4cb9451b07d01067701ed10bedeabc9a45e
SHA256 c740ba0827763221997ce3e66033ed042f63420aba9d02ee71e85d8c5646b55e
SHA512 0c017c1f1c6d1706096a11d99c804f87c3711c77cfc774521cd45dbee6f7bd836555e7ac1cbcbdef329268f53e6492f0bca89ea82073fbce629bea9408b2bb52

C:\Users\Admin\AppData\Local\Temp\Roblox\http\72118822a1d711af96156323b38685fc

MD5 2766fc3d120129459f299d62b2f40bbc
SHA1 11db6ff453aaf77eebaf01a6bc61e2127449be40
SHA256 acadf5b10a383623463b33644cde1d5d3a6ea896272473d7d6ab72354ace7b8f
SHA512 dd2846e74666ffb5f40322e9b4fb915e5030c44bad228804214a186239411026c327369f4a8931c73f5af3b83d038d9060276c9cf0f550e0caec366ea7948e01

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6f36c34e2ea49405b6d51310f54cce89

MD5 0f64fce8974acdf7fec2d1b77c5abb3e
SHA1 eea2f3fbbf93312c879d5bb2e1d0b6485f3381b8
SHA256 0835c29bbf7014a20fe24ec0ae172a43a06e349e9bde44d04fc54fbd20ac3268
SHA512 7d382311659189c82b334ab72662ae8696e3478eecf8a59718a116828ce3c9ec8dc733c0277ec6cd71dce9a28f92ffb7e342ba796fe6dfba1a5b84df0d3f3915

C:\Users\Admin\AppData\Local\Temp\Roblox\http\de65b167b06d0f941123666323557772

MD5 e22336e42de09fcd99a8eb257049ef98
SHA1 ed312dbf27685af07e49901ede7f17417bc54ced
SHA256 425b36a528d04dcc358eb5fb962dbe071fcf3241fe7c6311aee19186216521cd
SHA512 d7da02d06e682b19e849cc48e6dce60720bf9181b571eaed607224da662cf6585b36fef3fea8b43626f2724e81885af405badb98f1a64b795aa521cc56f6640b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0b39eb4053e10b7ff21430e80432eed8

MD5 be1dacdbf4fea39b16e7c11e286b7205
SHA1 28ae9237170d6fa225c54e7a36e35549d191d450
SHA256 3a6d14f833f7da8ddf3139d42e41b2b83d1ea0d4570db39d9c10dd98e33da800
SHA512 72cef9e399c0652a340cb12dd239cc0dfa14a2c832fa63f76dc442308ee9f91b41ddff62fb70331895716b61fdccd332f75c0ba2003f818900e3e6f260303176

C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBXFB555EE99D004BBF91AC8FE18A48547B

MD5 2e2350147bec3587e3bc14b7a1e32c2a
SHA1 c275f45e728f71d24ac6d8b496865c218f972b41
SHA256 7ddec5794d779b1ad88ffec41f00c793f21046d18c930328d662a3c2d1c27d84
SHA512 670d3893ab1503dea9437b61b2b1488238d84d3703f94b74b5c20bb7bd26eaa0479e6d3d91319219bae1c1c357c6807101c5960ee2f29ff48475c0e6d9ac3adc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3acc8af1251b7ed321f9b36da661d9ed

MD5 808cb55c51b6fc55fa6cdb17892dc876
SHA1 4487b86a3a42ff05e109800b1827c100390245c0
SHA256 eed0725bdeac66a2e53e7daaa033f06c360314d751df70176a0af3f23eb08c7d
SHA512 0d2e6534792e7d417a6fa8403f22397f406352a38bfe1019d87e0308d041b3e69d7defae77e2bf6b87adb3b7d59718efea7d5fad340847c681eeb293beb0f24e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3a13b410d6cc06aa1cc75f8e74d8af77

MD5 61ef260dcae1c28d16728cc40e6bc03d
SHA1 d644ed2b9e9d9d852f99ae890a213a228acc859d
SHA256 7871989d13167f176163cdba50640a7393f5a262ce8fda556198113e08b80446
SHA512 3f220db6f2897cad7ea49393fee800a14418789d8dadb250b3109769df6be5810ae11f1c9d2c98b8d414a6e6a6ddbfd58a8dc1da84ee81ee7f2b4dd44f48682e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c851a4963d47d7e88838a2f3fedec464

MD5 518a6cb30163335e55272813b2faf86c
SHA1 2af9f607905199ffcc1507a3d369f181b14e111e
SHA256 bbdcafb0429463829646af2ddfaa9965de22f63f830309649f6c7a63183d7e93
SHA512 4b7117f2c3693a4c1ca517f0eeed3e6eeb95b01b850265653221aa9f6bcfd9d4340f7702be4bebf1ad5bdbe75d0721878b3748436231bdbf00e4221565b2fac9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0b0a19486105edcae92be2961717484d

MD5 9a6c7b38ff07b6f64700262f7b5fc91b
SHA1 845e251b8bfae66c901ccffea17d1fa6814075b2
SHA256 0119a3ddea6600f2898193f7d83224f74b803b276ee5a15a30bf167bd7406291
SHA512 5eb8e7e9ab45f5734090d7e7deb8d4579eae68d5581aac1cf4a0e1e8ef89cdd1dd899dd5dfa8ce96d53a0733501f959389b925481c898a0ac5736c33d4ebf9e2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ab09beaa53efc07580ce6fade1319d1e

MD5 574d71c4a891fbfc8a8c53c71abd5800
SHA1 095fb046b95c84d96bfc547a4f411238608ade3c
SHA256 1d12792d19e5b0483c3a93eadfc70d87b4cc9c4982e9adf5a2b23073b4320321
SHA512 725277d2365696bd580b2dd6051264719e856104122d1a6c3d73b59d81429cd50e6b4e5628525fdef17a6403b4aabd657ac4dcbb1f047f41011971915b003212

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5477b96b8c7694aaab08397c539323cd

MD5 74efd118f986358ad4cde9a57e61dc32
SHA1 0cfe0335bb35298456edc9ed791e019b70266c31
SHA256 b973558fa71e5b3a07fe6ca6180c5bd0cffdb343af3a0d2e4e4e89b40b194ee5
SHA512 357ad98fcdea45563ac733ff39aae16b103a1327a063445b6febb89616a61fbcd140c2148eeef122965cae78c2158bb39bd3eacac6d6c70a58546489687dd733

C:\Users\Admin\AppData\Local\Temp\Roblox\http\db074cbb41ea86a3283dd96e3951dbaf

MD5 59b2e1cf3b6068758032f07a1a93c495
SHA1 2e518254c5c44999f40c226ddb63ecf620d11a76
SHA256 106b13897189c5a098991d46c6a86f04980a561afa26c1087c5cdf432efbf758
SHA512 a4f7b4ee8be9a79a307517742934e02b2c59101816df50f5731b55b5984f82105663ee1aeb13e38c2f2ad042df3da0158de6b7dda1910a1956e4e8f2640d58a1

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 eaef4b677b2babd4fb7b29da0f065bf5
SHA1 655dc02137cacabfeebb0705832c3378062b1598
SHA256 c5a33fdff10981930005746e120f5cab8bd1321ea949ea5cd1b2e34a88f7aaf7
SHA512 7ddab6aac206bbd23350667487335e674466d66b3f0c425ec3789a62749bd6073eea1e1f5785ca539a0b7e0bbd8a83605191508d97c8280644088cc7d8161aa3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\eb21e94fde068a5a67dcedf47aad2215

MD5 f5696211033f6ebbbc4384739d505d68
SHA1 be68f1a440ef125f2b4763378cc79f42d10d5aab
SHA256 8820d58f00186cc8a0b12ba103efe022d9acd9de1b44b3f057cb01e61885a910
SHA512 3b2e179900e2c69e5d944de49df36018b6207293c45864695520086d48eb4364fee9b707ee993deac34fdd797b2a0a15ba1c24982e614393d41170ac1b30d2d4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e8c6cac235cba2d35db57b096ba32fb1

MD5 4611d82c771e88b1f9c11794b3010997
SHA1 e88789d90c96d541857c193b31bd18160187e55f
SHA256 2353d7c1d124ed512d4dd1e803fc9dc41f0c20d1a75f0173e08586cc8becdab7
SHA512 949fb1b22b64e3727d5a89f2c1866cd06515957694deaeee6d878ae1a165e7408eba0e791d1d76da4d013694d0226312415814aa33a6ddb752c4309f9240472c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\30a3a99467a97f92f7a6501a97f2ef86

MD5 fbd323164b524770b1cd80ec5a32661c
SHA1 e0be0dc70259fa3d82ff269a7a1d7f2b307b6d2a
SHA256 ced1fb97dd64590401268b297bcb5ef14af73f45e9dc2e7fe15d1186c54fa8ad
SHA512 795dd0fe16de0962087be4c7e6999683aa875303422613f99e8874d2e262781b07f4460f89dafa08a3ad6ce8fe17ff9965d81cd62b3d228c59b903f26607a185

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f57ad04647f264ee0690618195f18054

MD5 fd816107fb17e56cc43e2eb228126a3c
SHA1 4d6088af96f0ae08c7a65b15605cfe6109bb6196
SHA256 08138e91dcc2d1ccebef7bbbb2baee76c22eff8f97b0657d32c0b800fea9c928
SHA512 e9a247487a7e47eb5077ad5d1ca3d87d3c251d436a4d148649705da0951fd7fb22d4b742d944b2b9ec9f15fa994af6c78fa2be446f7b865800713fae9fedf561

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f46a00cf7794d187e97da28e14ee9933

MD5 29e30bd74d25a983d3763208077bdd7e
SHA1 33e39d8cba37db8e899f237ac9e4a83a3538658a
SHA256 1da80d1f4dbe143cbe20060c7cb9de541436a33552dd288a281a4b87d33e7585
SHA512 3da0425404e8d170e60e48038056e84f94cd112db3980ba440a4c63a48ae1984e172ac957db07736ebe16e2a549d2dd79252b6610d01772915d67e1ef7673a26

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1faae132446d428db1590bc4096fdb01

MD5 9a00f402a241fef46fad239d3f7ba367
SHA1 8c3840f9e8b546c82bc037f4cb5422a5e31ca165
SHA256 6d16dafe92055e9bf11ddd1923115432bd9f4ab42bf8e4f71c1a68e6ace09bf4
SHA512 2194b14c9002a22af34f276f7ebb819eaf0172828307679664277b17a4f2c9e8263ae32c53f041366550163923c6c66c9e2d9b235867af79bca8b70067c22926

C:\Users\Admin\AppData\Local\Temp\Roblox\http\374b2c6c69b63ff3a8750fa96de75058

MD5 29105938a972c8fe4687cafd00823295
SHA1 ff9e17642d58eb08dcef5c6e06b835ba9ad6f167
SHA256 8ea5b20288eac220ecfcb95b09d26c70362fc225a871d22f78b0b9565a5cba7e
SHA512 f9cb42506f90065c51462b1d60a5187651cf6abd2fbdcec14121749b2b9e3154330c3c43358de65700208789becbe8a85c60a735afee4322913760c487dea772

C:\Users\Admin\AppData\Local\Temp\Roblox\http\611ae1f182f1efa9069d4419267a1e12

MD5 8fbb3393fc863f96063bd3736a1d709a
SHA1 4b59268f2f91dae3631c3fa08d9c81c83143b485
SHA256 e00cec3c4518e07deacf21d9d11f3e21cc822dd010ec0fe762e8087926a5c7b8
SHA512 5e0838ca72e43f511e4f537a26c4aebe52fa18e4290ae43ae1c559ad0c89fb91370b805d6f5f6ae410e97247765ed9f1b85f5b30e9f701243ad067eb3ac801be

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5fa00ec3731ae9117f079b4799d6cbcd

MD5 61e1573e05b5d1454274acdc99114b2c
SHA1 4d38d0500e5282bd7b5835a1a1e322bf68da443f
SHA256 04457d4e163412caa0f42fd459a0b93d6a299568ce376420c51fc7339b6dabfe
SHA512 c8e0bab0cfe3d191e29d327bf723e2c28546aa4fed5336a473c7ca8f52a56265efcd77ac4f7fd5fecc875e06cc927ebf12ab35a16e0016450df0317c4c9a9ab6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1135cbcc74aa168d3992ed8ab748e124

MD5 c9540abbf881ff987a9f4e496528d020
SHA1 b3d22ae2605bfc976fc42128c4509901d927e1b2
SHA256 a22fc25db8252152d1cb7e07d1bf7e5de47e1d00e70b729b49ac9f94e6fdb2da
SHA512 a587ccab901b632ebf9763acd157b66742132b9dfb67ed6239796be507c4f76b0470dabd4c41429d1814317cd2bf852e9d0e798ad685850dd5d37de3b1f9306f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6f2f8eef3bb2d049849f2733e6ecb031

MD5 efb15de15901530e52f0bb5822bd4025
SHA1 4c9d9dab5741581d34867d14f6db5f4b679dd1df
SHA256 d43a25fa14f7a67097c8a8ba0b42e746d8a9e4335c68ff51100aa4c427737d19
SHA512 d63da70c4608e52af8f5cb29fb7bf3e9ed7c9d9a17b349c5eaa4c0da4556c0e75f1803586133adf1066bd74fa013d3ccbf308199022946725e61b64cceb35965

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3e2504bf31b5aa0ab48a8ae5f1dc5f1e

MD5 6abaefefcacaf36071c43e9dc51f1bda
SHA1 a562a7fc46cec9c90e86fa570267864ef2249a20
SHA256 55941590b6aff4d570b3531c493c14c46eb687ed9e4de19200de1681987f75ae
SHA512 5fc4b6db68c03630673789ec5f5d017709e5a9011f25575c0e428f4a21c30e1f6664faa9e4ed456ae79c7ea0fc45db30b8d45ad9b4e2e94f49b27c50237872c3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8fbe2ad68bce1f4933b291c365e04e75

MD5 d6a9f27b18ba6c1cd064cfee32420a8a
SHA1 3eb4fe70132f76c96bf7f951070f437ba176fc40
SHA256 612baaa3a5eeebe00562f3ecd4490073f3313811613ead2948c1626128191506
SHA512 1126e9b53315742eedcb4e28bec6330c03cbeff2d311c9bca1e8280720ded31b6ad7f4f4b6899aaf23656ec46b19fc2ea6566226c1fbb1ded1c3790832d9fc1a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBXE4DE207106674C91849E9E1C15B68B5B

MD5 5bff0b6da657e8e4ed652a4a5faf57f6
SHA1 ad49b5a7c4734d26061b0eea4496fc41949bc5b2
SHA256 c80ae50ae40768b21e62b593515865bd729b4c0712a006cbaf374a66f14f956f
SHA512 146a0ca1c20471f2921f1c911692223b77c4f528f2de47da9df54c1620242230998b86be05b436a725e64665a008cfc21715e114fb0fd1b9e0786288ad20ff24

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1a1d7a8fb35b007494a82bd5304ba1e9

MD5 2414d644ab2dc0d3c58d8546b4cd7ea0
SHA1 77a854549c69f719657f5d404ae9391c705d88f6
SHA256 28be75fd24c5225fe212cbece08722d92c4d2816e5c3a0051294826a5fe79458
SHA512 02bc18971dd372438e6f93b0db0e29a2b647b7e1acc5e8d8321f73857b746c5523e7c720ddadb96363664fd5652c30d5e396f7128813dfc0c30fe7ea4086a229

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0d8b0fd3715ff57ba968ae5740d39a12

MD5 a3366bed53be5f4fed574fc819a07072
SHA1 a79b59561cf06c8a209fb701567a67376d83924d
SHA256 ec5c1697be4eba9851b9a413c13e1a94f9846f6dba1d8d0fa33e1ca7292e8030
SHA512 f8424133bac79bbf7547bf7076cbaf0bd0767f220778275c36878bb982bb69bfe64aede42d67c9db009047e66bcf5eb9604205f6b0aa9a801f6827e2034399fa

C:\Users\Admin\AppData\Local\Temp\Roblox\http\cb8a45c1430998ec1304e4c79176816a

MD5 933b1f5dc544d9868d257d80e517c112
SHA1 a8d55f9cd5f79ef7f6fa1ffb229d8bcfb30ce348
SHA256 51a66f59fb6018efd308234879746581b50566d967cf1fbf63fd3fb6917f1295
SHA512 6e03ebecd629ec937171a7a2d11a88c83c0267c0f153b86194683fc967f0e1c827e6393a39af735813a1cb3fe2297cd6582d2f7578355e797a5152dd92d6e600

C:\Users\Admin\AppData\Local\Temp\Roblox\http\32c38bb4f4a560d621ab93aeb6ca5d7a

MD5 f7b60787135cc235066319d2412e77e0
SHA1 ff9e626cfeeb124bc95d830d20e13b15c6427c77
SHA256 e815d7145b898343e81a796bee29e8a71a678c9c3475a7b1107cdbefeefb6152
SHA512 bb21ace97ed300299a276844630c2b30aa0aab87a3a8684391bbe37a0ce7761c82011035f741cc1f596136043f1871d16b0238249d3b943b2c08fdaab8c0d762

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5b794cd8b1447c984ba301aa73a6625d

MD5 2740a9a1a4020c08f3ae9fce5509416d
SHA1 371eb56fa91013a45a38486d5d77ccc12ad03990
SHA256 239bce8cdaa04b7e91497dc8fad14e5af36ebf244712d7a04e37c2be5a0e0a38
SHA512 fbbad878010bb317d5ddc6de48c87d838db393fc52c564555883d07e62b77cd37a3584414566977fbaef792ce0d2a00cf851ce871e880d1cda34357d2fd4682a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d8b4554062d011287069393d07af8706

MD5 a0c28b8252eda35f15ff0931e1817ac9
SHA1 3fa429b9d0b8926907abc63b81a301bad2442eef
SHA256 ee880812bbf7cc1f00cb363632e9746e7342cb5048765c483d56f4284e555a0d
SHA512 e49af44a8fa6e0c0fe4a5f55df2910ff43a6a9360d6e0ba507375487526fa4fae8c974763e4bb757e0907036141123920024adfb312f9d53703bf6d45a83956f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1daaef2a5ce0ea927443fd099437bb55

MD5 e4a239995837749223ed2039a40a3a21
SHA1 b1cc97f9ffc3a367dd3a55a1a3342d59cb610403
SHA256 36ef28d0243f78f746ddc7abb74563980829c81dcfb91abcdaf6459bc7d374af
SHA512 ad81fe4cbaed589da0a3b97c20e7e5fc0deabf5910b1c41dc7d6e6e8b8f22486f71c9577886689739bdb87e34b330ce43cb60fb2e3c1305d77984ec78cc0879b

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4dd9b09ac0d9a7bb380a273db7cac4ac

MD5 d97f6e22eba42d95c89cfd439f36c1d4
SHA1 3a439aff0b80708f6510643f70997b897500d2bd
SHA256 25f91091126b2855bcb9c2daa26fec21fe7cc6d25319925a95a55a37cc840b6e
SHA512 52ca405f845e8313b0a04657eaa9a22d1c4fbcf758d5796d2deaf41c7ed6abc28e3597dc1f5d803c009360a63db4e686e6622fac669c252b09d2a3d8dc451e72

C:\Users\Admin\AppData\Local\Temp\Roblox\http\9fd0b17a3402934b24f3b349c8d753a2

MD5 59e7e73fef4a9df2680ff8fe1722014f
SHA1 2b9d42140ad6207b1e3f5cf8d66b345109cb1098
SHA256 05f280e512673a8f1358b88e8706bf5a763727dc16e8c43abe1be6129a820b57
SHA512 49edc88448345ee5bbb1093bbb62bb49b0ac3c1c0a29d4a862be76845fbbacff0347ea457d66e40f721dccb8071c18e4ca7f41cbce88d57a64a02ed400f4f783

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc27c501541df155b6fb12496e5bac70

MD5 f635924f866829484247044f991b14ec
SHA1 39c6f43e94e4b0d0ce9c30da5b78aab7fa5086f5
SHA256 30b18b2546442b630f0fb8c6a7c26419a9a73988e8e1a118dae5b7241e98074b
SHA512 ca145397fe454c2623651c9ccaf86fd15212fe83d758fab2f8de35e4ea00f8eb8f58aeecb2fc95a4ceda07c9bfa960ccc29b1a56c2bb317c94297c24a366be68

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcbcf8ab7914469e06c8fa6ee80f2201

MD5 958ad6c1423022b1905d452d8772d16b
SHA1 a1c5aef3f0d7550f8a9ac31ac1e295696477c02f
SHA256 8965deb3f4a35faba9f087defdbc2fb071e006f283ee7e6b1ce250c6ec12a49f
SHA512 5185a342c83ca7770ecb1103d95d061cc17c80526f755ebfac53305947b09765515221ba65b43a98eff3860e47bfc7a15f51e67d0636de7596a6859ff20804e5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7948b73360f27446739cb67376a2d7bf

MD5 6c261f23c63795849eba5b1ef6f17cf3
SHA1 464f91ce49db8b5546722bd62c4f59aae33dfc20
SHA256 e4274c467ca592398736e990eaa97a937f209768239400cd90ea59f9e58a27fa
SHA512 ab6f671b1939df79ee60a873148a1763c06fa880e2f17a23c9e09c5401120873167905e49be3abaf546b9fee33096b76a5573a473b72de3806c38a128ab91ab9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f469136d50a09240f313e4f48b35b40a

MD5 81927a5a1612202db2ce511c62ced773
SHA1 4414e92b078a515ca699a82cc3bc64a1e264e4bb
SHA256 a8a2313bedad3d93a06ce01ca1abb579013d083e2fec866cc22342713b7b6b2e
SHA512 33918119fc071674aac79062c0e4bab978d04cc957189cffdb8c1bb1c7add1bf7d9a0ab03b08d9e997bd8734266bcbc7a312b316f8303347e2aba876022e7cad

C:\Users\Admin\AppData\Local\Temp\Roblox\http\77b3cd784a40d8349719b23b5c0e414b

MD5 05c43f778ddcf81fb06a2fdfb4f7624b
SHA1 616dade772feb66bb1b8dee218c7a5a39d43de06
SHA256 f4a00d60cb52477dfdb2eb264470e5daffd44139c118b73c80e8fdef16f9dd45
SHA512 a2443c678bc019dcc50fd7a49d5c19dfa0c45a7c43fffa24ca225f0f24b6839865288b2fe843bb233752fe59c712c54bff8d9b5c4e8ef5ff4ad8ef20b053feed

C:\Users\Admin\AppData\Local\Temp\Roblox\http\09f04b99b82b262e105a232e97395311

MD5 e3a0c050904f457b02b36bfebb1c0b6e
SHA1 a611605082957d8eb5dcb83939e1b6bd3d870bf7
SHA256 02c51e5a41d473f8e0befe8e5fb49073f0dec0ca88ee83e0e6a3c0ba3e18d399
SHA512 f2b6b3a7c193a951feaa1d5abeaf52316773d7895284e806f7267708672f6a7baf37191a244d2c044c785fe967d416353ab83517b28932b9e521172b89e22275

C:\Users\Admin\AppData\Local\Temp\Roblox\http\78e2b6ce1224c7617a6a8c90174aa783

MD5 22b25a819c414b6c626e5306888142d6
SHA1 e7d68968d0848af0e5203409227a1980dfeb4a0f
SHA256 275eacbd4554f5b0e4a4266514243c661edb1e4eea694a2fa01ac20a531dfcea
SHA512 bd04fe05aedb2cf10fef09648566834b019d40a6ec8532b19edcbb2348059984dbd5c04d6fd9579dac55f99a6b4de820cda159256d236450b0d0a51594e3b15d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcece68795e396ad03d6e2608d740126

MD5 0ba72ed050100e6779ea0f1c713ac441
SHA1 ff585cbb4b671bd3a04f3bdb2512a896ff07883b
SHA256 0949d1f525ea9da560f02a0447eb12a33ac6db673e89754b8f3d230e24ccfd06
SHA512 22c09e80f4af164d94ef40999572d2ce35bfb1dfacbd1762b380c9685889d515ed9aa064db4f8ab6746c8a26ea4ecffef9337014293905abb2f0cece7344b851

C:\Users\Admin\AppData\Local\Temp\Roblox\http\848d350916ab0af9758cff8167a2aea2

MD5 0042d3425d57e55a4e8c899aa911012b
SHA1 f260334951b11b4ace9af45974e365ecbc6cb9cf
SHA256 f312918dae9b5ebf3028f14575ac8bdb78e7f152061fc59d0885ab7acb3e9581
SHA512 cbab405431b5a95ae3c9d3816b4a1c4d4a07cdc4dfcf64d0977ec80533a6029329db101ac36361114288fa18c769c85a3f238b13f63d2e1e83ef4ef64ae45521

C:\Users\Admin\AppData\Local\Temp\Roblox\http\706b550a2be783fb6e220ca8181485e5

MD5 be4a508de308b15bf9c711a769ed61a9
SHA1 2b980f20a1466d2f1508bfaf8dc2a2558450c1d9
SHA256 0ac514138710cda19cc114cafa8a3fce046654dda1cce0915f525c6f5ed0b812
SHA512 dc71cf06e2466f17b843b96fdbec856b3b67df95105895597e73fad455340d4237f1b7cf91ac2906efb9efeac89515deb79a045859a0651420edecabfef8cf8c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0af1ae578b1c58a0e785712d31028c1e

MD5 4ffc139d6996c3eba2d40053423d07fa
SHA1 6da7d02805c626596d055c20cf084aafed9b9768
SHA256 0445b87f48bfd12bf0dae91d8dd7c20ee924212b4cc8be782c0a54193546f43c
SHA512 5af3417cdb0d099add05b22090b5aea9ba39069c4704d000aa323b859e47ea67328f616ab03b7b878ef8cce0d528ac0ff5c0f8fe305175b952e840368e0d4a81

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e526d6628fea4b1243fbb953bdf85ac9

MD5 3964c0c8b23c560175f4b299e1a9605e
SHA1 6c155c8a5ece5d5d7340ee4ff0fcb730e4d2b0fe
SHA256 20dc4a3272ebc6ff5edf0494d9e6e2d06c690bb079a36bd04e074818f16a2dbf
SHA512 c6f53903aa3a14f3187bcec1afba4b5b07c10ebef6dd10a710f400996f2214703d29d58abff6e7e0025ea91a78ed2f799f69c542bea006dace570464acf90d64

C:\Users\Admin\AppData\Local\Temp\Roblox\http\175af5595dfe9780b5b7b10ecb943336

MD5 0c9078c249c45630688d2af7e0574c25
SHA1 8fae18c0c69cf3a58abddcc9a55fba6d81aca2b2
SHA256 b0e7f0945d5de86014379ede1d9a9528a8c944534ab33e58c7b3be1b5706500e
SHA512 24e0cfdac58bc3714541bd39f6992bf0a4bd4c47e492edc40b72d045b4f06573d582d9f4e50e0c23f964ec678d857752caeec6a65ef89b70e2ecbefe749b21f0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\571e70bdfa73e0cdaa28fdbd2ca19ddd

MD5 bd289aae66f24d373fe9d4388f8ba9b2
SHA1 4d248d4f9aeffef2fdd953bffbacf81ff3ac8554
SHA256 78561a946c48755de0fce9695d30ab82d9e5dfce2eeb0ef6a0824282bc88a0d0
SHA512 50666175b0955dbdf933302016675f035df38deeef6b4a0e8d0cf40b6e3d2c3e4a089a5b78d75015e0048b2e7f91d81b69857004d55436437d3fa0754d1ef8a0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\be241f3cbd5449b0c30c651c4834e3da

MD5 2866f1aa81a7f9c354d34be6a58aa88e
SHA1 c470d8ad431f9876d7966796a503c15440a35345
SHA256 38baca61b0de1abef8c3a97557b6e246fbf9091d1193e3732f6011508e5f0a27
SHA512 1af43841070856ee4c509080c286285ef4850d9dd8507381a5045ed748ffdd09fc32843c0d18aaac70621a8ec88064f0a3b74036cbdfe91be207594f55b24ef3

C:\Users\Admin\AppData\Local\Temp\Roblox\http\31e8a63e8fa08c8135be1c5384c3e0a2

MD5 1221a85cb03fd45c001ef47af9935e7e
SHA1 f209b998e8972ecf158f58270244b831d107ace1
SHA256 e7c79bc6240600fc94d67a9c0e9c1f563a3f30698d7cae3d19b1735865835d4e
SHA512 2e6846a2ea3bcf0892703f3f2024a0acdf277251c55ad9c65e61fb5a8780c67ec707d42818b3d98103504dda9984c109ec0f8e393fc063f734bbc7bce168ad90

C:\Users\Admin\AppData\Local\Temp\Roblox\http\73b0a5d180fa4202c3e9365c3d577fd4

MD5 2c2e29b04e1f7144017730d5b5ed8b87
SHA1 8a36310825cfb7d8ea6fd487afa46dde29147199
SHA256 6026fca2672513a7a42dc67687850d630434b2260621f77ef5b2634486048d5a
SHA512 bbd5097d544d3bea8b5e97f3262a4f7765b13d5c742c9df8fd07e6a56e7c021a41de575dc1c24749631eb1003db0b9548c634eba7d6d2701fe4035f0a5880615

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e0fce80600a43748c6cbc0ac23f6cfa2

MD5 3bf49259291542dfee0f89d587c177f1
SHA1 22328c74fce75f7918f6c4b3ca5ad9e1921db437
SHA256 971101824fc41a26f9b1386d72750a69298f4725f266edb3c93b21f9600d2916
SHA512 20366e5775f42da8e313d67ace54bed3b2a010a84d9b3422276a8b544186345683c00663ce4f541c9890f906344ca3400015bef988d4ffa7dd4bf1c38161e271

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e385854d0ae9ba50e28a7a5629fa28be

MD5 0c889bbbf77ec231120674d4843ee0b4
SHA1 fd29658b2fa416059cb30a6729030b6a6b125e92
SHA256 5006fa1587ba1da5b7696daea22929c490049bc0f10661d9c79322b0a647efc6
SHA512 504d43f9104b8c56ba12ae9533ad3554858ebfb4f5b4b8b1692ba339deed831a66f5441a1e4706015cc59f4de4729c0128fe7da2c8c3d095b2993e92eec378f6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b80d47fd48f8d137ca2aca87e1d00059

MD5 7dae317d3e65c483f462a48cee3002cd
SHA1 330c91065d277740b721b723ffae4e5511e8da2c
SHA256 ad244e68f3ae289677897bd171703b8ab65bb03b17621b3c8f61594b906f8b78
SHA512 966a981204a7979932981d8870704fbe3d4afc2a0306cf149117eeb30a54debf852c8ef04fda90fb2d1d1261daec60db390a4c9b9fa77740d14171335384ecc9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\be58ec8ab04ff195247b1536cdfb3d44

MD5 d1d2f476fd075d55fa0e77b3c507cb0d
SHA1 5976cdae821737161f6debcba500a2842f988f8c
SHA256 650bcfb9e1c7855d2b72865695c2f4d4212ccedb53584f089c26e2087cc65d41
SHA512 958c07812ae7e89143874ce4effb112eed3bec3436fc0b71ee70de38298130d08d89f6bce42d2b0696839f67be260791d121e81f46a4935f3985e241aec7b0df

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f9cfb35c8f272d46d504f99d9c00054a

MD5 5a67e8e85c0ad7280e9f1ca86f138b77
SHA1 b9fc6b3311df7710e1251114946b93a72dd5d5d0
SHA256 09e7111ea12f1236be9b1da699f8c93eb68127d0a98f2ceebfc5c2d7b25f0ed2
SHA512 ac5e400ce21e5e2503a11642cf401ab5ad4e625a01ac87f1711a02a415fc924556d0d3e50386d17e29ec20bb99b5d3a2d0496dc2ac1fc1381b29774b826cd9ad

C:\Users\Admin\AppData\Local\Temp\Roblox\http\697aeac1e8e025f05cf4b76086fb70df

MD5 749deb1ff197b5082e2b07aa55a33d31
SHA1 08b4d7441ffa13b8dc3610d74a56d8eb11d8acb0
SHA256 e593f31edc529b51f9b253994d8aa93d8ab0bc8faf433e737b0a09e80cf2784a
SHA512 eff256220d72675ba4b23344191b963f7acdce9743af8be81020e2a74662d2f3f1b2735e686806b73198463c550b2d18921840271d515dca0b2d4ce226954d0d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcf8e7398be5b1007fef514afffffa6c

MD5 864c04942289c1dee2c1aa18ea77f1c0
SHA1 1be7f1b6c2f1472adb9b34fb6f7a51d3d1ba161d
SHA256 9855931b8e0500c6753d77200447963d1981fa7f7b4fb34067bfedbdec0db442
SHA512 6f3934ea3ca2317756e45bcf065abae6cf34ab7c24e1847023ecee8e404294420f5cc978af2afcea986bf160eda88c020fa1b799f5ad75a5e3991e7268192dbe

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c9d72083ee0b41e11170f5a9845c3060

MD5 92e9669fc7c748554c057eccb11a97e0
SHA1 d3fd8c1e136a2ebed238d95bfbfbf3ce61a385b7
SHA256 b29195912662d71be85e0db741dec5ef005d744d3aa0913dad8ad1e51c3aeff2
SHA512 cdc3a1b4c596fd3c9621e53887a9d503205a0d5f8663e1ee3366129ddbfa83f2b15bedef155eda2949f24d1df615ead664114310e3d3dd03f9fb2d95df2e29b2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d4f8d4ffe8696350702fd146346140ac

MD5 084a09f4a178b2533a56610f28f252d4
SHA1 70c343a804ea4674a214d5ca8e24bce33cf662f5
SHA256 91b1a39172d8f6f0c98a2a3aaf8c137b29dcc4ed4c1bb4a3bd449dc16fb45e97
SHA512 fd8205ea2edc70743247666bf8ff414ef6038f6ec03bfc7590dc037024ca66eface1f3cc559511919058754a5dfc2224ca04368ed31df8aa942a7d9022b93e5f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6443205f8638cd85aaa1caed016b8ac4

MD5 20db412bf509b564fa765bbc0b917fbd
SHA1 938513617f173454649543b7c014ecc762ba5b5a
SHA256 8b7281d0d0576ed2b73ab842080238d7e006e1524ed48f423f61a86cecf3ad40
SHA512 f6c54fb0478c2df40776125a920621a1789d02239a78cdd3de8eb83a27a00464b2aaf8714776897a4b3ae5488da664befa604ec836fe12010a046d48eaa519a1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 083f644cec6d508d249e0ff6ba37600d
SHA1 df5b98e81a3753c44f8262bf8e265b7d533bb55a
SHA256 414b355a5dbf306dcfbffba3ec8357fa8204b95f0c94702825a8db79c920d4ed
SHA512 2bcde2d27226aec2ba27c864459c84f4a8969fc73e67369d3c168f354b84f7bab7ab2bea4e42cf982f704e3bb9d4e17839a3398e8b9a17f5883e9c23405a1b45

C:\Users\Admin\AppData\Local\Temp\Roblox\http\aa3db4232d83f97f5e078c526e25a6e2

MD5 3e1ba08877dd32fe4178a730b0ea5e19
SHA1 c020afb22c7cde0c77a9d1d6be18ac8f1e62973a
SHA256 1a6447007e90d27fc71fa7bedef2219bda30eebc33447c2929e4488315e19641
SHA512 bad57ec1a48f686fbc5842a291c95f01db413600828b198b55615857bb1e50e4b3b6031d5896c8d7b9d6753c290c0253ddb83482f89c7fc348b8b80194a07286

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5105c207d9317b50c40470887ccfd3aa

MD5 481555658adb9b672941de82171b343c
SHA1 7937e7bac46ac99e1897c00285fd23059828dc12
SHA256 5069797f8a4b926fcc5bcdb668c1f67ece5d5e8f05d6f19a260c55c9a67f289b
SHA512 aa9aae6ac82a3e320ce9c1b83883263d547a82369d8f31d3db0ce6d6bc5cd07ef96157ebf234d6e31b40b32e276c233f7c2c0856394a70d183bd64e03720737d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8aad44a486e1e94cb992a6a0e230f735

MD5 451b527070f0cfb1431ff5052642059b
SHA1 6021d49e6b87b9ae8fa64c3cfd0180d625c7d761
SHA256 b9391062d160f5bd861cf7e5ecda919954e84a87eeb3b000bf9b93c068057c9c
SHA512 3ec22e77061670685a576d96cc3897473d11c45c24e581688da54d8700b186d3583ffc23cc2c3395fd93af36afc45083058a2bad9cffb1362be8bf4edb20cef5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\74f7241d43fd3efbef367cddf2de0712

MD5 1e996f012273818bd88129d26108d8f9
SHA1 c193db2eca6d190e929375e617f45790cae442bb
SHA256 c7c8ee23804c70ae96b1399c2f6730543f10f7678f5e3ee36fcbce97245aa8c8
SHA512 40ea7f36824cb96dace8ff41b1e92a03e0f7e61cac33a3a81c81cba12714812504554eaa0f4344d30061ce1d89f231ab21cab164a008e1f68d18ccfcf5525173

C:\Users\Admin\AppData\Local\Temp\Roblox\http\77fad0fb4662c6b81630ee443153aceb

MD5 183fe999017d5e5654364c0d8fd895b8
SHA1 64cbdd4bfac3c60803acfb2871a9fc8da27d318c
SHA256 3622ef17da158e25761124720a642153fb6eee615b54da286e731ca2920216ed
SHA512 d5026e42d343185e14360a292c6d13131dbdf081ba44960598e12652d99d999b4f5c70c5c02335596d18302b1cf64128a8bd06273237a48e2cc4eb0267d12307

C:\Users\Admin\AppData\Local\Temp\Roblox\http\251c7269a8dc64cf406e8c2d5f5cc688

MD5 7e7342c1c2e3602906a1fd64acde7735
SHA1 357de58a6c39a0fe4d7e4c13c16d8c1d25f9e649
SHA256 24a5a23ded1de17bc3170afbe5eb7debbb47f0ed7b2a4b5303bc899e927a99e9
SHA512 c6313b65687a5ce03772ff6f1edf761aa91f07a29f8b61db7edebf1beb5c548fbc53aba721ede32d4c4bbdd31361dc724c676d41c06278904291579d25d93202

C:\Users\Admin\AppData\Local\Temp\Roblox\http\993f844b48dbb84a0eece0b1d1aad326

MD5 c05764b76e6db0114c1d6200b56a3588
SHA1 5f96252b5a83e5c0810e4ba604dfc433ee449639
SHA256 427939d6cefb89facb6e71e082e42ed184f0883db715e0bd8ca832a316150430
SHA512 4c6c06afb99e99d6a7466ba40146b7fd02f83de16e5c89acbe64179860547f42dad0562b2a281706cfc6acdc5558e8fba5647874ff15d2778f3f6d8c1cd983a7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\83eeeca932186715a9107df83747a179

MD5 e7ee77fadd485e9a35a1bfb4be99691c
SHA1 bf1aacc9fe769fd1dd111a1009473db1dcac7399
SHA256 d98e995f0160e551443de0eba015bf29192aea408469c2fc2d9c93a5c1c82cd9
SHA512 3ae849a12cabc409e435da98308db2ec0b86f8fa8624a23632ab0ea836a0aed001853eef600bb99f67f8f907dbb641c9c6bc37bbf959dd12c1bf2ad9c8147460

C:\Users\Admin\AppData\Local\Temp\Roblox\http\28c39719e7218d9c2d686d4daccb1b72

MD5 25a0b3d9ce5e6e1cc4cc7f4cdb328273
SHA1 4d2dddbe9502a5373e6ea99771bb1de6e828b95e
SHA256 013275e837c61c631932167d47d5d9b838ba8b9863915d39f06d8ba4914df147
SHA512 20df5153edab7085594382f80b5d7c6afa5f2a84741efb46961e36331c94369a7c7302c9799676e18aab171cf398dae8f314395c22238de6f8450726c4c992c7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\584bbf8c27b2f156742be22b280cc8d6

MD5 7c0764a501b7f8f1eab14fa7f9337a4f
SHA1 2e17a9b6d5bd740c4dc91af9311e4a6e77bd55ce
SHA256 dc0524c0d7f9f637466570c86adad7021f9316e42e69745bf8d27081a98f09d2
SHA512 dba17c07bc4310c556ef62f157dfd3a0ea1a617ffbbc4324f9a046bf47be9a2bd500921bf02bb79d9ac2df1aeca3745ee1cbd7f33bbdb80fe67e1adaa0bd82bc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\afa231f024ffddec5f9d2963d20c450b

MD5 64c05df26d12845b64880218a48e1b3f
SHA1 6ae26e09d6c23ea9ba5ad92d3d40790948b36141
SHA256 e41beb094c8bcc0d8825e031ec9ca5b13e45b94f3c93601c31c10955cfdd8da8
SHA512 d6925cf4d6eeb5275a7c008723410edfe1dd24b9097656e8573f749864f8fc7c61dac61b05230de13a7b9b7b866528c04adca85ad83e8e2831c43b46a70d4c27

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2da892c80dea8811c616fe5e0e6c010e

MD5 0dbe0b49a06c4093d004ec7d44303fd5
SHA1 2bac861a6075854f8dc8db470558936c36201aee
SHA256 b136004ec10d66b813386e21fc6c5f86d37071e01e8a82437676902eb3e63e8a
SHA512 1d306115aa97102b5d68552b591f5faeade373ff3a718d9f39dbeade32892e47fd921cd78e5dd71e91072476e5ad933ff9659ee5ea1d07133b55745f00c22828

C:\Users\Admin\AppData\Local\Temp\Roblox\http\d27efcc314894472628caf798daafe01

MD5 bdec8723e953241ac3edc46458a6ed7e
SHA1 783605b1587b096807a81e32c488be272e0ad581
SHA256 c31b000a001faa6e08026a24043899ee4941371ce464146a9c78befc2a796e4d
SHA512 221cf258c9c88c857e34fda1da4290c67c3a34459f86b828ab968f5e57b2be53eb4f7aaced83151576fb843a7f1166c267de0efb116740ab2ac2b37ca0cd4d93

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2d5ee01099db60480061c57d9831c261

MD5 839f812fb19680ae8e62c2ebe0355e4d
SHA1 a256751297a9f82a082bc4d5ef08d5d9d89a2c17
SHA256 b414e1186136cb1f46c6cdc69dc5b637ac5de6a390d67cf25907907c61b364a4
SHA512 f2209d8bbb8f7ce1e6b675cdd2da3a10bb450d50b4f73a596fc0639f201999f32d3c1a2418e0b92c918c0a667a5750ef122e4331361e0022b66a2fc5e489e5ed

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e665da7061b12f952145852fc21ef7ec

MD5 4cfd979bf14b07dfed01ef9a3b1279a7
SHA1 2e7aad8b8909d3117bb151bf4d34b608e3ab9c56
SHA256 589b00b0a2fbada62af8b7daa8755ce68420a009bf6ce7a53e0865fcf262f94f
SHA512 79a25e0af653d6ecb5fd1908c3652c6fc8ad3d0cf1e00510801bb369728dcbe3c5e1e66f73d058c511320badca3c8ea82f2baaa5e0682f304235b68f622685cf

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c677a51b0924e108a9b1485dbdf883da

MD5 e1e4307ebd3e7f8280c75be0ccd3b5bd
SHA1 3f2a56ac3ee57082ebcf4a1ca21001821286e77e
SHA256 10dcbda8315ffe2e7215b8d61dbd26b0553b438fe94b1bdf005758b1b96d9f94
SHA512 7f3ef600e2ecca826fc163d9092bfc10fcca9a9e6206ef29fe5d61902e3e9625bb2bcc07a58ab480ad19354bd0a1c56dd9f13c4e62aed22d87da146252144ef4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ecc495a0b2b0470e25d688a9077fd977

MD5 741a45f09ceaf9cba7f0ee5b8aac236a
SHA1 aa6b59bba687981191db42af8a8b17dc0fc9150a
SHA256 92ee9b175404bf4aa4e346ebe4948ae5c0ee7edf5693778a5e6a4a1bed508eac
SHA512 97cb36fc2281753eb7a42f762c8ad5cdef7c14665214a71f33518f88cff24ec5e91267f834a6ea5ab0206457c7e9c730dcfb4f7a2ec527e3ce48877e2f34be6d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b39250833fce2d9f0655b124db089d4e

MD5 639a9c5f588be3e48a6bf5601215f027
SHA1 1ab7c1d3d5df21a05324853fb235b848945c351f
SHA256 4fd48841bac69eaaeaa9c936347395f5eab6fd4f5549d65cf6fc541884a4b2d7
SHA512 c3aced88385dbd9b10841f72c422b17cabeca80ad11af01222f8901b950be3b42467851d5ef61fa3a1d92f7977724926f765b8bc594655e93e116d04223497dc

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e5ba3b6fc7c95f933bacb9db38c93e80

MD5 0de2eda8831ddddda130102597e758bc
SHA1 0fa49f0691a4ae61e422a22b07fd4e5def0ae5b2
SHA256 2d60885d3492996ffe223ec6dfddb240eba00a9e03ac0506d3489edc4822e1ee
SHA512 f466e1ea3867fae7618b76a2895cccabb0f646f54bf8c4cb6cf6a5c2eaf4b8e31eb4f8b42971ee53c929241d9f40af6a684647cc09395cfd709774503f274b75

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f1c2eede7a115f0fd9ddcfae03372516

MD5 08ba91e62331009631f755289dcf7324
SHA1 03786d766cac0b39437b98cb61e65c25d16325bd
SHA256 c50ad1d35d0b3e81ef6780da13361923d7525a39db5c9cbc6c5344a0bf5e1380
SHA512 3fe207322d4249f92893d0eb7a93f455374849ca583dd0fd00c79790ab7bc7f0699fe16de332b767689e0a104fb272992ddc37e002b6962cdb6c66a63618e3d5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6d1b0fd2905f7655bf0108dd4e655991

MD5 efe7165d72ce56eef26da49dbefa586c
SHA1 b2441c50e501f7121277d205876ec6a5811c4e67
SHA256 4e12e3ed0da10924a1dbc49e464b0b07c017970c839f1c1cb4ecf5a8019d3ae5
SHA512 195b3d7954627b571226a4d5293b19dd0b7b565d4b295b494361ed81f3d9e1c193533dd0e53b2ededa326278294694286669095147d769c5de343aa611ab0238

C:\Users\Admin\AppData\Local\Temp\Roblox\http\23f316746f014ce443f0b0adb0d9d90d

MD5 4843f2fc4404a016a8a7b7f5c352f877
SHA1 1446153b0498dd65dbb53b417d5ce5db49f0dec5
SHA256 46ec4647b950351b091ab0bb34d1964bf24b0eb58760175def7a4a1d7a4e09b2
SHA512 8d5198bd48be46a6aec5cb5d9eb6e75828f88742f12102a1f5091f9c8b51167fd6db13981fb875b032795b9407fa64cf3aa54224a64008262084dbfd3d98dc27

C:\Users\Admin\AppData\Local\Temp\Roblox\http\252921e7f19d826cf6778747e86132fd

MD5 e06fafb3ee051c215c7118dcb4a75354
SHA1 c72b3e0f2bb1139344053256bcc3ac48f590174c
SHA256 ea771a4652058a4110a95a6fa24c847e7a50cdfdd711f57e02f9c7caedda7908
SHA512 83008fcb8a91bb42f76568773c98e5dcf6658b0d7972d595eb7059b5a598faf80fcc8492351e9e98a6d3a9ddfc17fca742f07ffe4af644d99c087062ed7b14b0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc70073e6562a1a0cb99b092be4629f8

MD5 acc9db15cdf0932e73bfd20b9857b80e
SHA1 cb6455b641cdaa693de88e9b0d1f422744faa35e
SHA256 f0e15f7608b3829d33eb8e057f31f21e931d9d2ab4814891b11ecf47494c141c
SHA512 7ca5152691d595acc0f0398e26f82c4cf491bea98f2c81e7a972af8fe763ef5926a716ea44112c2fa257ba0109b8848f8611f071b88902901bdee1d32a315913

C:\Users\Admin\AppData\Local\Temp\Roblox\http\388a60aa5e51ff44455d359825078031

MD5 eb62ee1626b44f54b2c444a487ef84fa
SHA1 d3d918dae048e4ee9c9626608693d69c4c4ae55c
SHA256 bf2f079ca21684f382d094af52836d83862c93800e8e054c2f6bc0838c442d86
SHA512 68022f2ac538c51acc24065480cd23670efff68d56a4b5dec2c28316726ab82c81b48fbfe76c44f32dc32b0af75fe3e203aeb40610f34e2e5d75bc684f712381

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5c288ffb1fe759d2618c218fa0d2bee8

MD5 c914fc7a80c8ebee4ddd7216cb8e63e3
SHA1 2e4bbbe23167be5f26e5f3e9f1e1b2409b38e7ef
SHA256 c718cff1df66ac36549451bc6de0535c3f2f9e74b4fcdcea38af9eeecc42a674
SHA512 7564812cd051e0970b3d06aa1bb839c8fae5d1e95e23615eea42d2f12b6284d06f2936cedd947e9d4d33c4656fec00494121d58cd38ddaf1ce2ad8be8685d0fd

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc86756c9d8f409a887054cf26a854b3

MD5 70461ebd3bf0f7a0beafcba1d52417ab
SHA1 53dd7894e76f0fe7c02f378d7c67107ed4a03d45
SHA256 e3ef21dd9efd05fd1260691d6dd47f76155bd0b5ef1ccb62ef1e588dca161fd7
SHA512 ccc18b368873c76fb25c97009bfd17e4456d488b16da511e61fe1dee031cce48bb25d507d7fb1237345bdc2191085bd384ce45ca98a5864d10b65b28650e553e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\477a618fe08d138e560e0c8eab9f3583

MD5 4f9c826223fb8d7fb603bac0b294a706
SHA1 44a185bf8edbfee521dc92ae012e6ed18cfae3a0
SHA256 e12f126277c8b35c48dc15cb2f37850ff5ab0816e5982eaeceb571c99bd17502
SHA512 ecf987dc0d416a7fb1779289a0bd9ba55625abff41491ec3731fd77950e91d5b454b17573be388766b20fc630ee3f125d37feda44e068d2ed0cd2a87be021fda

C:\Users\Admin\AppData\Local\Temp\Roblox\http\4130cf898fa8b448f1568bfb61305e94

MD5 86df60a0980b57864a2e2d68f857e0d8
SHA1 60c24af81c8406f05ee1721b374ab8a466d878a2
SHA256 ccdedffa29231d609157ccf22019e03a721e9ca248eabf12be511b76f795c247
SHA512 c025bcd3d21ec036712ad8e40afa7da973db770bf5b9b019c73ca8b99202c8e37999e6daaeab3f1c2190f84434a5e4657a8593e8a59066e0feaf38fcd8bc41e1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\90d821a0b7efe2541659a0ff6b31b88b

MD5 6f0ea4b31f2f55764db79b43833bf83d
SHA1 2522c29622377d611419babb3eba2e8cb13fe0e6
SHA256 08f380d19a3cf8307b098cdb5e9992ed1d29e5d15226340758a1af3cb4300c64
SHA512 6a5437574ce2db6feac98928a22c7002ce526501335ac00444190febe302dcab5f18ba33a5ae00bcd83f469b5f1cd356474c8cfd31d9992d186fdd0846db5641

C:\Users\Admin\AppData\Local\Temp\Roblox\http\f40c00885cbd0588eebf8bd59a345579

MD5 9c0241f7306bbf3cd085509dd7840c99
SHA1 21c2a9c916d0e537c5662db2acb565615ef79962
SHA256 e2afaf1d969e104e2ffc22494e2f7e2ec4a0bda49b9de0dcb3bbaa3da9bc8655
SHA512 afdf2c9a29559645e08604b15f023475e8610f41f650f3527a4c2199fc4bda9c291bb24e2f337e00cfac6a5347fae125d8055f0af6eaca38b92ec408343cb9b0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\16f7441682caf62a1789b9d3e75ec170

MD5 cb94125a0b01b9335f3c3c9a9c6cd60f
SHA1 85ae6cca4c661270b389c00299bf7f5d81fc3943
SHA256 afd92a2c0ea64515200f7dd1c6237f18b6d1bd2065296939697d34a3d4e1b0d4
SHA512 649155baa2d26fc6afd0496d11f37d9dcb588726806eec89be58faa54fcf3b90d1becf114c4e2f3964c98e93399b87bf5bb87709a7bd9a3540c7ddb56e2da555

C:\Users\Admin\AppData\Local\Temp\Roblox\http\98c582bbf5493f077bd8f59567067f24

MD5 ed3f4356a5aa9295ec58f77ab387582f
SHA1 99f94109e03097ddf835c06292ecb6142c93fdea
SHA256 60e6db5121cddd5bc13b1019c85b5d962599e2548c347ee3c7d944cb20ff01b7
SHA512 cc7869759564fe9d5e1580be978727c4b0da340c052db74f677bf7cc24d93da0b837d01ae0199c6404e02b49d08fe47a2fec7165cfad841f1b6fbb1d7e8d7fc4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3ca8206460663e9e944ccfb414623b40

MD5 816be237e27ddb79f9fe0c46efa0119c
SHA1 fe0af06e1155ba784ed6ce8b97849eb3fffb5f9c
SHA256 ec6063b82a1adc4187ee0e01f413d4b5ed10277605f741295658acd3f0ceabcc
SHA512 5ca3c5bca3f5559a500de1262c133a972e776dba7192e6cade152245c0e1118fac41c48a79dd0f15c78ef177294867f041bccd3eece6a388eadcc32da8efaf00

C:\Users\Admin\AppData\Local\Temp\Roblox\http\bbd52b35df5f543d23b7f35ae9e845be

MD5 2de5aeee01688c41f23b2ddc07c0b442
SHA1 68bd21cd4284ff390c1f4f5f4b61c9ff3b8f2268
SHA256 3ceb6af768ce708d114195ea3521c71370ee69172d4d0cdaeb1efff406571d73
SHA512 ce845ebebe20efbfb1a0565e69cea69e3a4f3e71289ec68379565052a2e8a3e5ac873b52e74ea26f2afae7ff64c789c348b4b9d4426ac0c0d6547d9f12290090

C:\Users\Admin\AppData\Local\Temp\Roblox\http\852240b4203e72d7bfa66fcea2e589eb

MD5 547ffe689cd0af21ec616bd935f78b14
SHA1 36e70f429bea53fc2c8dd76eaad82f7bf9f3742c
SHA256 abf9ebe04321f9b8926304bc16041965dd79405783b7d3ea56d5fc802863bd9c
SHA512 3683baf37d3da8ac536ae4d2d852acfb49039b3c9d4ab42d972c23e2df6dbfd178a552ef023f48c43c6887161313d516914d26b7cca0c022e2741875d62e38d2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\0407c8d6df198f6864381d3e595ae971

MD5 703dee4351832fd18ef5b85c6e1bf992
SHA1 bdea9dbbdae401cd68814d9815a17bab6f3870c2
SHA256 8fb57fee0d1c996a828a3147fdd9a38e8d1624163dad101e4bc1d44894bc3d68
SHA512 d43b5dc41be38f5fbe30a51c1abcbbc5c606c9d911dd164b5106fe2bcf0310ae8b641299c5491bbd5ba66433d87ebd17dc8a487d88d56d0ee8e81309533ef0b7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e4317e6c6a87bdf6f00c6c80866345fc

MD5 fa00f598036aff7c2e4728ff840efdd6
SHA1 7873ee7205e2817fc8fdcb3afdc275aab494ea91
SHA256 18fecafdfbf34c5b261f4acbd607c439e35177802c8002a0d88221258108abb8
SHA512 f72faa02c263ed200f7a296ed86ef5da614911c1cd212aedd12923ba551aabc44b33cbced8dac80aae67dc09988d53ee191755afe3d51383ce885750bb00a944

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8ead55fcc97d21deacf012df5c33fdff

MD5 16e22cfdc829405af27279c364ba2f8e
SHA1 0c75b97959d7df1586db85cd1166f99c65603c68
SHA256 aa2f6c8bba8aec6b84f7ef8a7d8c30022097b784236806e63da1f0417124a3d7
SHA512 d1f6695e255f5b7ad498ce177a16591757d5570a4ea45d396f3fa159f5658bddcb7d524c102efdd982fd9ccfa557d984280c27e57484b8f61be512ce994d7964

C:\Users\Admin\AppData\Local\Temp\Roblox\http\8550d05ebb82e2c3691bc35b7c166899

MD5 f3e7b2683bee3c3628f500d157a7184c
SHA1 17aa34cf9e45a2a10cc370ef0047d6ec844053dd
SHA256 66d177f97d367d8181feedc6db9f92f71dbabf58cef1355439559005be6a24ac
SHA512 48994f038f0cca5a1ad783d05490ccc209ac4ff2a9fc3b508d5225348d2202f9760ac6c0334d12f74ab8227eab5a412370459ab328f44177729f8fb6b8911088

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1cb6044427da36923148711b8796b750

MD5 ccdd89dadb2a17edd97a48f05de218ab
SHA1 c8829afdfda3e414304f09f588a9e00cd43de4d0
SHA256 8ebad66a66dec464ea8f6a70c240e6fac36d2155ef5460b2f1cc80451e9949ec
SHA512 79976e6623479c42c3b9babb2bbec208a8f13b580dc19419df33639e3922ab973e740fcf33c94841e833ef3ca8209b5b149d2ba5c064f08e3b6a526a651432f9

C:\Users\Admin\AppData\Local\Temp\Roblox\http\38b0d496d6e95d4a4e1f049ecb71b4d1

MD5 60dc54bc02627b188fbc37f3c81899b3
SHA1 7065242d6e88ff9ed0e0cb891a9a6f6db2be5334
SHA256 35fd7f2804d4edd74c14cb7bb1534edc993ab7ce9e2d64be997b12ffa8ee5b16
SHA512 2b43c5d1f2ee4621055d94f3e04cbfed24371eea9a7c719f8392a993464e7d05635f59bf230e294c60de5656f421f4661bd5b1b8f286c4c15e79bf9c57d686c5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\ec9a7853aa53bb67f2099830ce97922a

MD5 0ab1d8c6659dc5952cb81416c8d9a85a
SHA1 16d889c645dd70901f87cc86f6db8a632b8518a0
SHA256 1ebc2f03253024917e0b562d101603c2f9e04aa70a05accc5e63eed9976ea0b4
SHA512 657a549264297c42e4783cdfc76baff2dab9b5b9c1f991b3aa8b16f2b8f87ccdb0c1a56edc23713ea7f34ffcc4cfc95b7fbba8d5fa06ea443610f06a00433f36

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6c536340229d1bb052a390124806163e

MD5 8dda220de3bfd073f993acca9cce3f19
SHA1 c78e343e500f592bfc59de89dcf8548cd6fa1f71
SHA256 21710259e1dbf800de1bd2dd8e19f33cf70dcf6ad306f7738a23300e40d385e3
SHA512 d21115712737f5d51c7fc887a14bb7b9dda4b9db295ecf429623a20eee02b2868956e6d66907997f100395625c42464218c36e750224e02fe0245c0292fc9e1c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b597c88ce139f36dee5c4afd7d80a2c1

MD5 f195c3e8ddb6711a2feaad4aec69b8b0
SHA1 20b1011f280842fe6aaa58117a05f57cc17b6c69
SHA256 9c263d2a5db10ebc2d543bbd0c125bcc5da6c2245ed133fe0abb1b308f343a71
SHA512 52ed2e19a2b991880336b6b1694016f4c8e5a5e92a9dc989ab317f7f743f38dddaeba8fb5764826bfd9aa145028a1b3f9fa34a02f39c1e5162aef7ad282b0632

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7209cd4fd5e4a48a4cabe7e3498368ec

MD5 643d56f3cc2d206fc1eeafd601a0e287
SHA1 0e55be4bc02d884a40a586b44d5728f9e8fefa6e
SHA256 637c7f57eea4b46821e968a691bc2181ac0ed00252691845fefd947a4c594f66
SHA512 10cb34ff5d98467c3de396ef4993a11c7db2545329ea473eb3ffe387f2663cfda6d21d31299f87aa3f298d2bfdb88d705b9236e9f71c48c22970713c2c3f75e6

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7df53404f56c9f1787b277ba9d17049b

MD5 ecaba5cf9469daab7c05847af2da45d7
SHA1 78d9c8d289db9815482249769dea663f4999cac2
SHA256 23946e247fe3bb06503a06be2b8e154d724a8c2e86fa4f441fc09ba1e5781121
SHA512 4204260b2efe3b4c95584394b30ad7957b154229828f0ac90a04e5167c7eb78f254777fad0d4fce9c5675fccc390dfccae2ecbd8d17e0e73bb0a6933605df7d1

C:\Users\Admin\AppData\Local\Temp\Roblox\http\06bf3774b39be975c53ba2193da7f90d

MD5 29abb94b78b9a73db28b7ba825833346
SHA1 fd6da6bc273d4a44067d8c2b625980ab8cc52aca
SHA256 d929c9d2ba98883044b81894da3e921de179d5915e1f92ca9d4df9cc89f1424f
SHA512 d5069ac2996929a5d1622f65ab450bd152130978b049f672b1a9f28cadcf724e317024bd95a11109e0ae488834ab184f5e4b10f6a21ba3329cf056a0b7139613

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1f571bce12b3689efa5586c78436d68a

MD5 aa1cb968768ba580f7e7d559906a49de
SHA1 1a6a0906ac3c68f859790103094a617e0439d77b
SHA256 b9e49fcb7d0be8aac8bf1d990f2277363077dbd34af7f5109a14bea85b9fd35b
SHA512 a72d7246405dea401b6e97963ea624772f65a7b20eacf2c358fdb73d7e5c2afac79b5cd39cd548ea8c43f14b5f03cc38deee8a495e9c7a1f264c1ca7de4f2411

C:\Users\Admin\AppData\Local\Temp\Roblox\http\92ca8d0a36e9ce06a1c3537675677ffb

MD5 ae7d26697baf4e3c0a4f7e4fd800f89b
SHA1 4f2472e39c964861701d80139cdc33bb967b2c34
SHA256 58c1370bf264ecee15638ab670a0af85f8bc3b974670875c757751fd116f4833
SHA512 e93451a30c74751ebd6996efb038016e28370de37bfbfe2fafd1f3c3817f2e720bc3b7d96e1c0e346f08e3c581d13f77a535c30c07a487f2c4a13b4da9970a0f

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6e62dea9b6f892b37a40251f84c9e0e3

MD5 f48177bf38c02c3a2cb322b77d627f23
SHA1 e207f206d2f707e7feddc32c02883bb71015d23d
SHA256 4a8a4eb5baa01e72889b67caa16b69a4c2e8a07aa12f84ade87376f344b2fbd9
SHA512 bb3c4ba048199ddd3cf5d554a90c279d7b868871f1a0eea4ce27c641556fb3e483cf839e3f9a27a092021783a25d604c952fb1ea34528d722db9930fe48e38a8

C:\Users\Admin\AppData\Local\Temp\Roblox\http\05e6fbe7faeaf27e476e2247265bd7e2

MD5 774331951556eabf4930f06518bfe5f8
SHA1 79a7b332357aa2b18cf400033bfeeb5db7614627
SHA256 c4239a4d05bd3e427245f920cd4eba313e0af75c819f89553c7b6758da9b4d57
SHA512 bf67dd1c1d57779578524ee404de1648d9a4d8ed7f524fd49643ec49c3165b9321d64bda2216cfb8617c32cb500eacc2966263dc03841af51ee37facb2b1724e

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a1489d1b06ae2d917aae075e6fa9b8f7

MD5 5420558b929446bbd89f3d35e72b5836
SHA1 da46e5c797831b47c4d62fb9321c420c6b0ba50c
SHA256 12d1d581ac394291754c5b042baec0904c2f3b3be6a17e0a8761b32b6e53d507
SHA512 e125c8d668b2c73d583c528f6d35bf8a1c9558c594cb3aee98e25eda051f621a6924626d845f200442da65034dd77aa4a51dd1668c07b26611909f76cf9174b4

C:\Users\Admin\AppData\Local\Temp\Roblox\http\b00de5dcbb5ba1d0d58ba82e9c2f97bc

MD5 9a3aa49a6c57739a171e507a3b0a90ff
SHA1 f3c154299bec91f215954c1df2b03f68fa08efa3
SHA256 6d61517c2a006e117a5d5032dc1be0f993f275b6d0c8a0fbef25bda8cfc12691
SHA512 0a02917b5eefba73d3420852a5c66719bae97bc3c8f9adfb2dcad89dee9caf5852f660a3e787d84e9b86e3793ae0605b2db10c0a1463e0f09a733b614d2f4c1c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6105c4318cc0c25a63a6c9b8db84bc28

MD5 6badf7314b5d440a6ec8dea899d7872e
SHA1 003170f75f86922af2aa5bc4b2c3c41f5f14106d
SHA256 c13071122b4ff111c8ee877e0d8bde8f34ab3569df48fa81f6f4f1b0b0ba855a
SHA512 5fd8098470eb97e06e62f6d8753d3dbef34d8db6b3ff463cdc964e61e765ab844168170a64c837fa5d60c029a79ac0fe7cc661b9bae07acbaa2400120037aa13

C:\Users\Admin\AppData\Local\Temp\Roblox\http\234369d070cc483f7122fd415837b73a

MD5 51d45f80859fca2ea5720897d7f1612a
SHA1 2a7d736969502784b96328f4fd1fc7697a099273
SHA256 5bf07b195c3902c69653ca0294f2bdbf9124df501af426b14d6bcdbb87d70745
SHA512 059455bc829431130377e4c8cee87ed3652b712eb46afa6f666d9e4aff7401b59068da840b91f4914d0752880cb2ed8c64a90e79e37f45b4b90996e44f2932b5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\5a479665357e877c36a8bc4ebab8ac84

MD5 f5366499a754da1e3317be61d63cc243
SHA1 8689a3cc6a2e1af5dbd2b6c23b488283362bab0a
SHA256 14873e016597bf69824fb29a219f6d81befb11b19fe2e505544115b33f030e6e
SHA512 6920f31ed14ef4621559e67c75a69ecdb7832aac639c40febd98dcf9b7c02402510e983b84cd309bdcd7b0438b394cd6b1d11bd4c32c58488d24a5d38db930c5

C:\Users\Admin\AppData\Local\Temp\Roblox\http\7deb7c677f433c0b6c649020e88fe58a

MD5 d76037dbae4ae81158187aeced5816b1
SHA1 7858adc6bdb9f9b03fcb28746d7a0d08c297d058
SHA256 8113ac3b2c1f9a16f7c5a9be473b64abfa8c9689afcbcc30750aeb3077e3e27b
SHA512 e9e1b515c621e760968098b8e0a16e00cf1fc17b74065efd2f8793add04d5e506205df5d65be1db885fb958b9c5879ca728528963b4048bfe073d4249c0dc6eb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 c74142e2d80f664568b182d308211c82
SHA1 2076de9c1b7b2a72bcddc933ae5247ebac73db0a
SHA256 da71d442a1a5d3a94ef1492a726e7be7861028b17127cf8e3987f8046b23bdd2
SHA512 c865e9c60e634911e8c3ffe7c81cc51d704f6e8da673b269d0a1b645fb9b9f727ee4dcbff3b5430f673edbd2b013f3dcd03b014dc963848a79cc8cb2fbb33a14

C:\Users\Admin\AppData\Local\Temp\Roblox\http\68119f28ce3eca78171a6a8c8822e1bd

MD5 35e84ac53c5b6ac5714c5589d7d79153
SHA1 cedd01f0263fc9e5718b8e77b3467c14a35a1b53
SHA256 47da60997e22feaa88bff58bd2db6320534331990a14e2b64b6d665df77b931c
SHA512 7cbdf8f0eaee0c4e00e3813d1e558cc5aa305d6e9861255d721bfb655cddbf08c70fe61f686e79154f1c36e7a4b5c29f2ecf2776fee9eb0b7ac1da8c87e75dff

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a116d80baa851750ec02ad98f6a28052

MD5 db41d22b9f9f4a43ff8916ff8d513da0
SHA1 00dee570785465bff97ec8a96ebfad3d21f1d248
SHA256 31e6f7d03515207ae87b2f9e9594fc94db77038fcc28ee3990689c6590b7547c
SHA512 df4e09d0f24ec1cf13ffa1a062f9d28a5d36d99b606f27f7ab757f82e4202e51ff4e033b6554b763e6f97c73bbe77b9d133b4b842469b96056654cc2f202124c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7dd046741a943f78e4ec6a38c8ea58dc
SHA1 660bbde72f1d13d7366585e0b30613b19f7ff08a
SHA256 dc7b47b27b3bfdb787a69101ab49757d7693c3ee535b6637c2e62ec1e2302984
SHA512 7a03b5e6596633fa1d669b05bd6d68bdc12346595eff0f2d68cd381820dce06b788ae07f50174198749ddecccf0252f5392920045ae2e8a981b9f52a45dfe80b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 8fdd5b7972f4fccdca73f444e2adc066
SHA1 a1e1e4cbaa5ac889e64b9c4a6e9d0267cc122916
SHA256 be9a593c7973e34d447932ca2df7af825f3932dbfc814c57b60dc3ce5080bd1c
SHA512 e0e4779cff59a51596d496c564645dffe5a09face7443fbe8eaf4e8a1a412546d5964100165de5ea90d5184d72fc002d31463c26c434dd560f20a3cb5f2a965b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 461ba766c693a0cea24fb850f938ad6b
SHA1 1809d0a66776e2b74c5dd46ca01bcb83d8b202c9
SHA256 5ed1517634c72873e012d93ee79dab8f76100825d864f27e0401f5faccc4ecda
SHA512 cdf399283c40e2ee11848bbb35b218d145864a60bb97b81a114f1a026b013fdc0314d79d54fd140eb7acc2e7a76500d6c89defdc4d43a38030dff26dcd345748

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 90f39465607fb6c33c866300afdfefc1
SHA1 3174689bf166b7359fca9b94be91c6465021d8ed
SHA256 b39f44ace96cf9f686b1ad4fb3ff57f8d84bdec8a401276f32a9b4fd1b91a21b
SHA512 9997d89ae754308871cc7d009a90c4dce657585d06602e2f20b49151c5c681d03177a1584bea94872fa5fe8f80de7585554ca381394429590023dc87cb2bea02

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 d77ed91b16b44c91216e2db23edf0d86
SHA1 7ec01076c419f50318da77b5cff46bdeaffe4e56
SHA256 1293ab5234ae45d445aa56ed48919951a1a9dcc69e780aeb4e6b22dc18a5d588
SHA512 d9a82fa6fbdf90734bfcb28ca0341f2cca6ec299d40ec5ea820c321cef24101652d9f3c1ad8014526e30f628daf65a0877d6f23c9f906d13a6bfbb3ac20c7206

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b1614036892a53ac7f29f2e5fcb22d46
SHA1 c383086c00c47ae9ec50bc82f3bdb50433fc1aad
SHA256 c949392dfc2714a55924404a566488c421139857ede7c058d31cac77055af6e1
SHA512 bc0a23ccfd890b55bde0b7f6f330f88e61ec0e06b02f1611f128298a2e7bc15781934a3af9dec6ea55b3f1cdc5a6789d6a838cf2334b462c4f78aca653365634

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8597e9c2d1a2852e8ad63ddeb24580d3
SHA1 995f0bdbd642ea89cc7b0d6922efaf7d230deb3f
SHA256 22615e10054627eac667e23e9e99a0d3fd49f140a9914a140dadca42fa73df75
SHA512 e9f854bbc650775b59cd3779ecad529925e4ec79fef951be9cbca8cb76b00cb9c1f8b797992aa4c5131ee3c68bc60376ebbe642a15eff06dff003c3e2ccf4c61

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a502302d093f28b9d2aa01b6ec9247bc
SHA1 67dab83e6a215e8ae3db6334edc9f84d70dc92f4
SHA256 1bc03486dfd2926251ef1eca2144f32c9ec8d1d08c3776dfec7e170cc488e253
SHA512 0426f948be1783021a3e9c87b33fe4c641a4966cb2bbb2a1f8f505dee8a5aa9857cf14cb9f168286df50b6ac964d21bbbce203e979bf0ae2aa5fe0c114ca4116

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 677bca2f10b886e6768128df52af58be
SHA1 e9a887561485e536a9cdc3ccb80476487e36b12b
SHA256 cc349270be2201f3c95b4e300a6e8dae0ed8881e759d0ecc02fbca220a8740eb
SHA512 2ddf23a0fc4f9ee204e22319b35b4eaf1c09a01e1ca15520b185bf2b437e4a25ae2b340a641102273396461f7424acfc3e3134e3590763e734878b971b08c2cc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 4d141b77b87e9ea59c21eba05bb9149c
SHA1 e6d522dc0018ce0e40e77ec50e03348f2c8116e0
SHA256 1a50ab2e45fe0f122bf010866db7b96a4e212cbe703a612361d1b912b7902fdb
SHA512 1e74d5b34830de0657a37c4885c998b45b8fa40301661ec14460426f2183dd94a10d07dd55de288076a34a4e4630620c27300a08269e787aae2f15b0e7599af0

C:\Users\Admin\AppData\Local\Temp\Roblox\http\c81813ea34dbe699086525727806025a

MD5 88bb969e5dfc7670f85311ca9f57d5ae
SHA1 6eeed47a69009a51a9cbccf543729ba792ddaf98
SHA256 58292d2e3f49aff2796ec32e2951f1376319c45db86aba99f79dee9a2257681e
SHA512 4dc238032d91453d2a7037bdf0a7857fc723b808a68b11e700a0148a57bff9aee772dcf60e47f404cd883504d2daedfd711037b73d0f542534946379959f6df3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 fb0f6af6dbb34418681f3146957ef8e2
SHA1 277c80a2b3595044dcc041ef7d839589894c49bb
SHA256 ffc4b41ff0e8e99e3f72fdbd07dd57233e041a23553d0dd20d98910e5acc4f82
SHA512 02b62d149140177aef02d65a4f078a8db5c3ff1163706598a99e67ae2feeb2573d98e1c92adf96ef069676720d2350ae10880f4d1baa63aefd45fcd89e3652a7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b89ae75251bd0a9df4f5ca137ef90b08
SHA1 0ab701503a7ca3fe165f7e8f4482ab8d29d9b58f
SHA256 54a97788ce7c1bcf97f60320f57777ac559478b082a6eaa5e5e344a37964a9bc
SHA512 7da8e85ec95ce6cfff982e9725492846fe32e0f15a37d906f6705a07df0deb9f3544381f142797cec19dd4aa4f979bdff5a2b6a9e69c9baa7967c936f62e20b6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6ad48633da86bdca3720522e80789ca3
SHA1 418241387e1c61da398dfe0e72096e4007e9a37a
SHA256 e3f400e8ac757c14f1c0bdb2bc77908d07d71fb0d80508402c6f821ef560bd2e
SHA512 5c7a714978835e57f8d8f3a6fc09078fde24a0f800611216f596a2fe3bd64f0972b3603c0ee031cd8ce0402db8f08a62922a36539c6c7a93c27d4a499859e355

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 a80e173e742ced3eb64e96124d111d41
SHA1 9a39600bce0b86bbd79ed36ca74e9f31af4592a5
SHA256 b34febaff41dbfbb0f73770419fbe99301c8c4b7feef61e9119fa2f45f32cd74
SHA512 60a38afd9f6d6115a8586efa870167429ecb54d847b19f12fcc06b17db3ff9703afc254fb3bc2862c53e1ed25152d8293f9ee868d5c53bf7e92e49c395009adf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7fd7aa8d5460f3c8b91386383ddd234f
SHA1 56bdec240b84fb274f9021912e9d2f59be462f40
SHA256 cb1d69976b918539715aa844087e40669ed2b400fc5d20b24b0287ab374f6eea
SHA512 e6a18993ab24903c0b0e44ccd02db76cb69b421ee3bcf0f541fb54ed2c42f542620bf74a90c3bf0ddf6da84c3580591084711114f8f07539063a51c20e3eccb3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 625a17f17176fd398d662d5a5302ddb1
SHA1 05f3a3f986a29b3853ee6749d1fce263c74ef875
SHA256 60da6a13bff743da0d7c3a7ed1903b82d8444ecbc66f383c5d8011a17795c11a
SHA512 cb80661cdfca770741d14aa204657b3491d1301e6f926e4e61094842b63749f1d49fbe7d651f3b8b6dbbf7180be1d106fe4cac094700d5525360be9309040e89

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 532f988e5dc27128722bb305dcc19f74
SHA1 b5d121afd0028cfb4c9b1c37b0f47c272a13e4a0
SHA256 69541ec0ca226ff98a3acfe46fb6fcb5ce3744485e7209d624ada06c6f50ad83
SHA512 128fd16356cee1849aa50610f8da4adc342c921262c7a8febd4e6c8f794facd0fb04c61d1cdb21471ff5809baff569c52044770aed55fef26b8d7883b751306e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ae8dc2273c2cb8461dfa80b91f219f19
SHA1 faf5cb883e110a2724e0bdee35431d5f761b05ea
SHA256 b78dfd6ece5e172bc55fcfd3ac2f6b95970071cfc6d392e1e98f2231a29ed324
SHA512 9a543470489c30a01bd02fa1bacc974eb96abe235b14c3003c7fb72618703241b4b7501b463b63db3f4d95fbffdfcb631079cad8e72fd0b6792e69e0231b69d5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1f6b5f563860519b483cd99d9fc33876
SHA1 a0991a61a4597dc9321594867abde92210cc624c
SHA256 1938f810076717a7855dba1ecc823a7f2035df198f383b24d00de995b7ba23b0
SHA512 c7b1f54803a68562d67b20456137d5570ceb6a2d31bc4f7d23ab435437876179e57adef811bb14b034191b0db0f45f31ee2c03a9b388155f3867c5e9ddcbdcc0

C:\Users\Admin\AppData\Local\Temp\{71AC51AD-AF83-4268-B3A3-A40BD349D929}-MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe

MD5 b18c705b3c68cc49d9bf3649abc75c24
SHA1 6dc8963dea0f3185368790dee2a346301b4fa24c
SHA256 c2ca3135f3cafd79bf90d4cb3118943ca17f40e0d651d1fc32b1b3d22d1412aa
SHA512 7ac302c1e85c652bd897ce1af812950cd23a53c041af82fdcecb2314bbd1667bf2fc672dea40c21858e64befc9bf60190a4428f0b41c30317bb0e5ec7c00f71b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 5866f869e1b9d8e28ea0541dfb946e81
SHA1 3d9bb6b803a5b1ee23594c97e31209cc0f5c2f7e
SHA256 0d66dcbfddd0af33c62a99ee6b280dbd3c96d1c652bd1f719eb29c7e4a04d2c8
SHA512 ce4224a1ba6699ad2b5c2fce4ad7be873e54b95a594f8ebdefcf84d8a90c620175f44fcdb89fc6dce3727879fb89eb24404074f14d8147a5fd3ac8d92be14121

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f423351cd23fb4c9381e40f6d8342356
SHA1 f84caa4be3e94ca5c60e9f9e034461f0b6a450f7
SHA256 d0f93a5d21eb88058e704c082d73ade831372c31d84347abf6043fad36b274cb
SHA512 771b7753276a46b342724c7b68b03fffbc4e1a43fb062881fb62913ac063b7dd5b47bdf074e2add7904871fe4928ea964971c790a896bfb51fffb2643526e6e2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 30d53e75ee96f44ad2848eb9f3c6de42
SHA1 206b2ba6dd79a4d8e4a33edb084413410887f9c6
SHA256 feb7e550c33a66ea7bebf092e640439932d7c59b5f9db42e73f027ffd3321cf7
SHA512 c26b91a0ed5745f0fc8bf9e347731c2ea79b13d75b851bb71649528bb81e6fd0444ec4b94df15eea3bf8be4d0bc4cd77a5a6c65686c1772da895b06683983ba5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c28a77a599c601a0d417bbe8e503598d
SHA1 275193b291cf6e9deda63f27fd4d01017a8b51c6
SHA256 e801cfb439cb082639d0f5e626a62239b22ce26f9b661177ffaf0392b848fbc7
SHA512 b86002f795b7e3425215978adbf35e7c3d437b91374fa55a29352e8a1797d7e097ccdf5094d661df5cc0c3c7d4ecad3f59ac2e2ca67cd62ec40ac9e6a20e45ba

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9ccb3391c2e80332fef4fac46d8855d3
SHA1 180fe91f116c136617475066522abe7835e3057e
SHA256 beeb12fb56ca4ffb9e70136eceb6970904e054de05c9369b96a58f4685d5a1f2
SHA512 8bd0c764a35ecdfab12d1dc6a415b069c3b645c649dd1228a81b0781aca4dbe1579d7abab63af8946ecfb83d04669cb2874b98be38a95129a39ea15a31411be0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 49643004431348836b90ba9ff4d9cc93
SHA1 c3620890c1c7c0976e3852fd815f9938c53839a8
SHA256 01e6e58d04167bab77acc0833955fb20a26855b1bde08b7a53a64b0eb6a43cc8
SHA512 f3df68ce75760048dcc7617545d5ce787861cfcd913da856cedef5e07a735985a648ebfc989606c08e8382ff5dd4123aaf970a07f11f0b97bd2885f3aa4c5d24

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 96fc1553892b2c9c3973090d3b57df2a
SHA1 722496572c2834dcce180508b21f59c6007c4dce
SHA256 74d7b0f1e0574c2ddeb66c192642d5ca2e4ef9377ce03029f97217ae5322bb93
SHA512 da9b836d578f3eaeff023bc1c641b4cedba3a88d1d6209916b88cb5c56051860e9f80a8354126ba91ec7a9cd7389a5aac8c85c0dd2a658c53b25e78afeb52680

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e4e9af60fe913764b0d838983122963c
SHA1 592eb36ec9c597cf57f3d4c6104c271f72ebb85f
SHA256 c5d5d290317b67c689586374297a03865518764b7186ef2cc280322b0ee11ad5
SHA512 384ee6baf5ced6be04d9e788ff408f6d79fa029a99d85526c48c949339ecabf872fe9c69d1d80a4cb86dacf312e232798636e29d7505006817552d9fa8fc4b45

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d4279814801de99bd07701d0adb6d8bc
SHA1 99ba1a9d472a87b1444259d5a2b062255ace2151
SHA256 abfc0322423a3a6c097890cd720186e44ff5a4d695ce10f5f4546acae6308e20
SHA512 a80ade66c3a5ee027ab651700f39c93820f913ea3ba43bd986aa15a957755b175e1c6b2d522beaf67a76c4b85875ca28f4d9fe136b30a4516e18a5332f48333e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 337bb0d0ddb8b3e557fc6637dc547ffd
SHA1 0462441ab95c95eda983b0312c9fe4279498b1e8
SHA256 38cbc5337329c1b5e408a113dc34947e6f8336a0018c5a22f8b4b512b7f9fe19
SHA512 402591bfe65e6fe52aca67d5ddc64ac39b68f6216ca241b84a58b819f2430f1a7bd66efae1b5fef7094d41cb44dd8cda1bbdf6dfc7b6cc3248931ac6d81b5db1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fb2c91d8c431ae7e5c0c682641ede770
SHA1 982a8214aca100086154c36b738409f22d0cb5ff
SHA256 c153df60888d177973a585e56ac0c77c87fb977ff3542ef5b8b9e6941a114c5b
SHA512 22c268a4430348c7bed73fd0ecb611d1880dd8e6eee0c366c6fbc8c6c7ab32ff370911de30d4002c045b36e0f1011edf26707e3c1811e28458e47297480a9d7b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2158156e351d97dff6be3ba4c3fb1de9
SHA1 7e71146a37d85471676a9c845897f7e80c7e40d9
SHA256 de75180bf64c8e7dfb71d8dbd8ea9f2d632f9a2104223f7825f5d377bb2782f5
SHA512 9bc068791d0ef5a767041c51cfec8af54659f92386911c9383d377a1b939f2ccf5b3ab2ebefa0fa788f1023270b9a86d237c4658b342c4c49810952e28469a45

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0e991667d91f44d4cc6bc9da0c0b40f2
SHA1 da085da25ce2c9dba140a1ce96438efcd384484d
SHA256 c256ffb93af4d8688cd83d646b16e5be79f0b5acdb80ce70cce900fed8dbe9ed
SHA512 2bfd7b1a653575b3d06f257a7f1a92a671a76b2dccef9638bae2e41c04f364bab9779187be57200ed36be6ad0502e4e97282897ed67495d552ca000365d8cc4b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9bb105f46421141dfa9ef7e1a23fbfa9
SHA1 d7eb81bea8ac137c3072415d5582e76ba0c5f0f6
SHA256 05b756b9ed8cc3d6fd63651a0140d0b49d58c1c2ec290cff02ccae8b270f02a1
SHA512 fe7c6ad0f025d86b15d1fed007b6746dcce732e72618b7d5a3fc8164f2879f8f1bd8c1d3ddd40d77b2a85af3b43843a25ce172aa69d91f0ca4a0abe5c9ef8542

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6b35f3b3589f6ba82459eab118ddce83
SHA1 79ad66bcc4ef820793b43ce10e7df8e4d8840fd0
SHA256 c0dfbdef9787887a9495bb8fc484a9aba32e01fa521f503116437fc63c066d97
SHA512 68918af1e1fc966d5ac67f360305f75488d9187b6be2e0ee1e34e85b8939a7c484844d64fabf471e47ecc805ef344f55d2ae96818e67145d73779eb1570bf249

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1d16b06d7b71cc3d58d154e01e867785
SHA1 08c1074bdc2bf124885c6367e702f5683be9163e
SHA256 cbe2748fb5e6a0708551477c012ca2ed1809e14f32534f576b98bf3067eea2fb
SHA512 2717893cf11c24d0093db906e180715e5d8e1d771416c56f92a99e0c8f8236106120af6acc0144d91a231a76a237be8a77f405941014269c2ed7537be2a1db5a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 277bcb4c4ccf348dd899be3cbdea981f
SHA1 b7b0b6b569ff067038fbecf834ec97409f081fb4
SHA256 2ba498d65f2818936f584f696d0f0b69db7c3ceb364636fb39060adf59534ac7
SHA512 aed7c0507ba4c9408b63f8764bcaec79751a7668f50faf72d209b66bc576de43cc9f3d81dea0b10ef1007de3bc66d3d36137167b1c19d953195e2d6d491745d2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 051608262eaa4ece6f9130ed7f8d6276
SHA1 bd588fe3e45b7f9108e75dcb82573fc6fb6e8bd5
SHA256 1c8694ae7d91ffa8d0ad93e3d2159c9eae41a6f2b106e1b764e12cf6db798251
SHA512 0b2a40252d43a3dfd5a0774de783338d5ab9c29d253065d17dc5e7a8ee73e5b427c0f236f61d638277d57b2604607bf473b759dcbf2fe4e6590873e64a7b08a0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 08bc9f0c96a2e2436fee2e6f95b0f17f
SHA1 d6737c2c4ece0c31d0f7010d44a96181dc13f828
SHA256 016dde2a1cb2826c04217ae69b91864198ae52183af6d927d474178e011184d5
SHA512 fb18f2a44eaf901f695c9b27fbe42dd0e4f12523133621c6855be5356edf2a8cf060055911f7472dcfc9c8b1683c3e94ae5362f6d60b29675dd7eb349b08e921

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a0f58da40bdeb559332bf4d3de34f38b
SHA1 0c9e1309145e6aaca53a5fe5ab6e6f3b5e34ae3b
SHA256 e654718368003a10628abdf124cbb27a26087b103fc3f9f833bbcb67328edb63
SHA512 e000f3de8159fd8fd570030bc233db9229a7d2481ad3d8b6f03f6c68c5cbd4054be9bd2960b0609f3257c9c56eed3e947fa32fbcf113441d1ce791f40a2c6495

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 72596502809a75572df0bb1bf4478569
SHA1 39cdb10e5a99a5f19d796480b9465df8fbac150a
SHA256 2b12c1c1290a33f9646dea9755c7749e0126a6d2464f853c1941e05f5fff3a57
SHA512 81d8435675436f275e15b0b28aee15e30cbdc146784baf2616fc3521e97d50454428379dd85c447d65bf448cd8eb687329e088640d76153079c12d61c797a45e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 33fabb748fd87ca9af1596a47e3fee9f
SHA1 e7d910fb74be799f75c3805dc48cd041bb4babac
SHA256 18dd2c5ccd5530454c2647bd0fac8a150f21e9eb3537e83aca8d5e83b45bcb55
SHA512 31ad02f81ab00ce77b2ee96dea2fdc0fab7ae752f3daa9c1aca732089605b9d1e6305a03bf8ece2fad2f1e78136b42d4fcd7e7216559828feab808e55084a485

C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

MD5 ff9037aa02f81e89f55ed51fa071c901
SHA1 0f712a132ad860a80c069385005ad1e8bd76c16f
SHA256 a822dcc9c534f53b54e91d017ed34fa49106d7219ca059a44eb7f3fb6fc349f6
SHA512 8c0c6ac8b858d2310fc811fab09913988fabf5e86a46f280da2687e7ce3f7075a98064c5242d445787aa15d4dc63385aeaf016c41ae24080b1494ba4a8ff97d7

C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

MD5 2a57e93bed88a106f6517b9c0f8a54b6
SHA1 29cb1e8f522d22591842b3ec085712d930db74d6
SHA256 a9d21f0277f268278e1b105ea5d102ee9e75078c4af18462f03d4ca45a4c55d7
SHA512 412b3112d8c4b34f8db4d7fcd84c08678eb19690a4bdac40e5258d778df0d807c90930e43f871f51f7ea09083403dad94c00d628ae9d79ddd708c2d5aab300bf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8cb81274b516887fcbaa694ebfc4f525
SHA1 dfefba9214cbdc02b307d830d76325ca2728ca66
SHA256 5992250ee4171635d5d66c7eaa29fab25c4b91cc1883ecbad8161a7c0ce510ed
SHA512 2b945c19e63fee8b37fb867dfe0abed3183c3449ea42a220ff6866fc6ac82665880fb381869688e97b43114cc7a226d01a375b03a7b44cbdddd14477ad6a5ce1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 48ac648c329b36a739f4e11d7ee3dcfd
SHA1 2938da044795f176adf0ca3b97c3045a3c2de5f9
SHA256 ab49f38b08c5806c3facfe44f8371b3f9cbd70da138232d5ecfa093011db175e
SHA512 02741465e0d7ae80ba46d5b09ac12d3d386c35ec2e9236daf0a13079ff1f158dfebe24be3069bde6ddee2343646eed5fb6eeac57809791f716aef75cfdcadfd2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 75bc68b7429b3b84c07b320957705321
SHA1 2310d7ea0d2c5883c3db6eeb7cce4697e3658be6
SHA256 72fddb1a997cb407dbcb9cb2ad27990d59bc79f39993cc95072695a0722b79f8
SHA512 d67b6a530d31aead3b7027c0f964e80b580cc101b677c6afb4da3945adf9823e856e43f5707a70c66f755d6fcd837253ace433f4d22d501254de0231e924bb58

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 10b20c60047b0f872d2779e15dafba5d
SHA1 43adf6edb996b1ee0d02fb42063941cd00ae091f
SHA256 d2308a47393f26b1e582bd66961982f9906535f954874957af73853aecdecdae
SHA512 0f47e0dcd56264464fb3a69388cd590eb8ff53f07b4a2e33cbde8001e227cf37beb067c3861de9d85a746075b04ebcf5d88195cbeca76fbe66eb1b70f8746ead

C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8937030F-4D58-416C-9141-9906E46EF69F}\EDGEMITMP_35F10.tmp\SETUP.EX_

MD5 5070a34dbada1aaa375cc572b5fc7d0c
SHA1 e74b7ef714755870976abe3d2b4a7db0b9cc21e5
SHA256 03e7a32e1f10fced6a07dfa4e6cfd92510d4bf6929d423798e4fb5ca91fe6c20
SHA512 fed3fcbb64a59070b0efd677ca2edc982d28e37cdf7283f2777af8aca7d3760a7eefb8d01b3c2bf4b4ec3708a74c3412f0dede91e31dca1b6f8a4e4edc673aa7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 06d8ff60d2575d1567f215bbad23614a
SHA1 625f1356f118d5605dfcf487be96e5289b4a762e
SHA256 041b5eac4dae80cf773b69700725686afad10be23ec8e7171acc357bd92df653
SHA512 995404740bfacf057585f32a2e54b99f56410b0b44d4a2675ab954b73fbae3816fa08ed67f8b27c453024fa321d6d350f56c00d2f50846b58cc851cd811d5a34

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2d409a185281d3900494044e7ba1c28b
SHA1 fd80ccf5770602f69fceedb4e776ad5a1c4433f8
SHA256 9b9ad592dab8afb56ca561438eb895d92d9567fac205f512733dec53a42a7d2e
SHA512 72e868197c559fa5d08b575f92fa1a91d97a7797125624282641ca9e0b549b63b9acfe2371434dec876e8fcd64c58875bb261306a26b907548e5e0509d137805

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 dc82fa71c959a8cd560e6d70981f3a0f
SHA1 3cc5ae812a9e473bb0c7be49fbb69d19f247515b
SHA256 fea2572dd7ea25a5eef35c45ab3d6b5164149bdc6a4d42c07508e1038914434c
SHA512 084e79397fa8e56299c7544a89cb075d47c0101ed20c07b4ea0693108199c3c575ae98b797fc29c12f456b5c5491e0d0311d794921f6e862e76627a1e692dd61

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fad66c1786160be9da4965153b6541b5
SHA1 4d9d0d7ac20415fd448488aa5035e364149db730
SHA256 c9d56bdd9999d942a306594a2a6485190283ae7da10577ce0ceb5a08e59ae83e
SHA512 28e08a84ae641c3a0867d380fe93459ed3e8c828e7966e0e6cdb88d86eb30e68f83894725024a68717da9e99e458f2c26ff6b5161de218cecdcda8358295e7a2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 dd2e5a45e114e7a4d21190e0b0a3fb80
SHA1 6604456831ee0a101871167e35a4f88fe1d711f9
SHA256 76d551239f01870ffaab64e0b8ee051b3df6596ac9b56f418e204782c3014a22
SHA512 a1fa30f87ba01c13251b21c2e622e235ca22b798be75be95835a36fe5ee216b9ade76510d47a34dd81fda295688c2f456bbae030262e2cea324b70ca5d8f2f76

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 69a176098319b70b9cc6a2af36f48db8
SHA1 a23dae318b0bd972735fce5ae25fa18a416b1f55
SHA256 baf3ad9dab5b6edf59a299d4f55bc81d049f3bb7ad9c086ba06dd4cffb338f7e
SHA512 9afa5e7830772a49167b76707518cd6c1f2eb52b94da84925d21f57a20e55e1b1a767d457d031fa93ec80ddcd89520f704df50888a445df1113c4a306da16a57

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0248cef59d55936073880a2da378678d
SHA1 9318a799b4e710fc377ed90a15830e78138e0e17
SHA256 ad5be5e6ddb3f222a8e542525a77e860bf1b029166377b82c49e62cf6adc29cd
SHA512 6ecb63c52c22ade215860be61ff8c2120b91a2be74d5d6209d2acd76ace03e17b27a70d59fe9e918d6d785414461dc4157643e7871fc18a490fa179f7ffecec2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c715d6a763034948f63cc140f62ce5c0
SHA1 727aa877c656c88df640d5accf3d0898545c83f8
SHA256 abbad0c773d96c66762eb6eb910d8f0c242e32da8eec414fc026b6a608f2422f
SHA512 1e2bd9f28221e3477ed6f60cac9990c2f440150f32f9bc9a738beb432f11e12adb89a789e9f397eb515b7653d3c20e32287e3fa7418b13dd0797d497fec98f44

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3ee572a5b7b7fb6725c64093bafa7224
SHA1 cbb743e5fb872c636e1851185f6a40aa7eb6eba6
SHA256 2215e657593c239bf44f25cdd00d9a353591f7db921091b047aaf20263eddb79
SHA512 39ca01ca740a0f0708a3898dc2cf83f11f7d37348eecb6f69113177c5abfcc680ebcba23dc5d4f8b90ae3a031ad80cce2998bd5b73e12e590b1e366e656a9897

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 213ee99177eaa34477d4ea0bb4faf25a
SHA1 5a518b47032b95bc4952d5bfc6cfacca6c42f022
SHA256 f5621fa5a76bc66eb8a59e7275d90e0cbc8559408e4814f2bde174d6d14427a6
SHA512 0aac5e0d1a0d6f045b82a50a1ac94a778d08e7fdbe04f1152c013b749b301fe1c6959181b7106a39028f31584e6571f1483c5ee5500a90110d70c7de84254ee5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c3e2f775c9c85c76525c2978c6b3cdd9
SHA1 88df607f6a1fc496f49024b08c75b02dce7b66d8
SHA256 4214177e1dc6c5ad67dec2003f1e890b4601574904115f1afd8c98267bfd7f72
SHA512 eae9ddaed074c60815ec48518259637ae711134ca7b925233b886f22dd941c8689fb23a434b162ab0f14937e06057a3f1e22fdd1182c9094793c9559bd4ad725

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0ca3c1d4e9166d73174fabcdc4bc1ab6
SHA1 191ccffa969520662bd741e160217625e6f24956
SHA256 c6b4a240d964fab51dbcfa6ee3678c0e432e87d956321f6653e65bbfa309502d
SHA512 33ed9495834dec13f6a7683f11218f668b6deb65722f8bb50e6369582fbd3e6e4bc220cd9b2d5cb42d258285754ccb56fefdd4d774d7fb44cc310b9e9b13f57f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 20dc9f5ce551027318e4a7e8607f288d
SHA1 f95c785907420df742bbf5a92ae2419b1960ab9f
SHA256 2fa56a37e81d9772265d267e692526a1de2a0d66dbc8d7b6a2c9875d1972a763
SHA512 84ca35e7474a53ea8a54a671f23a104b0b625343cdb9f468997e6972b51cfdd747057f475d441029d93fe3b41a25c1d81319f7cc15f26bdc536edfd8ac442576

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d9dc7e530d4372eeda3e15099297af32
SHA1 1891a4e40d200907c4ecbdb65a50e728fa841ddf
SHA256 1289a5288eb77cb655a243d64d8bf4df55c87e7f3e9c8073dea2f66ac2665213
SHA512 eee2994a046f7831d46945a03fd2c06ae6f172c8036e57130255b6274c2f869f4ea622ab95b0d4a4b531a989b03c5425d2bc7d1291a796ac80339b829feed26b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8ffcddd2130cc0d3e4143fe8feaaf718
SHA1 19ee43ee6ecb774bead86d9202c715a7d5c5d811
SHA256 a84dd8df57fa985ff50d804e79c6fc1f583f60dfdc054c7e29bb8cbe93774a39
SHA512 088677d9a7bde2be2af2c43c125c652802dd64e198be2b20a0d919474711ad070109a42063d19b27a5dc80248b6d621fa7b9a4a349741c5a5f8e30932219e63a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1ab8b7757c46aba5ac668e165903063f
SHA1 0384ae211cc312ddc0e23f4cbe8a20af6953d058
SHA256 4c551c657ed68cd6d8a56b207840284bc37956a445a6dc476e6ae5232d249244
SHA512 8166b84cffc94a191f9564183111aa5357f0b84a353aa8f1e0db8adfb3c914e217dcc81f3de21e7271044901bab00d4340f95a625c39b345742ded9a3e7b8359

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 bf85747330625a80c3065e04aa21a4ac
SHA1 aebea0098a6e17d7441531d018643e3ce9229134
SHA256 3626bed8a26f49edda2911abb1ddc32fcf29852cc7c20685250eb628b4b61a88
SHA512 8e06a20c9cd557146b300e9b453874cdb2a755dcbfcfbe54fa8503f77d1c5fb976d5005a1a27bc397f655c3783ead5de1b48bf4a4abecfdb5c68e81ea317f3f8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 278d04ae38cbaf62480094dc6d8c3aad
SHA1 aefc38b8cff8ea831f823417ca91fa3a85e03a74
SHA256 d9b9e0ced187e11284709738e327772e0a0c89ed766fc0a919d0a7d845ec6979
SHA512 775cbd73a7b0495f75a1cdd104c303c11e833655ad2f30d03dad0c2521715dfafef4c98092d41b6bf0bf4f8a2cf4fde9784d00883da6d181ff627be47ad4a9df

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9a4ce8a132e060a3c8ae464ed19f48a6
SHA1 82ef6e2b1b4417226f3252be034ba07e5042e66e
SHA256 596b60b80bd285db92f02c3e5265ea592433a469daa91c3b404129a228979262
SHA512 dcca4503ef12294a57abc708324556df9cbb7813309d3859969c7fa3776b24ffbdbba30f16c41b010e447412ce50352c284350aafb0388738ff3b2888f29704c

C:\Users\Admin\Documents\ROBLOX\AutoSaves\Place_AutoRecovery_0_AutoRecovery_FnqIBs.rbxl

MD5 700e1ac8dd73248b3ac9cb7ded58d263
SHA1 9f5e46869e2438e5c2b4cb109525af75e08a929c
SHA256 8b582c95cb0611391f42fff79396ce0d70005ce9e32d63e94755642d4afd32e4
SHA512 5c2c71062070dbb6cbfd97efbac77f7e94a89b8c49fcd48e9b6123734bf16f9e436ec0301ce7bad571d4f4700653dfb454ea58092ba959e9b3d7b23b22f8ca18

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d8c09b3a75ddf8cf7298f66e165539c3
SHA1 6f7d46587285a1d1cdb614b81d82459496d8d70a
SHA256 ad7ba710b66cf45ff09b57982ca1c6527c68f48cedc1d5a7ebfe09935c510623
SHA512 fdcc0527ea11cfedf92023b20cdd8921ffb504045630dddb95de69a37e6516bcba49f4e2a64ed09d5e266885c036361cad903b6a086315bfc397d74389bce51a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 cd501918daaf6532312c509414c665ce
SHA1 05b6ff917cc6c01328cac47068434d91f7aa877b
SHA256 3b4af093ff26227d5f2db29f806039484b31012a9d1cbb5aa5cb8a8f2d037a24
SHA512 c5f930aa2a0b4fd06898764d8e865ae2878837979b33109962da85d928babf4470c3ca17acb974c7f2458cb3ab8c967941c81e117c83325e54fb42bdc48529f6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 acdcfab8da79f4fa1081279dac9df346
SHA1 702c3945c4c7d0446e6cb31f817719035ee63f5c
SHA256 ceb81d008806d0fbfe9629f8bae2fe8316b827191d46b186c68796c8e88753cc
SHA512 e11f1eddd630a3d6fa51130249700a766fe02e145cf98c4d3d9663593bdebf7271596fa5a901cf09400de2c8a2f825f5254b12766876cd5884824d4c0499fa1f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c468c9e37d1de1813428f8813ae5f869
SHA1 87f6ea48aa99f1f59af38150778c90d5ff07634a
SHA256 8e6a749de4594f2f1f3aefd232c05e1c38b238f94058c6812cfc50addee76f5d
SHA512 e477a39ae24baadb4f08ff0f7d3ad5c478d303dac059060ef7557abe4c45adf9f9cab6f969fddfcbda9257da3696df95cd34e9493b2cdca64e9016f0e3c56d41

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 96b5dd44159ceefb11d8b34cd4161922
SHA1 17f1eb883df3986f32918611034bdbd4878a4017
SHA256 80277960753e20c9087c735eeb0a4b339ca93a7e2ac4ce20ff3d806533feb254
SHA512 ca1f6a23d1683219c38d140b6f17f1582ae7b059ad698d6e0901315318622862c2e4f5494e1ea0a00853a0f6f93b09dcad0098141fdbebc22e5de8e2d008bc10

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ed83a6489f15e74bbfc21975d43d4a1d
SHA1 a758c82d0147cb82a3c3c86044b71ea90b866389
SHA256 55572bbd74dfdd493bf5d21c7cf9e649ec911edbdbbc6f042aa5dc78877c0738
SHA512 77fbcc81b76434a378106034c05045c90a52127e65844ba00f78d9afed0c8e6d8781dcd707b3c61f60e776aae83ed5d399728fd5bd45a93e038d754e92801139

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7226c7d0219d221e2428aa13c06e507b
SHA1 19be2ef8472dae0daf20daa9f540f2c49a0aacda
SHA256 cf36b3a7f7a07178f5acb14424ac7eb2235ba0f9ecde369610319da0644e52af
SHA512 953d423ccd53eacd32ce7fc77f25dffc80ed34b60b9d4ec43f879c525f8b573a30dd70b01a7f06008a9f981d0581c457cfa55c37ba42ae4d2e73584f925ed84f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 66b81fff7f8ca735e8934845684ec1cf
SHA1 27646790ba8cd67103b83d7d8063f4b93de8d307
SHA256 92f91af9d27b85b9b832907007416fdf6e9f4f6b57a4e8344ac17e46a83dec4d
SHA512 7caa024e622f56fde6ab861443d29ab7cc14b1b08018bd4289d9db2bf65bf0db28638be0c038b15c91277df1051539708270d039a13cd01cfc072d791b012931

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 417e95c46a5740e8ccce0fb8887d1f32
SHA1 1bf2fda594faca34b9047c347f3a8be769d3ac71
SHA256 b87df95bbc5c90621fad404c7e9b4746ddf079ba76f6a0cc788894dbe0baf3c7
SHA512 b7630fd04b32ff449625bad0cbb8cc1b5c6b31942280fed9976833b612651e865f42d3aca38e222568e3d390851a7e09e00c962dc7e05c8dfb70949adedaf655

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 724874669e594a80f7bd47c2fb33feb5
SHA1 523fefb32ccb59e096b1d91d1f275f37b59fd681
SHA256 6496fa9050d8884d9d6be582002ead982eb49836c4150d568c370dc017be5274
SHA512 dd18a4326104951ad79a475c053e01a2a770eab990910d7f94caa850713beb000864678ca553370042d430ed13004cffb4948007d954390259bdfc6bf3e61b2b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 af7df129b2b793f7a772a019dde99d6b
SHA1 1b42c9e5e8a8a5195c05ce5e4de72092686024de
SHA256 cb1e0a55ad07fc202880a9613bdffad2649f3d96e10cf20443cce755d9f57bde
SHA512 36be20b7d99af6c87702845527bc284ae50b0fb65b62f438f5443011da0b8c6922fb76a4f4147e84cae30ef9a7d9ef04c7d2fb788266ea6daec4dada6449f809

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 db58c5f021436de1c639f3dcf1f89cd5
SHA1 fed5d483b42e2f4d8c6ff8750e1a9fef3364f5de
SHA256 4f241315e4343a22a7371d59f1be5e3a4105ed120223d416d9dae473fc06cd20
SHA512 9c709cfc1c777097bc6a4d1b7d669a5d28e9f3530eb621a8c4ff2480cb98ecfd37b28d7a2f02f9f8df23edf37ea96c1fb1533cec6448f5938879400c7ea4bcd9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 188113b3289d22aa394a4b2e0e08f286
SHA1 36cf80e6c262d303bc28eebbc1556d57af122a23
SHA256 128c5189da408bb4ec95bb4deb2a6c64c746f54ca5a4a0e5fc24ee39d997004d
SHA512 082fa5751cde437bc837b96a7f80af6a06666ba667c784793e499d778bf69655eb2648106cf522e4bf0d4bb67c9f96d37570687b1b78794a05c84b5a08e3ab8b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 42dba0a138eb819ef0f055fe3f020dfb
SHA1 883b9194eec0f0a12faea6c3544424097492e88d
SHA256 cc110accf85602f162d1c6afb9784ba29f7a04c272b8b530260f5e3f40e52a3f
SHA512 107439a8aa855fa073874a0925e9e4691568069e6307d04fae31ea43a29c1cc9fed1141714369a1f610423467d8ff092145706b4b40fe59ef22c55cabd83c69b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 099e6e60c9fe93d06f763c31536b1a63
SHA1 d530cde99a721f03f06082a00cbc96fe87a26a9d
SHA256 d70691fff3f9d249b9e97cd498ef479fc26387266ff083f189b8182227b8f0c7
SHA512 3d51472ec1a81443c97c56f9dac47fb991650da137ef8e428f90875ced3df2b68f127dbc1a3b782fe3fb8916556c6915995e665f6e41c1131e317a5f10db1889

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fd8ea25bfefea07cd8c8e177f282c37a
SHA1 1546ec3737b1457d2f785407832400662e55d58d
SHA256 4bd957990315baa497cb8d93aed70b70d74f8307be3e24d38f7bea1e3b6a3b37
SHA512 4f4c769f6295ae797a6f2b9468c88ee6580bf29e92a71c8aad19e67250a0ccb2ee44bed10ab4429225d141b3d91b454515885fec684da4c78ca084b0e12d3afd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b8273aa9c655e4a78293b71f2abcdaea
SHA1 f1c8cfd14d576a780c260cb2545b3aaabed05a50
SHA256 0273e6acffa948557a9c7d3c3ce5ff60472b252cc45668b252c76023c840c1f1
SHA512 81922eaf61d283d8d4f8d5fc2b2b98dc47a5b0114d321bc213481563f5a9f8f01d4a86f1267babf40e640ef0eb0e099b6744c9d3c24972ce459430fb647d010b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7c8cc92386d834af49ef2f0fc2b8509d
SHA1 d078c59ca9294647adcb9111a9c5b5e3478e9c0f
SHA256 7c4fb7972f10749fda83c03627d84c5050b3e45133c0a3d570bf7751b354adfe
SHA512 fe257bd8994d6bb79a8bc40c674fb63c892d5b8413fbb0ff1cbf053d7a9e811f180e10680bcf3fd7b22a6c246377d1b73465b36b43c650e7a55ef772285cf4cc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2cb1aeb4349fd056204141b570067ecf
SHA1 1704773686a1ad555d6b2d3596e83e8ca5d10992
SHA256 0e45e79160145e3220cd332659d6006d462ddc0304b5e1f11d6bbdd026204aaa
SHA512 9668ae91234fa80642d840a90df029d4407f38ffa871d8d908724fda5cbca93dfda4d0ae6baccf57297cf52f8f58536bf2633e7730c41d28b9ca742cc59bd48b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 300e83b24bd4ef59181bd7e3ef09e46c
SHA1 0af855877b15b393d57fd388463fd7b3fc2d888d
SHA256 a293a32de377fed96d6a5ddb37edb1b326844997c2fb9312aa056931f93dc25b
SHA512 e18524d45ddb3390c1e3fd50ebb65194cbbbea23e6c7bf6dd00ebb0c382c692b811daa6911869b89ea0f93a2662a4a9c65ac0752513905167b48388a5eb12048

C:\Users\Admin\Documents\ROBLOX\AutoSaves\Place_AutoRecovery_0.rbxl.lock

MD5 13ad565e296b1377f9464389961f40ee
SHA1 a9814646a3c1172090caa30aeb270203acd82bd8
SHA256 b1d5eed700a46dde3928867800b41f4c7ff781818369f725de8f308f8303e39e
SHA512 6499c953030c0e69a07041df0d6ddcf4c8c9107d38758a77544c88cc373ad0e6cce941aa7fb51a99e41fe28c66b900bb3109d5b91f65612515b6b0786cf4370d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b88337e10ef05be0bf16c0481811ca2c
SHA1 619c1e9d3ef610e3f6c97c991efbd1299c2ee9a9
SHA256 11f49711d5af5806442142ecc2af3d4109a994ab4b5f9a41ad54661e46bf79cc
SHA512 2ba8689eee6dcccc8d971dbbececc29030868ea04a3e2d36017c6d162bccb7eabe561b695375cd2c275497826c808e8332cf0875a3c50b5bc95b1674f29b055a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2e88495071b071545823d0d2f7e1fe04
SHA1 6ba1db54f6ea167824b9bd5ce3ccd1241a8faab6
SHA256 25c4d635dd2d5f7af277454e611c2b968444528bb53ead9347ef9820c42b7388
SHA512 0daf6513d9f06d286d97cc12da2e7bcf8ea5ee84b79764c26b2d2790f5c5d1123d5190f47c24bb83e1e7e76d2b369dc53dc5e07bb43903a80f9fab1dab4a72c9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3d196cc88c3a9eb8bd06b50d5809e5ff
SHA1 fa9ae27f90b359cbc547a675f771a7df3a27439a
SHA256 9b8e675de2a0dedd26f77f24f7245e354bb88c4cb516d79ae1edd38575ab745e
SHA512 b358ec7a1fe6e68a8c90839a54b08420810b5448cea9caac407388fb92223b084b4047a80ff0a024adc31e5a852c08286ac1e8d66563865212c8ec640c04ee51

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2e39d9ccf8f7345270ad2b8d427cf11f
SHA1 396bb0b3c669c37ea3a6f1efd48c440159af10f6
SHA256 43ede00c99635f4fe48e53f040a3ec866b814461c67139e85059e04352b1055d
SHA512 6cf7de602b323259de2b7c3b9586738ada84d188f830e9ae5846fe1afdcf6e8c48de435807de74b5cc64a6a542942ef457d5476ad36163939193424f594ce22b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f282159bec7a7c436f6b17b8cbc5dfde
SHA1 cff3d211cb59addc941204f4105678661d2af8bc
SHA256 f86a1ccf2d5e1f0286490bc2e9c33d174bbcf835ea1f70d9298defbe41eb0a9f
SHA512 3eda32b7f733b737a1bf230acec8db30d4a043b7ad8b352b07d9601ac4c088d9eee868bc17a8cb71b405f637f5ce39044008fd37c68092eb8686861ce4330afe

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 213a6c8bb3bff20206a09110d4530011
SHA1 605273d4a01702e9db158c9ff4eff0adb1caa05e
SHA256 6ce0f86606513952bd29e3bdac431f4c7352ce5498cdc409dfd60b66ab519550
SHA512 8f8d84f143ecbce2b6060fd67b98d7b524182e40fd6cbd1f3a1ec892d41836948dac34d8389ce7baf723d5b07b1cd90de2b9b2656760b2dc420d885c0a278b8f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 dc62085f755382256ccc4290a5fbb359
SHA1 d843d81e3fb87b5686ee349d41cb1146c21cb3c6
SHA256 0607f3a27ad82847968a798cc39fc8c4e84ad0881aa33302bc4a47922a713df6
SHA512 92169393a5d35eee7108ac7186a75a1b602ea869ed39165f0b7458a47f761d6ef68b03a51d304c61427ccb5194e1edce39f2f90b1768229761e9044ee6fe4050

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3d462dac9b2862c7be45cbbba20d35e0
SHA1 d817aa58e65c07b53dd879175452a6366c1280fa
SHA256 6424a656f1247523319140cb4ed2f8548acd009e9a3b429dabf35b297b272fbd
SHA512 476097b2abacafa33503b3abc61590ff2d8fc940a793f8816da4cf7d7fd854250ad3bce8aa9459836fdbbe5ddc602fe3d1653569b5829e866b9b389d23ad4cc7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d7f74f87853d550a7f66ce8ad96f5fdf
SHA1 a126d72bcd2f598c4ab96b979a1201148567ee55
SHA256 51e5606aa6e2e458dd9fb3c18e1151144ac1506211b4810c810b3cbacdc9c442
SHA512 bf4cbabdf3e0a1342e70b5449fa7ba4706e573910bb4e059f465331e7079b019f953ad0b475d6d8e8c074ba14e62099b6e2c03c7549da635a62cc0b813c849e9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 71e666be884dd8b015e28f3bd405ad2a
SHA1 ffa97af00f82bef7f9ed8ff4733e923b22b8909f
SHA256 485ce9a64199573839f649ef318cc4243d468056298b3d500f8098f05a95fef5
SHA512 c130bd5a0f64d4632ef2c713cc800ae7c17e93ec42bee386fa0bf9225c03eabd60528bcfb2e5d2767986dd7167259695a42c2a1fc9e75ecb92d6144f781d4375

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b0640aaf8e7ec46e4f3efd1de2b70adb
SHA1 3bf30fbdcf3dc2bf6c3ae0eff49d20d641777261
SHA256 657c424268fb2685ad61bfbb0d8d8e76e679347e919f9cb57d8bdf03093446ac
SHA512 9b41ab044febedf88010dccde8fd16e2024d9c6cfda613da7fbad56f675fd9470ced5d1773375f2b0525f8962e702065ba85a7f0ebd87bf5923d914f34c177ef

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 26abf08731367b5e1d6b72559edde127
SHA1 c24e4957ab64f49e0b1ca0cf5be6cc5ff86288e9
SHA256 3e106506647a4893a1c7d5a0474c8e3d2f5173dabc92108d482903063edbe9cc
SHA512 4555da5044d8f68479a0224f640a355973dc94c4cb64318c9dc71bd60dc780bcf03d191bb01d51227a9ab05d855466055abd1694ace5ea6d32921db6b69503d5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e6935833de86fb1cae6200561f33ea5f
SHA1 aec6268d1c8ae0f3eaa39e661ad090ca4dd0936e
SHA256 1cb0c9a2baa272f471a80e07f81dcdfb8f8feb2055f8bad6864e988e19883b80
SHA512 b28949c1e2d01dab5574f2d2519a792111d4b600116cda0e170a0b4b6c11fd893ed344aa466bcd46d7f0f4f4b6ccffffca1d42d4ce8fd08658799f239ba154ef

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 df99e3f5d5262150086d528ffeef42a5
SHA1 361138e2ffafbd222b22f9357c1f2cda1768264b
SHA256 c2052f4953f43437e0765b60f14c2a0d1c353875134ea5a09564a1543e4e8434
SHA512 d7ccd9d0552d0560d004b01eb96c095fa60af00a0b376b161a03ac3e9381df0490c10a8a0e3b0bb43eaae17441941a6cfe3edaf99512a2129ac345fe455960b6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 57420d264e2584face5a1e7c8c02ab33
SHA1 d21fca46895faa4cf0b621e14a79d6bb85f4faf1
SHA256 8b698d8300a0e87de4d564b6cd901372cb5897adc49a9e93e04d6022607465fb
SHA512 79b5403879cc34709ec6991b5dec01939fc59eaf48083c160076b4c0177ac3b61df6f3ec42dcef81330add61a17756f63c526f9d3a150ab3945f008dcee4ada4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 31e66a56ed6ee01faeba409a47fc88b6
SHA1 8f6de6456f9b12817041f4948e0e686fd20cb6d9
SHA256 4a9ad9fb9ec18dce483c46be61ef4ae13730077be9f18a6a262db037c61fb319
SHA512 d82f104e3895553c22b885f790c5e84cce978b4cb2cbd31237028f0ed49c7fa31bbfb4a86b8a7e6473c1d2a03dffc2d3434656cf2c796fcae42285ff0b2c62f3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9b486504feea2674164257443462a4bc
SHA1 9e21eb9b1db6baf343795683050bed4bc522f3ea
SHA256 4778e41d39d100991f51ec897e4eba91a84871a1b0437fb2432e4325c8230057
SHA512 e8fb295bfb17aabe6a013c59e43c99884e67ee1250a5507aedb6f15d76363480740f59f9cee9a59cf02057851ece60c4d29d108948842545ad551971992b478f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7872f35a600e1dc71cb3bef4f858398c
SHA1 cc94c4fb76981e97218917309b9dcff40f2d1056
SHA256 cee8403098395db4f7de4b02f61342704368014d89ef504da472d65bb9b48920
SHA512 286f8f6d5156708b0ab8459ce4fc4f2deebd00f6d4ebacf874ed07763d39562f0612ddb4e60cd1a8bf0aaf506c20ff8a5fc74fad5a7f2d61f8d32a491fb9bc86

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2828d816a3cacedb797f9acf06d403c0
SHA1 d1791eb1ec0be4e00b8e4a29839baf33befe49f0
SHA256 472ce3ea8ebe7f7799b0539046f8a38b87198a3f57c24f25de17a41bf7112f95
SHA512 924878bb1c419608e2a2b2d95038624b9410c475eb2c2a7303cfd1533e32ca299f3a5e37b648e505962e55b2de20b5b645c375a45c8d3784ce87222d59c282ad

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 73ea37d610cb19f9f4cbde62f30cf9b4
SHA1 f84037073721e5a352dbd7afc1938f91bd96d662
SHA256 1d675e3c667696f76bf119d8e529c5bdd826b49778f952373e7a6f38d0445303
SHA512 9058bb408b5d09f1504e36132760ef7f8a7821839d6f47749b3a25d3be7f2b73b325496b100fb0349cadbe400018ee76f28bf75e9c55e2c4ab53f52058645aad

C:\Users\Admin\Documents\ROBLOX\AutoSaves\Place_AutoRecovery_0_AutoRecovery_PFjfwY.rbxl

MD5 13151f628b985ff4501f74e534af7871
SHA1 cffcaee745e05e84c610f9d5da37f127110d9e01
SHA256 ee99f15ed9afeb016117a99c08d94e7a2ca8ccef31b161a2bb7bfa7e6fc2bdee
SHA512 a837c101c1a01d272ea65a1efa0652c49439e85b811fb3c4afcea5087bebf39e7d1b7dbb937ccc800681e4f68180779cd0cad1b2f1ef2b254574312f64d28e30

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 19c6b1aece472793e4bd086a385338a1
SHA1 98e43a606d41d9484bd258c92a358cd545d593af
SHA256 238d5464797cbae91c79409998882f12333074eaf2da65ae0e3f986220e376aa
SHA512 dec3347b16478cdb9128e083bc9115b653e56d54e401ec47407d0b1567bc4dfa91c8fa45a171e4dbf067640f66b7ce57ef5e6ac462f8dc9b3fc53c76b498bd77

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 32ae9637847cb5865b932716717df1d4
SHA1 490e9f14e42b50f37678152c0a1800e0f6dcf66a
SHA256 8b7be2739e4ed6df9ddca65f359c4c689200a562e3ad976e207b426d70fd9879
SHA512 4bbd2c4f2279f32bccebc612f9f8a6d54f4878112c811fb9e884ac28e66833e13c5f3eb701cb58ddb04e9d3d25155c3c57c62987cb90057cdcff47aa2a13fc55

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 feb22dee33a1c64317bff2b659f6d1b6
SHA1 0ef4a843d9a2480dce1c1b060b9c634a3c1251fe
SHA256 641b4c94debc562c72796e959369637b4ccaee27e6dc4e5811d694af2d98a8ff
SHA512 b11b5cc3a6f9cdd039ab086d38a3094e099085256dc59a06a4f172c678a237ae2f6b622ddc991da26e72a33c63f51f13caf691a49959b36b2b0c0e539cfe1060

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8e450c2d8e74a127bc96cd60f3f6ec83
SHA1 f4f959b72304e5f63097d4c0ebd90b53af724590
SHA256 2106f3138a5687fea13a6645a19c30fe3d811ad679f5f9df89162a912399f23f
SHA512 3d9f14748c4df2f94e239cd0b67e6b32c4e2138978335fecc8e5eff8d5d91c53c5aa02daddf1c6f7039e47d2dbbb3dae8a88a161e4547c7aee40c082d2762dad

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 abbca97dc54dfb7f2e6b86e2383eb255
SHA1 5e6acbad073eb52206cea492e0ce7b01180b3835
SHA256 8389cd4ca1a9169be4efe6428a60b63e704e862b89ddf2c4045fad7e847013c1
SHA512 bd24d4c3662edc31513a104052dd53ba26a6d287f71031882669c0441e1c4a43fb7aebdbea71f5815cec24ac38236aea1b4e21633057518fd64a62efe9005ebc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0ae1fa94b39b045c782c294d1c89d690
SHA1 92b06ad14760f8295685b2c0ab8b49b280169acb
SHA256 e516774924e4e52ae6de8999c1b22842bcb4f8c0d03cb0a432c8ec8042817f82
SHA512 8a5113a8adaddba9d6715c8fa702886b56ed0c66b7c8a9a080c064f135aea0c09214a99f957f30cbfe3ea578f53137cb3bf3fd55c6b707a93c44313f83149b49

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7714c0a75fcf13c0ee7047973dfdd3ca
SHA1 116b4b7db0d23f0d36618d3c027c485e5a53a454
SHA256 8ef34ad7dea56c75614c2f2fbe2d7e3b3d77c06cf36a53277acdf2bf8eb98143
SHA512 c31cecf0a6e6dddbc0859cf19fc0a902b90b34ccf62a35acbfc083e5fc3b4653fcd84c34dc54944dcabca55391d2463652692dc564403ef97e329ab9754fb9dd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 303a377313ceb731a1e2baca8a2e3e46
SHA1 4ff2d4fec96bac1abb1ae0d4b864e70c9429c657
SHA256 a14e125dd4a14af75b752905c31e4f2780f7a1c3dd623b8f1d76f7b230a2a71f
SHA512 187ae7e49ccff4d67f6fbd460f4980d9ae23970fe6cfa67e4c61ca3de46a2eb47d5887d37f05b1888758046720977cf9a885ea148580b267a65b58a12a54e586

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 af1e6bb1737f09a2384047a208822857
SHA1 7ace266a002dafe5e55ec798a69ca00ea49fe574
SHA256 5a2ac44d9776a51c809af0a3e44f3f828172eaa147e73f25f39ee630e3daa682
SHA512 c93c0942aa14841fea6c0cca7e28f9e79ce5f229c5e9756662323b5a6d74c0a0756138cf5e189ae1e30d396cbf4f1e5fbfa4ebcce38a702cca55929e99518824

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 991a45ad0dc3880f1854b4298f74b12e
SHA1 52d3b442609e90fd00520a1ba4a2998834c32d50
SHA256 12ed8e1a02acb00354952d37ff76e0831a2e27b652021417f8b475554ef7132e
SHA512 7c3b8a938d33680757dce8fb48553d58a2010a3cba886ed32358851fec3afd734f269b81908343066847a83953351b35904181f01afc3ab1fe4bb03c5eb00e7c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b4cca718c859736f9be5ee311d97a7a0
SHA1 0feacd130df8671f3de3da8491d15548b4a4435d
SHA256 1f6b4b58e3aa86b4c25190135794dfd9f54b91d8ad297ac839f1d1e01036b3fd
SHA512 db2afaf2d1787b60f5107a6e62162bf3f0e0ae4535f77f42d7d7fe42516efd366f57eb07cb13ff550f0bb487a709a0ace3284509d80b6c22fe780214e3c1cb0c

C:\Users\Admin\AppData\Local\Temp\Roblox\http\1bdcba0c2a6e5f243ae300b537b70847

MD5 91db99c36ec9613df7f72f1fe2d2a216
SHA1 77c74cd28db0d60c2a47665f3cd070c7bff8e6d9
SHA256 787c8859f4dc247c5318f293c0667a7cbf2d0699fe4a15fed3806d29b35cb1b8
SHA512 51761acde91efad0b4d0e4d216ca294ad43318db94bcbdd58c914e1c2d1c0a2acb6f9b4a75dc3c222250b4078b1a80027d35fbbe7da6c32c8530e82db4bb4cbf

C:\Users\Admin\AppData\Local\Temp\Roblox\http\02dbe498b7f9be8ec0bcfb9f93d75236

MD5 736b0f42494be33fa84c163e261298a8
SHA1 1b5680a2f6ec8e727b68a6781fb480361231802e
SHA256 ca25845c68dce1171117f389914cd79d0e404cb68f902275ab60815a4e93f67e
SHA512 bff0fc2a147c45d0ee14b893b6fd02d311a01f3c263bd0cdb4a7aecd99cf9ba9e318f9fc860f5ec248d4137334cd71ddd7bf37ff13f35604e5054d2e8e121102

C:\Users\Admin\AppData\Local\Temp\Roblox\http\6c8142e7f9f95125bbb35e2fcc1bc001

MD5 952753069f8190e1d121f5aa8ccb2a5b
SHA1 4975e971e3adf698005a9f91fe25fd4614e03436
SHA256 a18a1c4bdb8bffbaf4170980c5ef3d74ce61ff84b9955b20795fc1d1d1d84bb9
SHA512 1a6a0a437644328b8d63c5dbd613776538943198013843b6584c150137ecfcf7729c3d0640ca80a48cd7385204d3809b829b0dd3899421a85df678354e1d7506

C:\Users\Admin\AppData\Local\Temp\Roblox\http\3afaabedb223aba1cba82c54ddae8bfa

MD5 023512187f1fc8c552f81ce6d19fa08a
SHA1 12edc9cb97b2a2831f2fe7b53b5ce0a3c210edcc
SHA256 61905b16f12fe64c13c113b9f07b57bb76c2dac288a3475087ac605752f5d2ab
SHA512 c9389a8e830c1af08a405f8bfe27c5839714a4f63ed8198de009e33a9e99e6eb99c2197083e997121aa59df6428f0b0bd2195925b6195dece48e5ce5c202e989

C:\Users\Admin\AppData\Local\Temp\Roblox\http\2b0e6215b6ccd539e7a848279e69e63f

MD5 a5ab4ec957c44dbbb2386a0709f21ead
SHA1 5edc982a9631fbb10b7ca9f908a626a158503e02
SHA256 b81dddc32da62f4d0a6f074bcdfb896099b31dd10f87c3f0bf97eb7f76934cf5
SHA512 d3a88a5016c84ee88a6731245ddb50a2799a69aaa9917012db7a69267a98a07f4e3f2dfc48a3185e9c870bf385398014b16658cd0400c8641e22ac66eaa1aefe

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 48af76726d310c0b0da82272ff5dc47c
SHA1 2b1efe91029330419f10886325ee650d6014e207
SHA256 24b18e47d591039c56236ed6956ecb80f4f64e2b44a64dede99ad9bc635ce83d
SHA512 67586db07cbe95862eb93c5b8bf414f4d3a76c7e058984154d0e9f7a39d67bbace17a191ba9a1734998aba3ca111b3b2f9e64123b0a99cef8710abf44819931c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f81b90a1cbfc995db470a368ee7d8cf8
SHA1 51cebdffcc8b3569b2b8a41695fbab5f77fa8eed
SHA256 b4e6d8ec4e0a95c42e4f752298cb72d5e3e6d00f6989c39b772d2f6bdff5e8ae
SHA512 e7727e0f4f6bc2ef14b980a09362055099f16a31915e96becc9c32696418ba3cf221858be03413ddd1cfc04d6ada2c902b8db891f4bcd56509de08f523fbfdbd

C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json

MD5 ab7cd57f9c9f99e785b3916bff545abc
SHA1 92e5e1e8fa4e2d5bf41e426585ad00fe9006f790
SHA256 bf9069eef4a09e1934b8ceb96ee151530a47a6a2f62aea2c0a9d9c82d135da0b
SHA512 f5839492ccf94af8bade3e69d4e58ae52b41594cfdbf741a1f401bb3a9aa00b20fd2a465247a406618eab0e5ea3207b0ae29560bb6235f1a2bbe6f0a39a1743a

C:\Users\Admin\AppData\Local\Temp\Roblox\http\59e47548f427607902f5f537a9edb2c4

MD5 da409e95d9c164842fdc85a9a72aea9a
SHA1 f66c6995588e092bbd0ff29f02d0b24d3a5728d6
SHA256 5c35e134fa1621ef035c309ac259fa9c63ea48c12019af22990f4fe7a553fe5f
SHA512 ab24e14376f878f3ba0cdde64437831e79af3560c93b5cc1890d107b824ffc6477147810ced993c7b60a4d46137c187c550278de3bcae5cbbf0c60676e1071a2

C:\Users\Admin\AppData\Local\Temp\Roblox\http\e80f536d935baadf55f21b096e693c68

MD5 4c2750957e24d68d3999dcf023bce5e6
SHA1 b3149b352cb616a743d516ab8775fceab6543dc5
SHA256 9b7c29ceef86651ac9f44effa39d97c91029b566f2c298137cdc7c48a6a1ab3c
SHA512 641bff16408f5d52cb5f8388464c7568f4f25a178474c34b7d144d4a941933b46f4f1154164b076d7d4b32106fa53cc07638140123c647f569e3c0c76fed613d

C:\Users\Admin\AppData\Local\Temp\Roblox\http\a9ea6cf4e67ac02b8388f1da5640da70

MD5 c49e8bed1e35bbd2e8ef00e21aa4367c
SHA1 bea5676cead9790108f7e92c9da96813a4655679
SHA256 0f6ad52ad10ba4c14c958ba44f1b0bc7b7b106aca0335505e62115dc2aa82c13
SHA512 5492faa34b0d2eb53c7a94a2c9f8772ab16795f2ddca06beeb00ce8977d5f5e84fb52ffd6340d3ac281ecffe2545eeeafad6ef11316feaa1a960fad8464b3fc7

C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcb654249c504749eecc7e07e142fea6

MD5 a94d08b8647cd4bc4338b77555328b65
SHA1 8ca7462397e2e4981c439cca3ced1097796cd1c7
SHA256 d7442a7c5649c86b603e7447bafc7cd5649026ae02d16b83b200afb031e70686
SHA512 ef8e2ffff889dd602a7ea62698f8d1ed20626a6e325ef19891f930f24c970e663e53045548461af56576b49729862991c085e1da4a0b9f327f8b5ba6558f9689

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b36690f600b4061c940466f0cb07df3d
SHA1 27d34b95745fc4bacf13fa4586139de9ba07ca25
SHA256 1e00b47a6fcd62b2d2199ce364860b8f273dd66507a0f712ba9a9ab822b7a06c
SHA512 bba93d9884ce9046782dba94a05a0bc01fba8d82245689ecdd6a0f6018610d5d87f027a160fc1b233b572ee6e59d92323d5b0e9962622c4fcbe7600d7cb1a7e1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7498c2080ddecac57ed0863f5a55e415
SHA1 9e6477ac8b6f04432c1b361e75ee9ce43b82bb4c
SHA256 edd495562be4ad75eed5a9ad186f3bc45c4902c51d0cef0fac8244ee892f057e
SHA512 e90c5856ad2c907d8c252a01b26960b7f23110c4d15afb653b8c71c6252e76b737ea81fedfa45dfc36295dd4eba7a2721d16418faab6d9ed113a4d3d630f8a8c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 5abe9b4d024d627eae34a73b51d22034
SHA1 b1c8ea877244bd3457dd5c0049d48d2051627501
SHA256 a804c185b55afeab2edf3372551267bddeaab8ad04c3805547198cdb6ef50294
SHA512 67fa3fc8c1dbaa7c363f02b51074c35e6f46a9c2b7b7a5cb04e5091a93acb8d0b2e68b8a12f5b38808c0615c3a6fec4cee2605e305a104e41161ed68df668ebb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b6531843b040141e732df06aca2b5e8b
SHA1 abb6e06dcaf9cd7b0ba45a2f088fb0e0aec82912
SHA256 fe3b35401f95629d9d30af9668c835e990e4e8f3a26947786a2a5bc4289a911e
SHA512 d24ca9942cec0cc94d1c945bd8c12d701288004dc8d979352ec94ec504296e671a4b02d7b0e7e42ada7902fde3cbfe6390e10f18ad39aa1e0a926a795cdb6a69

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 52afff7c7cc3639541bb16a2005ae79d
SHA1 d53684ce037fed6a1f8d574997ccaff03b38d01c
SHA256 2a76892f9c0733f2ea71adba7f9842bbcb4cc59233706caf0d6068fe20300a6f
SHA512 662456f72db3fe90955a618d113a6cf3aca1d6436355a160fc3faf12621dc0a65a66c6175d64236759e12369831f2290d0a644b71b1ae33926c5fe67f8f566f8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6143e09fccc2a6a63ff25a8bafded66a
SHA1 0378a685016858abcbeb7301c4226bde019c0b78
SHA256 13be306cba5f844b439aa512933f98a2e5ba6c630d86ded71496b979f079cff8
SHA512 62b812a8c3c23e269806039c9360171bbf8fdd4945ddab9afc334707d9b0c3bddfece50ad441b3f3089c697258952596921e4d029c58576d0998c06b1f6eedc8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 4b0740adb9af6b7288d7b44f76b5272c
SHA1 224d778b31f722d6043447dce1ea55a5517c73f6
SHA256 a005be991a62570a3aaa5d8ca8cb831509a5f963e0be354cbbe0fda5fe6efc54
SHA512 56aae852fbd26d3b7dc2a4c568db0d22636da2a944c9af2206bafa8a3c9ca2b4f0a861e84aa138ade583afcf5a85d5523af33b4b916e822bf4a8b2159248f594

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 250c1a0e6a70c8c6f6c8fe91e144b36a
SHA1 18042604a984aa60458972d41d94aa68b741be5e
SHA256 2a0260aabde0214731f2549782954b5242371a1bdbe984f2e2de691e7da5b625
SHA512 60a8ae80d92fbb78d700ff3f39853c8d7d9babbb10094b53c1e18741d043d0c64506c7d514766a9ec8b4e95f698d1cd06452eb6f0d6ecc25ff04cc1750b14902

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6548979e95bc2eea2a1177ffce85c888
SHA1 30ba50c2fb52a2eee72a182d303cd4a0de74d849
SHA256 1b9ccabd2ca2c34fd8b9541cf52c11fe782ec45589101418e7241b29a4b94e32
SHA512 c69b6f2efcd02707e11d81901e2bc17d261d58e08d45e8e484c2d84882964484a0771ec427d11e494dade94678c17eb3dd36b891b5540ed0e465d2a7b3405a00

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e2786dfe774c88bdb94873bfe85a78f5
SHA1 706e643b492b436c1b4084b6cdb01c86f462e5a6
SHA256 0c230ab0cd5f0f9bcd09f98f13066d81307cf502e61aaac4d137fd9f3b979fae
SHA512 c1f7f972861ad60e03e00d43c345b79c88e58da96015810de076d4d036bd2e3030821da4cfcafec890a0189bfb0ce5cf70ce96e56c05d94b1e1e60ddb6b22896

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d257fbb9eedde36082e15c84f7a9fedc
SHA1 70bc7557cd27ed393306759e088464b573efb533
SHA256 6176ea710cf209602a34998e041691b0106367f32a8eec1adc168b565c249c42
SHA512 f9a635323287df8d4e7daa16568c330a89eac0fd151395ed2733359e9bb5cfcb49c999394d5f754d2f08e3fd1dc8411e1aa4889044a2d1376935dfdbb2a88db5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1da45902532c6b55a0e7e711db3d1377
SHA1 9104691cf1b29d8e7a2fc80bbecfb6410238e9f1
SHA256 a7aec950b551c11a706614f90eb3cfa65e8bb1b1f7fa4101c71eefdd6aeffcf2
SHA512 fc5649b3ad473d9e5e3a91fc68f686327ba500d4058da049b776e53257222f65e2f868b1e4384e8670eb6b9867b87982ef46787936b2c0323f3ad16201bb2ecc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b9709b09bf8ec0854aab5c845f5f6757
SHA1 a9fd6421f28de7bc0ab18053587a3956b426d19b
SHA256 b0d66646e637600dd6283ec77f11054246747e203bd9a303cb5c9d71f446acd1
SHA512 5b094d32b4c9fddad3c888b51aa3ee0bb18ae8f5aed9bc8d050f763c6c53b4c33e3dc96a1cb68678e5617dd42ce7903906b25198624e0fb5e59cc7c8e4c6cb4b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 2732ffce77251d32d2245f132f234db0
SHA1 526bc8104583e738f26d1e9a6f5653b7b9e0b3a6
SHA256 4d8482aefe0cc553f5a9471e1a83c49742cf17dd7a9172da5d742fa2ed2a4726
SHA512 621cd6f4b1a56e790027e63c86ba5c42febacc42363248f4666e44700ff6be91d1c7c686038b36f17b3f8ab5446267254452e7455f6b9ad3a187a57f6a9955cf

C:\Users\Admin\AppData\Local\Roblox\OTAPlugins\OTADataCache.json

MD5 11a17ccab96a24de7ffcaef84e378fcc
SHA1 73f18d2438e46d1006506ae6edd754e17ea25106
SHA256 05858b9864ab11fee682bb6e6028b56d6328dca077041f58f2989f24ae14d9c1
SHA512 e3d6fee7cfb04e5b03c0782b5f647032fe948ce2a85e225b0cdecd8f2729e6ef055caf171e0cdaef50179f3e90d01a1589af44a61415889f5b4cb18db6f6b348

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e7de81f26968338778f9a2db199a0d82
SHA1 789bc7f7ac573c3206907888e26cb250802ece05
SHA256 e6ebad4c9bad8c9d54c57cb33917e051a68207a06766b6b827f104488b07aa74
SHA512 79c912f816ad483c9e6ca45d36e1d8a88220cd280ab0efb2714708f39b0e26824b769a4cc90cd4fe964f4bd572934319a1a764e5db62e83b1d3c50b5e1de2cb5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c674d962e1a251ed7d7359d2bb49916b
SHA1 5544b0422e0025137225bf169839c31664046f3c
SHA256 d91f7408bea071b89040639f1cc0c089ae4e8533b8bf780039bdd456aaf4324d
SHA512 e1686212321d5aca878ead7d87cfd9c3fd2e64f16a00f9f402cda6bd2e5f73ccb0cdcebf6b54964d8e038b572fcc66fe654b941ae1ec96c2abd1addc021e5384

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 7e3ed44565564f64b2f31a53b7d90e8c
SHA1 86c48990c5706941676ee30e76b49e15a9a318f6
SHA256 1de1bfe5958df9e4896c4f89626cabaafe0bf4902c92b211ac4604d233e4a78c
SHA512 70fa4037f50435b7a41f127dc4db6cb6821ebcc75ada12359b7a507fa2de84df3b1b26a7786d0d302478e266f1ad461ab0d9f7b53ffa2592366ddfc7b5f2bc70

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 aecb47baca8a4def12b74f01f9a5e7ef
SHA1 a203f14ff688b6ea58352bd2ff3d5cad20e071d2
SHA256 31665f6151b1e69c111afe70c6de53e29393690c55ccc15182bb6893f21fcbc4
SHA512 b5ff56b3525b9372d027469c13d5afe7f2fd2a257a347ea41484bf6fa56f9d3da7c8c86fd704171b1bad7fbe868fee3007861cffbc17a7cafcf33c8b2b11b98d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 aef9642cd802c4394b4871879ffaa16f
SHA1 51e24090fca0e4297a034de22d3a976273fd387f
SHA256 046fe552ef19e3b3feee8526abf3cb35182705757d5f703a52f284b654f7a2d9
SHA512 b6565282ee3f20a3dfc33b698239c504e19475617d0d5135e08ec0f096abad94293be02a9d5f6c370cfb8587bc253ad2927d0d0c946d0dbabbfee59d3bf5a51e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 dfc81aa46e233c3345e74a43f0f6f961
SHA1 5642dbbc378b2f46fe95be37d01cefebbcdc1971
SHA256 2d70aaa4561cdb81a84a918257dd9430731ca8958cf087bd3f3fcabf7bdaa878
SHA512 aa113e093e191dce85aeeee4998f05dcbdd684e0471713a6f8d272fc9643e5af41a449046840a5d4a4a86883181ff5489928ac443c74ac51a1ae7f411b701693

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 67c5f6f9ca2a86193e77246143fa1be7
SHA1 316f83cb25a796b5beaaa93ce3b4db7268bb8882
SHA256 a8c16c6e90c67b5f0daf7cf1bcce781fbeca9d674e6f997249ebd0d234f98a30
SHA512 5c29d312e727bb72d97a7a5409ffebe9fa02140e4b37e01bcd49cf474a9a3e293a17a0cc44f32114f0f5fa541fa266b13173550fa7ae8f2e31c4aef34fdb6f8c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3a4155ddeae8ce4567999c6f3fcbcedd
SHA1 1aade1a03541a95392696915d79d9e6219b8362d
SHA256 eb847c0a4215b894c19fc74aa25bd6abe71af60e0741d07d99a6ff376c62df9c
SHA512 46f35b92e4280f0690efecb2cfd89db856a59ba1fb75da890f96a8969005069101195138f66cb8a8ee19e0abfc325b1dfb779908e963082f11fcd904f494143e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 bf9873d06cc74c9717e2869e8a61d93a
SHA1 fb9414d6ce4c2fe7b7215c4affa44cf4a412aeb2
SHA256 6883872fd6909cd0ba02d262bca8d8faf9df15af914836a72197efd86bcf5a17
SHA512 c232f19af5f563890cb04a66485d2974ae36c8132c305b3f1c70a00fd458f35ccd4bc6f8bb636a704f952e066eaf1d8bc9d5347076ac29140868b6266da3a7b0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f583a8576dcb37251f438d004b96bffc
SHA1 6f8b43611227e64860b482f2038422940a63341f
SHA256 d24013762ff01f5eb38b164816dc9c6c00d89e9a3ee43491fc27b869a178c687
SHA512 88174af112f2e7d25926214e8c3e6dc5ac27072ee7dcd5033137eb7e37fd25ac2065713a67a7d6e2d76443a0677dfa242eab19a50562bc5a0b642b1a5c597582

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 58020850afff888e78f5e0457b494d3d
SHA1 d105b27e263a166f731205d32ad91a3d54ce0d2e
SHA256 21df684b679526ad51f6461a72c54799189699f0bc7ef9790273804e635b0ebf
SHA512 a06ce6cc229c71fa5ab5ac66ed15dbada7a20c9ff177aa081e66175217a56663f43a54cbcf9d3070781038d691fb482c89368b8911e02e397a394671feb62252

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 31c2651d228b0c07e55e182aab95ea76
SHA1 14bd2e150a3d91699d90a91823b89a68f54b7ae2
SHA256 cf87f9d417f0346cce3f69616550bdee9aaa1a5d15b1c6273b1171f4d523fbb3
SHA512 03b55b8304593ecd2b317f9f92ff3ddcf3c0a8f28510b4936c2eb0489fcdfd6fb9b01e7f734a07c9c3e3e01dd4d06339271a81c3747efb42983766ad44bdf374

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6adfc9fee723498357e8e03c89cd1630
SHA1 fc00508ba446f61d3778637a7194f33bfa9a1140
SHA256 1a5eb3515954b3e771a5f1634de9ed8c965e35c6f7d03e46163d3047b6ad2a66
SHA512 7ecaae7c1a5db1aa4ff6678911055a4f5c761f8f569a49f8849e73db752fb09906676d6deb229b9d379ebeef42642634ad00baa71b8873f9644f570d5e6d0e50

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ed328311a7854761634c390afcec38e9
SHA1 96461733e9cf9ac37be17b74a5dd6fb27ba962a3
SHA256 70ed60e2969797fc209b3b214b1f89179bb294ee4050d7a387e26d23941eb052
SHA512 2286a98ff205e43681e303aed085eea862cb6524afd276a4173e4c3c9df5207b61076b8fb0515f66577980b2751270e0f8c1b35bb3074cc34af77f8fb03e0d89

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 671a95549f77b5c23df4744572cc8dc2
SHA1 a5c1ba14c263d2a4f3995eea64df5d831ce06a81
SHA256 c59db55a37099b4a3b302669b0985e0c0e11d134ad59b115e14f841d40969ae4
SHA512 c5e20670bc86fa29677dcd792e0f827c2f5897ff3011f20eeeaac388e6a22fd18e11f7eff84839ca1577d250042cfbeaf642678b22bc976e7351bdf462dc0a60

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 eccae2f82c55a581ee41355b9a5038dd
SHA1 1e9d4d58d32a26664f6da7a07280ea76571b348d
SHA256 fbdc5be879a8ef1dd3e1a752aceb754a0ab689a82e63ff76d768b7f786db0291
SHA512 eb6467835ed024a234da028539598fbbb1b72a8b7be5d99cbaa8a9ee02f839cf2b8bc6acd8705e344f9dabd6512a6542443ed36ed36156a52d6f28a618d9e33d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b977a31cc1aa766ad12ee04fe125b0ec
SHA1 79691cf149b392a8fc28e8ffb7d1b9fde9bd5a75
SHA256 d5612a004bc25a403abbf794471cba9e93d3770555b342f2aea56bdf033f92bf
SHA512 7086d6ffcf8d9fd7712eebf5dff72a66ffec5804bca8bc02b4e6a37796d39bc57aa15379a37481d0440c5d94936694ab8f2194438dc5af48619c8cde6023d829

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 da058c052cbc714417a8bfee7137f238
SHA1 eca62666b3a6e2c3dbbfc1e832c240badcc8f272
SHA256 3ef37be6eb9f21141a95e49ed2b949ee2ddb25e1ed224f7319be1a7d6280ffd0
SHA512 fb4b19e7abc253e9ce4449c565097f39afcda9f6cbcb3e1f1006f5ab606679f8ee26c530bc4893f9b23e6d4fe23dea164d9505e6f2d42f99de0fe0ce31e3bca2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c55b493f5753b7038049c758a5be9f4b
SHA1 f65a45bbfe7abaf0ca02b2e18f1bdf0b68e320fb
SHA256 30eeb1129770ee35c49583b65dad1362db215f75bf194e87d16f404de8e2c37d
SHA512 eaa1ca3671ec13cb6b3b1a0597a722f7f81ff6a9711ead354102156aac9206f69e19c721ebbb1b59e5145399f28b4fcef3c71974f146c6c034659ebd11d8fdd8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 bb6d7f57dd25f715daac299de686751d
SHA1 d5c2f3e89f75a5c3592414295ea49332692e62fb
SHA256 45438e88d29a37e000d5a5b6928096bc8a855ae7188273226970febe2e6f5e6f
SHA512 7d1191a69557c8b3703ff8a7d92254829d619ae78871185fb861a04942e8214c78567b88223beb305c24e83a67cfc712ad93d42f31ab177019ee95cf6a951838

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 72847a2881b68d25583bed61c4481fb7
SHA1 7d29c1ce7b54a1d9764b9e887e3c15cc7c899726
SHA256 cce4ffe72d3bb1a99cdf03f61c136adb2f58b725e6054799bf8a946fee07a499
SHA512 48c01a74c1913a98fa934d04922d4d3eb76ea2d688f8f6b8a526fa4c4ed3e7e2e92a6a303071b5d7b925ba48e6a68b54f7ea5beffd4428a306724093f5b3df42

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c53738be920650ee23c1b668fe489cc2
SHA1 20fedbe3a9dde970403e9c61c5a00ce3465ee663
SHA256 5f81b3c8d8bfb694de59254b76461ccebcfc1954ef940db0e87df01d5d022d7c
SHA512 a36bd98c7e5716b88285cfab39feb008c00ba511f62efd406e291b56b310f15060b5ef4f0946fd2abd6c6e9a1d54fcf8852b4ad1df4ff523668c2a98105e8ad8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ca790554bc636c9634a4b175d724ee5f
SHA1 2f030f3b8a2408fdfdaad0b002466d520d83b651
SHA256 ecb9f9c9859e9efde0dfa0f0ca6f6c77e37fec30a2cda47004fb1642c6a3f12e
SHA512 75d58dfae05534e7de4d893184ccb6977e1c7331ca7181244892a8b4b0d7c1eff752baffde1899f1a8e417dd129bc023ff9e2cbd6928d621e8f406aede1c4637

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 928f85ad39f11f3c320a30f733f40073
SHA1 4095c7769af23d39e4d2aaad4c85858b82607dff
SHA256 1ad31764bf7b71df0e185e372c81ee10e95b1853fbd5285be7052f6252a363f7
SHA512 40a7d438dfc77910947d5b2925982bc3297b200556886a787e6fff8514a24675be31fc2e61cd0523694ecf514b4c2d7c3277662bacfe7899b75a1d4069f10458

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ce79f7f1f8229ec508b84336cbb3a7cb
SHA1 f9326d0cb438d704ee8bc2fdad1046bb950c8dc8
SHA256 9eff8ea82fc9c464bdafb0464d0df628eea9a6e4addb861941bd74a7ebd085de
SHA512 907464fca440f8ee9d7944649ab89213ab2ee9f9afe645a19f46cc7d7534cb6cf460c0c2b33463b311d766b0c57b98c28324a8c47288bbd98b8f93827bcff367

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 6e165f81878846b7df72cb6efd0e0983
SHA1 318805cfb69473bde53786bdfc641a31f5fcbab5
SHA256 63792f60a4378590ab671db6a9c983c83bf56617803b24cabf3cfe881a1c9d14
SHA512 6aa39071523d38aa748ea7afca61d8f425e017f75e19180e5a238db7c78958de030a2769bfc836e4cedef3064000cf2c6506c78fc8e0a8f0e6a5da7c887d8dd9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 52e0e641fde2cdf29f7ff9c8b89a3137
SHA1 dea41724cb7710ead31bc842c1090bc611ca25b1
SHA256 5d6fcd342547d1a073fac93caef8ebb44ec749297f1136aecd40b96dfea2d5c6
SHA512 c50b415b931ad75e73e08b0f26ac94ffc662f61ea70d314622b3f62468d2a5b7941a71ff00c527bd4639daf802374f5254d598f3d6d19326988e01d5e68dc40b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0ee1e40bf566de0aa9e79c66aae74ca5
SHA1 8946bfd9525095ddbb493af3132ea4a0a10f016b
SHA256 38b39507432730d5ae14ce4df9719eb377ee5ad7b668a79d2433388703f5f118
SHA512 66884f26b229fc6e61995aa55accc037398407b8100d2ab61b87b28df39b5f30cac61ae1ee58353a6539241f6c75e63d5e125178ddda99bf554f2f2d6cc9839e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0879218d90a15092b6ea8a09a637dc5d
SHA1 5225428f8129d399a88854b291e644f3a596b0f9
SHA256 3b5388fe904a9283437fd3da2bfce28d733bbe0d7c13daab6bc29a61cca66a5f
SHA512 6149ded7ad16b9186d29e34d9d3cbf8763c2e3413d4f09fa10603dcdabe5f2f6e442d8a8f39cde7be8e8ae00113d180b6a9d4785feb3d1444a534ec3ef7ddafe

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c819525fa6e7dc8caf6935c09501fd50
SHA1 6d10088beaf28d7ce7bec811cb095801718bfc28
SHA256 495ddd61525c20532f0831dff4414808f9cb67f660ee708c9ed1a597263a744e
SHA512 d896ee68e7f118526ca41d2f16037931724f01e57d5c911f09e1b8dcddabcc87c536de40bd4da48388b9053248fb29645a0e2372dc9f92402ebd87b38a6fbd8b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 718907b78bc0b7e55e9e6ad2ba1211ef
SHA1 37a99ce8b9ef329363587a0d0e4ae54c23593baf
SHA256 7ff022cb7ddc88673723dca1be408144b9b84ec131a8a2aebe5612db462fdae6
SHA512 dabf071ee0b688ab8141a2dc0e57b86525557d4258eeacc5f43eb5d3a17552d5d06dfd334c63638973c936e3bab7f3fa353d9ae02bc3e2800d95427c0abfe45e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 5ec499a03477bffca8c1b8f28fd525b0
SHA1 4865e8dbefd80480ade3d97adb276402f5aaa4cc
SHA256 41128c87d046eb8171bc6244be203613ccdf0bddbf7fbb67d654a10132092b0c
SHA512 ab14920f16f9d0ef6b4e5f0e9f37b8e67be46ea2d93e65e350653a10ab39581b1c2b2ddd4cdb6c1fb2c554274d55b63f9d1c9a7e6f64e4ca1c7b2e033cf2a4d9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 d7d1875cecbdd442b7d3ff614b4d34e9
SHA1 6a6c11e61756b897226e62ec2a5b0b888b820237
SHA256 2c91ba2b696fcf8e28e9de8ed38ea866e848b02a7561871f60d9bcafc3f8b713
SHA512 c0696b4734182d5b87c599ebcbe0aa5210a0c237daae1432812859dad08a2e7b9abbb673e45afa7617f476b14c378eb101b799670d11956d8119d4e2557897b0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b74c3adc56c439d6fe7173a7db941036
SHA1 2c4cbdc2cf0c4f49b1d826afa39b3987ddf172e0
SHA256 542edb9cc8f2b027b68203039121c616ec2c84056ca6bc1fd10bb68fbac0cd07
SHA512 d30a78c4fce040abf7c7ff140b4f5ae6c49a76afc1115fef6ebb3993b56aa3dd1a2efba835f2fd23c920ede4e83653dae6aa6ba259da37008abd7bcec05a1dae

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0446b9cd6b394f9bd18eacd7de035ed9
SHA1 1eaf35f902806529c16643e57d440389669131f1
SHA256 5cb695b92c39e60d7b5371c7e12113456279113d27d972b03255662f5bad1ae8
SHA512 b18a62993e817b080cdb22159d17586338dde3fff837ed923c625f495c2e12c46f2e7bacff87f4ddeb990724c7c77ba66499d0ae1009901d7bb35cccbc3d60cb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e95d777248699426b5e89f6402a02453
SHA1 86e56f6da938e06d34ee49b0f8ae6801bb9c1a70
SHA256 7515e184ed7d99da9a6115b21be433bed268fcb1f351fd5a8b7780a969e6e5b5
SHA512 bbeaee048afe57289ed540017a68d020b4926b05a6b72819d54027730625eba3b37a57a1031aa314687958936cdb8a3c1fbc604acc1938780342ee8536290dbb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 793960f22a8599eba9921fbbba5bbe80
SHA1 b1f7d33a8e21dc79a9f0a55a3af9d43f1d0e9e2b
SHA256 286b7b40fd802874a3c58669a4da9019dbde46841a4f8d2f53c21d32d0f77d76
SHA512 4229da4266614b88d74c7a366668c567d34a104637f0f78abbd1501ef96ac207db62e6c6c7cefe9c7eaae09b447c1ab2c7d02b59954d628e61876c5aebf863c5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 43dbaef6da84039c91a6cb6dd9b65763
SHA1 e6efffe595e4fefb37d6065362dbb154315de274
SHA256 db01add869f27a9ec6dae93f7412707f996eb24c511bb2a3dde842b46d801e5a
SHA512 048e56e975a1c8d735105aa959a76c971b7ac7b2dbc1f39898dbdd1ea5416aa25305657899284d5a4eb55179b70e2e915babaf653c6061e82a72e1f2ea7a7cb8