Analysis Overview
Threat Level: Likely malicious
The file https://create.roblox.com/landing was found to be: Likely malicious.
Malicious Activity Summary
Modifies Installed Components in the registry
Sets file execution options in registry
Downloads MZ/PE file
Loads dropped DLL
Executes dropped EXE
Registers COM server for autorun
Checks installed software on the system
Installs/modifies Browser Helper Object
Drops desktop.ini file(s)
Checks whether UAC is enabled
Checks system information in the registry
Drops file in System32 directory
Drops file in Program Files directory
Drops file in Windows directory
Enumerates physical storage devices
Modifies Internet Explorer settings
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
Suspicious use of WriteProcessMemory
Suspicious behavior: EnumeratesProcesses
Suspicious behavior: GetForegroundWindowSpam
System policy modification
NTFS ADS
Suspicious use of SetWindowsHookEx
Suspicious behavior: AddClipboardFormatListener
Modifies data under HKEY_USERS
Suspicious use of SendNotifyMessage
Modifies registry class
Suspicious use of AdjustPrivilegeToken
Suspicious use of FindShellTrayWindow
Enumerates system info in registry
Checks processor information in registry
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-04-30 16:33
Signatures
Analysis: behavioral1
Detonation Overview
Submitted
2024-04-30 16:33
Reported
2024-04-30 17:04
Platform
win11-20240426-en
Max time kernel
1781s
Max time network
1835s
Command Line
Signatures
Downloads MZ/PE file
Modifies Installed Components in the registry
| Description | Indicator | Process | Target |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\IsInstalled = "1" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Version = "43,0,0,0" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE} | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\ = "Microsoft Edge" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\StubPath = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\Installer\\setup.exe\" --configure-user-settings --verbose-logging --system-level --msedge --channel=stable" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Localized Name = "Microsoft Edge" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
Sets file execution options in registry
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe | C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" | C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe | C:\Program Files (x86)\Microsoft\Temp\EU8D4E.tmp\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" | C:\Program Files (x86)\Microsoft\Temp\EU8D4E.tmp\MicrosoftEdgeUpdate.exe | N/A |
Executes dropped EXE
Loads dropped DLL
Registers COM server for autorun
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ThreadingModel = "Apartment" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\ThreadingModel = "Apartment" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\INPROCSERVER32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO\\ie_to_edge_bho_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\PdfPreview\\PdfPreviewHandler.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_click_helper.exe\"" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\EBWebView\\x64\\EmbeddedBrowserWebView.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_helper.exe\"" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32\ThreadingModel = "Apartment" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32\ServerExecutable = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\notification_click_helper.exe" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
Checks installed software on the system
Checks whether UAC is enabled
| Description | Indicator | Process | Target |
| Key value queried | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
Drops desktop.ini file(s)
| Description | Indicator | Process | Target |
| File opened for modification | C:\Users\Admin\Videos\Captures\desktop.ini | C:\Windows\system32\svchost.exe | N/A |
Installs/modifies Browser Helper Object
| Description | Indicator | Process | Target |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
Checks system information in the registry
| Description | Indicator | Process | Target |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\Temp\EU8D4E.tmp\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\Temp\EU8D4E.tmp\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
Drops file in System32 directory
| Description | Indicator | Process | Target |
| File opened for modification | C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
Drops file in Program Files directory
| Description | Indicator | Process | Target |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\Controls\DesignSystem\Thumbstick2Directional.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\ApolloClient\ApolloClient\utilities\common\arrays.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\JestUtil-edcba0e9-3.5.0\JestUtil\clearLine.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\Bone.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\CharacterControllerManager.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\WidgetIcons\Light\Standard\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\CoreScriptsRhodiumTest\Tests\InGameMenu\init.spec.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\GraphQL\GraphQL\luaUtils\arrayContains.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\Qml\QtQuick\Dialogs\qml\IconButtonStyle.qml | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\StudioSharedUI\ScrollBarMiddle.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\VR\circleWhite.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\DevConsole\Actions\ActionBindingsUpdateSearchFilter.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\InspectAndBuy\Flags\GetFFlagDisplayCollectiblesIcon.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\GraphQL\GraphQL\luaUtils\__tests__\json.spec.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\RoactNavigation-5e891f46-2818f7fd\RoactNavigation\views\withNavigation.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\BuiltInPlugins\DepFiles\ErrorReporterBuiltIn.d | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Lua\Toggles\Dark\Standard\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\JestGlobals.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\VehicleSeat.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\textures\ui\LuaApp\graphic\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\App\Dialog\Alert\AlertTitle.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\jtaylor_mock\mock\MagicMock.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\DiscoveryUiBloxApi\React.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\show_third_party_software_licenses.bat | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B16562BC-02AC-47AA-9123-490FC4013DA9}\EDGEMITMP_34EFE.tmp\setup.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\StudioSharedUI\RoundedLeftBorder.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\JestConsole-edcba0e9-3.5.0\JestTypes.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\ReactReconciler\ReactReconciler\ReactFiberWorkLoop.new.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\LuauPolyfill-2fca3173-0.3.4\LuauPolyfill\String\.robloxrc | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\Scheduler\Scheduler\forks\SchedulerHostConfig.default.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\textures\ui\ImageSet\InGameMenu\img_set_1x_1.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\Dash\Dash\isUppercase.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\llama\llama\Dictionary\flatMap.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\RoactNavigation-067f4e4b-660967ca\RoactNavigation\views\RobloxStackView\StackViewInterpolator.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\AuthenticationStatus\Dev\JestConfigs.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\InviteLinkExpiredModal\RoactNavigation.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\ToastNotification\ExperienceService.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\PlayerList\FollowingIcon.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\PurchasePrompt\Localization\Locales\cs-cz.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\VrCompatibility\LuauPolyfill.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\UGCValidation\UGCValidation\validation\validateDynamicHeadMeshPartFormat.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\AvatarImporter\img_window_header.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\ui\VoiceChat\MicDark\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\Rhodium\lock.toml | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\WidgetIcons\Light\Large\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\scripts\CoreScripts\Modules\PlayerList\Actions\SetPlayerIsLocalPlayer.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Regulations\ScreenTime\Utils.spec.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\AnimationEditor\icon_warning_ik.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Lua\StyleEditor\Dark\Standard\GridPattern.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\RoduxFriends-1016398c-4fdfb9d0\RoduxFriends\Reducers\Friends\requests\receivedCount.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Lua\AvatarCompatibilityPreviewer\Dark\Standard\x_dark.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\studio_svg_textures\Lua\ImportPreview\Dark\Large\[email protected] | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\NetworkingFriends\NetworkingFriends\networkRequests\createAcceptFriendRequestWithToken.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\BuiltInPlugins\DepFiles\AvatarImporter.d | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\textures\ui\LuaChat\icons\ic-clear-solid.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Packages\_Index\RoactNavigation-067f4e4b-660967ca\RoactNavigation\views\RobloxStackView\StackView.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\GameTile\AppChat.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\PlayerContextualMenu\RoactRodux.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\ExtraContent\LuaPackages\Workspace\Packages\_Workspace\TestUtils\ReactRoblox.lua | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| File created | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\content\textures\AnimationEditor\img_eventMarker_inner.png | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
Drops file in Windows directory
Enumerates physical storage devices
Checks processor information in registry
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 | C:\Windows\system32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString | C:\Windows\system32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 | C:\Windows\system32\svchost.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 | C:\Windows\system32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Platform Specific Field 1 | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString | C:\Windows\system32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString | C:\Windows\system32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 | C:\Windows\system32\svchost.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 | C:\Windows\system32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString | C:\Windows\system32\svchost.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 | C:\Windows\system32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Platform Specific Field 1 | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString | C:\Windows\system32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString | C:\Windows\system32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Platform Specific Field 1 | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString | C:\Windows\system32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Platform Specific Field 1 | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Platform Specific Field 1 | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 | C:\Windows\system32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Windows\System32\svchost.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision | C:\Windows\SysWOW64\wermgr.exe | N/A |
Enumerates system info in registry
| Description | Indicator | Process | Target |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\BIOS | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\BIOS | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\BIOS | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\BIOS | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\BIOS | C:\Windows\SysWOW64\wermgr.exe | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU | C:\Windows\SysWOW64\wermgr.exe | N/A |
Modifies Internet Explorer settings
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\EnterpriseMode\MSEdgePath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations\C:\Program Files (x86)\Microsoft\Edge\Application = "1" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main\EnterpriseMode | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge\WarnOnOpen = "0" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio\WarnOnOpen = "0" | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth\WarnOnOpen = "0" | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge\WarnOnOpen = "0" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\roblox-studio-auth | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\124.0.2478.67\\BHO" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
Modifies data under HKEY_USERS
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "21" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "61" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "116" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "38" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "39" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "18" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "40" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "44" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "54" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "90" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "7" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "34" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "124" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "17" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "60" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "77" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "68" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Direct3D | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "101" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "102" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "16" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "26" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "100" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "117" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "122" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "119" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "23" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "56" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "107" | C:\Windows\System32\svchost.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "135" | C:\Windows\System32\svchost.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Direct3D\LastTelemetryChangeStamp = "9" | C:\Windows\System32\svchost.exe | N/A |
Modifies registry class
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3}\ProxyStubClsid32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{08D832B9-D2FD-481F-98CF-904D00DF63CC}\ProgID\ = "MicrosoftEdgeUpdate.ProcessLauncher.1.0" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.CoreClass\CLSID | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{8B15189E-5465-4166-933D-1EABAD9648CB}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3}\NumMethods\ = "4" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\NumMethods | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\ = "ICredentialDialog" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Classes\MSEdgeMHT\shell\runas | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\ = "IPolicyStatusValue" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.PolicyStatusMachineFallback\CLSID\ = "{77857D02-7A25-4B67-9266-3E122A8F39E4}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD} | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E55B90F1-DA33-400B-B09E-3AFF7D46BD83}\ = "IProgressWndEvents" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}\NumMethods\ = "8" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\NumMethods | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5F9C80B5-9E50-43C9-887C-7C6412E110DF}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C9C2B807-7731-4F34-81B7-44FF7779522B}\TypeLib\Version = "1.0" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Classes\TypeLib\{C9C2B807-7731-4F34-81B7-44FF7779522B}\1.0\0 | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\CLASSES\MIME\Database | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A5135E58-384F-4244-9A5F-30FA9259413C} | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE}\ = "ICurrentState" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\ProxyStubClsid32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3805CA06-AC83-4F00-8A02-271DCD89BDEB}\ = "IPolicyStatus5" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7B3B7A69-7D88-4847-A6BC-90E246A41F69}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3A49F783-1C7D-4D35-8F63-5C1C206B9B6E} | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.OnDemandCOMClassMachine\CurVer\ = "MicrosoftEdgeUpdate.OnDemandCOMClassMachine.1.0" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.171.39\\psmachine_64.dll" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\ = "IJobObserver2" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\text/html\Extension = ".htm" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3WebMachine\ = "Microsoft Edge Update Broker Class Factory" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-1696768468-2170909707-4198977321-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 00000000ffffffff | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FEA2518F-758F-4B95-A59F-97FCEEF1F5D0} | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1B9063E4-3882-485E-8797-F28A0240782F}\ProxyStubClsid32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.OnDemandCOMClassSvc.1.0\CLSID\ = "{A6B716CB-028B-404D-B72C-50E153DD68DA}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A5135E58-384F-4244-9A5F-30FA9259413C}\ProxyStubClsid32\ = "{BA4344C9-31F7-44C1-9802-7F90B352D5C5}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5F6A18BB-6231-424B-8242-19E5BB94F8ED}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.185.29\\MicrosoftEdgeUpdateOnDemand.exe\"" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\VersionIndependentProgID\ = "ie_to_edge_bho.IEToEdgeBHO" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\ = "IPolicyStatusValue" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\ProxyStubClsid32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}\ = "IGoogleUpdate3" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{31575964-95F7-414B-85E4-0E9A93699E13} | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\MSEdgeHTM\Application\AppUserModelId = "MSEdge" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7B3B7A69-7D88-4847-A6BC-90E246A41F69}\ = "IAppVersion" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{BA4344C9-31F7-44C1-9802-7F90B352D5C5}\InProcServer32\ThreadingModel = "Both" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E421557C-0628-43FB-BF2B-7C9F8A4D067C}\ProgID\ = "MicrosoftEdgeUpdate.Update3WebMachineFallback.1.0" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CECDDD22-2E72-4832-9606-A9B0E5E344B2}\ = "Update3COMClass" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{69E11C9D-4974-41A2-B067-9F26953CF52A}\InprocHandler32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\ProxyStubClsid32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E} | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{A6B716CB-028B-404D-B72C-50E153DD68DA}\VERSIONINDEPENDENTPROGID | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\TypeLib\ = "{2397ECFE-3237-400F-AE51-62B25B3F15B5}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1B9063E4-3882-485E-8797-F28A0240782F}\ProxyStubClsid32\ = "{8B15189E-5465-4166-933D-1EABAD9648CB}" | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17}\NumMethods | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5F6A18BB-6231-424B-8242-19E5BB94F8ED}\LocalServer32 | C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE} | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{69E11C9D-4974-41A2-B067-9F26953CF52A} | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\NumMethods\ = "13" | C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe | N/A |
NTFS ADS
| Description | Indicator | Process | Target |
| File opened for modification | C:\Users\Admin\Downloads\Unconfirmed 141809.crdownload:SmartScreen | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| File opened for modification | C:\Users\Admin\Downloads\RobloxStudioInstaller.exe:Zone.Identifier | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious behavior: AddClipboardFormatListener
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
Suspicious behavior: EnumeratesProcesses
Suspicious behavior: GetForegroundWindowSpam
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe | N/A |
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
Suspicious use of AdjustPrivilegeToken
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious use of SetWindowsHookEx
Suspicious use of WriteProcessMemory
System policy modification
Processes
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://create.roblox.com/landing
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff898e63cb8,0x7ff898e63cc8,0x7ff898e63cd8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1900 /prefetch:2
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 /prefetch:3
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2644 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5520 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5196 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5208 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4756 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4948 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5948 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5956 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5948 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5608 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3908 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6024 /prefetch:8
C:\Users\Admin\Downloads\RobloxStudioInstaller.exe
"C:\Users\Admin\Downloads\RobloxStudioInstaller.exe"
C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe
MicrosoftEdgeWebview2Setup.exe /silent /install
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers"
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.171.39\MicrosoftEdgeUpdateComRegisterShell64.exe"
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NTY2RUVBQTgtODIzMi00MzIwLUJDMDktODgxQkRGMURDNUUxfSIgdXNlcmlkPSJ7RTgxMDZCMTMtRjc4MC00ODBELTk3NDktMTkyREY5NDlERjExfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9InsxQUQyQzFGNy1BQjJGLTQxODgtODEyRS1BOEJGODA5NTcxQTh9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE0My41NyIgbmV4dHZlcnNpb249IjEuMy4xNzEuMzkiIGxhbmc9IiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjUxMDgzMjA2ODQiIGluc3RhbGxfdGltZV9tcz0iNDk2Ii8-PC9hcHA-PC9yZXF1ZXN0Pg
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20Webview2%20Runtime&needsadmin=prefers" /installsource otherinstallcmd /sessionid "{566EEAA8-8232-4320-BC09-881BDF1DC5E1}" /silent
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NTY2RUVBQTgtODIzMi00MzIwLUJDMDktODgxQkRGMURDNUUxfSIgdXNlcmlkPSJ7RTgxMDZCMTMtRjc4MC00ODBELTk3NDktMTkyREY5NDlERjExfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9IntBOTVFRDA1RC1ENDU1LTQ4RjYtQTUxMi04M0IyREJGRTcwNjh9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7OEE2OUQzNDUtRDU2NC00NjNjLUFGRjEtQTY5RDlFNTMwRjk2fSIgdmVyc2lvbj0iMTEwLjAuNTQ4MS4xMDQiIG5leHR2ZXJzaW9uPSIxMTAuMC41NDgxLjEwNCIgbGFuZz0iZW4iIGJyYW5kPSJHR0xTIiBjbGllbnQ9IiI-PGV2ZW50IGV2ZW50dHlwZT0iMzEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjUiIHN5c3RlbV91cHRpbWVfdGlja3M9IjUxMTIwMjA1MDAiLz48L2FwcD48L3JlcXVlc3Q-
C:\Windows\SysWOW64\wermgr.exe
"C:\Windows\system32\wermgr.exe" "-outproc" "0" "3180" "1568" "1472" "1552" "0" "0" "0" "0" "0" "0" "0" "0"
C:\Windows\SysWOW64\wermgr.exe
"C:\Windows\system32\wermgr.exe" "-outproc" "0" "432" "1540" "1520" "1544" "0" "0" "0" "0" "0" "0" "0" "0"
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B16562BC-02AC-47AA-9123-490FC4013DA9}\MicrosoftEdge_X64_124.0.2478.67.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B16562BC-02AC-47AA-9123-490FC4013DA9}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B16562BC-02AC-47AA-9123-490FC4013DA9}\EDGEMITMP_34EFE.tmp\setup.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B16562BC-02AC-47AA-9123-490FC4013DA9}\EDGEMITMP_34EFE.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B16562BC-02AC-47AA-9123-490FC4013DA9}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B16562BC-02AC-47AA-9123-490FC4013DA9}\EDGEMITMP_34EFE.tmp\setup.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B16562BC-02AC-47AA-9123-490FC4013DA9}\EDGEMITMP_34EFE.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{B16562BC-02AC-47AA-9123-490FC4013DA9}\EDGEMITMP_34EFE.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x7ff6993288c0,0x7ff6993288cc,0x7ff6993288d8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=5220 /prefetch:2
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NTY2RUVBQTgtODIzMi00MzIwLUJDMDktODgxQkRGMURDNUUxfSIgdXNlcmlkPSJ7RTgxMDZCMTMtRjc4MC00ODBELTk3NDktMTkyREY5NDlERjExfSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9InsxMDhDMzE4Ni0wM0QyLTQyODctOUVDRS1FMEFGQTg2QTIzMEF9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7RjMwMTcyMjYtRkUyQS00Mjk1LThCREYtMDBDM0E5QTdFNEM1fSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMTI0LjAuMjQ3OC42NyIgbGFuZz0iIiBicmFuZD0iIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9ImNvbnNlbnQ9ZmFsc2UiPjx1cGRhdGVjaGVjay8-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_UDE9MTcxNTA5OTcyMiZhbXA7UDI9NDA0JmFtcDtQMz0yJmFtcDtQND1hSXMzbElzUk5GJTJiUkpxZVlQdCUyZmt5YnRvSFZBcll4OGxxMXdvYnZqc1lHSU00OFlBN0YyOWUyQzZldEhaaVElMmJFZUE3Z0NaQXBpVCUyZjV3aHhlaDlpU3pBJTNkJTNkIiBzZXJ2ZXJfaXBfaGludD0iIiBjZG5fY2lkPSItMSIgY2RuX2NjYz0iIiBjZG5fbXNlZGdlX3JlZj0iIiBjZG5fYXp1cmVfcmVmX29yaWdpbl9zaGllbGQ9IiIgY2RuX2NhY2hlPSIiIGNkbl9wM3A9IiIgZG93bmxvYWRlZD0iMTcyNzIzNzY4IiB0b3RhbD0iMTcyNzIzNzY4IiBkb3dubG9hZF90aW1lX21zPSIxNjUwOSIvPjxldmVudCBldmVudHR5cGU9IjEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjUzNTU5OTY4MTgiIHNvdXJjZV91cmxfaW5kZXg9IjAiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSI2IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI1MzY5NTkxMTQ4IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMTk2NzU3IiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI1ODA2MTUzMzk5IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiB1cGRhdGVfY2hlY2tfdGltZV9tcz0iNzM0IiBkb3dubG9hZF90aW1lX21zPSIyMjcyMSIgZG93bmxvYWRlZD0iMTcyNzIzNzY4IiB0b3RhbD0iMTcyNzIzNzY4IiBwYWNrYWdlX2NhY2hlX3Jlc3VsdD0iMCIgaW5zdGFsbF90aW1lX21zPSI0MzY1NiIvPjwvYXBwPjwvcmVxdWVzdD4
C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe
"C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe" -startEvent www.roblox.com/robloxQTStudioStartedEvent -firstLaunch
C:\Windows\SysWOW64\wermgr.exe
"C:\Windows\system32\wermgr.exe" "-outproc" "0" "3096" "1556" "1536" "1560" "0" "0" "0" "0" "0" "0" "0" "0"
C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=4640.1812.2386014344833006756
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=124.0.2478.67 --initial-client-data=0x160,0x164,0x168,0x13c,0x170,0x7ff881b1ceb8,0x7ff881b1cec4,0x7ff881b1ced0
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1744,i,661962993020127734,1668529028128520497,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=1656 /prefetch:2
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=1760,i,661962993020127734,1668529028128520497,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=1984 /prefetch:3
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --field-trial-handle=2192,i,661962993020127734,1668529028128520497,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:8
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3468,i,661962993020127734,1668529028128520497,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3828,i,661962993020127734,1668529028128520497,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=4060 /prefetch:1
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe
"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView" --webview-exe-name=RobloxStudioBeta.exe --webview-exe-version="0, 622, 0, 6220470" --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --field-trial-handle=3624,i,661962993020127734,1668529028128520497,262144 --enable-features=MojoIpcz --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004D4 0x00000000000004E4
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3440 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3104 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5840 /prefetch:1
C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe
"C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe" roblox-studio:1+launchtime:1714495060718+avatar+browsertrackerid:1714495036207006+robloxLocale:en-US+gameLocale:en-US+channel:+browser:edge+userId:4155035591+distributorType:Global+launchmode:edit+task:EditPlace+placeId:17337941876+universeId:5932483521
C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{73253E3A-63E2-44F2-A80F-4A7A5BE6BF84}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{73253E3A-63E2-44F2-A80F-4A7A5BE6BF84}\MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe" /update /sessionid "{62052BC1-941C-4854-AC22-B396BCDECE35}"
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzEuMzkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NjIwNTJCQzEtOTQxQy00ODU0LUFDMjItQjM5NkJDREVDRTM1fSIgdXNlcmlkPSJ7RTgxMDZCMTMtRjc4MC00ODBELTk3NDktMTkyREY5NDlERjExfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9InsxRUQ2QTRGRi03RDcxLTQwRDItOEIwMi05MUI3MDIzMkYxRjl9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSIiLz48YXBwIGFwcGlkPSJ7RjNDNEZFMDAtRUZENS00MDNCLTk1NjktMzk4QTIwRjFCQTRBfSIgdmVyc2lvbj0iMS4zLjE3MS4zOSIgbmV4dHZlcnNpb249IjEuMy4xODUuMjkiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSIwIj48dXBkYXRlY2hlY2svPjxldmVudCBldmVudHR5cGU9IjEyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI4NTcxMzUyNTU2IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTMiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9Ijg1NzE4MDIzMTIiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIxNCIgZXZlbnRyZXN1bHQ9IjAiIGVycm9yY29kZT0iLTIxNDcwMjM4MzgiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9Ijg2MzI1NDIzNTMiIHNvdXJjZV91cmxfaW5kZXg9IjAiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiIGRvd25sb2FkZXI9ImRvIiB1cmw9Imh0dHA6Ly9tc2VkZ2UuYi50bHUuZGwuZGVsaXZlcnkubXAubWljcm9zb2Z0LmNvbS9maWxlc3RyZWFtaW5nc2VydmljZS9maWxlcy83MmVkODA4Ny1lZTk4LTQyOWMtOTMzMC1jYTNjMTkzZDQxYWY_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_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-PHBpbmcgcj0iLTEiIHJkPSItMSIvPjwvYXBwPjxhcHAgYXBwaWQ9Ins1NkVCMThGOC1CMDA4LTRDQkQtQjZEMi04Qzk3RkU3RTkwNjJ9IiB2ZXJzaW9uPSI5MC4wLjgxOC42NiIgbmV4dHZlcnNpb249IiIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGV4cGVyaW1lbnRzPSJjb25zZW50PWZhbHNlIiBsYXN0X2xhdW5jaF90aW1lPSIxMzM1ODk2ODQ1ODkzMzI4NjAiPjx1cGRhdGVjaGVjay8-PHBpbmcgYWN0aXZlPSIxIiBhPSItMSIgcj0iLTEiIGFkPSItMSIgcmQ9Ii0xIi8-PC9hcHA-PGFwcCBhcHBpZD0ie0YzMDE3MjI2LUZFMkEtNDI5NS04QkRGLTAwQzNBOUE3RTRDNX0iIHZlcnNpb249IjEyNC4wLjI0NzguNjciIG5leHR2ZXJzaW9uPSIiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSIgdXBkYXRlX2NvdW50PSIxIiBsYXN0X2xhdW5jaF90aW1lPSIxMzM1ODk2ODU5NDgyMTY0MDAiPjx1cGRhdGVjaGVjay8-PHBpbmcgYWN0aXZlPSIxIiBhPSItMSIgcj0iLTEiIGFkPSItMSIgcmQ9Ii0xIiBwaW5nX2ZyZXNobmVzcz0iezE4NkU1REVELTcyQ0ItNDUwOS05ODcwLThGNTVCMzA2M0FEQ30iLz48L2FwcD48L3JlcXVlc3Q-
C:\Windows\SysWOW64\wermgr.exe
"C:\Windows\system32\wermgr.exe" "-outproc" "0" "1676" "1540" "1552" "1560" "0" "0" "0" "0" "0" "0" "0" "0"
C:\Program Files (x86)\Microsoft\Temp\EU8D4E.tmp\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\Temp\EU8D4E.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{62052BC1-941C-4854-AC22-B396BCDECE35}"
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe"
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODUuMjkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7NjIwNTJCQzEtOTQxQy00ODU0LUFDMjItQjM5NkJDREVDRTM1fSIgdXNlcmlkPSJ7RTgxMDZCMTMtRjc4MC00ODBELTk3NDktMTkyREY5NDlERjExfSIgaW5zdGFsbHNvdXJjZT0ic2VsZnVwZGF0ZSIgcmVxdWVzdGlkPSJ7NDgxQTE3NDUtRDYyRC00ODYzLTk5NkItRjVBNkYxQzM2MTAwfSIgZGVkdXA9ImNyIiBkb21haW5qb2luZWQ9IjAiPjxodyBsb2dpY2FsX2NwdXM9IjgiIHBoeXNtZW1vcnk9IjgiIGRpc2tfdHlwZT0iMiIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iMTAuMC4yMjAwMC40OTMiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIiBpc19pbl9sb2NrZG93bl9tb2RlPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iIi8-PGFwcCBhcHBpZD0ie0YzQzRGRTAwLUVGRDUtNDAzQi05NTY5LTM5OEEyMEYxQkE0QX0iIHZlcnNpb249IjEuMy4xNzEuMzkiIG5leHR2ZXJzaW9uPSIxLjMuMTg1LjI5IiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgaW5zdGFsbGFnZT0iMCIgaW5zdGFsbGRhdGV0aW1lPSIxNzE0NDk0OTE5Ij48ZXZlbnQgZXZlbnR0eXBlPSIzIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI4NzcwMDI3OTE5Ii8-PC9hcHA-PC9yZXF1ZXN0Pg
C:\Windows\SysWOW64\wermgr.exe
"C:\Windows\system32\wermgr.exe" "-outproc" "0" "5600" "1660" "1672" "1676" "0" "0" "0" "0" "0" "0" "0" "0"
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODUuMjkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7QTlGMzUyMjMtNTQ3Qi00RDYxLTk1REUtNEE1MTQ3NEZCOUM5fSIgdXNlcmlkPSJ7RTgxMDZCMTMtRjc4MC00ODBELTk3NDktMTkyREY5NDlERjExfSIgaW5zdGFsbHNvdXJjZT0ibGltaXRlZCIgcmVxdWVzdGlkPSJ7NTQ2ODEzQzktQzQ0OC00QTk1LTkyODQtQ0Y1OTFDMEVGQUE2fSIgZGVkdXA9ImNyIiBkb21haW5qb2luZWQ9IjAiPjxodyBsb2dpY2FsX2NwdXM9IjgiIHBoeXNtZW1vcnk9IjgiIGRpc2tfdHlwZT0iMiIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iMTAuMC4yMjAwMC40OTMiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIiBpc19pbl9sb2NrZG93bl9tb2RlPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iIi8-PGFwcCBhcHBpZD0iezhBNjlEMzQ1LUQ1NjQtNDYzYy1BRkYxLUE2OUQ5RTUzMEY5Nn0iIHZlcnNpb249IjExMC4wLjU0ODEuMTA0IiBuZXh0dmVyc2lvbj0iIiBsYW5nPSJlbiIgYnJhbmQ9IkdHTFMiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSI0IiBpbnN0YWxsZGF0ZXRpbWU9IjE3MTQxNDU1OTEiIG9vYmVfaW5zdGFsbF90aW1lPSIxMzM1ODY0MzUyMDQwMzM0NjQiIGZpcnN0X2ZyZV9zZWVuX3RpbWU9IjEzMzU4OTY4NjQ4ODEyNzYxNiI-PGV2ZW50IGV2ZW50dHlwZT0iMzEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjIzMTA2NzYiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEyMjIzNjk3MjY3Ii8-PC9hcHA-PC9yZXF1ZXN0Pg
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\MicrosoftEdge_X64_124.0.2478.67.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\MicrosoftEdge_X64_124.0.2478.67.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x7ff72f9888c0,0x7ff72f9888cc,0x7ff72f9888d8
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe" --msedge --channel=stable --system-level --verbose-logging --create-shortcuts=2 --install-level=1
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=124.0.6367.91 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=124.0.2478.67 --initial-client-data=0x22c,0x228,0x254,0x230,0x258,0x7ff72f9888c0,0x7ff72f9888cc,0x7ff72f9888d8
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xODUuMjkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzEuMzkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7QTlGMzUyMjMtNTQ3Qi00RDYxLTk1REUtNEE1MTQ3NEZCOUM5fSIgdXNlcmlkPSJ7RTgxMDZCMTMtRjc4MC00ODBELTk3NDktMTkyREY5NDlERjExfSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9InsxOTkzQjcxNS05NENDLTQ2OUUtOTM2Ri0yRDZEM0MwNzdGNDF9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iOCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiIGlzX2luX2xvY2tkb3duX21vZGU9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtWUFFvUDFGK2ZxMTV3UnpoMWtQTDRQTXBXaDhPUk1CNWl6dnJPQy9jaGpRPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIxLjMuMTg1LjI5IiBuZXh0dmVyc2lvbj0iIiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgaW5zdGFsbGFnZT0iMCIgY29ob3J0PSJycmZAMC44MyI-PHVwZGF0ZWNoZWNrLz48cGluZyByZD0iNjMyOSIgcGluZ19mcmVzaG5lc3M9IntENjIwMDhDNy04MEI4LTQxNzMtOEJERC1EOUI2Qjk1QTY3MDl9Ii8-PC9hcHA-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-PHBpbmcgYWN0aXZlPSIwIiByZD0iNjMyOSIgcGluZ19mcmVzaG5lc3M9InszNzk2N0UxMi0zQzJDLTQzQzktQTM4Ri01NTVFODcyRTdFNzl9Ii8-PC9hcHA-PC9yZXF1ZXN0Pg
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1244 /prefetch:1
C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe
"C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe" roblox-studio:1+launchtime:1714495802304+avatar+browsertrackerid:1714495036207006+robloxLocale:en-US+gameLocale:en-US+channel:+browser:edge+userId:4155035591+distributorType:Global+launchmode:edit+task:EditPlace+placeId:17337941876+universeId:5932483521
C:\Windows\System32\GameBarPresenceWriter.exe
"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc
C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe
"C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\RobloxStudioBeta.exe" -task StartTeamTest -placeId 17337941876 -universeId 5932483521 -userid 4155035591 -parentPid 3908 -parentSessionGuid 88025FAC-D33B-4C35-A20E-CCCE45FBC43C -instanceId StudioTeamTest
C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6344 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5108 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6460 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1928,14500565646518102177,9925045814046467118,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6472 /prefetch:1
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | create.roblox.com | udp |
| US | 8.8.8.8:53 | create.roblox.com | udp |
| RO | 54.192.235.54:443 | create.roblox.com | tcp |
| US | 8.8.8.8:53 | 48.230.164.3.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 232.212.58.216.in-addr.arpa | udp |
| US | 34.120.195.249:443 | o293668.ingest.sentry.io | tcp |
| DE | 128.116.44.4:443 | locale.roblox.com | tcp |
| DE | 128.116.44.4:443 | locale.roblox.com | tcp |
| DE | 128.116.44.4:443 | locale.roblox.com | tcp |
| DE | 128.116.44.4:443 | locale.roblox.com | tcp |
| BE | 104.68.69.233:443 | clientsettingscdn.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| US | 216.239.32.36:443 | region1.google-analytics.com | tcp |
| RO | 54.192.235.82:443 | webblox.roblox.com | tcp |
| RO | 54.192.235.82:443 | webblox.roblox.com | tcp |
| DE | 128.116.44.4:443 | locale.roblox.com | udp |
| DE | 128.116.44.4:443 | locale.roblox.com | tcp |
| DE | 128.116.44.4:443 | locale.roblox.com | udp |
| US | 8.8.8.8:53 | 3.44.116.128.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 36.32.239.216.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 82.235.192.54.in-addr.arpa | udp |
| DE | 128.116.44.4:443 | assetgame.roblox.com | udp |
| NL | 104.109.143.29:443 | tr.rbxcdn.com | tcp |
| NL | 104.109.143.29:443 | tr.rbxcdn.com | tcp |
| NL | 104.109.143.29:443 | tr.rbxcdn.com | tcp |
| NL | 104.109.143.29:443 | tr.rbxcdn.com | tcp |
| NL | 104.109.143.29:443 | tr.rbxcdn.com | tcp |
| NL | 104.109.143.29:443 | tr.rbxcdn.com | tcp |
| N/A | 224.0.0.251:5353 | udp | |
| US | 216.239.32.36:443 | region1.google-analytics.com | udp |
| US | 2.18.190.81:443 | setup.rbxcdn.com | tcp |
| US | 2.18.190.81:443 | setup.rbxcdn.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| N/A | 127.0.0.1:49977 | tcp | |
| N/A | 127.0.0.1:49981 | tcp | |
| N/A | 127.0.0.1:49984 | tcp | |
| BE | 104.68.69.233:443 | clientsettingscdn.roblox.com | tcp |
| N/A | 127.0.0.1:49987 | tcp | |
| US | 2.18.190.81:443 | setup.rbxcdn.com | tcp |
| US | 2.18.190.81:443 | setup.rbxcdn.com | tcp |
| US | 2.18.190.81:443 | setup.rbxcdn.com | tcp |
| US | 20.7.47.135:443 | msedge.api.cdp.microsoft.com | tcp |
| NL | 104.109.143.13:80 | msedge.f.tlu.dl.delivery.mp.microsoft.com | tcp |
| BE | 104.68.69.233:443 | clientsettingscdn.roblox.com | tcp |
| DE | 128.116.44.4:443 | assetgame.roblox.com | tcp |
| N/A | 127.0.0.1:50400 | tcp | |
| N/A | 127.0.0.1:50408 | tcp | |
| N/A | 127.0.0.1:50411 | tcp | |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.4:443 | assetgame.roblox.com | tcp |
| N/A | 127.0.0.1:50415 | tcp | |
| US | 8.8.8.8:53 | apis.roblox.com | udp |
| US | 8.8.8.8:53 | apis.roblox.com | udp |
| US | 8.8.8.8:53 | apis.roblox.com | udp |
| DE | 128.116.44.4:443 | www.roblox.com | tcp |
| DE | 128.116.44.4:443 | www.roblox.com | tcp |
| US | 8.8.8.8:53 | www.roblox.com | udp |
| US | 8.8.8.8:53 | www.roblox.com | udp |
| US | 8.8.8.8:53 | www.roblox.com | udp |
| US | 8.8.8.8:53 | css.rbxcdn.com | udp |
| US | 8.8.8.8:53 | css.rbxcdn.com | udp |
| US | 8.8.8.8:53 | static.rbxcdn.com | udp |
| US | 8.8.8.8:53 | static.rbxcdn.com | udp |
| US | 8.8.8.8:53 | js.rbxcdn.com | udp |
| US | 8.8.8.8:53 | js.rbxcdn.com | udp |
| US | 8.8.8.8:53 | images.rbxcdn.com | udp |
| US | 8.8.8.8:53 | images.rbxcdn.com | udp |
| US | 2.18.190.141:443 | css.rbxcdn.com | tcp |
| US | 2.18.190.141:443 | css.rbxcdn.com | tcp |
| US | 2.18.190.141:443 | css.rbxcdn.com | tcp |
| US | 2.18.190.141:443 | css.rbxcdn.com | tcp |
| US | 2.18.190.141:443 | css.rbxcdn.com | tcp |
| US | 2.18.190.141:443 | css.rbxcdn.com | tcp |
| US | 2.18.190.134:443 | static.rbxcdn.com | tcp |
| US | 2.18.190.134:443 | static.rbxcdn.com | tcp |
| US | 2.18.190.81:443 | js.rbxcdn.com | tcp |
| US | 2.18.190.81:443 | js.rbxcdn.com | tcp |
| US | 2.18.190.81:443 | js.rbxcdn.com | tcp |
| US | 2.18.190.81:443 | js.rbxcdn.com | tcp |
| US | 2.18.190.81:443 | js.rbxcdn.com | tcp |
| US | 2.18.190.81:443 | js.rbxcdn.com | tcp |
| US | 2.18.190.140:443 | images.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | roblox.com | udp |
| US | 8.8.8.8:53 | roblox.com | udp |
| US | 8.8.8.8:53 | roblox-api.arkoselabs.com | udp |
| US | 8.8.8.8:53 | roblox-api.arkoselabs.com | udp |
| US | 2.18.190.141:443 | css.rbxcdn.com | tcp |
| NL | 128.116.21.4:443 | roblox.com | tcp |
| US | 8.8.8.8:53 | metrics.roblox.com | udp |
| US | 8.8.8.8:53 | metrics.roblox.com | udp |
| US | 172.64.154.86:443 | roblox-api.arkoselabs.com | tcp |
| DE | 128.116.44.4:443 | metrics.roblox.com | udp |
| DE | 128.116.44.4:443 | metrics.roblox.com | tcp |
| US | 8.8.8.8:53 | apis.rbxcdn.com | udp |
| US | 8.8.8.8:53 | apis.rbxcdn.com | udp |
| US | 2.18.190.83:443 | apis.rbxcdn.com | tcp |
| US | 172.64.154.86:443 | roblox-api.arkoselabs.com | udp |
| DE | 128.116.44.4:443 | metrics.roblox.com | udp |
| US | 8.8.8.8:53 | auth.roblox.com | udp |
| US | 8.8.8.8:53 | auth.roblox.com | udp |
| US | 8.8.8.8:53 | ecsv2.roblox.com | udp |
| US | 8.8.8.8:53 | ecsv2.roblox.com | udp |
| DE | 128.116.44.4:443 | auth.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | udp |
| US | 8.8.8.8:53 | dns.google | udp |
| US | 8.8.8.8:53 | dns.google | udp |
| US | 8.8.8.8:53 | dns.google | udp |
| US | 8.8.8.8:53 | dns.google | udp |
| US | 8.8.8.8:53 | dns.google | udp |
| US | 8.8.8.8:53 | dns.google | udp |
| US | 8.8.4.4:443 | dns.google | tcp |
| US | 8.8.4.4:443 | dns.google | tcp |
| US | 8.8.8.8:443 | dns.google | tcp |
| US | 8.8.4.4:443 | dns.google | udp |
| DE | 128.116.44.4:443 | auth.roblox.com | tcp |
| N/A | 127.0.0.1:50854 | tcp | |
| N/A | 127.0.0.1:51054 | tcp | |
| DE | 128.116.44.4:443 | auth.roblox.com | tcp |
| DE | 128.116.44.4:443 | auth.roblox.com | tcp |
| DE | 128.116.44.4:443 | auth.roblox.com | tcp |
| DE | 128.116.44.4:443 | auth.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.4:443 | auth.roblox.com | tcp |
| DE | 128.116.44.4:443 | auth.roblox.com | tcp |
| DE | 128.116.44.4:443 | auth.roblox.com | tcp |
| DE | 128.116.44.4:443 | auth.roblox.com | tcp |
| N/A | 127.0.0.1:52288 | tcp | |
| N/A | 127.0.0.1:52290 | tcp | |
| N/A | 127.0.0.1:52292 | tcp | |
| N/A | 127.0.0.1:52305 | tcp | |
| N/A | 127.0.0.1:52308 | tcp | |
| DE | 128.116.44.4:443 | auth.roblox.com | tcp |
| N/A | 127.0.0.1:52422 | tcp | |
| DE | 128.116.44.4:443 | auth.roblox.com | tcp |
| DE | 128.116.44.4:443 | auth.roblox.com | tcp |
| DE | 128.116.44.4:443 | auth.roblox.com | tcp |
| DE | 128.116.44.4:443 | auth.roblox.com | tcp |
| DE | 128.116.44.4:443 | auth.roblox.com | tcp |
| DE | 128.116.44.4:443 | auth.roblox.com | tcp |
| NL | 104.109.143.10:443 | tr.rbxcdn.com | tcp |
| NL | 104.109.143.10:443 | tr.rbxcdn.com | tcp |
| NL | 104.109.143.10:443 | tr.rbxcdn.com | tcp |
| NL | 104.109.143.10:443 | tr.rbxcdn.com | tcp |
| NL | 104.109.143.10:443 | tr.rbxcdn.com | tcp |
| NL | 104.109.143.10:443 | tr.rbxcdn.com | tcp |
| NL | 104.109.143.10:443 | tr.rbxcdn.com | tcp |
| NL | 104.109.143.10:443 | tr.rbxcdn.com | tcp |
| US | 2.18.190.139:443 | static.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | 10.143.109.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | t7.rbxcdn.com | udp |
| US | 8.8.8.8:53 | t6.rbxcdn.com | udp |
| US | 8.8.8.8:53 | t4.rbxcdn.com | udp |
| US | 2.18.190.136:443 | t4.rbxcdn.com | tcp |
| US | 2.18.190.133:443 | t4.rbxcdn.com | tcp |
| US | 2.18.190.136:443 | t4.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | 139.190.18.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 136.190.18.2.in-addr.arpa | udp |
| N/A | 127.0.0.1:52464 | tcp | |
| N/A | 127.0.0.1:52472 | tcp | |
| N/A | 127.0.0.1:52478 | tcp | |
| N/A | 127.0.0.1:52498 | tcp | |
| N/A | 127.0.0.1:52500 | tcp | |
| N/A | 127.0.0.1:52547 | tcp | |
| N/A | 127.0.0.1:52549 | tcp | |
| N/A | 127.0.0.1:52551 | tcp | |
| N/A | 127.0.0.1:52553 | tcp | |
| N/A | 127.0.0.1:52557 | tcp | |
| N/A | 127.0.0.1:52735 | tcp | |
| N/A | 127.0.0.1:52742 | tcp | |
| N/A | 127.0.0.1:52744 | tcp | |
| N/A | 127.0.0.1:52746 | tcp | |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.4:443 | apis.roblox.com | tcp |
| DE | 128.116.44.4:443 | apis.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.4:443 | apis.roblox.com | tcp |
| N/A | 127.0.0.1:52770 | tcp | |
| US | 8.8.8.8:53 | css.rbxcdn.com | udp |
| US | 8.8.8.8:53 | static.rbxcdn.com | udp |
| US | 8.8.8.8:53 | js.rbxcdn.com | udp |
| US | 8.8.8.8:53 | region1.google-analytics.com | udp |
| US | 2.18.190.78:443 | js.rbxcdn.com | tcp |
| US | 2.18.190.78:443 | js.rbxcdn.com | tcp |
| US | 2.18.190.78:443 | js.rbxcdn.com | tcp |
| US | 2.18.190.78:443 | js.rbxcdn.com | tcp |
| US | 2.18.190.78:443 | js.rbxcdn.com | tcp |
| US | 2.18.190.78:443 | js.rbxcdn.com | tcp |
| US | 2.18.190.134:443 | static.rbxcdn.com | tcp |
| US | 2.18.190.134:443 | static.rbxcdn.com | tcp |
| US | 2.18.190.134:443 | static.rbxcdn.com | tcp |
| US | 2.18.190.134:443 | static.rbxcdn.com | tcp |
| US | 2.18.190.134:443 | static.rbxcdn.com | tcp |
| US | 2.18.190.134:443 | static.rbxcdn.com | tcp |
| US | 2.18.190.139:443 | static.rbxcdn.com | tcp |
| US | 2.18.190.139:443 | static.rbxcdn.com | tcp |
| US | 216.239.34.36:443 | region1.google-analytics.com | udp |
| US | 8.8.8.8:53 | 36.34.239.216.in-addr.arpa | udp |
| NL | 128.116.21.4:443 | roblox.com | tcp |
| US | 2.18.190.134:443 | static.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | roblox-api.arkoselabs.com | udp |
| US | 8.8.8.8:53 | images.rbxcdn.com | udp |
| US | 8.8.8.8:53 | metrics.roblox.com | udp |
| US | 104.18.33.170:443 | roblox-api.arkoselabs.com | tcp |
| US | 2.18.190.140:443 | images.rbxcdn.com | tcp |
| US | 2.18.190.140:443 | images.rbxcdn.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| US | 8.8.8.8:53 | apis.rbxcdn.com | udp |
| US | 2.18.190.83:443 | apis.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | 78.190.18.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 170.33.18.104.in-addr.arpa | udp |
| DE | 128.116.44.4:443 | assetgame.roblox.com | udp |
| DE | 128.116.44.4:443 | assetgame.roblox.com | udp |
| US | 8.8.8.8:53 | auth.roblox.com | udp |
| DE | 128.116.44.4:443 | auth.roblox.com | udp |
| DE | 128.116.44.4:443 | auth.roblox.com | udp |
| DE | 128.116.44.4:443 | auth.roblox.com | udp |
| DE | 128.116.44.4:443 | auth.roblox.com | udp |
| US | 8.8.8.8:53 | o293668.ingest.sentry.io | udp |
| US | 34.120.195.249:443 | o293668.ingest.sentry.io | udp |
| DE | 128.116.44.4:443 | auth.roblox.com | udp |
| US | 8.8.8.8:53 | realtime-signalr.roblox.com | udp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.4:443 | auth.roblox.com | udp |
| US | 8.8.8.8:53 | tr.rbxcdn.com | udp |
| NL | 104.109.143.10:443 | tr.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | create.roblox.com | udp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| US | 8.8.8.8:53 | itemconfiguration.roblox.com | udp |
| US | 8.8.8.8:53 | premiumfeatures.roblox.com | udp |
| DE | 128.116.44.4:443 | premiumfeatures.roblox.com | udp |
| US | 8.8.8.8:53 | t4.rbxcdn.com | udp |
| US | 8.8.8.8:53 | t6.rbxcdn.com | udp |
| US | 8.8.8.8:53 | t7.rbxcdn.com | udp |
| US | 2.18.190.136:443 | t7.rbxcdn.com | tcp |
| US | 2.18.190.133:443 | t7.rbxcdn.com | tcp |
| US | 2.18.190.133:443 | t7.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | gamejoin.roblox.com | udp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | udp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | udp |
| US | 8.8.8.8:53 | clientsettingscdn.roblox.com | udp |
| BE | 104.68.69.233:443 | clientsettingscdn.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| N/A | 127.0.0.1:53229 | tcp | |
| N/A | 127.0.0.1:53236 | tcp | |
| N/A | 127.0.0.1:53239 | tcp | |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| N/A | 127.0.0.1:53242 | tcp | |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| N/A | 127.0.0.1:53260 | tcp | |
| N/A | 127.0.0.1:53265 | tcp | |
| N/A | 127.0.0.1:54496 | tcp | |
| N/A | 127.0.0.1:54498 | tcp | |
| N/A | 127.0.0.1:54500 | tcp | |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| N/A | 127.0.0.1:54513 | tcp | |
| N/A | 127.0.0.1:54525 | tcp | |
| US | 8.8.8.8:53 | gamejoin.roblox.com | udp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| US | 8.8.8.8:53 | tr.rbxcdn.com | udp |
| NL | 104.109.143.10:443 | tr.rbxcdn.com | tcp |
| NL | 104.109.143.10:443 | tr.rbxcdn.com | tcp |
| NL | 104.109.143.10:443 | tr.rbxcdn.com | tcp |
| NL | 104.109.143.10:443 | tr.rbxcdn.com | tcp |
| NL | 104.109.143.10:443 | tr.rbxcdn.com | tcp |
| NL | 104.109.143.10:443 | tr.rbxcdn.com | tcp |
| NL | 104.109.143.10:443 | tr.rbxcdn.com | tcp |
| NL | 104.109.143.10:443 | tr.rbxcdn.com | tcp |
| DE | 128.116.44.33:61962 | udp | |
| DE | 128.116.44.4:443 | avatar.roblox.com | tcp |
| US | 8.8.8.8:53 | t6.rbxcdn.com | udp |
| US | 8.8.8.8:53 | t7.rbxcdn.com | udp |
| US | 8.8.8.8:53 | t4.rbxcdn.com | udp |
| US | 2.18.190.136:443 | t4.rbxcdn.com | tcp |
| US | 2.18.190.136:443 | t4.rbxcdn.com | tcp |
| US | 2.18.190.136:443 | t4.rbxcdn.com | tcp |
| N/A | 127.0.0.1:54528 | tcp | |
| US | 8.8.8.8:53 | 33.44.116.128.in-addr.arpa | udp |
| DE | 128.116.44.4:443 | avatar.roblox.com | tcp |
| DE | 128.116.44.4:443 | avatar.roblox.com | tcp |
| DE | 128.116.44.4:443 | avatar.roblox.com | tcp |
| DE | 128.116.44.4:443 | avatar.roblox.com | tcp |
| DE | 128.116.44.4:443 | avatar.roblox.com | tcp |
| DE | 128.116.44.4:443 | avatar.roblox.com | tcp |
| DE | 128.116.44.4:443 | avatar.roblox.com | tcp |
| DE | 128.116.44.4:443 | avatar.roblox.com | tcp |
| US | 8.8.8.8:53 | c2.rbxcdn.com | udp |
| DE | 128.116.44.4:443 | avatar.roblox.com | tcp |
| US | 2.18.190.139:443 | c2.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | c5.rbxcdn.com | udp |
| US | 2.18.190.139:443 | c2.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | c7.rbxcdn.com | udp |
| US | 2.18.190.140:443 | c5.rbxcdn.com | tcp |
| US | 2.18.190.140:443 | c5.rbxcdn.com | tcp |
| US | 2.18.190.140:443 | c5.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | c0.rbxcdn.com | udp |
| US | 8.8.8.8:53 | c6.rbxcdn.com | udp |
| US | 8.8.8.8:53 | c4.rbxcdn.com | udp |
| US | 8.8.8.8:53 | chat.roblox.com | udp |
| US | 2.18.190.134:443 | c7.rbxcdn.com | tcp |
| US | 2.18.190.142:443 | c0.rbxcdn.com | tcp |
| US | 2.18.190.140:443 | c4.rbxcdn.com | tcp |
| US | 2.18.190.140:443 | c4.rbxcdn.com | tcp |
| DE | 128.116.44.4:443 | chat.roblox.com | tcp |
| US | 2.18.190.140:443 | c4.rbxcdn.com | tcp |
| US | 2.18.190.140:443 | c4.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | 142.190.18.2.in-addr.arpa | udp |
| N/A | 127.0.0.1:54530 | tcp | |
| DE | 128.116.44.4:443 | economy.roblox.com | tcp |
| DE | 128.116.44.4:443 | economy.roblox.com | tcp |
| N/A | 127.0.0.1:54757 | tcp | |
| N/A | 127.0.0.1:54935 | tcp | |
| N/A | 127.0.0.1:54938 | tcp | |
| N/A | 127.0.0.1:54940 | tcp | |
| N/A | 127.0.0.1:54942 | tcp | |
| N/A | 127.0.0.1:54948 | tcp | |
| N/A | 127.0.0.1:54980 | tcp | |
| N/A | 127.0.0.1:54988 | tcp | |
| N/A | 127.0.0.1:54994 | tcp | |
| N/A | 127.0.0.1:54997 | tcp | |
| N/A | 127.0.0.1:55001 | tcp | |
| N/A | 127.0.0.1:55005 | tcp | |
| N/A | 127.0.0.1:55007 | tcp | |
| N/A | 127.0.0.1:55009 | tcp | |
| N/A | 127.0.0.1:55040 | tcp | |
| N/A | 127.0.0.1:55048 | tcp | |
| N/A | 127.0.0.1:55100 | tcp | |
| DE | 128.116.44.4:443 | economy.roblox.com | tcp |
| DE | 128.116.44.4:443 | economy.roblox.com | tcp |
| US | 2.18.190.134:443 | c7.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | c1.rbxcdn.com | udp |
| US | 8.8.8.8:53 | c3.rbxcdn.com | udp |
| N/A | 127.0.0.1:55117 | tcp | |
| US | 2.18.190.135:443 | c1.rbxcdn.com | tcp |
| US | 2.18.190.136:443 | c3.rbxcdn.com | tcp |
| N/A | 127.0.0.1:55120 | tcp | |
| US | 8.8.8.8:53 | t2.rbxcdn.com | udp |
| US | 8.8.8.8:53 | t3.rbxcdn.com | udp |
| US | 8.8.8.8:53 | t1.rbxcdn.com | udp |
| US | 8.8.8.8:53 | t5.rbxcdn.com | udp |
| US | 2.18.190.133:443 | t5.rbxcdn.com | tcp |
| US | 2.18.190.136:443 | t5.rbxcdn.com | tcp |
| US | 2.18.190.136:443 | t5.rbxcdn.com | tcp |
| US | 2.18.190.133:443 | t5.rbxcdn.com | tcp |
| US | 2.18.190.136:443 | t5.rbxcdn.com | tcp |
| US | 2.18.190.136:443 | t5.rbxcdn.com | tcp |
| US | 2.18.190.136:443 | t5.rbxcdn.com | tcp |
| N/A | 127.0.0.1:55231 | tcp | |
| N/A | 127.0.0.1:55233 | tcp | |
| N/A | 127.0.0.1:55247 | tcp | |
| N/A | 127.0.0.1:55253 | tcp | |
| US | 8.8.8.8:53 | 135.190.18.2.in-addr.arpa | udp |
| N/A | 127.0.0.1:55261 | tcp | |
| US | 8.8.8.8:53 | itemconfiguration.roblox.com | udp |
| DE | 128.116.44.4:443 | itemconfiguration.roblox.com | tcp |
| N/A | 127.0.0.1:55377 | tcp | |
| US | 2.18.190.136:443 | t5.rbxcdn.com | tcp |
| US | 2.18.190.136:443 | t5.rbxcdn.com | tcp |
| US | 2.18.190.133:443 | t5.rbxcdn.com | tcp |
| DE | 128.116.44.4:443 | itemconfiguration.roblox.com | tcp |
| US | 8.8.8.8:53 | t0.rbxcdn.com | udp |
| US | 2.18.190.133:443 | t0.rbxcdn.com | tcp |
| US | 2.18.190.133:443 | t0.rbxcdn.com | tcp |
| US | 2.18.190.133:443 | t0.rbxcdn.com | tcp |
| US | 2.18.190.133:443 | t0.rbxcdn.com | tcp |
| US | 2.18.190.133:443 | t0.rbxcdn.com | tcp |
| US | 2.18.190.133:443 | t0.rbxcdn.com | tcp |
| US | 2.18.190.136:443 | t0.rbxcdn.com | tcp |
| US | 2.18.190.133:443 | t0.rbxcdn.com | tcp |
| N/A | 127.0.0.1:55427 | tcp | |
| US | 2.18.190.136:443 | t0.rbxcdn.com | tcp |
| US | 2.18.190.136:443 | t0.rbxcdn.com | tcp |
| DE | 128.116.44.4:443 | itemconfiguration.roblox.com | tcp |
| US | 2.18.190.136:443 | t0.rbxcdn.com | tcp |
| US | 2.18.190.136:443 | t0.rbxcdn.com | tcp |
| US | 2.18.190.136:443 | t0.rbxcdn.com | tcp |
| US | 2.18.190.136:443 | t0.rbxcdn.com | tcp |
| US | 2.18.190.133:443 | t0.rbxcdn.com | tcp |
| US | 2.18.190.136:443 | t0.rbxcdn.com | tcp |
| US | 2.18.190.136:443 | t0.rbxcdn.com | tcp |
| DE | 128.116.44.4:443 | itemconfiguration.roblox.com | tcp |
| DE | 128.116.44.4:443 | itemconfiguration.roblox.com | tcp |
| US | 8.8.8.8:53 | inventory.roblox.com | udp |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| NL | 104.109.143.10:443 | tr.rbxcdn.com | tcp |
| N/A | 127.0.0.1:56275 | tcp | |
| N/A | 127.0.0.1:56277 | tcp | |
| N/A | 127.0.0.1:56279 | tcp | |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| N/A | 127.0.0.1:56326 | tcp | |
| N/A | 127.0.0.1:56329 | tcp | |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| N/A | 127.0.0.1:56333 | tcp | |
| N/A | 127.0.0.1:56336 | tcp | |
| US | 8.8.8.8:53 | clientsettingscdn.roblox.com | udp |
| BE | 104.68.69.233:443 | clientsettingscdn.roblox.com | tcp |
| DE | 128.116.44.4:443 | thumbnails.roblox.com | tcp |
| DE | 128.116.44.4:443 | thumbnails.roblox.com | tcp |
| DE | 128.116.44.4:443 | thumbnails.roblox.com | tcp |
| US | 8.8.8.8:53 | ecsv2.roblox.com | udp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.4:443 | thumbnails.roblox.com | tcp |
| N/A | 127.0.0.1:56674 | tcp | |
| US | 8.8.8.8:53 | msedge.api.cdp.microsoft.com | udp |
| US | 20.114.58.89:443 | msedge.api.cdp.microsoft.com | tcp |
| US | 8.8.8.8:53 | 89.58.114.20.in-addr.arpa | udp |
| GB | 217.20.56.43:80 | msedge.b.tlu.dl.delivery.mp.microsoft.com | tcp |
| US | 8.8.8.8:53 | 43.56.20.217.in-addr.arpa | udp |
| US | 8.8.8.8:53 | ecsv2.roblox.com | udp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| US | 8.8.8.8:53 | thumbnails.roblox.com | udp |
| DE | 128.116.44.4:443 | thumbnails.roblox.com | tcp |
| N/A | 127.0.0.1:56835 | tcp | |
| N/A | 127.0.0.1:56841 | tcp | |
| N/A | 127.0.0.1:56847 | tcp | |
| US | 8.8.8.8:53 | ephemeralcounters.api.roblox.com | udp |
| DE | 128.116.44.4:443 | ephemeralcounters.api.roblox.com | tcp |
| N/A | 127.0.0.1:56850 | tcp | |
| US | 8.8.8.8:53 | assetgame.roblox.com | udp |
| DE | 128.116.44.4:443 | assetgame.roblox.com | tcp |
| N/A | 127.0.0.1:56871 | tcp | |
| DE | 128.116.44.4:443 | assetgame.roblox.com | tcp |
| US | 8.8.8.8:53 | thumbnails.roblox.com | udp |
| DE | 128.116.44.4:443 | thumbnails.roblox.com | tcp |
| N/A | 127.0.0.1:56885 | tcp | |
| N/A | 127.0.0.1:56889 | tcp | |
| DE | 128.116.44.4:443 | thumbnails.roblox.com | tcp |
| US | 8.8.8.8:53 | msedge.api.cdp.microsoft.com | udp |
| US | 20.7.47.135:443 | msedge.api.cdp.microsoft.com | tcp |
| DE | 128.116.44.4:443 | apis.roblox.com | tcp |
| N/A | 127.0.0.1:57249 | tcp | |
| N/A | 127.0.0.1:57255 | tcp | |
| US | 8.8.8.8:53 | assetgame.roblox.com | udp |
| DE | 128.116.44.4:443 | assetgame.roblox.com | tcp |
| N/A | 127.0.0.1:57265 | tcp | |
| US | 8.8.8.8:53 | ecsv2.roblox.com | udp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| US | 8.8.8.8:53 | www.roblox.com | udp |
| DE | 128.116.44.4:443 | www.roblox.com | tcp |
| US | 8.8.8.8:53 | tr.rbxcdn.com | udp |
| US | 8.8.8.8:53 | t0.rbxcdn.com | udp |
| NL | 2.18.121.18:443 | tr.rbxcdn.com | tcp |
| GB | 18.172.153.3:443 | t0.rbxcdn.com | tcp |
| NL | 2.18.121.18:443 | tr.rbxcdn.com | tcp |
| NL | 2.18.121.18:443 | tr.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | t7.rbxcdn.com | udp |
| GB | 18.245.218.28:443 | t7.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | develop.roblox.com | udp |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| N/A | 127.0.0.1:57271 | tcp | |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| US | 8.8.8.8:53 | 3.153.172.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 18.121.18.2.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 28.218.245.18.in-addr.arpa | udp |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| NL | 2.18.121.18:443 | tr.rbxcdn.com | tcp |
| NL | 2.18.121.18:443 | tr.rbxcdn.com | tcp |
| NL | 2.18.121.18:443 | tr.rbxcdn.com | tcp |
| NL | 2.18.121.18:443 | tr.rbxcdn.com | tcp |
| NL | 2.18.121.18:443 | tr.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | t4.rbxcdn.com | udp |
| US | 8.8.8.8:53 | t6.rbxcdn.com | udp |
| US | 2.18.190.133:443 | t6.rbxcdn.com | tcp |
| US | 2.18.190.133:443 | t6.rbxcdn.com | tcp |
| GB | 108.156.46.24:443 | t6.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | 24.46.156.108.in-addr.arpa | udp |
| N/A | 127.0.0.1:58232 | tcp | |
| N/A | 127.0.0.1:58243 | tcp | |
| N/A | 127.0.0.1:58255 | tcp | |
| N/A | 127.0.0.1:58453 | tcp | |
| N/A | 127.0.0.1:58619 | tcp | |
| N/A | 127.0.0.1:58621 | tcp | |
| N/A | 127.0.0.1:58623 | tcp | |
| N/A | 127.0.0.1:58625 | tcp | |
| N/A | 127.0.0.1:58629 | tcp | |
| N/A | 127.0.0.1:58755 | tcp | |
| N/A | 127.0.0.1:58966 | tcp | |
| N/A | 127.0.0.1:58968 | tcp | |
| N/A | 127.0.0.1:58970 | tcp | |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| US | 8.8.8.8:53 | clientsettings.roblox.com | udp |
| US | 8.8.8.8:53 | ecsv2.roblox.com | udp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.4:443 | clientsettings.roblox.com | tcp |
| DE | 128.116.44.4:443 | clientsettings.roblox.com | tcp |
| DE | 128.116.44.4:443 | clientsettings.roblox.com | udp |
| US | 8.8.8.8:53 | clientsettingscdn.roblox.com | udp |
| BE | 104.68.69.233:443 | clientsettingscdn.roblox.com | tcp |
| US | 8.8.8.8:53 | ephemeralcounters.api.roblox.com | udp |
| DE | 128.116.44.4:443 | ephemeralcounters.api.roblox.com | tcp |
| N/A | 127.0.0.1:59059 | tcp | |
| N/A | 127.0.0.1:59066 | tcp | |
| N/A | 127.0.0.1:59069 | tcp | |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| N/A | 127.0.0.1:59072 | tcp | |
| DE | 128.116.44.4:443 | ephemeralcounters.api.roblox.com | tcp |
| US | 8.8.8.8:53 | users.roblox.com | udp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| N/A | 127.0.0.1:59088 | tcp | |
| N/A | 127.0.0.1:59091 | tcp | |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| US | 8.8.8.8:53 | realtime-signalr.roblox.com | udp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| N/A | 127.0.0.1:59096 | tcp | |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| N/A | 127.0.0.1:60338 | tcp | |
| N/A | 127.0.0.1:60341 | tcp | |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| US | 8.8.8.8:53 | gamejoin.roblox.com | udp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| N/A | 127.0.0.1:60344 | tcp | |
| NL | 2.18.121.18:443 | tr.rbxcdn.com | tcp |
| NL | 2.18.121.18:443 | tr.rbxcdn.com | tcp |
| NL | 2.18.121.18:443 | tr.rbxcdn.com | tcp |
| NL | 2.18.121.18:443 | tr.rbxcdn.com | tcp |
| NL | 2.18.121.18:443 | tr.rbxcdn.com | tcp |
| NL | 2.18.121.18:443 | tr.rbxcdn.com | tcp |
| NL | 2.18.121.18:443 | tr.rbxcdn.com | tcp |
| NL | 2.18.121.18:443 | tr.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | avatar.roblox.com | udp |
| DE | 128.116.44.33:61962 | udp | |
| DE | 128.116.44.4:443 | avatar.roblox.com | tcp |
| US | 2.18.190.133:443 | t6.rbxcdn.com | tcp |
| US | 2.18.190.133:443 | t6.rbxcdn.com | tcp |
| GB | 108.156.46.24:443 | t6.rbxcdn.com | tcp |
| GB | 18.245.218.28:443 | t7.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | assetdelivery.roblox.com | udp |
| DE | 128.116.44.4:443 | assetdelivery.roblox.com | tcp |
| DE | 128.116.44.4:443 | assetdelivery.roblox.com | tcp |
| DE | 128.116.44.4:443 | assetdelivery.roblox.com | tcp |
| DE | 128.116.44.4:443 | assetdelivery.roblox.com | tcp |
| DE | 128.116.44.4:443 | assetdelivery.roblox.com | tcp |
| DE | 128.116.44.4:443 | assetdelivery.roblox.com | tcp |
| DE | 128.116.44.4:443 | assetdelivery.roblox.com | tcp |
| DE | 128.116.44.4:443 | assetdelivery.roblox.com | tcp |
| N/A | 127.0.0.1:60346 | tcp | |
| N/A | 127.0.0.1:60512 | tcp | |
| N/A | 127.0.0.1:60749 | tcp | |
| N/A | 127.0.0.1:60756 | tcp | |
| N/A | 127.0.0.1:60761 | tcp | |
| N/A | 127.0.0.1:60764 | tcp | |
| N/A | 127.0.0.1:60768 | tcp | |
| N/A | 127.0.0.1:60770 | tcp | |
| N/A | 127.0.0.1:60772 | tcp | |
| N/A | 127.0.0.1:60774 | tcp | |
| N/A | 127.0.0.1:60776 | tcp | |
| N/A | 127.0.0.1:60778 | tcp | |
| N/A | 127.0.0.1:60780 | tcp | |
| N/A | 127.0.0.1:60782 | tcp | |
| N/A | 127.0.0.1:60832 | tcp | |
| US | 8.8.8.8:53 | clientsettings.roblox.com | udp |
| N/A | 127.0.0.1:60834 | tcp | |
| US | 8.8.8.8:53 | chat.roblox.com | udp |
| DE | 128.116.44.4:443 | chat.roblox.com | tcp |
| DE | 128.116.44.4:443 | chat.roblox.com | tcp |
| N/A | 127.0.0.1:60846 | tcp | |
| US | 8.8.8.8:53 | economy.roblox.com | udp |
| DE | 128.116.44.4:443 | economy.roblox.com | tcp |
| DE | 128.116.44.4:443 | economy.roblox.com | tcp |
| DE | 128.116.44.4:443 | economy.roblox.com | tcp |
| DE | 128.116.44.4:443 | economy.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| US | 8.8.8.8:53 | client-telemetry.roblox.com | udp |
| DE | 128.116.44.3:443 | client-telemetry.roblox.com | tcp |
| N/A | 127.0.0.1:61148 | tcp | |
| US | 8.8.8.8:53 | apis.roblox.com | udp |
| DE | 128.116.44.4:443 | apis.roblox.com | tcp |
| N/A | 127.0.0.1:61323 | tcp | |
| DE | 128.116.44.4:443 | apis.roblox.com | tcp |
| DE | 128.116.44.4:443 | apis.roblox.com | tcp |
| DE | 128.116.44.4:443 | apis.roblox.com | tcp |
| DE | 128.116.44.4:443 | apis.roblox.com | tcp |
| US | 8.8.8.8:53 | games.roblox.com | udp |
| DE | 128.116.44.4:443 | games.roblox.com | tcp |
| N/A | 127.0.0.1:61328 | tcp | |
| N/A | 127.0.0.1:61332 | tcp | |
| US | 8.8.8.8:53 | voice.roblox.com | udp |
| DE | 128.116.44.4:443 | voice.roblox.com | tcp |
| N/A | 127.0.0.1:61337 | tcp | |
| US | 8.8.8.8:53 | friends.roblox.com | udp |
| DE | 128.116.44.4:443 | friends.roblox.com | tcp |
| N/A | 127.0.0.1:61340 | tcp | |
| US | 8.8.8.8:53 | badges.roblox.com | udp |
| DE | 128.116.44.4:443 | badges.roblox.com | tcp |
| DE | 128.116.44.4:443 | badges.roblox.com | tcp |
| N/A | 127.0.0.1:61343 | tcp | |
| N/A | 127.0.0.1:61345 | tcp | |
| N/A | 127.0.0.1:61350 | tcp | |
| N/A | 127.0.0.1:61352 | tcp | |
| N/A | 127.0.0.1:61354 | tcp | |
| N/A | 127.0.0.1:61356 | tcp | |
| N/A | 127.0.0.1:61358 | tcp | |
| N/A | 127.0.0.1:61360 | tcp | |
| US | 8.8.8.8:53 | locale.roblox.com | udp |
| US | 8.8.8.8:53 | gameinternationalization.roblox.com | udp |
| DE | 128.116.44.4:443 | gameinternationalization.roblox.com | tcp |
| DE | 128.116.44.4:443 | gameinternationalization.roblox.com | tcp |
| DE | 128.116.44.4:443 | gameinternationalization.roblox.com | tcp |
| DE | 128.116.44.4:443 | gameinternationalization.roblox.com | tcp |
| DE | 128.116.44.4:443 | gameinternationalization.roblox.com | tcp |
| DE | 128.116.44.4:443 | gameinternationalization.roblox.com | tcp |
| DE | 128.116.44.4:443 | gameinternationalization.roblox.com | tcp |
| DE | 128.116.44.4:443 | gameinternationalization.roblox.com | tcp |
| DE | 128.116.44.4:443 | gameinternationalization.roblox.com | tcp |
| DE | 128.116.44.4:443 | gameinternationalization.roblox.com | tcp |
| DE | 128.116.44.4:443 | gameinternationalization.roblox.com | tcp |
| DE | 128.116.44.4:443 | gameinternationalization.roblox.com | tcp |
| DE | 128.116.44.4:443 | gameinternationalization.roblox.com | tcp |
| DE | 128.116.44.4:443 | gameinternationalization.roblox.com | tcp |
| N/A | 127.0.0.1:61369 | tcp | |
| N/A | 127.0.0.1:61371 | tcp | |
| N/A | 127.0.0.1:61373 | tcp | |
| N/A | 127.0.0.1:61375 | tcp | |
| N/A | 127.0.0.1:61377 | tcp | |
| N/A | 127.0.0.1:61379 | tcp | |
| N/A | 127.0.0.1:61381 | tcp | |
| N/A | 127.0.0.1:61383 | tcp | |
| US | 8.8.8.8:53 | thumbnails.roblox.com | udp |
| DE | 128.116.44.4:443 | thumbnails.roblox.com | tcp |
| N/A | 127.0.0.1:61488 | tcp | |
| US | 8.8.8.8:53 | avatar.roblox.com | udp |
| DE | 128.116.44.4:443 | avatar.roblox.com | tcp |
| US | 8.8.8.8:53 | groups.roblox.com | udp |
| DE | 128.116.44.4:443 | groups.roblox.com | tcp |
| US | 8.8.8.8:53 | c7.rbxcdn.com | udp |
| GB | 108.138.233.2:443 | c7.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | inventory.roblox.com | udp |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| N/A | 127.0.0.1:61509 | tcp | |
| N/A | 127.0.0.1:52717 | udp | |
| N/A | 127.0.0.1:61612 | tcp | |
| N/A | 127.0.0.1:61616 | tcp | |
| N/A | 127.0.0.1:61623 | tcp | |
| N/A | 127.0.0.1:61634 | tcp | |
| US | 8.8.8.8:53 | accountsettings.roblox.com | udp |
| US | 8.8.8.8:53 | c6.rbxcdn.com | udp |
| US | 8.8.8.8:53 | c0.rbxcdn.com | udp |
| US | 8.8.8.8:53 | c5.rbxcdn.com | udp |
| DE | 128.116.44.4:443 | accountsettings.roblox.com | tcp |
| US | 8.8.8.8:53 | c3.rbxcdn.com | udp |
| US | 8.8.8.8:53 | c1.rbxcdn.com | udp |
| US | 2.18.190.146:443 | c5.rbxcdn.com | tcp |
| GB | 18.245.143.9:443 | c0.rbxcdn.com | tcp |
| GB | 18.245.143.9:443 | c0.rbxcdn.com | tcp |
| US | 2.18.190.146:443 | c5.rbxcdn.com | tcp |
| US | 2.18.190.146:443 | c5.rbxcdn.com | tcp |
| GB | 108.138.233.49:443 | c3.rbxcdn.com | tcp |
| GB | 18.172.153.91:443 | c1.rbxcdn.com | tcp |
| GB | 18.172.153.91:443 | c1.rbxcdn.com | tcp |
| GB | 18.245.143.9:443 | c0.rbxcdn.com | tcp |
| US | 2.18.190.146:443 | c5.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | 9.143.245.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 49.233.138.108.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 91.153.172.18.in-addr.arpa | udp |
| N/A | 127.0.0.1:61638 | tcp | |
| DE | 128.116.44.4:443 | accountsettings.roblox.com | tcp |
| DE | 128.116.44.4:443 | accountsettings.roblox.com | tcp |
| N/A | 127.0.0.1:61640 | tcp | |
| N/A | 127.0.0.1:61642 | tcp | |
| GB | 18.239.236.112:443 | c4.rbxcdn.com | tcp |
| GB | 18.239.236.112:443 | c4.rbxcdn.com | tcp |
| GB | 18.239.236.112:443 | c4.rbxcdn.com | tcp |
| GB | 18.239.236.112:443 | c4.rbxcdn.com | tcp |
| GB | 108.138.233.42:443 | c2.rbxcdn.com | tcp |
| GB | 108.138.233.42:443 | c2.rbxcdn.com | tcp |
| GB | 18.239.236.112:443 | c4.rbxcdn.com | tcp |
| GB | 18.172.153.91:443 | c1.rbxcdn.com | tcp |
| N/A | 127.0.0.1:61650 | tcp | |
| GB | 108.138.233.42:443 | c2.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | 112.236.239.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 42.233.138.108.in-addr.arpa | udp |
| N/A | 127.0.0.1:61662 | tcp | |
| N/A | 127.0.0.1:61664 | tcp | |
| GB | 108.138.233.2:443 | c7.rbxcdn.com | tcp |
| N/A | 127.0.0.1:61677 | tcp | |
| N/A | 127.0.0.1:61744 | tcp | |
| N/A | 127.0.0.1:61747 | tcp | |
| US | 8.8.8.8:53 | t2.rbxcdn.com | udp |
| GB | 99.86.114.52:443 | t2.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | 52.114.86.99.in-addr.arpa | udp |
| N/A | 127.0.0.1:61860 | tcp | |
| US | 8.8.8.8:53 | t4.rbxcdn.com | udp |
| GB | 18.172.153.80:443 | t4.rbxcdn.com | tcp |
| GB | 18.172.153.80:443 | t4.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | 80.153.172.18.in-addr.arpa | udp |
| N/A | 127.0.0.1:61977 | tcp | |
| N/A | 127.0.0.1:62110 | tcp | |
| N/A | 127.0.0.1:62123 | tcp | |
| N/A | 127.0.0.1:62127 | tcp | |
| N/A | 127.0.0.1:62202 | tcp | |
| N/A | 127.0.0.1:62557 | tcp | |
| N/A | 127.0.0.1:62950 | tcp | |
| N/A | 127.0.0.1:62960 | tcp | |
| US | 8.8.8.8:53 | ephemeralcounters.api.roblox.com | udp |
| DE | 128.116.44.4:443 | ephemeralcounters.api.roblox.com | tcp |
| DE | 128.116.44.4:443 | ephemeralcounters.api.roblox.com | tcp |
| DE | 128.116.44.4:443 | ephemeralcounters.api.roblox.com | tcp |
| N/A | 127.0.0.1:63901 | tcp | |
| N/A | 127.0.0.1:63906 | tcp | |
| US | 8.8.8.8:53 | assetgame.roblox.com | udp |
| US | 8.8.8.8:53 | ecsv2.roblox.com | udp |
| DE | 128.116.44.4:443 | assetgame.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| N/A | 127.0.0.1:63908 | tcp | |
| N/A | 127.0.0.1:63910 | tcp | |
| N/A | 127.0.0.1:63912 | tcp | |
| N/A | 127.0.0.1:63914 | tcp | |
| N/A | 127.0.0.1:63916 | tcp | |
| N/A | 127.0.0.1:63942 | tcp | |
| DE | 128.116.44.4:443 | assetgame.roblox.com | tcp |
| DE | 128.116.44.4:443 | assetgame.roblox.com | tcp |
| N/A | 127.0.0.1:63957 | tcp | |
| DE | 128.116.44.4:443 | assetgame.roblox.com | tcp |
| N/A | 127.0.0.1:63962 | tcp | |
| US | 8.8.8.8:53 | ecsv2.roblox.com | udp |
| US | 8.8.8.8:53 | ephemeralcounters.api.roblox.com | udp |
| DE | 128.116.44.4:443 | ephemeralcounters.api.roblox.com | tcp |
| DE | 128.116.44.4:443 | ephemeralcounters.api.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| N/A | 127.0.0.1:63971 | tcp | |
| N/A | 127.0.0.1:63973 | tcp | |
| N/A | 127.0.0.1:63975 | tcp | |
| N/A | 127.0.0.1:63977 | tcp | |
| US | 8.8.8.8:53 | apis.roblox.com | udp |
| DE | 128.116.44.4:443 | apis.roblox.com | tcp |
| N/A | 127.0.0.1:63991 | tcp | |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| N/A | 127.0.0.1:64000 | tcp | |
| US | 8.8.8.8:53 | assetgame.roblox.com | udp |
| DE | 128.116.44.4:443 | assetgame.roblox.com | tcp |
| DE | 128.116.44.4:443 | assetgame.roblox.com | tcp |
| DE | 128.116.44.4:443 | assetgame.roblox.com | tcp |
| DE | 128.116.44.4:443 | assetgame.roblox.com | tcp |
| US | 8.8.8.8:53 | itemconfiguration.roblox.com | udp |
| US | 8.8.8.8:53 | economy.roblox.com | udp |
| DE | 128.116.44.4:443 | economy.roblox.com | tcp |
| DE | 128.116.44.4:443 | economy.roblox.com | tcp |
| N/A | 127.0.0.1:64030 | tcp | |
| N/A | 127.0.0.1:64032 | tcp | |
| N/A | 127.0.0.1:64034 | tcp | |
| N/A | 127.0.0.1:64036 | tcp | |
| N/A | 127.0.0.1:64038 | tcp | |
| N/A | 127.0.0.1:64046 | tcp | |
| US | 8.8.8.8:53 | thumbnails.roblox.com | udp |
| DE | 128.116.44.4:443 | thumbnails.roblox.com | tcp |
| DE | 128.116.44.4:443 | thumbnails.roblox.com | tcp |
| DE | 128.116.44.4:443 | thumbnails.roblox.com | tcp |
| US | 8.8.8.8:53 | inventory.roblox.com | udp |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| DE | 128.116.44.4:443 | inventory.roblox.com | tcp |
| N/A | 127.0.0.1:64049 | tcp | |
| US | 8.8.8.8:53 | tr.rbxcdn.com | udp |
| NL | 2.18.121.34:443 | tr.rbxcdn.com | tcp |
| NL | 2.18.121.34:443 | tr.rbxcdn.com | tcp |
| N/A | 127.0.0.1:64051 | tcp | |
| N/A | 127.0.0.1:64053 | tcp | |
| N/A | 127.0.0.1:64055 | tcp | |
| US | 8.8.8.8:53 | 34.121.18.2.in-addr.arpa | udp |
| N/A | 127.0.0.1:64057 | tcp | |
| N/A | 127.0.0.1:64066 | tcp | |
| N/A | 127.0.0.1:64068 | tcp | |
| NL | 2.18.121.34:443 | tr.rbxcdn.com | tcp |
| NL | 2.18.121.34:443 | tr.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | assetdelivery.roblox.com | udp |
| DE | 128.116.44.4:443 | assetdelivery.roblox.com | tcp |
| N/A | 127.0.0.1:64105 | tcp | |
| N/A | 127.0.0.1:64110 | tcp | |
| US | 8.8.8.8:53 | c7.rbxcdn.com | udp |
| US | 2.18.190.147:443 | c7.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | 147.190.18.2.in-addr.arpa | udp |
| DE | 128.116.44.4:443 | assetdelivery.roblox.com | tcp |
| N/A | 127.0.0.1:64143 | tcp | |
| GB | 108.138.233.87:443 | c3.rbxcdn.com | tcp |
| N/A | 127.0.0.1:64148 | tcp | |
| US | 8.8.8.8:53 | 87.233.138.108.in-addr.arpa | udp |
| US | 8.8.8.8:53 | t6.rbxcdn.com | udp |
| GB | 108.138.233.69:443 | t6.rbxcdn.com | tcp |
| US | 8.8.8.8:53 | 69.233.138.108.in-addr.arpa | udp |
| N/A | 127.0.0.1:64160 | tcp | |
| US | 8.8.8.8:53 | avatar.roblox.com | udp |
| US | 8.8.8.8:53 | gameinternationalization.roblox.com | udp |
| DE | 128.116.44.4:443 | voice.roblox.com | tcp |
| DE | 128.116.44.4:443 | voice.roblox.com | tcp |
| DE | 128.116.44.4:443 | voice.roblox.com | tcp |
| DE | 128.116.44.4:443 | voice.roblox.com | tcp |
| DE | 128.116.44.4:443 | voice.roblox.com | tcp |
| DE | 128.116.44.4:443 | voice.roblox.com | tcp |
| DE | 128.116.44.4:443 | voice.roblox.com | tcp |
| DE | 128.116.44.4:443 | voice.roblox.com | tcp |
| DE | 128.116.44.4:443 | voice.roblox.com | tcp |
| DE | 128.116.44.4:443 | voice.roblox.com | tcp |
| US | 8.8.8.8:53 | games.roblox.com | udp |
| DE | 128.116.44.4:443 | games.roblox.com | tcp |
| US | 8.8.8.8:53 | groups.roblox.com | udp |
| DE | 128.116.44.4:443 | groups.roblox.com | tcp |
| N/A | 127.0.0.1:64184 | tcp | |
| N/A | 127.0.0.1:64186 | tcp | |
| N/A | 127.0.0.1:64188 | tcp | |
| N/A | 127.0.0.1:64190 | tcp | |
| N/A | 127.0.0.1:64192 | tcp | |
| N/A | 127.0.0.1:64194 | tcp | |
| N/A | 127.0.0.1:64196 | tcp | |
| N/A | 127.0.0.1:64198 | tcp | |
| N/A | 127.0.0.1:64200 | tcp | |
| N/A | 127.0.0.1:64240 | tcp | |
| N/A | 127.0.0.1:51634 | udp | |
| US | 8.8.8.8:53 | accountsettings.roblox.com | udp |
| DE | 128.116.44.4:443 | accountsettings.roblox.com | tcp |
| DE | 128.116.44.4:443 | accountsettings.roblox.com | tcp |
| US | 8.8.8.8:53 | locale.roblox.com | udp |
| DE | 128.116.44.4:443 | locale.roblox.com | tcp |
| DE | 128.116.44.4:443 | locale.roblox.com | tcp |
| N/A | 127.0.0.1:64295 | tcp | |
| N/A | 127.0.0.1:64298 | tcp | |
| N/A | 127.0.0.1:64414 | tcp | |
| N/A | 127.0.0.1:64447 | tcp | |
| N/A | 127.0.0.1:64449 | tcp | |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| N/A | 127.0.0.1:49368 | tcp | |
| N/A | 127.0.0.1:49370 | tcp | |
| N/A | 127.0.0.1:49372 | tcp | |
| US | 8.8.8.8:53 | clientsettingscdn.roblox.com | udp |
| BE | 104.68.69.233:443 | clientsettingscdn.roblox.com | tcp |
| DE | 128.116.44.4:443 | locale.roblox.com | tcp |
| DE | 128.116.44.3:443 | ecsv2.roblox.com | tcp |
| DE | 128.116.44.4:443 | locale.roblox.com | tcp |
| N/A | 127.0.0.1:50237 | tcp | |
| N/A | 127.0.0.1:50244 | tcp | |
| N/A | 127.0.0.1:50248 | tcp | |
| US | 8.8.8.8:53 | users.roblox.com | udp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| DE | 128.116.44.4:443 | users.roblox.com | tcp |
| US | 8.8.8.8:53 | realtime-signalr.roblox.com | udp |
| US | 8.8.8.8:53 | develop.roblox.com | udp |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| DE | 128.116.44.4:443 | develop.roblox.com | tcp |
| US | 8.8.8.8:53 | www.roblox.com | udp |
| DE | 128.116.44.4:443 | www.roblox.com | tcp |
| DE | 128.116.44.4:443 | www.roblox.com | tcp |
| DE | 128.116.44.33:57396 | udp | |
| US | 8.8.8.8:53 | clientsettings.roblox.com | udp |
| DE | 128.116.44.4:443 | clientsettings.roblox.com | tcp |
| DE | 128.116.44.4:443 | clientsettings.roblox.com | tcp |
| DE | 128.116.44.4:443 | clientsettings.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.4:443 | clientsettings.roblox.com | tcp |
| DE | 128.116.44.4:443 | clientsettings.roblox.com | tcp |
| US | 8.8.8.8:53 | gamejoin.roblox.com | udp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| N/A | 127.0.0.1:50251 | tcp | |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.3:443 | realtime-signalr.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| DE | 128.116.44.4:443 | gamejoin.roblox.com | tcp |
| US | 8.8.8.8:53 | client-telemetry.roblox.com | udp |
| DE | 128.116.44.3:443 | client-telemetry.roblox.com | tcp |
| N/A | 127.0.0.1:50258 | tcp | |
| N/A | 127.0.0.1:50263 | tcp | |
| N/A | 127.0.0.1:50266 | tcp | |
| N/A | 127.0.0.1:51507 | tcp | |
| N/A | 127.0.0.1:51514 | tcp |
Files
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | 8ff8bdd04a2da5ef5d4b6a687da23156 |
| SHA1 | 247873c114f3cc780c3adb0f844fc0bb2b440b6d |
| SHA256 | 09b7b20bfec9608a6d737ef3fa03f95dcbeaca0f25953503a321acac82a5e5ae |
| SHA512 | 5633ad84b5a003cd151c4c24b67c1e5de965fdb206b433ca759d9c62a4785383507cbd5aca92089f6e0a50a518c6014bf09a0972b4311464aa6a26f76648345e |
\??\pipe\LOCAL\crashpad_3492_HOCKWVJGCFJCCTXB
| MD5 | d41d8cd98f00b204e9800998ecf8427e |
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
| SHA512 | cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | 1e4ed4a50489e7fc6c3ce17686a7cd94 |
| SHA1 | eac4e98e46efc880605a23a632e68e2c778613e7 |
| SHA256 | fc9e8224722cb738d8b32420c05006de87161e1d28bc729b451759096f436c1a |
| SHA512 | 5c4e637ac4da37ba133cb1fba8fa2ff3e24fc4ca15433a94868f2b6e0259705634072e5563da5f7cf1fd783fa8fa0c584c00f319f486565315e87cdea8ed1c28 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 9aff07dc9516b71eb81c6425e723a590 |
| SHA1 | 7473bac93eef49ef4c50a43734ac9d7299b4aeae |
| SHA256 | 528ba16d8fcf242b5692d748255de28704657e0ab8fb8fe1c757bbbface0a91b |
| SHA512 | 2329a1f02775b2641ee21727f5bebd1f0b1fd43879a3b0c46232b42729e41b0dcae8ff84228b9f64d7b260dd1ddf8b8b5309a4f07c0d79c559ded769502c2c16 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
| MD5 | 46295cac801e5d4857d09837238a6394 |
| SHA1 | 44e0fa1b517dbf802b18faf0785eeea6ac51594b |
| SHA256 | 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443 |
| SHA512 | 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
| MD5 | 206702161f94c5cd39fadd03f4014d98 |
| SHA1 | bd8bfc144fb5326d21bd1531523d9fb50e1b600a |
| SHA256 | 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167 |
| SHA512 | 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | 6f4c8ca78f0ca4f3cf3ba64bf8165362 |
| SHA1 | a3185bbfc313bac821532987509bbf04c99b12b3 |
| SHA256 | bdcab73b55a1fa139eae95b3f330a32f69266a924f13f3c415c961876c95c709 |
| SHA512 | 47e92817e0edd30f388b56feca6a42f173f8a26500c47bb215f46a71dae0f580e2e6a19b75764e8984a8e86d65f2c41fdff0f74ccd6eb35e4017797ed7df844c |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 4bda919e744a05620da3d5a4960433fd |
| SHA1 | 1007fb6ad8dead3d7713586be131916a5358311b |
| SHA256 | 4083717091a8d5116df29b845892a44d8a36537d512f7a0ff0a54ebf89f63f49 |
| SHA512 | 3e5d2461ce2ef1264a66d413d968e4096fd6c904fec8b0e2184db20c94cd53604e59c158c80ce2a0473b1ec2f2425f975f15c3dddb5a9c381770767f42927bd4 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | 4c58d8851ec4974ac6cdff5bf45ec9f5 |
| SHA1 | c3eeba4be2dacd3263e16b405299657ef6d43263 |
| SHA256 | dfa34d0766d5e99d6f07fb175f6539725d47e30ec73a423544d8b48f7958e9e4 |
| SHA512 | 7877e9c740dc82cefb96d495566b425e4498d3f4822d222eba3697d1033cb6347da3b613afe8a2fb4e3cfca14401c073f53a76ee716ff39365405faea4a266f0 |
C:\Users\Admin\Downloads\RobloxStudioInstaller.exe:Zone.Identifier
| MD5 | fbccf14d504b7b2dbcb5a5bda75bd93b |
| SHA1 | d59fc84cdd5217c6cf74785703655f78da6b582b |
| SHA256 | eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913 |
| SHA512 | aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe579848.TMP
| MD5 | f7e33b39cf6777ded2a2d2fd09eeadc7 |
| SHA1 | 4b4dc1b372ab46c9fa68b4ba37b57f09a698bfb7 |
| SHA256 | eb8f8cb07ad4f096e0d56848f417097352858cdfc63f65caf2174e53988e4e0d |
| SHA512 | a03703af45fe8bac421b32bdd6b34b76d901eac78c8e081d744b7bf96225392242fd989aef5f2c065499a61034f5ca4d1d6f9eae4f253ed284f5071b50a3538f |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 9d4d86ac77ba16270fa9518a159676c1 |
| SHA1 | 2941caebab4c3be70a604e25d2f395f4d4357638 |
| SHA256 | 2571a3f1931a1bdc555e1c6550f56b4938088e219fe689e7c8ce1c7d65b7d5a0 |
| SHA512 | 8038baa1a151210c06bcb397b19db1275fd32b8c0fc00744e0e411c77fee56630ebcb63ce6d622592f95c9c58d90a1483ecb2659fb71fcc50b2d0778350a2385 |
C:\Users\Admin\Downloads\RobloxStudioInstaller.exe
| MD5 | 911c020a364b10fe1de664c01de4534c |
| SHA1 | 8731aee51722d2e1604864eb8f03abe3e6d35441 |
| SHA256 | cb84418aa6ff71e927125f05cd74b10cef07b40fe19a17f9ba5c3bd57f2d9591 |
| SHA512 | 7e2c2259dde1fcb1a10a3864b1e24f892fb28d1c0a9a8b1b32d6b512d9f49b031cf6119f55dad008f0b2a5dc87ae606ee0c2918fdc44fc307d56bc933537db7b |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 76e57d243550b4d6400f08a0b48ea0ae |
| SHA1 | bcf7f2dbaeb4a89c7b3ee20eea0edf2b5eb49a54 |
| SHA256 | 643366ae3099cc56f33c1d67191cdaf43ce8134e46afcd817d1ffdba30a354dd |
| SHA512 | 697fdd1c8293892b9a19f02b0618e2ecd3b595c622c50af0294676b4ae732b1da70b65f208a01eb051cbe2691dbc113144d87d1701eb02c0b860ac586d78d491 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | c2c66ce73ddd6aa814c29a1f5286db84 |
| SHA1 | fb3dc61f61ae803f588b6d52112986f56b5b1480 |
| SHA256 | 4a81f81a8102d335ca7e67f2ecd035fb11dd4b205070c630f5f9c27a38b4bb69 |
| SHA512 | 592fcc4da040b0e976409fd3e007eeeb1e03a60487248464d0253a011c2b012ceae3e61d6b71b083b4970a408329995e3dfe4157707fa5cbe93434c2d4313826 |
C:\Program Files (x86)\Roblox\Versions\version-e2728ac197f84660\WebView2RuntimeInstaller\MicrosoftEdgeWebview2Setup.exe
| MD5 | 610b1b60dc8729bad759c92f82ee2804 |
| SHA1 | 9992b7ae7a9c4e17a0a6d58ffd91b14cbb576552 |
| SHA256 | 921d51979f3416ca19dca13a057f6fd3b09d8741f3576cad444eb95af87ebe08 |
| SHA512 | 0614c4e421ccd5f4475a690ba46aac5bbb7d15caea66e2961895724e07e1ec7ee09589ca9394f6b2bcfb2160b17ac53798d3cf40fb207b6e4c6381c8f81ab6b4 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\MicrosoftEdgeUpdate.exe
| MD5 | 4dc57ab56e37cd05e81f0d8aaafc5179 |
| SHA1 | 494a90728d7680f979b0ad87f09b5b58f16d1cd5 |
| SHA256 | 87c6f7d9b58f136aeb33c96dbfe3702083ec519aafca39be66778a9c27a68718 |
| SHA512 | 320eeed88d7facf8c1f45786951ef81708c82cb89c63a3c820ee631c52ea913e64c4e21f0039c1b277cfb710c4d81cd2191878320d00fd006dd777c727d9dc2b |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdate.dll
| MD5 | 965b3af7886e7bf6584488658c050ca2 |
| SHA1 | 72daabdde7cd500c483d0eeecb1bd19708f8e4a5 |
| SHA256 | d80c512d99765586e02323a2e18694965eafb903e9bc13f0e0b4265f86b21a19 |
| SHA512 | 1c57dc7b89e7f13f21eaec7736b724cd864c443a2f09829308a4f23cb03e9a5f2a1e5bcdc441301e33119767e656a95d0f9ede0e5114bf67f5dce6e55de7b0a4 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_en.dll
| MD5 | 4a1e3cf488e998ef4d22ac25ccc520a5 |
| SHA1 | dc568a6e3c9465474ef0d761581c733b3371b1cd |
| SHA256 | 9afbbe2a591250b80499f0bf02715f02dbcd5a80088e129b1f670f1a3167a011 |
| SHA512 | ce3bffb6568ff2ef83ef7c89fd668f6b5972f1484ce3fbd5597dcac0eaec851d5705ed17a5280dd08cd9812d6faec58a5561217b897c9209566545db2f3e1245 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\MicrosoftEdgeComRegisterShellARM64.exe
| MD5 | 7a160c6016922713345454265807f08d |
| SHA1 | e36ee184edd449252eb2dfd3016d5b0d2edad3c6 |
| SHA256 | 35a14bd84e74dd6d8e2683470243fb1bb9071178d9283b12ebbfb405c8cd4aa9 |
| SHA512 | c0f1d5c8455cf14f2088ede062967d6dfa7c39ca2ac9636b10ed46dfbea143f64106a4f03c285e89dd8cf4405612f1eef25a8ec4f15294ca3350053891fc3d7e |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\NOTICE.TXT
| MD5 | 6dd5bf0743f2366a0bdd37e302783bcd |
| SHA1 | e5ff6e044c40c02b1fc78304804fe1f993fed2e6 |
| SHA256 | 91d3fc490565ded7621ff5198960e501b6db857d5dd45af2fe7c3ecd141145f5 |
| SHA512 | f546c1dff8902a3353c0b7c10ca9f69bb77ebd276e4d5217da9e0823a0d8d506a5267773f789343d8c56b41a0ee6a97d4470a44bbd81ceaa8529e5e818f4951e |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\MicrosoftEdgeUpdateComRegisterShell64.exe
| MD5 | 60dba9b06b56e58f5aea1a4149c743d2 |
| SHA1 | a7e456acf64dd99ca30259cf45b88cf2515a69b3 |
| SHA256 | 4d01f5531f93ab2af9e92c4f998a145c94f36688c3793845d528c8675697e112 |
| SHA512 | e98088a368d4c4468e325a1d62bee49661f597e5c1cd1fe2dabad3911b8ac07e1cc4909e7324cb4ab39f30fa32a34807685fcfba767f88884ef84ca69a0049e7 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_ca.dll
| MD5 | 39551d8d284c108a17dc5f74a7084bb5 |
| SHA1 | 6e43fc5cec4b4b0d44f3b45253c5e0b032e8e884 |
| SHA256 | 8dbd55ed532073874f4fe006ef456e31642317145bd18ddc30f681ce9e0c8e07 |
| SHA512 | 6fa5013a9ce62deca9fa90a98849401b6e164bbad8bef00a8a8b228427520dd584e28cba19c71e2c658692390fe29be28f0398cb6c0f9324c56290bb245d06d2 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_da.dll
| MD5 | d34380d302b16eab40d5b63cfb4ed0fe |
| SHA1 | 1d3047119e353a55dc215666f2b7b69f0ede775b |
| SHA256 | fd98159338d1f3b03814af31440d37d15ab183c1a230e6261fbb90e402f85d5f |
| SHA512 | 45ce58f4343755e392037a9c6fc301ad9392e280a72b9d4b6d328866fe26877b2988c39e05c4e7f1d5b046c0864714b897d35285e222fd668f0d71b7b10e6538 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_fil.dll
| MD5 | 7c66526dc65de144f3444556c3dba7b8 |
| SHA1 | 6721a1f45ac779e82eecc9a584bcf4bcee365940 |
| SHA256 | e622823096fc656f63d5a7bbdf3744745ef389c92ec1b804d3b874578e18c89d |
| SHA512 | dbc803c593ae0b18fd989fdc5e9e6aee8f16b893ae8d17e9d88436e2cd8cae23d06e32e4c8a8bf67fc5311b6f2a184c4e6795fed6d15b3d766ef5affc8923e2f |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_it.dll
| MD5 | 497ca0a8950ae5c8c31c46eb91819f58 |
| SHA1 | 01e7e61c04de64d2df73322c22208a87d6331fc8 |
| SHA256 | abe2360a585b6671ec3a69d14077b43ae8f9e92b6077b80a147dfe36792bb1b7 |
| SHA512 | 070398af980f193ff90b4afaecb3822534ef3171eca7228bce395af11ca38364bc47cab7df1e71187ef291f90978bdc37a8611d2992b1800cd1de6aa7fda09d9 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_is.dll
| MD5 | 5664c7a059ceb096d4cdaae6e2b96b8f |
| SHA1 | bf0095cd7470bf4d7c9566ba0fd3b75c8b9e57ec |
| SHA256 | a3a2947064267d17474c168d3189b0d372e36e53bf0efb9c228d314fc802d98e |
| SHA512 | 015dcb17b297a0aaad41c7b0b2199187e435855fd3977d16402be774622cc4f6b55d04ba9159a89e26e350c5602928c76dd9386be3974437b41888a0cfdddfa8 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_id.dll
| MD5 | 03d4c35b188204f62fc1c46320e80802 |
| SHA1 | 07efb737c8b072f71b3892b807df8c895b20868c |
| SHA256 | 192585d7f4a8a0cd95e338863c14233cdd8150f9f6f7dd8a405da0670110ee95 |
| SHA512 | 7e67ea953ea58ff43e049ce519ae077eec631325604896479526627d688f2fa3bfc855a55ac23a76b1c9ef8cd75274265b8238423b95a2437be7250db0db31b1 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_as.dll
| MD5 | a8d3210e34bf6f63a35590245c16bc1b |
| SHA1 | f337f2cbec05b7e20ca676d7c2b1a8d5ae8bf693 |
| SHA256 | 3b82de846ad028544013383e3c9fb570d2a09abf2c854e8a4d641bd7fc3b3766 |
| SHA512 | 6e47ffe8f7c2532e7854dcae3cbd4e6533f0238815cb6af5ea85087c51017ea284542b988f07692d0297ebab1bad80d7613bf424ff532e10b01c8e528ab1043a |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_hu.dll
| MD5 | f4976c580ba37fc9079693ebf5234fea |
| SHA1 | 7326d2aa8f6109084728323d44a7fb975fc1ed3f |
| SHA256 | b16755fdbcc796ef4eb937759fe2c3518c694f5d186970d55a5a5e5d906cb791 |
| SHA512 | e43636d8c947e981258e649712ad43f37c1aab01916539b93c082959fb5c6764c9c44979650092202839e812e6f252c6c3eaf66d3d195c1efd39c74c81ad1981 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_hr.dll
| MD5 | 0b475965c311203bf3a592be2f5d5e00 |
| SHA1 | b5ff1957c0903a93737666dee0920b1043ddaf70 |
| SHA256 | 65915ad11b9457d145795a1e8d151f898ec2dcb8b136967e6592884699867eb0 |
| SHA512 | bec513125f272c24477b9ddbaa5706d1e1bb958babac46829b28df99fa1dd82f3f1e3c7066dc2fe3e59118c536675a22fc2128de916ca4c478950b9992372007 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_hi.dll
| MD5 | 34cbaeb5ec7984362a3dabe5c14a08ec |
| SHA1 | d88ec7ac1997b7355e81226444ec4740b69670d7 |
| SHA256 | 024c5eae16e45abe2237c2a5d868563550ac596f1f7d777e25234c17d9461dd9 |
| SHA512 | 008c8443a3e93c4643a9e8735a1c59c24ba2f7a789606a86da54c921c34cbc0cb11c88594544d8509a8e71b6a287c043b1ffe2d39b90af53b4cde3847d891ba8 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_gu.dll
| MD5 | f9646357cf6ce93d7ba9cfb3fa362928 |
| SHA1 | a072cc350ea8ea6d8a01af335691057132b04025 |
| SHA256 | 838ccd8243caa1a5d9e72eb1179ac8ae59d2acb453ed86be01e0722a8e917150 |
| SHA512 | 654c4a5200f20411c56c59dbb30a63bfe2da27781c081e2049b31f0371a31d679e3c9378c7eb9cf0fb9166a3f0fba33a58c3268193119b06f91bebe164a82528 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_gl.dll
| MD5 | 84a1cea9a31be831155aa1e12518e446 |
| SHA1 | 670f4edd4dc8df97af8925f56241375757afb3da |
| SHA256 | e4eb716f1041160fd323b0f229b88851e153025d5d79f49b7d6ecb7eb2442c57 |
| SHA512 | 5f1318119102fcee1c828565737ce914493ff86e2a18a94f5ff2b6b394d584ace75c37258d589cce1d5afd8e37d617168a7d7372cfd68dd6a2afcd4577a0bc51 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_gd.dll
| MD5 | c90f33303c5bd706776e90c12aefabee |
| SHA1 | 1965550fe34b68ea37a24c8708eef1a0d561fb11 |
| SHA256 | e3acc61d06942408369c85365ac0d731c5f3c9bc26e3f1e3bb24226d0879ad9c |
| SHA512 | b0c1a9d7df57d68e5daf527703f0b6154a2ef72af1a3933bda2804408f6684b5b09b822522193243fd0756f80f13d3ab0647c90d2bed1a57b4a9fea933b0aa9a |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_ga.dll
| MD5 | 3b8a5301c4cf21b439953c97bd3c441c |
| SHA1 | 8a7b48bb3d75279de5f5eb88b5a83437c9a2014a |
| SHA256 | abc9822ee193c9a98a21202648a48ecd69b0cb19ff31c9bbf0c79dab5f9609b0 |
| SHA512 | 068166cfdf879caf4e54fe43c5265a692fcaf6a9dcbf151335fd054bbec06260bc5ed489de6d46ca3fc0044bc61fa1468fea85373c6c66349620618ee869383a |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_fr-CA.dll
| MD5 | b534e068001e8729faf212ad3c0da16c |
| SHA1 | 999fa33c5ea856d305cc359c18ea8e994a83f7a9 |
| SHA256 | 445051ef15c6c872bed6d904169793837e41029a8578eaf81d78a4641ef53511 |
| SHA512 | e937d2e0f43ade3f4a5e9cdeb6dd8c8ad8b5b50a7b6b779bda727a4fe1ced93abd06720395cc69a274ce3b0f7c6b65e1eba1ecf069db64edb80d007fbb4eedbb |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_fr.dll
| MD5 | 64c47a66830992f0bdfd05036a290498 |
| SHA1 | 88b1b8faa511ee9f4a0e944a0289db48a8680640 |
| SHA256 | a9b72fcb3bdb5e021b8d23b2de0caeca80ddc50420088b988a5b7503f2d7c961 |
| SHA512 | 426546310c12aeb80d56e6b40973a5f4dffef72e14d1ac79e3f267e4df2a0022b89e08bba8ab2ffa24f90b0c035a009bed3066201e30fe961d84ed854e48f9c5 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_fi.dll
| MD5 | d45f2d476ed78fa3e30f16e11c1c61ea |
| SHA1 | 8c8c5d5f77cd8764c4ca0c389daee89e658dfd5e |
| SHA256 | acf42b90190110ccf30bcfb2626dd999a14e42a72a3983928cba98d44f0a72e2 |
| SHA512 | 2a876e0313a03e75b837d43e9c5bb10fcec385fbb0638faa984ee4bb68b485b04d14c59cd4ed561aaa7f746975e459954e276e73fc3f5f4605ae7f333ce85f1b |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_fa.dll
| MD5 | cbe3454843ce2f36201460e316af1404 |
| SHA1 | 0883394c28cb60be8276cb690496318fcabea424 |
| SHA256 | c66c4024847d353e9985eb9b2f060b2d84f12cc77fb6479df5ffc55dbda97e59 |
| SHA512 | f39e660f3bfab288871d3ec40135c16d31c6eb1a84136e065b54ff306f6f8016a788c713d4d8e46ad62e459f9073d2307a6ed650919b2dd00577bbfd04e5bd73 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_eu.dll
| MD5 | a7e1f4f482522a647311735699bec186 |
| SHA1 | 3b4b4b6e6a5e0c1981c62b6b33a0ca78f82b7bbd |
| SHA256 | e5615c838a71b533b26d308509954907bcc0eb4032cdbaa3db621eede5e6bfa4 |
| SHA512 | 22131600bbac8d9c2dab358e244ec85315a1aaebfc0fb62aaa1493c418c8832c3a6fbf24a6f8cf4704fdc4bc10a66c88839a719116b4a3d85264b7ad93c54d57 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_et.dll
| MD5 | b78cba3088ecdc571412955742ea560b |
| SHA1 | bc04cf9014cec5b9f240235b5ff0f29dbdb22926 |
| SHA256 | f0a4cfd96c85f2d98a3c9ecfadd41c0c139fdb20470c8004f4c112dd3d69e085 |
| SHA512 | 04c8ab8e62017df63e411a49fb6218c341672f348cb9950b1f0d2b2a48016036f395b4568da70989f038e8e28efea65ddd284dfd490e93b6731d9e3e0e0813cf |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_es-419.dll
| MD5 | 28fefc59008ef0325682a0611f8dba70 |
| SHA1 | f528803c731c11d8d92c5660cb4125c26bb75265 |
| SHA256 | 55a69ce2d6fc4109d16172ba6d9edb59dbadbc8af6746cc71dc4045aa549022d |
| SHA512 | 2ec71244303beac7d5ce0905001fe5b0fb996ad1d1c35e63eecd4d9b87751f0633a281554b3f0aa02ee44b8ceaad85a671ef6c34589055797912324e48cc23ed |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_es.dll
| MD5 | 9db7f66f9dc417ebba021bc45af5d34b |
| SHA1 | 6815318b05019f521d65f6046cf340ad88e40971 |
| SHA256 | e652159a75cbab76217ecbb4340020f277175838b316b32cf71e18d83da4a819 |
| SHA512 | 943d8fc0d308c5ccd5ab068fc10e799b92465a22841ce700c636e7ae1c12995d99c0a93ab85c1ae27fefce869eabadbeafee0f2f5f010ad3b35fa4f748b54952 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_en-GB.dll
| MD5 | d749e093f263244d276b6ffcf4ef4b42 |
| SHA1 | 69f024c769632cdbb019943552bac5281d4cbe05 |
| SHA256 | fd90699e7f29b6028a2e8e6f3ae82d26cdc6942bd39c4f07b221d87c5dbbfe1e |
| SHA512 | 48d51b006ce0cd903154fa03d17e76591db739c4bfb64243725d21d4aa17db57a852077be00b9a51815d09664d18f9e6ad61d9bc41b3d013ed24aaec8f477ad9 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_el.dll
| MD5 | ac275b6e825c3bd87d96b52eac36c0f6 |
| SHA1 | 29e537d81f5d997285b62cd2efea088c3284d18f |
| SHA256 | 223d2db0bc2cc82bda04a0a2cd2b7f6cb589e2fa5c0471a2d5eb04d2ffcfcfa0 |
| SHA512 | bba581412c4297c4daf245550a2656cdc2923f77158b171e0eacf6e933c174eac84580864813cf6d75d73d1a58e0caf46170aee3cee9d84dc468379252b16679 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_de.dll
| MD5 | aab01f0d7bdc51b190f27ce58701c1da |
| SHA1 | 1a21aabab0875651efd974100a81cda52c462997 |
| SHA256 | 061a7cdaff9867ddb0bd3de2c0760d6919d8d2ca7c7f889ec2d32265d7e7a75c |
| SHA512 | 5edbda45205b61ac48ea6e874411bb1031989001539650de6e424528f72ec8071bd709c037c956450bb0558ee37d026c26fdb966efceb990ed1219f135b09e6e |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_cy.dll
| MD5 | 34d991980016595b803d212dc356d765 |
| SHA1 | e3a35df6488c3463c2a7adf89029e1dd8308f816 |
| SHA256 | 252b6f9bf5a9cb59ad1c072e289cc9695c0040b363d4bfbcc9618a12df77d18e |
| SHA512 | 8a6cbcf812af37e3ead789fbec6cba9c4e1829dbeea6200f0abbdae15efd1eda38c3a2576e819d95ed2df0aafd2370480daa24a3fe6aeb8081a936d5e1f8d8ed |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_cs.dll
| MD5 | 16c84ad1222284f40968a851f541d6bb |
| SHA1 | bc26d50e15ccaed6a5fbe801943117269b3b8e6b |
| SHA256 | e0f0026ddcbeafc6c991da6ba7c52927d050f928dba4a7153552efcea893a35b |
| SHA512 | d3018619469ed25d84713bd6b6515c9a27528810765ed41741ac92caf0a3f72345c465a5bda825041df69e1264aada322b62e10c7ed20b3d1bcde82c7e146b7e |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_ca-Es-VALENCIA.dll
| MD5 | 2929e8d496d95739f207b9f59b13f925 |
| SHA1 | 7c1c574194d9e31ca91e2a21a5c671e5e95c734c |
| SHA256 | 2726c48a468f8f6debc2d9a6a0706b640b2852c885e603e6b2dec638756160df |
| SHA512 | ea459305d3c3fa7a546194f649722b76072f31e75d59da149c57ff05f4af8f38a809066054df809303937bbca917e67441da2f0e1ea37b50007c25ae99429957 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_bs.dll
| MD5 | e338dccaa43962697db9f67e0265a3fc |
| SHA1 | 4c6c327efc12d21c4299df7b97bf2c45840e0d83 |
| SHA256 | 99b1b7e25fbc2c64489c0607cef0ae5ff720ab529e11093ed9860d953adeba04 |
| SHA512 | e0c15b166892433ef31ddf6b086680c55e1a515bed89d51edbdf526fcac71fb4e8cb2fadc739ac75ae5c2d9819fc985ca873b0e9e2a2925f82e0a456210898f9 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_bn-IN.dll
| MD5 | a94cf5e8b1708a43393263a33e739edd |
| SHA1 | 1068868bdc271a52aaae6f749028ed3170b09cce |
| SHA256 | 5b01fe11016610d5606f815281c970c86025732fc597b99c031a018626cd9f3c |
| SHA512 | 920f7fed1b720afdb569aec2961bd827a6fc54b4598c0704f65da781d142b1707e5106a459f0c289e0f476b054d93c0b733806af036b68f46377dde0541af2e7 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_bn.dll
| MD5 | 7dc58c4e27eaf84ae9984cff2cc16235 |
| SHA1 | 3f53499ddc487658932a8c2bcf562ba32afd3bda |
| SHA256 | e32f77ed3067d7735d10f80e5a0aa0c50c993b59b82dc834f2583c314e28fa98 |
| SHA512 | bdec1300cf83ea06dfd351fe1252b850fecea08f9ef9cb1207fce40ce30742348db953107ade6cdb0612af2e774345faf03a8a6476f2f26735eb89153b4256dc |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_bg.dll
| MD5 | 8375b1b756b2a74a12def575351e6bbd |
| SHA1 | 802ec096425dc1cab723d4cf2fd1a868315d3727 |
| SHA256 | a12df15afac4eb2695626d7a8a2888bdf54c8db671043b0677180f746d8ad105 |
| SHA512 | aec4bb94fde884db79a629abcff27fd8afb7f229d055514f51fa570fb47a85f8dfc9a54a8f69607d2bcaf82fae1ec7ffab0b246795a77a589be11fad51b24d19 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_az.dll
| MD5 | 7937c407ebe21170daf0975779f1aa49 |
| SHA1 | 4c2a40e76209abd2492dfaaf65ef24de72291346 |
| SHA256 | 5ab96e4e6e065dbce3b643c6be2c668f5570984ead1a8b3578bbd2056fbad4e9 |
| SHA512 | 8670746941660e6573732077f5ed1b630f94a825cf4ac9dbe5018772eaac1c48216334757a2aeaa561034b4d907162a370b8f0bae83b34a09457fafe165fb5d7 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_ar.dll
| MD5 | 570efe7aa117a1f98c7a682f8112cb6d |
| SHA1 | 536e7c49e24e9aa068a021a8f258e3e4e69fa64f |
| SHA256 | e2cc8017bc24e73048c7ee68d3787ed63c3898eec61299a9ca1bab8aeaa8da01 |
| SHA512 | 5e963dd55a5739a1da19cec7277dc3d07afdb682330998fd8c33a1b5949942019521967d8b5af0752a7a8e2cf536faa7e62982501170319558ceaa21ed657ae8 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_am.dll
| MD5 | f6c1324070b6c4e2a8f8921652bfbdfa |
| SHA1 | 988e6190f26e4ca8f7ea3caabb366cf1edcdcbbf |
| SHA256 | 986b0654a8b5f7b23478463ff051bffe1e9bbdeb48744e4aa1bd3d89a7520717 |
| SHA512 | 63092cf13e8a19966181df695eb021b0a9993afe8f98b1309973ea999fdf4cd9b6ffd609968d4aa0b2cde41e872688a283fd922d8b22cb5ad06339fe18221100 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\msedgeupdateres_af.dll
| MD5 | 567aec2d42d02675eb515bbd852be7db |
| SHA1 | 66079ae8ac619ff34e3ddb5fb0823b1790ba7b37 |
| SHA256 | a881788359b2a7d90ac70a76c45938fb337c2064487dcb8be00b9c311d10c24c |
| SHA512 | 3a7414e95c2927d5496f29814556d731aef19efa531fb58988079287669dfc033f3e04c8740697571df76bfecfe3b75659511783ce34682d2a2ea704dfa115b3 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\EdgeUpdate.dat
| MD5 | 369bbc37cff290adb8963dc5e518b9b8 |
| SHA1 | de0ef569f7ef55032e4b18d3a03542cc2bbac191 |
| SHA256 | 3d7ec761bef1b1af418b909f1c81ce577c769722957713fdafbc8131b0a0c7d3 |
| SHA512 | 4f8ec1fd4de8d373a4973513aa95e646dfc5b1069549fafe0d125614116c902bfc04b0e6afd12554cc13ca6c53e1f258a3b14e54ac811f6b06ed50c9ac9890b1 |
C:\Program Files (x86)\Microsoft\Temp\EU2575.tmp\MicrosoftEdgeUpdateCore.exe
| MD5 | c044dcfa4d518df8fc9d4a161d49cece |
| SHA1 | 91bd4e933b22c010454fd6d3e3b042ab6e8b2149 |
| SHA256 | 9f79fe09f57002ca07ae0b2a196e8cc002d2be6d5540ee857217e99b33fa4bb2 |
| SHA512 | f26b89085aa22ac62a28610689e81b4dfe3c38a9015ec56dfeaff02fdb6fa64e784b86a961509b52ad968400faa1ef0487f29f07a41e37239fe4c3262a11ac2c |
C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log
| MD5 | 60ba73af966cbf4e56443c06005e7a78 |
| SHA1 | fdcb39538650e6e308280f72d13c3043a594b4af |
| SHA256 | 1ffbecbf376e087bba1e7aed9a8734dadcda54c63b0cf1220141d907776ceac8 |
| SHA512 | 1b147800f764ccec6d2a83edd3232f6c5afb1a196b5430a0479aa2ebae91ee1e74f2595023eb8244ec5c59280716362349782a3664c672c8807845dffb8e53f5 |
memory/4968-526-0x0000000000410000-0x0000000000445000-memory.dmp
memory/4968-527-0x0000000073690000-0x00000000738A0000-memory.dmp
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
| MD5 | 53cc504b04ed563f781dde22fc1c0587 |
| SHA1 | d91f1c4bf6dd8350a426e6c9437f03f0347feb00 |
| SHA256 | c55afe4ec10e61545992e26773f77ec69932f88cd94a9d7d9a48475b45b6c686 |
| SHA512 | 952de4d521a5c78b397a6275071199cf3c4a94d119742c016a3a974b98405c98406b6dae1f6e5f8108e843e98f0d3da5d69475b4fc7fbade99917b21264de786 |
C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}\124.0.2478.67\MicrosoftEdge_X64_124.0.2478.67.exe
| MD5 | dabc3160a804b9fadd89ceb0fcecf388 |
| SHA1 | b52f15e866a18637683bdf0ea4eaa326b787396f |
| SHA256 | 53eb39a92ee0d2eb94f6d33c015097bddd9cfe5c4129d3ac9a9facbfb5087bfe |
| SHA512 | 74fc0f21d7cf99e07c079224e2af8a4a51bff98a97bc471cfedfbd3a28d3ee681fbd63fa7239948c3c0bf4f9af56dc582dd128f8c08b54cb73389e85f949f431 |
C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat
| MD5 | 1d6130a1daa9c5aa109c667110d37a70 |
| SHA1 | c42ebae25b87e333ee828a6812385dd11199a05c |
| SHA256 | 3e28a663f386911e8fe8c065f694655354cbe3a71691a4e98916c5596e1f3c67 |
| SHA512 | bac15e1c2843bb1cf391bda7cc33b40053586f9bb81d8319f76c70ae03c04f4d7128f075542b80f425eef6a99d5fe52a3d7115474c250de30a620b88160aab82 |
C:\Program Files (x86)\Microsoft\EdgeCore\124.0.2478.67\Installer\setup.exe
| MD5 | c31297188ec9fbaa60449f769339963e |
| SHA1 | 8502d9e0cef18137529f0a46ad6e69a1577e6cae |
| SHA256 | 2e2eff110475dd3dfd732ab514e4692032e67b2d228d0081634a87f45cde5ff9 |
| SHA512 | 9525e3e08b953fe36270c7b4868959e9bded055c5577e5ca94d79606b671e6660d180f763b54a276bf356e82d7073901c373e0b40cfca924cc4b38384c20e22a |
memory/4968-575-0x0000000073690000-0x00000000738A0000-memory.dmp
memory/4968-586-0x0000000000410000-0x0000000000445000-memory.dmp
memory/4640-600-0x00007FF884410000-0x00007FF88495C000-memory.dmp
memory/4640-599-0x00007FF884CE0000-0x00007FF8850E2000-memory.dmp
memory/4640-601-0x00007FF7BED40000-0x00007FF7BFD40000-memory.dmp
memory/4256-694-0x00007FF8A88B0000-0x00007FF8A88B1000-memory.dmp
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_3
| MD5 | 41876349cb12d6db992f1309f22df3f0 |
| SHA1 | 5cf26b3420fc0302cd0a71e8d029739b8765be27 |
| SHA256 | e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c |
| SHA512 | e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e |
memory/4036-735-0x00007FF8A88B0000-0x00007FF8A88B1000-memory.dmp
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_1
| MD5 | d0d388f3865d0523e451d6ba0be34cc4 |
| SHA1 | 8571c6a52aacc2747c048e3419e5657b74612995 |
| SHA256 | 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b |
| SHA512 | 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GraphiteDawnCache\data_0
| MD5 | cf89d16bb9107c631daabf0c0ee58efb |
| SHA1 | 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b |
| SHA256 | d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e |
| SHA512 | 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\GrShaderCache\data_2
| MD5 | 0962291d6d367570bee5454721c17e11 |
| SHA1 | 59d10a893ef321a706a9255176761366115bedcb |
| SHA256 | ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7 |
| SHA512 | f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
| MD5 | 15fc3b329f832cad95bb0111c640c799 |
| SHA1 | 466993111f600888ab20c9efed7609e6d9d39e63 |
| SHA256 | 77523eb9310acc572059c46a3ac86964a716b67ceb0355fba8da05b20431f430 |
| SHA512 | 2679a8b311437be9b8b15478398e9ab4653a6dba5753eec0ea1b5fd82f5347928de9104cd5d1495a940698e2b96f6e2d0a562cc2906df30be5bae184795bff53 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
| MD5 | 8785efa29a6a30772ff78336963e7f2b |
| SHA1 | e81beebbd9e474ae422cc8871509ad96e71a0c81 |
| SHA256 | 8956388d05feabb3a6d1058aa017eaeaf8689dec38f7f50161624a5ad6d2515d |
| SHA512 | 93d2a89f626f0bd09037693639a8f064f2cd354ebaf9ed5c25d409037a6fbe7a67c904e09375c4d62cd8b93099b377abd1fa737f1486257b2e5c77b7e518fb2b |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State~RFe594f9d.TMP
| MD5 | 5baab30065ced9d0cc0e56b41d8fd544 |
| SHA1 | 5f58651a5a900ff41879029ed0b1cad6176f664d |
| SHA256 | f19b085ea4da1a84fd58d69a56ed05188f6ce09ba467e1cf9a79efdf60e586d4 |
| SHA512 | c397491f73688a15a03037611fb1b173c9a9f6073d9911b3f648edcd60a89d39bd42c1addc8d95637d1460f636afc59b4528bf18e36e8c899e7cab6d9c1b15fa |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
| MD5 | 5af87dfd673ba2115e2fcf5cfdb727ab |
| SHA1 | d5b5bbf396dc291274584ef71f444f420b6056f1 |
| SHA256 | f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4 |
| SHA512 | de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Crashpad\settings.dat
| MD5 | 2bff3c440022181749d54c6a035d85cc |
| SHA1 | 8a74b364edae5d8f0223b9a1c87d908373ec02b3 |
| SHA256 | c17863bbeb799e87ff86986c2f97d2d41d16fa8df818b9a5edb84f1d77f2fa62 |
| SHA512 | 21387eb944ca1d8cdbf8c40e5fa54c21803fb1be6671ef9e24097a2bdaa28cfccaa019c3712800dbdc19469d95325128a3231d3fb1f46404e2ebfc05422aaf73 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
| MD5 | d751713988987e9331980363e24189ce |
| SHA1 | 97d170e1550eee4afc0af065b78cda302a97674c |
| SHA256 | 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945 |
| SHA512 | b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
| MD5 | f0c284ad03096ea2b5a01f789b0d1170 |
| SHA1 | 41e1851a860308f6ba440ad956da773b992757ed |
| SHA256 | 5a21a301cb1c667306dacb12f2ba1670b0605551b2ea5cda9c2df67bb89b8b28 |
| SHA512 | e02fcb3b6095539355afbafa72aeb684e7ec0a9fd9c05238c986d483ebf6d9da39abfe0ae0c0ce2b30126f688b96c42623a5d024c7aa0dca1af881b950252efb |
memory/4256-997-0x0000021CA4E50000-0x0000021CA4E79000-memory.dmp
C:\Users\Admin\Videos\Captures\desktop.ini
| MD5 | b0d27eaec71f1cd73b015f5ceeb15f9d |
| SHA1 | 62264f8b5c2f5034a1e4143df6e8c787165fbc2f |
| SHA256 | 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2 |
| SHA512 | 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity
| MD5 | 0b35bd872887e369742417027f9db312 |
| SHA1 | 4bf5039e4631f97adbe6dc8e443ca287b7b4907b |
| SHA256 | 4f1f824386173d6b65837600f515d6374ef5ac07c975422cc95f54015f7bc66d |
| SHA512 | baeb47f5e380ac36a20dae128abc1d61475e6ac6bb220b7297999b329d51d87f24bf6f87bc73fad04ff93ce5c1a1f4f43cb93e7a2d736fd2b064ab863e02512a |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\TransportSecurity~RFe59a3a9.TMP
| MD5 | 99113798f9b3cf01d775ca13679fc4f6 |
| SHA1 | 15babdc01771baa81f6f2d9147bae8e59ab221a1 |
| SHA256 | 85b151c3bb9e5ae123cc9fc3e813d543eedfc43d81f36a7dc9d0c413805a03fa |
| SHA512 | 1b237ea96374949ee8507c79da1702504a29c0cdb9231a77763dfacf7174e436d977cfc570a88bff85d878fe217295400908497823181e87d88df0091d2aa078 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Local State
| MD5 | 11e45ea01bd9bf75b417821118e55341 |
| SHA1 | c08ba32d33e9930387e988986206423685674c05 |
| SHA256 | e659f9f3c591cd71c24cdf6920006c039d2af34a9d0fb089a931296e1961a3db |
| SHA512 | 7573214d45c41554d5c7f39254ab0e12b5e44470aba10724c6e837d0d32b6ea88e2ddbd1fe6dfb622ed4e246260cdaaae0282d0d10f90a58ea7cb42cfde032b2 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
| MD5 | cd6a67368cfc353c7cdaa1b934b3f996 |
| SHA1 | 8bb580b796cd9a57360fd1ad39460eb9f08277b5 |
| SHA256 | 43941bee59ae96be70bd4967a37e7dea7f9472ff1ff71021ad76b09cf4ca39b3 |
| SHA512 | 1b217ba27a2cea929608f78e0f2e3483b195f73c7cc19b89a24dfb75d6d0544da09597615f8b4b867ed1e8bb6ce69a963e68cdcaed71b708bb2e38c7c5032a05 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe59a426.TMP
| MD5 | 07696b1948d7e7c06ec2ecced7d69761 |
| SHA1 | 537f7194aaeecba4f38300d01fe3944af9f1e613 |
| SHA256 | 6d3f617cd13541467ba7d08bf43030d1531d6d89fe5ce5a57dee23abb213d68c |
| SHA512 | 85a9d83d47929b53e8ded27b67ca1d11894c46e0a52c715e690bb095da8e3bda70468e60f094e623718f13dcb3e3508ace000fbad2f16b7e187aa92f9bcb6a19 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences
| MD5 | d5d5b357e4f2cb4cd545f06db9e1ca45 |
| SHA1 | a3980d0489493f40e4dd5a1bc546f7c4be1cab61 |
| SHA256 | 9b3a243203da81d882bb2968132652932587fb5c9127ba07872b3b25f0e66e06 |
| SHA512 | 4ed844cc40e8a0a3f9feb2a6557504c0b66d6e39c8e8adcc487338d4d4c1aeba835883d72437bfab85b3e383aa271173e9fe729078af6a887ed63e6867faebe7 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Preferences~RFe59a416.TMP
| MD5 | 72e8444e7ba30dec57970e80af16dce0 |
| SHA1 | 86a8b88dc53b2bc346c4296773fc8d244819156b |
| SHA256 | 80e68b8ccb262b6d12e13f72996be1540e0b8ea35df16cb704109c10becf0115 |
| SHA512 | 5c16c135d79c3e8973191e5ce3c849c5a7a8f79079405aba3a5f79e1800df500e55f1896c45b28fbeddaf1e0ff24a8171ec207e69707c11f657d6339b710228a |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State
| MD5 | 81df08a3d4aadab1656b3be5177ad190 |
| SHA1 | ea6fadfa330d9b43a3b96ea3c09afa5ef2c485d8 |
| SHA256 | 2da11a7c4155b890eca7507655f946839970515faa1d7a047c76ac29c5a9ca2d |
| SHA512 | c1d4b3cc56111c48700d7315e281ef1cee2c369a8b79344ec6fdf69e5940ac004fd22fa51a532ec8e338fc076b810176066e52710f056267dbc0caadd9662146 |
C:\Users\Admin\AppData\Local\Roblox\RobloxStudio\WebView2\EBWebView\Default\Network\Network Persistent State~RFe59a435.TMP
| MD5 | 2800881c775077e1c4b6e06bf4676de4 |
| SHA1 | 2873631068c8b3b9495638c865915be822442c8b |
| SHA256 | 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974 |
| SHA512 | e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b |
memory/4640-1217-0x0000024626B50000-0x0000024626D50000-memory.dmp
memory/4640-1216-0x000002463A140000-0x000002463A580000-memory.dmp
memory/4640-1219-0x0000024622A40000-0x0000024622A41000-memory.dmp
memory/4640-1220-0x0000024622A40000-0x0000024622A41000-memory.dmp
memory/4640-1222-0x0000024622A50000-0x0000024622A51000-memory.dmp
memory/4640-1223-0x0000024622A40000-0x0000024622A41000-memory.dmp
memory/4640-1226-0x0000024622A50000-0x0000024622A51000-memory.dmp
memory/4640-1225-0x0000024622A50000-0x0000024622A51000-memory.dmp
memory/4640-1224-0x0000024622A50000-0x0000024622A51000-memory.dmp
memory/4640-1228-0x0000024637AF0000-0x0000024637AF1000-memory.dmp
memory/4640-1236-0x0000024637AF0000-0x0000024637AF1000-memory.dmp
memory/4640-1255-0x0000024637B00000-0x0000024637B01000-memory.dmp
memory/4640-1254-0x0000024637B10000-0x0000024637B11000-memory.dmp
memory/4640-1253-0x0000024637B10000-0x0000024637B11000-memory.dmp
memory/4640-1252-0x0000024637B10000-0x0000024637B11000-memory.dmp
memory/4640-1251-0x0000024637B10000-0x0000024637B11000-memory.dmp
memory/4640-1249-0x0000024637B00000-0x0000024637B01000-memory.dmp
memory/4640-1248-0x0000024637B00000-0x0000024637B01000-memory.dmp
memory/4640-1247-0x0000024637B00000-0x0000024637B01000-memory.dmp
memory/4640-1246-0x0000024637B00000-0x0000024637B01000-memory.dmp
memory/4640-1245-0x0000024637B00000-0x0000024637B01000-memory.dmp
memory/4640-1244-0x0000024637B00000-0x0000024637B01000-memory.dmp
memory/4640-1243-0x0000024637B00000-0x0000024637B01000-memory.dmp
memory/4640-1242-0x0000024637B00000-0x0000024637B01000-memory.dmp
memory/4640-1241-0x0000024637B00000-0x0000024637B01000-memory.dmp
memory/4640-1240-0x0000024637B00000-0x0000024637B01000-memory.dmp
memory/4640-1239-0x0000024637B00000-0x0000024637B01000-memory.dmp
memory/4640-1238-0x0000024637B00000-0x0000024637B01000-memory.dmp
memory/4640-1235-0x0000024637AF0000-0x0000024637AF1000-memory.dmp
memory/4640-1234-0x0000024637AF0000-0x0000024637AF1000-memory.dmp
memory/4640-1233-0x0000024637AF0000-0x0000024637AF1000-memory.dmp
memory/4640-1232-0x0000024637AF0000-0x0000024637AF1000-memory.dmp
memory/4640-1229-0x0000024622A50000-0x0000024622A51000-memory.dmp
memory/4640-1231-0x0000024637AF0000-0x0000024637AF1000-memory.dmp
memory/4640-1230-0x0000024637AF0000-0x0000024637AF1000-memory.dmp
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e1f1d96b68e3261cf312b541611c5539
| MD5 | 3adb865c801399c412bc73840d3d8241 |
| SHA1 | 267f8332eb7486bccd7a6730cfb4f5c2152b11c0 |
| SHA256 | 10fb505b7ce30ce4bf5582248b17dd47f6a39635007bb77dc5d16b963baf9905 |
| SHA512 | 609793331ce25c6667067b3616791f3ece470500f797343178948e4b7af18f275fdde226f542610d957b397651e12191aed58dbb88bc1c59eff4625e550160a5 |
C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json
| MD5 | 30c7b2bdc35c650d2b65150241646816 |
| SHA1 | 94d466a5f5159784155b6adcc9555bfdae4710c6 |
| SHA256 | 0784d39379f0a4f971777844ba07550aff31a3d5e32ce1d1eff6f4c7d49b90b1 |
| SHA512 | 8d51ef924b6c8f46a7ced69f188f2ea583ef3feb7fd84f51a8af8810c51e5099052e2c1513f15ac6fb83fecbef8c984fb4e124ff524c2b20a437943dc127465d |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 3fa3a69ad0b231afdcb4958829cb5998 |
| SHA1 | be548b61f157ce4acfb4f5f174323088d3bad1a3 |
| SHA256 | 92960ae3c30909bf4d68e395ebd7990c49d789eb559dd3a38c14360c85b409f7 |
| SHA512 | d6a24d0cc0c01dd650af7a094b03edafd70c010b06250e68b17ff463e3bfe7e59f19b4bc45426bfd3f919e339d6f7468b9ae479d1a48328d31f6cd05f4c226b5 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | fccb19c4702eeb2b5c788e0edc1219ce |
| SHA1 | 43c278f98c3b79a8e33295a35958f3b2b1f612bd |
| SHA256 | 83c5d23c1cf760fb209a34e63b489b4029ea504ab5ac3a81ba2064ebdfbd3220 |
| SHA512 | 6d27cfadc87374ede02023eb03f32c73e0b4e199c2d8f840de57c45e243d094431a3b6c8cc5fc5704269dc42a1ad524d3b5716ca3d59a9a98735e2c8bae3808e |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001
| MD5 | 3fd11ff447c1ee23538dc4d9724427a3 |
| SHA1 | 1335e6f71cc4e3cf7025233523b4760f8893e9c9 |
| SHA256 | 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed |
| SHA512 | 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 914471aeb486cc4452bb55f6e8235176 |
| SHA1 | 87dee2a02e9073cd6d074e0f5430c1fd40b8f01b |
| SHA256 | eb395058dfa34cf70c429f6bc15f87a049240808c370731cfc866bb1470456e0 |
| SHA512 | 2082b6b477c19f886683d8722b45fdcc5ccd390aeee4e3c9640c29f68b5b8afdfa2b57d01b633ce665cb391f98a7234072d0f27ad37632b88002fe67322c08ff |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 06a7da5f558c9bc80bdc5d014ae0a9a4 |
| SHA1 | 678b460a4e2119fc9a40ffba3ff7465be4578f2c |
| SHA256 | eabf64c3758ce326a8485c529d8b07a9690e148244fff18348be89c642c5a0dd |
| SHA512 | c1416d0c734dc4efb946eb308d05ae23b8d14652c8316f685b9d35d429064436ef137c06d697300fd746ceb0c514f727e6e8dcfc53152caff13e9b9cf6cd478e |
C:\Users\Admin\AppData\Local\Roblox\OTAPlugins\Downloaded\OTAData.json
| MD5 | 7a39cae24c1d13e38fd10bcef98c80ce |
| SHA1 | 58d8a40b4d16215399749b563ba610c5cd3e4159 |
| SHA256 | 72de5cd3124d642aafeb64a4562c31204bb506a5c4fe37de302849aef41f0d40 |
| SHA512 | 8f51f5fe9890099039ef275e5148299a87bcbbc1a9aab5c279105b96efd795ef445803b4422060964b3b010c180c9b4526c82f84433669e4e365812f9642c80e |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 29c47b8760a744664c90b65f72488962 |
| SHA1 | de2bf0343db7888300e2ca6dccbcdca33fcbf364 |
| SHA256 | a8098af669790a3a6f579157a6741406f9801f92c13879d2b1988ba99d048a64 |
| SHA512 | e4133b744e1f2946c28c3a3d719a7c556951b09cbd6517e97c8e3e00e813f36768650fb536b18b3c1e2afb6c88ad97f01a183faafe51e6fd6767ef0aa687c731 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | 2d611a01c85fd6606734b5fc59a257d1 |
| SHA1 | 527d876ac9eb6dbda5974a27a63d178661f6f653 |
| SHA256 | 58fffa69e82de423e6e079eee3df51c3a1c3e482b40feed02873933721e24c15 |
| SHA512 | edb765df0bae312b9573b5c3e111de9eb04885d22a23ff6f971f6dce6a9dc45b7637d6874f5149711076ec223a71aec476c34819c1a1a3b8b7275f85565115ab |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\f08fd7380a8786f61b7942b48fb2b791
| MD5 | b73abbacaf1789dc5b8ee9b369749a6f |
| SHA1 | 65b33e06a4e65606d0b5f2292add38cc2e2a846d |
| SHA256 | 88e1eb4b2d21e43e5d3d1b12fe677fca7eaf5bad07246a870a1c41d751862c20 |
| SHA512 | 6341b87659b2cbff7f716b48cddd67a3dfa822d9d18583320c8a449b5eeab2b53e2064f09aa26621108a5bb914923ee831f26e10ad66b6b2ecb87e083590230f |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\47f2028af2ef023d25ccc8efd0d9db29
| MD5 | 56b76514c0782e1ececa50bb8e0923d2 |
| SHA1 | 740fe85a29378a980c647422988e0b8ea3c735e8 |
| SHA256 | 424bc604c69ce78e2654cb79e036a69c863c52dc3bbc2cfa354f06711a7530d7 |
| SHA512 | 15cecd67e0d1a3099b1ebf09dde92932f956ed61e518438a079ae405f97cbc298c20ceda990f0050a4d14cc67fc2c1776c812933c1708fdd200ddfd993974a56 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b2fce0a696ce3dc0f908123d196477f4
| MD5 | f806a7821e21871e209db202d09027af |
| SHA1 | 958d59c9f8ac329bc00373e846d8586a087c1f7f |
| SHA256 | 6d76261542389201c25c83a3c2537e438466d82e785f9761106d3e17fdce4d36 |
| SHA512 | 63f42a9ceb32c6d20f264076298c77213112842806799a578792176ccce7831a2e5b2ccf30e326a3d1f2e0c177cb89c38889aeed757d7bcf0b33754da5b25fd7 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\6a437c9ff08c22428e41cb8fd8807b5f
| MD5 | 7529c3c3b895e19eea0bfe1efb931a78 |
| SHA1 | 830236210abbe198034eadb0d7428896db37544f |
| SHA256 | b84b112169e5dadabc35144c148c8e667d03844a505f648977f36b08cfc00506 |
| SHA512 | de8d33e8e04fe0747637e2ffb44fd8a9b71372ff6740e35c14b7156f7df456ac3aacce851ac6ee4b46715469ed9bc538e5987a3119277e802b566cb8572f6726 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\eb87ea28e2ab4fd9afdb0138873b5895
| MD5 | 8e9b8381538c341d8989bb98d31dfc59 |
| SHA1 | 2c75bf34f0f8579f309355d137e1cbb056d53fbf |
| SHA256 | 2debebfecd0e09e5bc0df69f9f945f0342f814ceda8ae8e321238568c23b95d2 |
| SHA512 | b074448a65e3f21c91e736bdf7cdbfe9d19f48032c513c76595fa2a8ed600159b70aa84c00ce05eb1744b346030098c2ea96d00b49031be5a6f931a8a431bd95 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\d7743c335b45bb22a7541fed74f1415f
| MD5 | 12e34bad46b69c24aca6eaf0410f4331 |
| SHA1 | 637db76a7263e1a327b2813aceb657dd8602c8b1 |
| SHA256 | e6bfe55cfca09a26db59917ea8214cf25115b94a60b66d8a11074ca68e61c625 |
| SHA512 | eeeae6628af4fa2afed149c383cee87dff0264efaa857823545a2c5cc1ede5505d06428f6470075b76df3d000f1efa4f5c1e39b70744e8ad29bb6e94009d19bc |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\151e0e19d6d4085a550e13fa528b4509
| MD5 | 392d6da3018264cacc2343101220ba87 |
| SHA1 | 8b491d51540b004ae42c8b3923949f9296acb859 |
| SHA256 | 18d0d2913ff4795772a5b7287bb22b7a50d9da00f9db4e78c7a39f605939148f |
| SHA512 | c69af795a73c3d03f3fa442bed65c031ddf8eb7be911eedba5f29a13575d8c5638ebbf2aee5541f940ec0158f0b37334a3faebde8a853190780e6dec42a37887 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\a2f0a4bba5f22227929f71970a3db328
| MD5 | 51e310f0a2bf7705ce7c046f2fdd1652 |
| SHA1 | f2b6857db08980ea3a15cb81e9741ef5c31f82d9 |
| SHA256 | 052e1ac1b1f08e5e9eb31c316c1d4c490944d7554dc1c6a2ad99af870d99edf3 |
| SHA512 | 843847d4b0af356a1b70c0d44943cc3864b7b7f0062153fc32561b44c6f860f51dd28ab9c084bf51d1b2ba5214d7e188f05c89b38ddaad50505e847c87384f2b |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\c25127772bfabfbfb79619e6fec7277b
| MD5 | b119bda4df2775e3f00b10d7c7ec8609 |
| SHA1 | 475acd6adb5270bb08d96ca6e31f2c738c8e0321 |
| SHA256 | 52e93d0fd49b472e23677d3211d51d41410bab51c880fdeb9c1abcce699d4a68 |
| SHA512 | 0c2b42b7cd910ff3a83817d6d994b89c9312769496b08093fde4f2c590bf892d7fb4b92835419243d92723e8b8a2ff8152ea7aa99c1538377ac0bcbc804de6e4 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\ea92132d5d8caf76f9cf60f064286eae
| MD5 | b66121145042f5681f03c51444dcd85e |
| SHA1 | 4893446853f7e76e95a889ab59959ca68792bf3a |
| SHA256 | 7c1e19e30d076f66f4d1ce46adf9709273edca58f2740727583eaed616bae7a7 |
| SHA512 | 0debbbcc7ad0a327832192128a3a6683d87808759250771a32fea04103ea8b4f652b71ef1426201ef13dc290f4fbe9d5c336631ef96dc894c2bd2fdcac41fa91 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\f5658572836448b3797cf51535a362ea
| MD5 | a93591059794470a1b5981b582eec350 |
| SHA1 | 18361d60ca8be5dd9c4bec5985172ba5a8ae6c82 |
| SHA256 | 9c2a9103e640c1de8a93026a4fffb9956b58c569a46ee3232b837c0da62a1351 |
| SHA512 | e4dc7a0a8c808de6bc38939bd906b426feca2163da9db0f251343ed4290aa9842414b193027ddbc3d618ee4843457cb0909239ba6b4bc65b5a8ed3791e60b32f |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\fe102070e9f451cea552f14990011027
| MD5 | 85dcc8424476991af4cc264db5b4b410 |
| SHA1 | 9f09b3f1ce94c0a6c8a6b5a452abb9c30d03fbc9 |
| SHA256 | 9faff8f5a25273b998fe09372824d316f1aeb3e45be8bd5cacee1d84941471f3 |
| SHA512 | af04a1a5d2bd39e8d9142e96b1eb51ba79fbf342d40a7ca56ae2f517510d242ba36537c691cad9dc5e6bdc5af3336ff9b9835f0ed4531c1db3f9998e36c54d73 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e80f536d935baadf55f21b096e693c68
| MD5 | 4c2750957e24d68d3999dcf023bce5e6 |
| SHA1 | b3149b352cb616a743d516ab8775fceab6543dc5 |
| SHA256 | 9b7c29ceef86651ac9f44effa39d97c91029b566f2c298137cdc7c48a6a1ab3c |
| SHA512 | 641bff16408f5d52cb5f8388464c7568f4f25a178474c34b7d144d4a941933b46f4f1154164b076d7d4b32106fa53cc07638140123c647f569e3c0c76fed613d |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\c152af22376fcb4931d35b4b8165b30c
| MD5 | 22a80cef5fa82e165fda3762c5759702 |
| SHA1 | 2e1eb18218ce0beee00039b5fc78937d408d45f7 |
| SHA256 | e13640d898cb4612c05ddb7d60bb77b09d010b7ec25f3156fa196b5381586e5b |
| SHA512 | e0df3d37a9e849cca36650f2d3bc9649db2e0f4573687b6e9f04aea49b1904aa3eb9160fce40a697df6e68df31e2b8a8267d2789249f61aaae5cfe5add73d676 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\c481be37cbafcba082b8c864cad44971
| MD5 | 833e479b88d23068abf4200cd556cd3b |
| SHA1 | e1567fbdcf5c219e9d05fb37d8932c1ff2a2095a |
| SHA256 | 7582994f3d95f9f706ef9cd6dff74e240e8a9fdaf0f4ffc032230d6d6a67dc76 |
| SHA512 | 74828d1520ec4b1ca238534eed2c8fd20d486c32e191a7854190af33d8e86a487172b35dd64f21fef22d6ce6af6ba90cfbe59b81f6691abc59e177846f7e7860 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\81f830aa0c3d4a7908e82e9b167fc7b5
| MD5 | b32772c2a8d2b6022f8b2d0ce0baa8bc |
| SHA1 | 7f5696a1ae0a507ab78cf2c5959cbd0a5f09844f |
| SHA256 | 49c1296cb922b1ee84d9eec354ed82ffa16b55a958be7bd5ff05b14092129e2e |
| SHA512 | 771234d2ee9febefb3e5658f7d8a316674faa9b13073f3d2e05371a03207d332b3c18a79606c460342c69d720adde5daa9e2b7a47aa244a65e53b1f1a5b98ba4 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\2b4378551cc4c3b747034ca2d7fee325
| MD5 | 69c735d8ad9179b5f2f4463842e02fc0 |
| SHA1 | 76618723729f1371967376a471e5ace743507d04 |
| SHA256 | ce9a47712385c821e13d4823fe60db0276835518b39cdf36e146a4f4f4f4a89a |
| SHA512 | 1658ea964ef621ee9c7f02ff436b2ecb2bbd7e8cab4c54bec5633671d6f4aa9df1e9c63b34197db2f44b4f0c009f3bf58e7f667d94646bd0746fd82ddbd33d69 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\302f2b9c54a790abd9d5bcffbf1de651
| MD5 | 20d9bbcec2a344f51532589cc2591f25 |
| SHA1 | 404713b34f7a414c1ec5aa62469c9c9e0b6eb693 |
| SHA256 | c2024654b94434349fe649c271273d0d64a55666b6d14d46b7a369888393a531 |
| SHA512 | 874bec6d548783573f1e81f31fff79f4f177a12b1e9474f089c8c670243616e792ea4732d472bd2f507282368c6e07debc0aa7f418f02cbc0bb8f72dbb0211c2 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\a9ea6cf4e67ac02b8388f1da5640da70
| MD5 | c49e8bed1e35bbd2e8ef00e21aa4367c |
| SHA1 | bea5676cead9790108f7e92c9da96813a4655679 |
| SHA256 | 0f6ad52ad10ba4c14c958ba44f1b0bc7b7b106aca0335505e62115dc2aa82c13 |
| SHA512 | 5492faa34b0d2eb53c7a94a2c9f8772ab16795f2ddca06beeb00ce8977d5f5e84fb52ffd6340d3ac281ecffe2545eeeafad6ef11316feaa1a960fad8464b3fc7 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\7f3c3266daeca564517218c0e5db4471
| MD5 | daa3d76d65a85992bf4c9ee1e1adf075 |
| SHA1 | f87a5f9584afa426fc02bd9d7b1f9e42abf2ee90 |
| SHA256 | 3ca395f2ab83febf2c2592e76049c3f719f49a0e1e739014fe20879d4e22bc02 |
| SHA512 | cde0bfabb144da30323593dbcca5669822db069fecb91115bc2b5608b37d0133ce3bcaa88fab1f4ab1f4f3002e186864c6928df5bdaa2a46cb1a761d817e81a1 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\55970dc14e63c66630f4b540e158f97d
| MD5 | df73e542d3246787b8dae637c5b667c7 |
| SHA1 | 3d45b55b7601fbbdd9f6eddfc50de83e75aeb239 |
| SHA256 | ffa3fb84acc8d7a55badc8e85cb84160976cd47f5ec1b02d623ba94223d6b4cd |
| SHA512 | 47fb552993842bd7244192be3abf54078f8d7fc90e16ad1b634db8a0ee7e7c837715b30493831b6b394435152739cfb9b9a5563941e27aa7ad83546f71732dd6 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\cee4915d7f1a500665a2cac06f50cf1f
| MD5 | 709b68680ff5d3e676c0ba31c7473ae7 |
| SHA1 | b65790cfa73947ce7a57ec339aa172055e98012f |
| SHA256 | 875c2101971ea779194346a7388813767ed2dfb3fa8b1cf2adc0d809d96ba31f |
| SHA512 | 33dd94269e9b1eff24701c667f7e61e129300fec97c858a0af5407fd89d714687eaba174e1ce0ea3ed3ae93a46d597565de4de3086e496a6ddb052d455e91b69 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\fa150345a354ef5de121778601a4c67b
| MD5 | 7ef5092ebe4c1d59a02022c33f352587 |
| SHA1 | 4df0c7edf627f90b61a800f0892019906e066f96 |
| SHA256 | 4d4d1a918e8a8496bba5ca153c93a292b8b0c4c77cb2baec955fe8f74e47dba3 |
| SHA512 | 12fc6760d1af03e558876ade236ff0e2c6361ff3d1ff8dbab511977a3aadcd010c1af075c10fdbb93d1f5620982d436abf1e96fe0eafec303b4a08d924f896ac |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\13a44cf73e53f5ac70aea7731256bd89
| MD5 | 7d8b30931ad854273922e6d6a2a70556 |
| SHA1 | cc574b672f3b7a25d5b4532e8efec9668b1cb854 |
| SHA256 | 63908201d4b925c8dec907c93e384a6087f208e045bb1fe475dcab7650271f78 |
| SHA512 | f25e43e3da113eb428c718058e8b1aa8bb865f99a8941a1baa43d520da78f2a865b7ed225e86c621b0297767a66ec41393d19d4bf70159140d348479d16c54e1 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\3b7963cfa77aee4e65926ca13ad4f482
| MD5 | edd2402fdbfee9b283a0f5d6b23e9bb2 |
| SHA1 | 1e60739c67eb4e9c2c538c5ce08f83aa25681e12 |
| SHA256 | bddc06b63d66a3e9976670cea6672dd18094ccb983e7de560491a0520f817661 |
| SHA512 | 771db7ab11362626ffb2a13eb0184f78596aedd497c9435a343f86734f2a26d481c22bf2c567971bbc59d4b2b4719cb2b20a3e5f2dd80bfafa38800342842502 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\6b7354af1788471cbcf7521d2ea4d539
| MD5 | 38a881d8ea579973cd9065e9a0a94628 |
| SHA1 | 2ae62a533566d67d02ac6ac8a6a130071a49b6cf |
| SHA256 | f45b53c036f44d762653e3829088f2079a545ab82abb0f0a9f2613056f518726 |
| SHA512 | 4540fbe7ec956ba50330580443b9071a8175983fac753ae27a0c8cf15705d652b93d107a74f079fcd790f60db0a8c959a4f390bba92a897a9c7b457d23728673 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\2f213ef207221bbffdde2ac969e494a0
| MD5 | 020e2464a74cff46f1ec68e4b1cf28a1 |
| SHA1 | 134c4b8b75cde9f7dc72cec20ae1d3ea1a3abb8f |
| SHA256 | 7b61cedd55e045f36c5d29d73f1b289338a82aa86e2ebed3b087f3bf9fc8dc48 |
| SHA512 | 05152ffe275da6e78275b3fac077703f8e292a59f519678dc55d107ac1f3c912147de6f5eb883d34be9ea91d564af44cdbc805bffd6194915eda48e5a2f1ee3c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\3becefa122c886f8110deefaa6d99fd4
| MD5 | 877ea639c6c1f44a3aa3a691b0e7bfd6 |
| SHA1 | 409faa352d221f963bc307eae54909aef07fd4d5 |
| SHA256 | 5b1ec2193cb497875e214b67f868fdd6f908363da9e3949b5a3ca319c4e7e5f6 |
| SHA512 | 907f812993b1511fabecfef48a61d2f3c33ca58911d2d4ecc4ced42c253eebfe8ea4e9422ba7cd8eaa24caeb3d393252c0aa073710dbea11a8657ff3fe05d8f5 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\8380cc6e5c0268490b39e6de022edb5e
| MD5 | 4b739a4874110abeb2d10012447fa919 |
| SHA1 | ff3779587ecd1a1af5648ad17335088708877b91 |
| SHA256 | cd18c7d041d7c7feb613d99a51ef06147e4f3d4685aefce579c296d97328fda0 |
| SHA512 | 1573d9e64f2b73792b5fcd8e513f7b43b81dc4a5c8f6f8a63ed5e66fc8373e8b1d628dc0bab9f73650d22a697300297864ceb4c062ba1b8180b432f70e1809c0 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\69a63ae74a0f753477ebf8f1b11dbacf
| MD5 | 3fecebe8675698cf85c9562ead988067 |
| SHA1 | aea472c4bcda0a5f09984e8e02a608f1ffa8db07 |
| SHA256 | eb254307ada7f582a6ddb89b567d6cc79ff4928cd4a962226d97cd584dc64d89 |
| SHA512 | 47ea9cd3b10d73ca1c8d709c8af1da2f9c8fa1b096c42066cd73ace636a4b579ed522ba4ef473a3b492ba8b92605bc9474de8c408e5af3f60a27571047b665d4 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\3315caa47254ff0e4c8d0aa36436f55b
| MD5 | 6366de8965b8bd7edd7d18acaf1e205a |
| SHA1 | 8666d6cd4025fabd5e49f80bd0881ef6622592e8 |
| SHA256 | 8745f4e53032fcd7edd1987914129e76b82b0bca3204cd012f02b96916afe4c7 |
| SHA512 | 109654efd6808630c126dc10ab55c315c9c6f047ca81ed289093a54a7bc7a76102a47689ebad9f35fc721ffa0102f642a58e1c4dd534210d350bd8be43962c21 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\720e63f3358623c1f0e73bdc318d569b
| MD5 | 95e43fc522302074225de9240ed3e233 |
| SHA1 | 96a8ace5194f5830c749dafa29380165c092adee |
| SHA256 | 2a042e08125883eaeb833ef7eeed3d4d8ea8880c1a295de43b5f1051b6510368 |
| SHA512 | fd83966acc1cc93748c52f00fda7893b4a0e86aae87211c58b44de64f9c3e336d25286f381548d35bd1354c5a6b6025014e47bf85b44ac74d63f32cffa5e86bf |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\dbd61a11fcfb26392338fd2b1ff6a849
| MD5 | 7342a963fbe8b3a5bce98391f7c91497 |
| SHA1 | d937946afb025eb344dac220aa2d8d3494c759af |
| SHA256 | 3306f048a000d6a897405f05abfd4c6ea181af54c1b77f6db995e8e00a7a17cd |
| SHA512 | fbf1bc5dd2e4dd9a4bda60309ad0a9d891b60f5666d003af712028b28e740f060d6d745f1d33fbd8db95f0d6d8b4f1ba18a8c9622bf52fba1d14f2299ddc4053 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\3acc8af1251b7ed321f9b36da661d9ed
| MD5 | 808cb55c51b6fc55fa6cdb17892dc876 |
| SHA1 | 4487b86a3a42ff05e109800b1827c100390245c0 |
| SHA256 | eed0725bdeac66a2e53e7daaa033f06c360314d751df70176a0af3f23eb08c7d |
| SHA512 | 0d2e6534792e7d417a6fa8403f22397f406352a38bfe1019d87e0308d041b3e69d7defae77e2bf6b87adb3b7d59718efea7d5fad340847c681eeb293beb0f24e |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\72118822a1d711af96156323b38685fc
| MD5 | 2766fc3d120129459f299d62b2f40bbc |
| SHA1 | 11db6ff453aaf77eebaf01a6bc61e2127449be40 |
| SHA256 | acadf5b10a383623463b33644cde1d5d3a6ea896272473d7d6ab72354ace7b8f |
| SHA512 | dd2846e74666ffb5f40322e9b4fb915e5030c44bad228804214a186239411026c327369f4a8931c73f5af3b83d038d9060276c9cf0f550e0caec366ea7948e01 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\6f36c34e2ea49405b6d51310f54cce89
| MD5 | 0f64fce8974acdf7fec2d1b77c5abb3e |
| SHA1 | eea2f3fbbf93312c879d5bb2e1d0b6485f3381b8 |
| SHA256 | 0835c29bbf7014a20fe24ec0ae172a43a06e349e9bde44d04fc54fbd20ac3268 |
| SHA512 | 7d382311659189c82b334ab72662ae8696e3478eecf8a59718a116828ce3c9ec8dc733c0277ec6cd71dce9a28f92ffb7e342ba796fe6dfba1a5b84df0d3f3915 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\de65b167b06d0f941123666323557772
| MD5 | e22336e42de09fcd99a8eb257049ef98 |
| SHA1 | ed312dbf27685af07e49901ede7f17417bc54ced |
| SHA256 | 425b36a528d04dcc358eb5fb962dbe071fcf3241fe7c6311aee19186216521cd |
| SHA512 | d7da02d06e682b19e849cc48e6dce60720bf9181b571eaed607224da662cf6585b36fef3fea8b43626f2724e81885af405badb98f1a64b795aa521cc56f6640b |
C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json
| MD5 | eaef4b677b2babd4fb7b29da0f065bf5 |
| SHA1 | 655dc02137cacabfeebb0705832c3378062b1598 |
| SHA256 | c5a33fdff10981930005746e120f5cab8bd1321ea949ea5cd1b2e34a88f7aaf7 |
| SHA512 | 7ddab6aac206bbd23350667487335e674466d66b3f0c425ec3789a62749bd6073eea1e1f5785ca539a0b7e0bbd8a83605191508d97c8280644088cc7d8161aa3 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcb654249c504749eecc7e07e142fea6
| MD5 | a94d08b8647cd4bc4338b77555328b65 |
| SHA1 | 8ca7462397e2e4981c439cca3ced1097796cd1c7 |
| SHA256 | d7442a7c5649c86b603e7447bafc7cd5649026ae02d16b83b200afb031e70686 |
| SHA512 | ef8e2ffff889dd602a7ea62698f8d1ed20626a6e325ef19891f930f24c970e663e53045548461af56576b49729862991c085e1da4a0b9f327f8b5ba6558f9689 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | 85e252cafbaa97150ce8af6fd017aaf1 |
| SHA1 | 92efd8725df459f22afa902fd42de4d6c0fc3eee |
| SHA256 | 5d9567d952b46e0b79e5aa520d9d71d78989293c6b57497af57001d9521e959c |
| SHA512 | 43ace6cec82120e02ca4ff6f46940ca9ba00298c157dc4733125da509c571ed5a40845ba3128a3c431cceaf28902d31b28ffb70dcb0d8ced592d6bbf8d5cdfa4 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\8fbe2ad68bce1f4933b291c365e04e75
| MD5 | d6a9f27b18ba6c1cd064cfee32420a8a |
| SHA1 | 3eb4fe70132f76c96bf7f951070f437ba176fc40 |
| SHA256 | 612baaa3a5eeebe00562f3ecd4490073f3313811613ead2948c1626128191506 |
| SHA512 | 1126e9b53315742eedcb4e28bec6330c03cbeff2d311c9bca1e8280720ded31b6ad7f4f4b6899aaf23656ec46b19fc2ea6566226c1fbb1ded1c3790832d9fc1a |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX84807CFDC3ED47589421FDB056D488AF
| MD5 | 5bff0b6da657e8e4ed652a4a5faf57f6 |
| SHA1 | ad49b5a7c4734d26061b0eea4496fc41949bc5b2 |
| SHA256 | c80ae50ae40768b21e62b593515865bd729b4c0712a006cbaf374a66f14f956f |
| SHA512 | 146a0ca1c20471f2921f1c911692223b77c4f528f2de47da9df54c1620242230998b86be05b436a725e64665a008cfc21715e114fb0fd1b9e0786288ad20ff24 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0d8b0fd3715ff57ba968ae5740d39a12
| MD5 | a3366bed53be5f4fed574fc819a07072 |
| SHA1 | a79b59561cf06c8a209fb701567a67376d83924d |
| SHA256 | ec5c1697be4eba9851b9a413c13e1a94f9846f6dba1d8d0fa33e1ca7292e8030 |
| SHA512 | f8424133bac79bbf7547bf7076cbaf0bd0767f220778275c36878bb982bb69bfe64aede42d67c9db009047e66bcf5eb9604205f6b0aa9a801f6827e2034399fa |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\cb8a45c1430998ec1304e4c79176816a
| MD5 | 933b1f5dc544d9868d257d80e517c112 |
| SHA1 | a8d55f9cd5f79ef7f6fa1ffb229d8bcfb30ce348 |
| SHA256 | 51a66f59fb6018efd308234879746581b50566d967cf1fbf63fd3fb6917f1295 |
| SHA512 | 6e03ebecd629ec937171a7a2d11a88c83c0267c0f153b86194683fc967f0e1c827e6393a39af735813a1cb3fe2297cd6582d2f7578355e797a5152dd92d6e600 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\1a1d7a8fb35b007494a82bd5304ba1e9
| MD5 | 2414d644ab2dc0d3c58d8546b4cd7ea0 |
| SHA1 | 77a854549c69f719657f5d404ae9391c705d88f6 |
| SHA256 | 28be75fd24c5225fe212cbece08722d92c4d2816e5c3a0051294826a5fe79458 |
| SHA512 | 02bc18971dd372438e6f93b0db0e29a2b647b7e1acc5e8d8321f73857b746c5523e7c720ddadb96363664fd5652c30d5e396f7128813dfc0c30fe7ea4086a229 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\3e2504bf31b5aa0ab48a8ae5f1dc5f1e
| MD5 | 6abaefefcacaf36071c43e9dc51f1bda |
| SHA1 | a562a7fc46cec9c90e86fa570267864ef2249a20 |
| SHA256 | 55941590b6aff4d570b3531c493c14c46eb687ed9e4de19200de1681987f75ae |
| SHA512 | 5fc4b6db68c03630673789ec5f5d017709e5a9011f25575c0e428f4a21c30e1f6664faa9e4ed456ae79c7ea0fc45db30b8d45ad9b4e2e94f49b27c50237872c3 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b80d47fd48f8d137ca2aca87e1d00059
| MD5 | 7dae317d3e65c483f462a48cee3002cd |
| SHA1 | 330c91065d277740b721b723ffae4e5511e8da2c |
| SHA256 | ad244e68f3ae289677897bd171703b8ab65bb03b17621b3c8f61594b906f8b78 |
| SHA512 | 966a981204a7979932981d8870704fbe3d4afc2a0306cf149117eeb30a54debf852c8ef04fda90fb2d1d1261daec60db390a4c9b9fa77740d14171335384ecc9 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e0fce80600a43748c6cbc0ac23f6cfa2
| MD5 | 3bf49259291542dfee0f89d587c177f1 |
| SHA1 | 22328c74fce75f7918f6c4b3ca5ad9e1921db437 |
| SHA256 | 971101824fc41a26f9b1386d72750a69298f4725f266edb3c93b21f9600d2916 |
| SHA512 | 20366e5775f42da8e313d67ace54bed3b2a010a84d9b3422276a8b544186345683c00663ce4f541c9890f906344ca3400015bef988d4ffa7dd4bf1c38161e271 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\31e8a63e8fa08c8135be1c5384c3e0a2
| MD5 | 1221a85cb03fd45c001ef47af9935e7e |
| SHA1 | f209b998e8972ecf158f58270244b831d107ace1 |
| SHA256 | e7c79bc6240600fc94d67a9c0e9c1f563a3f30698d7cae3d19b1735865835d4e |
| SHA512 | 2e6846a2ea3bcf0892703f3f2024a0acdf277251c55ad9c65e61fb5a8780c67ec707d42818b3d98103504dda9984c109ec0f8e393fc063f734bbc7bce168ad90 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcbcf8ab7914469e06c8fa6ee80f2201
| MD5 | 958ad6c1423022b1905d452d8772d16b |
| SHA1 | a1c5aef3f0d7550f8a9ac31ac1e295696477c02f |
| SHA256 | 8965deb3f4a35faba9f087defdbc2fb071e006f283ee7e6b1ce250c6ec12a49f |
| SHA512 | 5185a342c83ca7770ecb1103d95d061cc17c80526f755ebfac53305947b09765515221ba65b43a98eff3860e47bfc7a15f51e67d0636de7596a6859ff20804e5 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\1daaef2a5ce0ea927443fd099437bb55
| MD5 | e4a239995837749223ed2039a40a3a21 |
| SHA1 | b1cc97f9ffc3a367dd3a55a1a3342d59cb610403 |
| SHA256 | 36ef28d0243f78f746ddc7abb74563980829c81dcfb91abcdaf6459bc7d374af |
| SHA512 | ad81fe4cbaed589da0a3b97c20e7e5fc0deabf5910b1c41dc7d6e6e8b8f22486f71c9577886689739bdb87e34b330ce43cb60fb2e3c1305d77984ec78cc0879b |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\175af5595dfe9780b5b7b10ecb943336
| MD5 | 0c9078c249c45630688d2af7e0574c25 |
| SHA1 | 8fae18c0c69cf3a58abddcc9a55fba6d81aca2b2 |
| SHA256 | b0e7f0945d5de86014379ede1d9a9528a8c944534ab33e58c7b3be1b5706500e |
| SHA512 | 24e0cfdac58bc3714541bd39f6992bf0a4bd4c47e492edc40b72d045b4f06573d582d9f4e50e0c23f964ec678d857752caeec6a65ef89b70e2ecbefe749b21f0 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\32c38bb4f4a560d621ab93aeb6ca5d7a
| MD5 | f7b60787135cc235066319d2412e77e0 |
| SHA1 | ff9e626cfeeb124bc95d830d20e13b15c6427c77 |
| SHA256 | e815d7145b898343e81a796bee29e8a71a678c9c3475a7b1107cdbefeefb6152 |
| SHA512 | bb21ace97ed300299a276844630c2b30aa0aab87a3a8684391bbe37a0ce7761c82011035f741cc1f596136043f1871d16b0238249d3b943b2c08fdaab8c0d762 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\d8b4554062d011287069393d07af8706
| MD5 | a0c28b8252eda35f15ff0931e1817ac9 |
| SHA1 | 3fa429b9d0b8926907abc63b81a301bad2442eef |
| SHA256 | ee880812bbf7cc1f00cb363632e9746e7342cb5048765c483d56f4284e555a0d |
| SHA512 | e49af44a8fa6e0c0fe4a5f55df2910ff43a6a9360d6e0ba507375487526fa4fae8c974763e4bb757e0907036141123920024adfb312f9d53703bf6d45a83956f |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5b794cd8b1447c984ba301aa73a6625d
| MD5 | 2740a9a1a4020c08f3ae9fce5509416d |
| SHA1 | 371eb56fa91013a45a38486d5d77ccc12ad03990 |
| SHA256 | 239bce8cdaa04b7e91497dc8fad14e5af36ebf244712d7a04e37c2be5a0e0a38 |
| SHA512 | fbbad878010bb317d5ddc6de48c87d838db393fc52c564555883d07e62b77cd37a3584414566977fbaef792ce0d2a00cf851ce871e880d1cda34357d2fd4682a |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\9fd0b17a3402934b24f3b349c8d753a2
| MD5 | 59e7e73fef4a9df2680ff8fe1722014f |
| SHA1 | 2b9d42140ad6207b1e3f5cf8d66b345109cb1098 |
| SHA256 | 05f280e512673a8f1358b88e8706bf5a763727dc16e8c43abe1be6129a820b57 |
| SHA512 | 49edc88448345ee5bbb1093bbb62bb49b0ac3c1c0a29d4a862be76845fbbacff0347ea457d66e40f721dccb8071c18e4ca7f41cbce88d57a64a02ed400f4f783 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc27c501541df155b6fb12496e5bac70
| MD5 | f635924f866829484247044f991b14ec |
| SHA1 | 39c6f43e94e4b0d0ce9c30da5b78aab7fa5086f5 |
| SHA256 | 30b18b2546442b630f0fb8c6a7c26419a9a73988e8e1a118dae5b7241e98074b |
| SHA512 | ca145397fe454c2623651c9ccaf86fd15212fe83d758fab2f8de35e4ea00f8eb8f58aeecb2fc95a4ceda07c9bfa960ccc29b1a56c2bb317c94297c24a366be68 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\706b550a2be783fb6e220ca8181485e5
| MD5 | be4a508de308b15bf9c711a769ed61a9 |
| SHA1 | 2b980f20a1466d2f1508bfaf8dc2a2558450c1d9 |
| SHA256 | 0ac514138710cda19cc114cafa8a3fce046654dda1cce0915f525c6f5ed0b812 |
| SHA512 | dc71cf06e2466f17b843b96fdbec856b3b67df95105895597e73fad455340d4237f1b7cf91ac2906efb9efeac89515deb79a045859a0651420edecabfef8cf8c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\7948b73360f27446739cb67376a2d7bf
| MD5 | 6c261f23c63795849eba5b1ef6f17cf3 |
| SHA1 | 464f91ce49db8b5546722bd62c4f59aae33dfc20 |
| SHA256 | e4274c467ca592398736e990eaa97a937f209768239400cd90ea59f9e58a27fa |
| SHA512 | ab6f671b1939df79ee60a873148a1763c06fa880e2f17a23c9e09c5401120873167905e49be3abaf546b9fee33096b76a5573a473b72de3806c38a128ab91ab9 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5477b96b8c7694aaab08397c539323cd
| MD5 | 74efd118f986358ad4cde9a57e61dc32 |
| SHA1 | 0cfe0335bb35298456edc9ed791e019b70266c31 |
| SHA256 | b973558fa71e5b3a07fe6ca6180c5bd0cffdb343af3a0d2e4e4e89b40b194ee5 |
| SHA512 | 357ad98fcdea45563ac733ff39aae16b103a1327a063445b6febb89616a61fbcd140c2148eeef122965cae78c2158bb39bd3eacac6d6c70a58546489687dd733 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\f469136d50a09240f313e4f48b35b40a
| MD5 | 81927a5a1612202db2ce511c62ced773 |
| SHA1 | 4414e92b078a515ca699a82cc3bc64a1e264e4bb |
| SHA256 | a8a2313bedad3d93a06ce01ca1abb579013d083e2fec866cc22342713b7b6b2e |
| SHA512 | 33918119fc071674aac79062c0e4bab978d04cc957189cffdb8c1bb1c7add1bf7d9a0ab03b08d9e997bd8734266bcbc7a312b316f8303347e2aba876022e7cad |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\78e2b6ce1224c7617a6a8c90174aa783
| MD5 | 22b25a819c414b6c626e5306888142d6 |
| SHA1 | e7d68968d0848af0e5203409227a1980dfeb4a0f |
| SHA256 | 275eacbd4554f5b0e4a4266514243c661edb1e4eea694a2fa01ac20a531dfcea |
| SHA512 | bd04fe05aedb2cf10fef09648566834b019d40a6ec8532b19edcbb2348059984dbd5c04d6fd9579dac55f99a6b4de820cda159256d236450b0d0a51594e3b15d |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5c36700f9b5f405f69b210d702f6087c
| MD5 | 94b44243d9e420ff19ff04f4e434b83f |
| SHA1 | 04687ed0f779c6873da97da0f16f042b2b459b69 |
| SHA256 | f76c45b8c4831588b971b25431b7b85f529a7214f99103ed82b4c2e97d9919e8 |
| SHA512 | b7778206ef730254f469214ace61b13f7031d0c4c751b2988decee93dd5a6c8336c40974af74b0aca6d42874d54e23dfcdfc743f5d633610aab2f05e948bea6e |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\4dd9b09ac0d9a7bb380a273db7cac4ac
| MD5 | d97f6e22eba42d95c89cfd439f36c1d4 |
| SHA1 | 3a439aff0b80708f6510643f70997b897500d2bd |
| SHA256 | 25f91091126b2855bcb9c2daa26fec21fe7cc6d25319925a95a55a37cc840b6e |
| SHA512 | 52ca405f845e8313b0a04657eaa9a22d1c4fbcf758d5796d2deaf41c7ed6abc28e3597dc1f5d803c009360a63db4e686e6622fac669c252b09d2a3d8dc451e72 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcece68795e396ad03d6e2608d740126
| MD5 | 0ba72ed050100e6779ea0f1c713ac441 |
| SHA1 | ff585cbb4b671bd3a04f3bdb2512a896ff07883b |
| SHA256 | 0949d1f525ea9da560f02a0447eb12a33ac6db673e89754b8f3d230e24ccfd06 |
| SHA512 | 22c09e80f4af164d94ef40999572d2ce35bfb1dfacbd1762b380c9685889d515ed9aa064db4f8ab6746c8a26ea4ecffef9337014293905abb2f0cece7344b851 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0b39eb4053e10b7ff21430e80432eed8
| MD5 | be1dacdbf4fea39b16e7c11e286b7205 |
| SHA1 | 28ae9237170d6fa225c54e7a36e35549d191d450 |
| SHA256 | 3a6d14f833f7da8ddf3139d42e41b2b83d1ea0d4570db39d9c10dd98e33da800 |
| SHA512 | 72cef9e399c0652a340cb12dd239cc0dfa14a2c832fa63f76dc442308ee9f91b41ddff62fb70331895716b61fdccd332f75c0ba2003f818900e3e6f260303176 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\09f04b99b82b262e105a232e97395311
| MD5 | e3a0c050904f457b02b36bfebb1c0b6e |
| SHA1 | a611605082957d8eb5dcb83939e1b6bd3d870bf7 |
| SHA256 | 02c51e5a41d473f8e0befe8e5fb49073f0dec0ca88ee83e0e6a3c0ba3e18d399 |
| SHA512 | f2b6b3a7c193a951feaa1d5abeaf52316773d7895284e806f7267708672f6a7baf37191a244d2c044c785fe967d416353ab83517b28932b9e521172b89e22275 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\d132016b6bd0b89da2690c24749f6ff7
| MD5 | 2e2350147bec3587e3bc14b7a1e32c2a |
| SHA1 | c275f45e728f71d24ac6d8b496865c218f972b41 |
| SHA256 | 7ddec5794d779b1ad88ffec41f00c793f21046d18c930328d662a3c2d1c27d84 |
| SHA512 | 670d3893ab1503dea9437b61b2b1488238d84d3703f94b74b5c20bb7bd26eaa0479e6d3d91319219bae1c1c357c6807101c5960ee2f29ff48475c0e6d9ac3adc |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\be241f3cbd5449b0c30c651c4834e3da
| MD5 | 2866f1aa81a7f9c354d34be6a58aa88e |
| SHA1 | c470d8ad431f9876d7966796a503c15440a35345 |
| SHA256 | 38baca61b0de1abef8c3a97557b6e246fbf9091d1193e3732f6011508e5f0a27 |
| SHA512 | 1af43841070856ee4c509080c286285ef4850d9dd8507381a5045ed748ffdd09fc32843c0d18aaac70621a8ec88064f0a3b74036cbdfe91be207594f55b24ef3 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\77b3cd784a40d8349719b23b5c0e414b
| MD5 | 05c43f778ddcf81fb06a2fdfb4f7624b |
| SHA1 | 616dade772feb66bb1b8dee218c7a5a39d43de06 |
| SHA256 | f4a00d60cb52477dfdb2eb264470e5daffd44139c118b73c80e8fdef16f9dd45 |
| SHA512 | a2443c678bc019dcc50fd7a49d5c19dfa0c45a7c43fffa24ca225f0f24b6839865288b2fe843bb233752fe59c712c54bff8d9b5c4e8ef5ff4ad8ef20b053feed |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\73b0a5d180fa4202c3e9365c3d577fd4
| MD5 | 2c2e29b04e1f7144017730d5b5ed8b87 |
| SHA1 | 8a36310825cfb7d8ea6fd487afa46dde29147199 |
| SHA256 | 6026fca2672513a7a42dc67687850d630434b2260621f77ef5b2634486048d5a |
| SHA512 | bbd5097d544d3bea8b5e97f3262a4f7765b13d5c742c9df8fd07e6a56e7c021a41de575dc1c24749631eb1003db0b9548c634eba7d6d2701fe4035f0a5880615 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\571e70bdfa73e0cdaa28fdbd2ca19ddd
| MD5 | bd289aae66f24d373fe9d4388f8ba9b2 |
| SHA1 | 4d248d4f9aeffef2fdd953bffbacf81ff3ac8554 |
| SHA256 | 78561a946c48755de0fce9695d30ab82d9e5dfce2eeb0ef6a0824282bc88a0d0 |
| SHA512 | 50666175b0955dbdf933302016675f035df38deeef6b4a0e8d0cf40b6e3d2c3e4a089a5b78d75015e0048b2e7f91d81b69857004d55436437d3fa0754d1ef8a0 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e526d6628fea4b1243fbb953bdf85ac9
| MD5 | 3964c0c8b23c560175f4b299e1a9605e |
| SHA1 | 6c155c8a5ece5d5d7340ee4ff0fcb730e4d2b0fe |
| SHA256 | 20dc4a3272ebc6ff5edf0494d9e6e2d06c690bb079a36bd04e074818f16a2dbf |
| SHA512 | c6f53903aa3a14f3187bcec1afba4b5b07c10ebef6dd10a710f400996f2214703d29d58abff6e7e0025ea91a78ed2f799f69c542bea006dace570464acf90d64 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\848d350916ab0af9758cff8167a2aea2
| MD5 | 0042d3425d57e55a4e8c899aa911012b |
| SHA1 | f260334951b11b4ace9af45974e365ecbc6cb9cf |
| SHA256 | f312918dae9b5ebf3028f14575ac8bdb78e7f152061fc59d0885ab7acb3e9581 |
| SHA512 | cbab405431b5a95ae3c9d3816b4a1c4d4a07cdc4dfcf64d0977ec80533a6029329db101ac36361114288fa18c769c85a3f238b13f63d2e1e83ef4ef64ae45521 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0af1ae578b1c58a0e785712d31028c1e
| MD5 | 4ffc139d6996c3eba2d40053423d07fa |
| SHA1 | 6da7d02805c626596d055c20cf084aafed9b9768 |
| SHA256 | 0445b87f48bfd12bf0dae91d8dd7c20ee924212b4cc8be782c0a54193546f43c |
| SHA512 | 5af3417cdb0d099add05b22090b5aea9ba39069c4704d000aa323b859e47ea67328f616ab03b7b878ef8cce0d528ac0ff5c0f8fe305175b952e840368e0d4a81 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e385854d0ae9ba50e28a7a5629fa28be
| MD5 | 0c889bbbf77ec231120674d4843ee0b4 |
| SHA1 | fd29658b2fa416059cb30a6729030b6a6b125e92 |
| SHA256 | 5006fa1587ba1da5b7696daea22929c490049bc0f10661d9c79322b0a647efc6 |
| SHA512 | 504d43f9104b8c56ba12ae9533ad3554858ebfb4f5b4b8b1692ba339deed831a66f5441a1e4706015cc59f4de4729c0128fe7da2c8c3d095b2993e92eec378f6 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 1b0a0e4ec0caf8eed870daecc431e540 |
| SHA1 | c503d01a178890e9f80d17b274b178d362def790 |
| SHA256 | 102b5bf253a8382ad14c42a44b4ce15e748f8d0262ae3dd737e1dfedd0bb670e |
| SHA512 | b6b68d118e6624f6512c61dcda9c1f4037ebaf1c907d142d0f88a78f1e1dcac463c6bd7217bf6a622c9795e43768e304ec49a28d2a31a34fde0415c52d822eca |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e665da7061b12f952145852fc21ef7ec
| MD5 | 4cfd979bf14b07dfed01ef9a3b1279a7 |
| SHA1 | 2e7aad8b8909d3117bb151bf4d34b608e3ab9c56 |
| SHA256 | 589b00b0a2fbada62af8b7daa8755ce68420a009bf6ce7a53e0865fcf262f94f |
| SHA512 | 79a25e0af653d6ecb5fd1908c3652c6fc8ad3d0cf1e00510801bb369728dcbe3c5e1e66f73d058c511320badca3c8ea82f2baaa5e0682f304235b68f622685cf |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\be58ec8ab04ff195247b1536cdfb3d44
| MD5 | d1d2f476fd075d55fa0e77b3c507cb0d |
| SHA1 | 5976cdae821737161f6debcba500a2842f988f8c |
| SHA256 | 650bcfb9e1c7855d2b72865695c2f4d4212ccedb53584f089c26e2087cc65d41 |
| SHA512 | 958c07812ae7e89143874ce4effb112eed3bec3436fc0b71ee70de38298130d08d89f6bce42d2b0696839f67be260791d121e81f46a4935f3985e241aec7b0df |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\90d821a0b7efe2541659a0ff6b31b88b
| MD5 | 6f0ea4b31f2f55764db79b43833bf83d |
| SHA1 | 2522c29622377d611419babb3eba2e8cb13fe0e6 |
| SHA256 | 08f380d19a3cf8307b098cdb5e9992ed1d29e5d15226340758a1af3cb4300c64 |
| SHA512 | 6a5437574ce2db6feac98928a22c7002ce526501335ac00444190febe302dcab5f18ba33a5ae00bcd83f469b5f1cd356474c8cfd31d9992d186fdd0846db5641 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\f9cfb35c8f272d46d504f99d9c00054a
| MD5 | 5a67e8e85c0ad7280e9f1ca86f138b77 |
| SHA1 | b9fc6b3311df7710e1251114946b93a72dd5d5d0 |
| SHA256 | 09e7111ea12f1236be9b1da699f8c93eb68127d0a98f2ceebfc5c2d7b25f0ed2 |
| SHA512 | ac5e400ce21e5e2503a11642cf401ab5ad4e625a01ac87f1711a02a415fc924556d0d3e50386d17e29ec20bb99b5d3a2d0496dc2ac1fc1381b29774b826cd9ad |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\2d5ee01099db60480061c57d9831c261
| MD5 | 839f812fb19680ae8e62c2ebe0355e4d |
| SHA1 | a256751297a9f82a082bc4d5ef08d5d9d89a2c17 |
| SHA256 | b414e1186136cb1f46c6cdc69dc5b637ac5de6a390d67cf25907907c61b364a4 |
| SHA512 | f2209d8bbb8f7ce1e6b675cdd2da3a10bb450d50b4f73a596fc0639f201999f32d3c1a2418e0b92c918c0a667a5750ef122e4331361e0022b66a2fc5e489e5ed |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\d27efcc314894472628caf798daafe01
| MD5 | bdec8723e953241ac3edc46458a6ed7e |
| SHA1 | 783605b1587b096807a81e32c488be272e0ad581 |
| SHA256 | c31b000a001faa6e08026a24043899ee4941371ce464146a9c78befc2a796e4d |
| SHA512 | 221cf258c9c88c857e34fda1da4290c67c3a34459f86b828ab968f5e57b2be53eb4f7aaced83151576fb843a7f1166c267de0efb116740ab2ac2b37ca0cd4d93 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcf8e7398be5b1007fef514afffffa6c
| MD5 | 864c04942289c1dee2c1aa18ea77f1c0 |
| SHA1 | 1be7f1b6c2f1472adb9b34fb6f7a51d3d1ba161d |
| SHA256 | 9855931b8e0500c6753d77200447963d1981fa7f7b4fb34067bfedbdec0db442 |
| SHA512 | 6f3934ea3ca2317756e45bcf065abae6cf34ab7c24e1847023ecee8e404294420f5cc978af2afcea986bf160eda88c020fa1b799f5ad75a5e3991e7268192dbe |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\c9d72083ee0b41e11170f5a9845c3060
| MD5 | 92e9669fc7c748554c057eccb11a97e0 |
| SHA1 | d3fd8c1e136a2ebed238d95bfbfbf3ce61a385b7 |
| SHA256 | b29195912662d71be85e0db741dec5ef005d744d3aa0913dad8ad1e51c3aeff2 |
| SHA512 | cdc3a1b4c596fd3c9621e53887a9d503205a0d5f8663e1ee3366129ddbfa83f2b15bedef155eda2949f24d1df615ead664114310e3d3dd03f9fb2d95df2e29b2 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\697aeac1e8e025f05cf4b76086fb70df
| MD5 | 749deb1ff197b5082e2b07aa55a33d31 |
| SHA1 | 08b4d7441ffa13b8dc3610d74a56d8eb11d8acb0 |
| SHA256 | e593f31edc529b51f9b253994d8aa93d8ab0bc8faf433e737b0a09e80cf2784a |
| SHA512 | eff256220d72675ba4b23344191b963f7acdce9743af8be81020e2a74662d2f3f1b2735e686806b73198463c550b2d18921840271d515dca0b2d4ce226954d0d |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5105c207d9317b50c40470887ccfd3aa
| MD5 | 481555658adb9b672941de82171b343c |
| SHA1 | 7937e7bac46ac99e1897c00285fd23059828dc12 |
| SHA256 | 5069797f8a4b926fcc5bcdb668c1f67ece5d5e8f05d6f19a260c55c9a67f289b |
| SHA512 | aa9aae6ac82a3e320ce9c1b83883263d547a82369d8f31d3db0ce6d6bc5cd07ef96157ebf234d6e31b40b32e276c233f7c2c0856394a70d183bd64e03720737d |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\aa3db4232d83f97f5e078c526e25a6e2
| MD5 | 3e1ba08877dd32fe4178a730b0ea5e19 |
| SHA1 | c020afb22c7cde0c77a9d1d6be18ac8f1e62973a |
| SHA256 | 1a6447007e90d27fc71fa7bedef2219bda30eebc33447c2929e4488315e19641 |
| SHA512 | bad57ec1a48f686fbc5842a291c95f01db413600828b198b55615857bb1e50e4b3b6031d5896c8d7b9d6753c290c0253ddb83482f89c7fc348b8b80194a07286 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\6443205f8638cd85aaa1caed016b8ac4
| MD5 | 20db412bf509b564fa765bbc0b917fbd |
| SHA1 | 938513617f173454649543b7c014ecc762ba5b5a |
| SHA256 | 8b7281d0d0576ed2b73ab842080238d7e006e1524ed48f423f61a86cecf3ad40 |
| SHA512 | f6c54fb0478c2df40776125a920621a1789d02239a78cdd3de8eb83a27a00464b2aaf8714776897a4b3ae5488da664befa604ec836fe12010a046d48eaa519a1 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\d4f8d4ffe8696350702fd146346140ac
| MD5 | 084a09f4a178b2533a56610f28f252d4 |
| SHA1 | 70c343a804ea4674a214d5ca8e24bce33cf662f5 |
| SHA256 | 91b1a39172d8f6f0c98a2a3aaf8c137b29dcc4ed4c1bb4a3bd449dc16fb45e97 |
| SHA512 | fd8205ea2edc70743247666bf8ff414ef6038f6ec03bfc7590dc037024ca66eface1f3cc559511919058754a5dfc2224ca04368ed31df8aa942a7d9022b93e5f |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\77fad0fb4662c6b81630ee443153aceb
| MD5 | 183fe999017d5e5654364c0d8fd895b8 |
| SHA1 | 64cbdd4bfac3c60803acfb2871a9fc8da27d318c |
| SHA256 | 3622ef17da158e25761124720a642153fb6eee615b54da286e731ca2920216ed |
| SHA512 | d5026e42d343185e14360a292c6d13131dbdf081ba44960598e12652d99d999b4f5c70c5c02335596d18302b1cf64128a8bd06273237a48e2cc4eb0267d12307 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\afa231f024ffddec5f9d2963d20c450b
| MD5 | 64c05df26d12845b64880218a48e1b3f |
| SHA1 | 6ae26e09d6c23ea9ba5ad92d3d40790948b36141 |
| SHA256 | e41beb094c8bcc0d8825e031ec9ca5b13e45b94f3c93601c31c10955cfdd8da8 |
| SHA512 | d6925cf4d6eeb5275a7c008723410edfe1dd24b9097656e8573f749864f8fc7c61dac61b05230de13a7b9b7b866528c04adca85ad83e8e2831c43b46a70d4c27 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\8aad44a486e1e94cb992a6a0e230f735
| MD5 | 451b527070f0cfb1431ff5052642059b |
| SHA1 | 6021d49e6b87b9ae8fa64c3cfd0180d625c7d761 |
| SHA256 | b9391062d160f5bd861cf7e5ecda919954e84a87eeb3b000bf9b93c068057c9c |
| SHA512 | 3ec22e77061670685a576d96cc3897473d11c45c24e581688da54d8700b186d3583ffc23cc2c3395fd93af36afc45083058a2bad9cffb1362be8bf4edb20cef5 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\251c7269a8dc64cf406e8c2d5f5cc688
| MD5 | 7e7342c1c2e3602906a1fd64acde7735 |
| SHA1 | 357de58a6c39a0fe4d7e4c13c16d8c1d25f9e649 |
| SHA256 | 24a5a23ded1de17bc3170afbe5eb7debbb47f0ed7b2a4b5303bc899e927a99e9 |
| SHA512 | c6313b65687a5ce03772ff6f1edf761aa91f07a29f8b61db7edebf1beb5c548fbc53aba721ede32d4c4bbdd31361dc724c676d41c06278904291579d25d93202 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\2da892c80dea8811c616fe5e0e6c010e
| MD5 | 0dbe0b49a06c4093d004ec7d44303fd5 |
| SHA1 | 2bac861a6075854f8dc8db470558936c36201aee |
| SHA256 | b136004ec10d66b813386e21fc6c5f86d37071e01e8a82437676902eb3e63e8a |
| SHA512 | 1d306115aa97102b5d68552b591f5faeade373ff3a718d9f39dbeade32892e47fd921cd78e5dd71e91072476e5ad933ff9659ee5ea1d07133b55745f00c22828 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\993f844b48dbb84a0eece0b1d1aad326
| MD5 | c05764b76e6db0114c1d6200b56a3588 |
| SHA1 | 5f96252b5a83e5c0810e4ba604dfc433ee449639 |
| SHA256 | 427939d6cefb89facb6e71e082e42ed184f0883db715e0bd8ca832a316150430 |
| SHA512 | 4c6c06afb99e99d6a7466ba40146b7fd02f83de16e5c89acbe64179860547f42dad0562b2a281706cfc6acdc5558e8fba5647874ff15d2778f3f6d8c1cd983a7 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\74f7241d43fd3efbef367cddf2de0712
| MD5 | 1e996f012273818bd88129d26108d8f9 |
| SHA1 | c193db2eca6d190e929375e617f45790cae442bb |
| SHA256 | c7c8ee23804c70ae96b1399c2f6730543f10f7678f5e3ee36fcbce97245aa8c8 |
| SHA512 | 40ea7f36824cb96dace8ff41b1e92a03e0f7e61cac33a3a81c81cba12714812504554eaa0f4344d30061ce1d89f231ab21cab164a008e1f68d18ccfcf5525173 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\584bbf8c27b2f156742be22b280cc8d6
| MD5 | 7c0764a501b7f8f1eab14fa7f9337a4f |
| SHA1 | 2e17a9b6d5bd740c4dc91af9311e4a6e77bd55ce |
| SHA256 | dc0524c0d7f9f637466570c86adad7021f9316e42e69745bf8d27081a98f09d2 |
| SHA512 | dba17c07bc4310c556ef62f157dfd3a0ea1a617ffbbc4324f9a046bf47be9a2bd500921bf02bb79d9ac2df1aeca3745ee1cbd7f33bbdb80fe67e1adaa0bd82bc |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\28c39719e7218d9c2d686d4daccb1b72
| MD5 | 25a0b3d9ce5e6e1cc4cc7f4cdb328273 |
| SHA1 | 4d2dddbe9502a5373e6ea99771bb1de6e828b95e |
| SHA256 | 013275e837c61c631932167d47d5d9b838ba8b9863915d39f06d8ba4914df147 |
| SHA512 | 20df5153edab7085594382f80b5d7c6afa5f2a84741efb46961e36331c94369a7c7302c9799676e18aab171cf398dae8f314395c22238de6f8450726c4c992c7 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b39250833fce2d9f0655b124db089d4e
| MD5 | 639a9c5f588be3e48a6bf5601215f027 |
| SHA1 | 1ab7c1d3d5df21a05324853fb235b848945c351f |
| SHA256 | 4fd48841bac69eaaeaa9c936347395f5eab6fd4f5549d65cf6fc541884a4b2d7 |
| SHA512 | c3aced88385dbd9b10841f72c422b17cabeca80ad11af01222f8901b950be3b42467851d5ef61fa3a1d92f7977724926f765b8bc594655e93e116d04223497dc |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\83eeeca932186715a9107df83747a179
| MD5 | e7ee77fadd485e9a35a1bfb4be99691c |
| SHA1 | bf1aacc9fe769fd1dd111a1009473db1dcac7399 |
| SHA256 | d98e995f0160e551443de0eba015bf29192aea408469c2fc2d9c93a5c1c82cd9 |
| SHA512 | 3ae849a12cabc409e435da98308db2ec0b86f8fa8624a23632ab0ea836a0aed001853eef600bb99f67f8f907dbb641c9c6bc37bbf959dd12c1bf2ad9c8147460 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\c677a51b0924e108a9b1485dbdf883da
| MD5 | e1e4307ebd3e7f8280c75be0ccd3b5bd |
| SHA1 | 3f2a56ac3ee57082ebcf4a1ca21001821286e77e |
| SHA256 | 10dcbda8315ffe2e7215b8d61dbd26b0553b438fe94b1bdf005758b1b96d9f94 |
| SHA512 | 7f3ef600e2ecca826fc163d9092bfc10fcca9a9e6206ef29fe5d61902e3e9625bb2bcc07a58ab480ad19354bd0a1c56dd9f13c4e62aed22d87da146252144ef4 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\4130cf898fa8b448f1568bfb61305e94
| MD5 | 86df60a0980b57864a2e2d68f857e0d8 |
| SHA1 | 60c24af81c8406f05ee1721b374ab8a466d878a2 |
| SHA256 | ccdedffa29231d609157ccf22019e03a721e9ca248eabf12be511b76f795c247 |
| SHA512 | c025bcd3d21ec036712ad8e40afa7da973db770bf5b9b019c73ca8b99202c8e37999e6daaeab3f1c2190f84434a5e4657a8593e8a59066e0feaf38fcd8bc41e1 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\ecc495a0b2b0470e25d688a9077fd977
| MD5 | 741a45f09ceaf9cba7f0ee5b8aac236a |
| SHA1 | aa6b59bba687981191db42af8a8b17dc0fc9150a |
| SHA256 | 92ee9b175404bf4aa4e346ebe4948ae5c0ee7edf5693778a5e6a4a1bed508eac |
| SHA512 | 97cb36fc2281753eb7a42f762c8ad5cdef7c14665214a71f33518f88cff24ec5e91267f834a6ea5ab0206457c7e9c730dcfb4f7a2ec527e3ce48877e2f34be6d |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\388a60aa5e51ff44455d359825078031
| MD5 | eb62ee1626b44f54b2c444a487ef84fa |
| SHA1 | d3d918dae048e4ee9c9626608693d69c4c4ae55c |
| SHA256 | bf2f079ca21684f382d094af52836d83862c93800e8e054c2f6bc0838c442d86 |
| SHA512 | 68022f2ac538c51acc24065480cd23670efff68d56a4b5dec2c28316726ab82c81b48fbfe76c44f32dc32b0af75fe3e203aeb40610f34e2e5d75bc684f712381 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\477a618fe08d138e560e0c8eab9f3583
| MD5 | 4f9c826223fb8d7fb603bac0b294a706 |
| SHA1 | 44a185bf8edbfee521dc92ae012e6ed18cfae3a0 |
| SHA256 | e12f126277c8b35c48dc15cb2f37850ff5ab0816e5982eaeceb571c99bd17502 |
| SHA512 | ecf987dc0d416a7fb1779289a0bd9ba55625abff41491ec3731fd77950e91d5b454b17573be388766b20fc630ee3f125d37feda44e068d2ed0cd2a87be021fda |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc70073e6562a1a0cb99b092be4629f8
| MD5 | acc9db15cdf0932e73bfd20b9857b80e |
| SHA1 | cb6455b641cdaa693de88e9b0d1f422744faa35e |
| SHA256 | f0e15f7608b3829d33eb8e057f31f21e931d9d2ab4814891b11ecf47494c141c |
| SHA512 | 7ca5152691d595acc0f0398e26f82c4cf491bea98f2c81e7a972af8fe763ef5926a716ea44112c2fa257ba0109b8848f8611f071b88902901bdee1d32a315913 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\f1c2eede7a115f0fd9ddcfae03372516
| MD5 | 08ba91e62331009631f755289dcf7324 |
| SHA1 | 03786d766cac0b39437b98cb61e65c25d16325bd |
| SHA256 | c50ad1d35d0b3e81ef6780da13361923d7525a39db5c9cbc6c5344a0bf5e1380 |
| SHA512 | 3fe207322d4249f92893d0eb7a93f455374849ca583dd0fd00c79790ab7bc7f0699fe16de332b767689e0a104fb272992ddc37e002b6962cdb6c66a63618e3d5 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5c288ffb1fe759d2618c218fa0d2bee8
| MD5 | c914fc7a80c8ebee4ddd7216cb8e63e3 |
| SHA1 | 2e4bbbe23167be5f26e5f3e9f1e1b2409b38e7ef |
| SHA256 | c718cff1df66ac36549451bc6de0535c3f2f9e74b4fcdcea38af9eeecc42a674 |
| SHA512 | 7564812cd051e0970b3d06aa1bb839c8fae5d1e95e23615eea42d2f12b6284d06f2936cedd947e9d4d33c4656fec00494121d58cd38ddaf1ce2ad8be8685d0fd |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\8ead55fcc97d21deacf012df5c33fdff
| MD5 | 16e22cfdc829405af27279c364ba2f8e |
| SHA1 | 0c75b97959d7df1586db85cd1166f99c65603c68 |
| SHA256 | aa2f6c8bba8aec6b84f7ef8a7d8c30022097b784236806e63da1f0417124a3d7 |
| SHA512 | d1f6695e255f5b7ad498ce177a16591757d5570a4ea45d396f3fa159f5658bddcb7d524c102efdd982fd9ccfa557d984280c27e57484b8f61be512ce994d7964 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\6d1b0fd2905f7655bf0108dd4e655991
| MD5 | efe7165d72ce56eef26da49dbefa586c |
| SHA1 | b2441c50e501f7121277d205876ec6a5811c4e67 |
| SHA256 | 4e12e3ed0da10924a1dbc49e464b0b07c017970c839f1c1cb4ecf5a8019d3ae5 |
| SHA512 | 195b3d7954627b571226a4d5293b19dd0b7b565d4b295b494361ed81f3d9e1c193533dd0e53b2ededa326278294694286669095147d769c5de343aa611ab0238 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\bc86756c9d8f409a887054cf26a854b3
| MD5 | 70461ebd3bf0f7a0beafcba1d52417ab |
| SHA1 | 53dd7894e76f0fe7c02f378d7c67107ed4a03d45 |
| SHA256 | e3ef21dd9efd05fd1260691d6dd47f76155bd0b5ef1ccb62ef1e588dca161fd7 |
| SHA512 | ccc18b368873c76fb25c97009bfd17e4456d488b16da511e61fe1dee031cce48bb25d507d7fb1237345bdc2191085bd384ce45ca98a5864d10b65b28650e553e |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\252921e7f19d826cf6778747e86132fd
| MD5 | e06fafb3ee051c215c7118dcb4a75354 |
| SHA1 | c72b3e0f2bb1139344053256bcc3ac48f590174c |
| SHA256 | ea771a4652058a4110a95a6fa24c847e7a50cdfdd711f57e02f9c7caedda7908 |
| SHA512 | 83008fcb8a91bb42f76568773c98e5dcf6658b0d7972d595eb7059b5a598faf80fcc8492351e9e98a6d3a9ddfc17fca742f07ffe4af644d99c087062ed7b14b0 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e4317e6c6a87bdf6f00c6c80866345fc
| MD5 | fa00f598036aff7c2e4728ff840efdd6 |
| SHA1 | 7873ee7205e2817fc8fdcb3afdc275aab494ea91 |
| SHA256 | 18fecafdfbf34c5b261f4acbd607c439e35177802c8002a0d88221258108abb8 |
| SHA512 | f72faa02c263ed200f7a296ed86ef5da614911c1cd212aedd12923ba551aabc44b33cbced8dac80aae67dc09988d53ee191755afe3d51383ce885750bb00a944 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\98c582bbf5493f077bd8f59567067f24
| MD5 | ed3f4356a5aa9295ec58f77ab387582f |
| SHA1 | 99f94109e03097ddf835c06292ecb6142c93fdea |
| SHA256 | 60e6db5121cddd5bc13b1019c85b5d962599e2548c347ee3c7d944cb20ff01b7 |
| SHA512 | cc7869759564fe9d5e1580be978727c4b0da340c052db74f677bf7cc24d93da0b837d01ae0199c6404e02b49d08fe47a2fec7165cfad841f1b6fbb1d7e8d7fc4 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\3ca8206460663e9e944ccfb414623b40
| MD5 | 816be237e27ddb79f9fe0c46efa0119c |
| SHA1 | fe0af06e1155ba784ed6ce8b97849eb3fffb5f9c |
| SHA256 | ec6063b82a1adc4187ee0e01f413d4b5ed10277605f741295658acd3f0ceabcc |
| SHA512 | 5ca3c5bca3f5559a500de1262c133a972e776dba7192e6cade152245c0e1118fac41c48a79dd0f15c78ef177294867f041bccd3eece6a388eadcc32da8efaf00 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\f40c00885cbd0588eebf8bd59a345579
| MD5 | 9c0241f7306bbf3cd085509dd7840c99 |
| SHA1 | 21c2a9c916d0e537c5662db2acb565615ef79962 |
| SHA256 | e2afaf1d969e104e2ffc22494e2f7e2ec4a0bda49b9de0dcb3bbaa3da9bc8655 |
| SHA512 | afdf2c9a29559645e08604b15f023475e8610f41f650f3527a4c2199fc4bda9c291bb24e2f337e00cfac6a5347fae125d8055f0af6eaca38b92ec408343cb9b0 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\16f7441682caf62a1789b9d3e75ec170
| MD5 | cb94125a0b01b9335f3c3c9a9c6cd60f |
| SHA1 | 85ae6cca4c661270b389c00299bf7f5d81fc3943 |
| SHA256 | afd92a2c0ea64515200f7dd1c6237f18b6d1bd2065296939697d34a3d4e1b0d4 |
| SHA512 | 649155baa2d26fc6afd0496d11f37d9dcb588726806eec89be58faa54fcf3b90d1becf114c4e2f3964c98e93399b87bf5bb87709a7bd9a3540c7ddb56e2da555 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\bbd52b35df5f543d23b7f35ae9e845be
| MD5 | 2de5aeee01688c41f23b2ddc07c0b442 |
| SHA1 | 68bd21cd4284ff390c1f4f5f4b61c9ff3b8f2268 |
| SHA256 | 3ceb6af768ce708d114195ea3521c71370ee69172d4d0cdaeb1efff406571d73 |
| SHA512 | ce845ebebe20efbfb1a0565e69cea69e3a4f3e71289ec68379565052a2e8a3e5ac873b52e74ea26f2afae7ff64c789c348b4b9d4426ac0c0d6547d9f12290090 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\852240b4203e72d7bfa66fcea2e589eb
| MD5 | 547ffe689cd0af21ec616bd935f78b14 |
| SHA1 | 36e70f429bea53fc2c8dd76eaad82f7bf9f3742c |
| SHA256 | abf9ebe04321f9b8926304bc16041965dd79405783b7d3ea56d5fc802863bd9c |
| SHA512 | 3683baf37d3da8ac536ae4d2d852acfb49039b3c9d4ab42d972c23e2df6dbfd178a552ef023f48c43c6887161313d516914d26b7cca0c022e2741875d62e38d2 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\23f316746f014ce443f0b0adb0d9d90d
| MD5 | 4843f2fc4404a016a8a7b7f5c352f877 |
| SHA1 | 1446153b0498dd65dbb53b417d5ce5db49f0dec5 |
| SHA256 | 46ec4647b950351b091ab0bb34d1964bf24b0eb58760175def7a4a1d7a4e09b2 |
| SHA512 | 8d5198bd48be46a6aec5cb5d9eb6e75828f88742f12102a1f5091f9c8b51167fd6db13981fb875b032795b9407fa64cf3aa54224a64008262084dbfd3d98dc27 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0407c8d6df198f6864381d3e595ae971
| MD5 | 703dee4351832fd18ef5b85c6e1bf992 |
| SHA1 | bdea9dbbdae401cd68814d9815a17bab6f3870c2 |
| SHA256 | 8fb57fee0d1c996a828a3147fdd9a38e8d1624163dad101e4bc1d44894bc3d68 |
| SHA512 | d43b5dc41be38f5fbe30a51c1abcbbc5c606c9d911dd164b5106fe2bcf0310ae8b641299c5491bbd5ba66433d87ebd17dc8a487d88d56d0ee8e81309533ef0b7 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\a1489d1b06ae2d917aae075e6fa9b8f7
| MD5 | 5420558b929446bbd89f3d35e72b5836 |
| SHA1 | da46e5c797831b47c4d62fb9321c420c6b0ba50c |
| SHA256 | 12d1d581ac394291754c5b042baec0904c2f3b3be6a17e0a8761b32b6e53d507 |
| SHA512 | e125c8d668b2c73d583c528f6d35bf8a1c9558c594cb3aee98e25eda051f621a6924626d845f200442da65034dd77aa4a51dd1668c07b26611909f76cf9174b4 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\06bf3774b39be975c53ba2193da7f90d
| MD5 | 29abb94b78b9a73db28b7ba825833346 |
| SHA1 | fd6da6bc273d4a44067d8c2b625980ab8cc52aca |
| SHA256 | d929c9d2ba98883044b81894da3e921de179d5915e1f92ca9d4df9cc89f1424f |
| SHA512 | d5069ac2996929a5d1622f65ab450bd152130978b049f672b1a9f28cadcf724e317024bd95a11109e0ae488834ab184f5e4b10f6a21ba3329cf056a0b7139613 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b597c88ce139f36dee5c4afd7d80a2c1
| MD5 | f195c3e8ddb6711a2feaad4aec69b8b0 |
| SHA1 | 20b1011f280842fe6aaa58117a05f57cc17b6c69 |
| SHA256 | 9c263d2a5db10ebc2d543bbd0c125bcc5da6c2245ed133fe0abb1b308f343a71 |
| SHA512 | 52ed2e19a2b991880336b6b1694016f4c8e5a5e92a9dc989ab317f7f743f38dddaeba8fb5764826bfd9aa145028a1b3f9fa34a02f39c1e5162aef7ad282b0632 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\1cb6044427da36923148711b8796b750
| MD5 | ccdd89dadb2a17edd97a48f05de218ab |
| SHA1 | c8829afdfda3e414304f09f588a9e00cd43de4d0 |
| SHA256 | 8ebad66a66dec464ea8f6a70c240e6fac36d2155ef5460b2f1cc80451e9949ec |
| SHA512 | 79976e6623479c42c3b9babb2bbec208a8f13b580dc19419df33639e3922ab973e740fcf33c94841e833ef3ca8209b5b149d2ba5c064f08e3b6a526a651432f9 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\8550d05ebb82e2c3691bc35b7c166899
| MD5 | f3e7b2683bee3c3628f500d157a7184c |
| SHA1 | 17aa34cf9e45a2a10cc370ef0047d6ec844053dd |
| SHA256 | 66d177f97d367d8181feedc6db9f92f71dbabf58cef1355439559005be6a24ac |
| SHA512 | 48994f038f0cca5a1ad783d05490ccc209ac4ff2a9fc3b508d5225348d2202f9760ac6c0334d12f74ab8227eab5a412370459ab328f44177729f8fb6b8911088 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\6c536340229d1bb052a390124806163e
| MD5 | 8dda220de3bfd073f993acca9cce3f19 |
| SHA1 | c78e343e500f592bfc59de89dcf8548cd6fa1f71 |
| SHA256 | 21710259e1dbf800de1bd2dd8e19f33cf70dcf6ad306f7738a23300e40d385e3 |
| SHA512 | d21115712737f5d51c7fc887a14bb7b9dda4b9db295ecf429623a20eee02b2868956e6d66907997f100395625c42464218c36e750224e02fe0245c0292fc9e1c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\38b0d496d6e95d4a4e1f049ecb71b4d1
| MD5 | 60dc54bc02627b188fbc37f3c81899b3 |
| SHA1 | 7065242d6e88ff9ed0e0cb891a9a6f6db2be5334 |
| SHA256 | 35fd7f2804d4edd74c14cb7bb1534edc993ab7ce9e2d64be997b12ffa8ee5b16 |
| SHA512 | 2b43c5d1f2ee4621055d94f3e04cbfed24371eea9a7c719f8392a993464e7d05635f59bf230e294c60de5656f421f4661bd5b1b8f286c4c15e79bf9c57d686c5 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\05e6fbe7faeaf27e476e2247265bd7e2
| MD5 | 774331951556eabf4930f06518bfe5f8 |
| SHA1 | 79a7b332357aa2b18cf400033bfeeb5db7614627 |
| SHA256 | c4239a4d05bd3e427245f920cd4eba313e0af75c819f89553c7b6758da9b4d57 |
| SHA512 | bf67dd1c1d57779578524ee404de1648d9a4d8ed7f524fd49643ec49c3165b9321d64bda2216cfb8617c32cb500eacc2966263dc03841af51ee37facb2b1724e |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\ec9a7853aa53bb67f2099830ce97922a
| MD5 | 0ab1d8c6659dc5952cb81416c8d9a85a |
| SHA1 | 16d889c645dd70901f87cc86f6db8a632b8518a0 |
| SHA256 | 1ebc2f03253024917e0b562d101603c2f9e04aa70a05accc5e63eed9976ea0b4 |
| SHA512 | 657a549264297c42e4783cdfc76baff2dab9b5b9c1f991b3aa8b16f2b8f87ccdb0c1a56edc23713ea7f34ffcc4cfc95b7fbba8d5fa06ea443610f06a00433f36 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\7df53404f56c9f1787b277ba9d17049b
| MD5 | ecaba5cf9469daab7c05847af2da45d7 |
| SHA1 | 78d9c8d289db9815482249769dea663f4999cac2 |
| SHA256 | 23946e247fe3bb06503a06be2b8e154d724a8c2e86fa4f441fc09ba1e5781121 |
| SHA512 | 4204260b2efe3b4c95584394b30ad7957b154229828f0ac90a04e5167c7eb78f254777fad0d4fce9c5675fccc390dfccae2ecbd8d17e0e73bb0a6933605df7d1 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\6e62dea9b6f892b37a40251f84c9e0e3
| MD5 | f48177bf38c02c3a2cb322b77d627f23 |
| SHA1 | e207f206d2f707e7feddc32c02883bb71015d23d |
| SHA256 | 4a8a4eb5baa01e72889b67caa16b69a4c2e8a07aa12f84ade87376f344b2fbd9 |
| SHA512 | bb3c4ba048199ddd3cf5d554a90c279d7b868871f1a0eea4ce27c641556fb3e483cf839e3f9a27a092021783a25d604c952fb1ea34528d722db9930fe48e38a8 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\7209cd4fd5e4a48a4cabe7e3498368ec
| MD5 | 643d56f3cc2d206fc1eeafd601a0e287 |
| SHA1 | 0e55be4bc02d884a40a586b44d5728f9e8fefa6e |
| SHA256 | 637c7f57eea4b46821e968a691bc2181ac0ed00252691845fefd947a4c594f66 |
| SHA512 | 10cb34ff5d98467c3de396ef4993a11c7db2545329ea473eb3ffe387f2663cfda6d21d31299f87aa3f298d2bfdb88d705b9236e9f71c48c22970713c2c3f75e6 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\1f571bce12b3689efa5586c78436d68a
| MD5 | aa1cb968768ba580f7e7d559906a49de |
| SHA1 | 1a6a0906ac3c68f859790103094a617e0439d77b |
| SHA256 | b9e49fcb7d0be8aac8bf1d990f2277363077dbd34af7f5109a14bea85b9fd35b |
| SHA512 | a72d7246405dea401b6e97963ea624772f65a7b20eacf2c358fdb73d7e5c2afac79b5cd39cd548ea8c43f14b5f03cc38deee8a495e9c7a1f264c1ca7de4f2411 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\92ca8d0a36e9ce06a1c3537675677ffb
| MD5 | ae7d26697baf4e3c0a4f7e4fd800f89b |
| SHA1 | 4f2472e39c964861701d80139cdc33bb967b2c34 |
| SHA256 | 58c1370bf264ecee15638ab670a0af85f8bc3b974670875c757751fd116f4833 |
| SHA512 | e93451a30c74751ebd6996efb038016e28370de37bfbfe2fafd1f3c3817f2e720bc3b7d96e1c0e346f08e3c581d13f77a535c30c07a487f2c4a13b4da9970a0f |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\68119f28ce3eca78171a6a8c8822e1bd
| MD5 | 35e84ac53c5b6ac5714c5589d7d79153 |
| SHA1 | cedd01f0263fc9e5718b8e77b3467c14a35a1b53 |
| SHA256 | 47da60997e22feaa88bff58bd2db6320534331990a14e2b64b6d665df77b931c |
| SHA512 | 7cbdf8f0eaee0c4e00e3813d1e558cc5aa305d6e9861255d721bfb655cddbf08c70fe61f686e79154f1c36e7a4b5c29f2ecf2776fee9eb0b7ac1da8c87e75dff |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\234369d070cc483f7122fd415837b73a
| MD5 | 51d45f80859fca2ea5720897d7f1612a |
| SHA1 | 2a7d736969502784b96328f4fd1fc7697a099273 |
| SHA256 | 5bf07b195c3902c69653ca0294f2bdbf9124df501af426b14d6bcdbb87d70745 |
| SHA512 | 059455bc829431130377e4c8cee87ed3652b712eb46afa6f666d9e4aff7401b59068da840b91f4914d0752880cb2ed8c64a90e79e37f45b4b90996e44f2932b5 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\6105c4318cc0c25a63a6c9b8db84bc28
| MD5 | 6badf7314b5d440a6ec8dea899d7872e |
| SHA1 | 003170f75f86922af2aa5bc4b2c3c41f5f14106d |
| SHA256 | c13071122b4ff111c8ee877e0d8bde8f34ab3569df48fa81f6f4f1b0b0ba855a |
| SHA512 | 5fd8098470eb97e06e62f6d8753d3dbef34d8db6b3ff463cdc964e61e765ab844168170a64c837fa5d60c029a79ac0fe7cc661b9bae07acbaa2400120037aa13 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\7deb7c677f433c0b6c649020e88fe58a
| MD5 | d76037dbae4ae81158187aeced5816b1 |
| SHA1 | 7858adc6bdb9f9b03fcb28746d7a0d08c297d058 |
| SHA256 | 8113ac3b2c1f9a16f7c5a9be473b64abfa8c9689afcbcc30750aeb3077e3e27b |
| SHA512 | e9e1b515c621e760968098b8e0a16e00cf1fc17b74065efd2f8793add04d5e506205df5d65be1db885fb958b9c5879ca728528963b4048bfe073d4249c0dc6eb |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b00de5dcbb5ba1d0d58ba82e9c2f97bc
| MD5 | 9a3aa49a6c57739a171e507a3b0a90ff |
| SHA1 | f3c154299bec91f215954c1df2b03f68fa08efa3 |
| SHA256 | 6d61517c2a006e117a5d5032dc1be0f993f275b6d0c8a0fbef25bda8cfc12691 |
| SHA512 | 0a02917b5eefba73d3420852a5c66719bae97bc3c8f9adfb2dcad89dee9caf5852f660a3e787d84e9b86e3793ae0605b2db10c0a1463e0f09a733b614d2f4c1c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e5ba3b6fc7c95f933bacb9db38c93e80
| MD5 | 0de2eda8831ddddda130102597e758bc |
| SHA1 | 0fa49f0691a4ae61e422a22b07fd4e5def0ae5b2 |
| SHA256 | 2d60885d3492996ffe223ec6dfddb240eba00a9e03ac0506d3489edc4822e1ee |
| SHA512 | f466e1ea3867fae7618b76a2895cccabb0f646f54bf8c4cb6cf6a5c2eaf4b8e31eb4f8b42971ee53c929241d9f40af6a684647cc09395cfd709774503f274b75 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\a116d80baa851750ec02ad98f6a28052
| MD5 | db41d22b9f9f4a43ff8916ff8d513da0 |
| SHA1 | 00dee570785465bff97ec8a96ebfad3d21f1d248 |
| SHA256 | 31e6f7d03515207ae87b2f9e9594fc94db77038fcc28ee3990689c6590b7547c |
| SHA512 | df4e09d0f24ec1cf13ffa1a062f9d28a5d36d99b606f27f7ab757f82e4202e51ff4e033b6554b763e6f97c73bbe77b9d133b4b842469b96056654cc2f202124c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5a479665357e877c36a8bc4ebab8ac84
| MD5 | f5366499a754da1e3317be61d63cc243 |
| SHA1 | 8689a3cc6a2e1af5dbd2b6c23b488283362bab0a |
| SHA256 | 14873e016597bf69824fb29a219f6d81befb11b19fe2e505544115b33f030e6e |
| SHA512 | 6920f31ed14ef4621559e67c75a69ecdb7832aac639c40febd98dcf9b7c02402510e983b84cd309bdcd7b0438b394cd6b1d11bd4c32c58488d24a5d38db930c5 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 26bd7341aaa87feab956812637b4bf12 |
| SHA1 | 66d223c77720b22eefcef3836764952a18d193f9 |
| SHA256 | 6be7429726351dfafced75e6c871361cf6090f44edf17a80406f11fca1504ebf |
| SHA512 | f02739f9e9e07c03ea7925a4fbf92bc0727391f17f032ffa77f54b0ce861ecdf3311ea9406faba52c5b828687455b41583767ee46796e9f758e3d80b8df79d4c |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
| MD5 | cb77e039a45a15fdecfd6b2819e8e1af |
| SHA1 | 7569b5907bc4ebdf8168d953d880ab4e2553c15d |
| SHA256 | 6b7a3c408540a7fe16710fd04b01c600cf5f13e471f1315ba0524677a27ceebf |
| SHA512 | 66ed9a30a05daeb18222f478196b200ad1dfbec51efbe111be432368e7b7589c86d293091004938b80a224d6c6a00fc907b5cc5b841b4f8a531955d149b3f630 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | aa70ed13ee76cd9afeffe71236cde5d2 |
| SHA1 | 0ac31aaaf86ebcd6d29a10bb6ff3f98871e6aaa5 |
| SHA256 | df1bc7d2fb9b41d138266ee5163f474dc2e5e2d0cf50282551cf3cdb18ec9514 |
| SHA512 | 7da9c3900d8b4077870a34c683c94714d60408998265699f236f00770245bfe6931083ff2f3878c67dff0793276dce02e95b623ea15680b46e39fe5a8934c16b |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | a2114bb8e20866a2aff7a8679b1b3dfb |
| SHA1 | 45edff4a8bada91b0007221d196ea89b63cfa080 |
| SHA256 | 245b86d77f3529abff71c89808d8a4d78d7ed454cf09bab66a751f887412e5a3 |
| SHA512 | 485b7198b7cb8cb00371cad60a408dbdf624e87702ffa4bdc11465bde5db8458586f7d862dae8a7bcf51efca2dfb5e0deab9d32541dfdd808baa017cff2d0a46 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\c81813ea34dbe699086525727806025a
| MD5 | ca7f3bbc7da608431c38d6d4b95038c9 |
| SHA1 | 16520cc9c8e9c77f47b7048a4d2b1b502dfd28ca |
| SHA256 | c34f7f08470ef8d5bbce7199f710c0acb276b2d0ed8109a6926b4e89cd7cb6d3 |
| SHA512 | 1d4e27cf43eae83363cda3b0502c79334e97295ca4e0dcbc727b0eaca4eafd71eb94010aa611b90dce9ab7b0847525913b7e93fc8327b422abd513ed587ba31c |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 5d050e12d5da823cc3e1b90b9f0fa636 |
| SHA1 | 517c5657090e37a1fef8453a9444a8eb2b0be0c5 |
| SHA256 | 6870ff73e2dd1c5b15af3abd1cffe6f0aced1dd07be137009235d77c13448f3e |
| SHA512 | 58c77207967b9107d50c4a084c7794e1762f530f39caa69d438080a4e0f1a0c3fec8d662890a88898320125e0a5e4b1e8e4ac87c32f7b9cbaf2117d5848129a4 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | d7c51480cf07a67f9943c0d0bc4ed8c4 |
| SHA1 | b96ad3e540135ac31619de7645510db1a6cf75e6 |
| SHA256 | d686b645238c2e6268386e22ba72c421b6fbf6fc2a50187a66921f49d9e6c190 |
| SHA512 | 1070013007f4a00eedb66789bbf54f4350adb6f01791bc8554d2dfe74450e00065e4a8edb853d0856d9d509ea8b1d630cc822f42a136ebbd9d35e3746c09a866 |
C:\Users\Admin\AppData\Local\Temp\{35870309-0D8C-4F27-ADE1-FC01388D4F91}-MicrosoftEdgeUpdateSetup_X86_1.3.185.29.exe
| MD5 | b18c705b3c68cc49d9bf3649abc75c24 |
| SHA1 | 6dc8963dea0f3185368790dee2a346301b4fa24c |
| SHA256 | c2ca3135f3cafd79bf90d4cb3118943ca17f40e0d651d1fc32b1b3d22d1412aa |
| SHA512 | 7ac302c1e85c652bd897ce1af812950cd23a53c041af82fdcecb2314bbd1667bf2fc672dea40c21858e64befc9bf60190a4428f0b41c30317bb0e5ec7c00f71b |
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{0B1209EA-28BF-4342-B698-55B820789848}\EDGEMITMP_FDBA1.tmp\SETUP.EX_
| MD5 | 5070a34dbada1aaa375cc572b5fc7d0c |
| SHA1 | e74b7ef714755870976abe3d2b4a7db0b9cc21e5 |
| SHA256 | 03e7a32e1f10fced6a07dfa4e6cfd92510d4bf6929d423798e4fb5ca91fe6c20 |
| SHA512 | fed3fcbb64a59070b0efd677ca2edc982d28e37cdf7283f2777af8aca7d3760a7eefb8d01b3c2bf4b4ec3708a74c3412f0dede91e31dca1b6f8a4e4edc673aa7 |
C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json
| MD5 | 31a96e5887399089523a54e6540560be |
| SHA1 | c74c2067d487089656333cd57aae67655299ccf8 |
| SHA256 | 9133ced3e3a9592bdd4717e1a01c083a423f7c5581306883543aa6807b1135b3 |
| SHA512 | c6a339c7d1789b951a1612602f5e3985bff84205c6712a51cbdc7728a341dc3b51fc778ee0aa19e2d6c443be20a3693317038a1ded9d143f9c65d65e32b11971 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | f73cbfa7d693321d8e322248f6c2bcfd |
| SHA1 | 430d725f43193627d262933f9beea0f165d463e8 |
| SHA256 | d6554f476ad0938c923399d6c47a4124507cce7a2d9775964a29dac76ac643f0 |
| SHA512 | 5bf28e8a22835b7d924e562e976c3d2c3f0b7f69d282a50c8278e71881ceec307fde7b9f313567c080496ab7ee91c75c50640d431490182b05adb4f842100d40 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | e216915810f7364360adb6532c3da8b3 |
| SHA1 | 6e7811fc02c64c3bad25a2e2c61ede1e585c8e10 |
| SHA256 | 32f7828046dbf83e35422424bcf59d4be35c482105e498a25c7b2b2c8827a95b |
| SHA512 | 30942e0e6fdea52e58fffd43fd885c623a8dd031705b3f4ae2156e44ad15f72d27ea6cf0d5700c40548dd1ee47502b981e250df4dcfdf416e992a84f110c2908 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
| MD5 | a59f5faf628b5838031ff1ca51776f24 |
| SHA1 | 492bf2c22c44ca7c572083dd1205f2060b5af59d |
| SHA256 | de0c00a28ccc1df94ae85f2c811fc83410b8632c1913d469e7ef47530bfe684a |
| SHA512 | 5c657fc7b8974fcc354a69e9b9b6f13d5ef8975ae7a750551f7a71321296d771d780d14702385956e44f2e2c57de3d1b76ab9cac79912a4ae356b9dc76e8bf4d |
C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
| MD5 | 857ee873776f1e4422ae30be9218577f |
| SHA1 | bb5adf0db09b00feb729e964955d53277982551a |
| SHA256 | 1b6f90d84438dcf2e22c9c64b31b4332c2ff2203edf2debac31a8d8856f0719c |
| SHA512 | 712e34b766161b97bfb90bcd9bf1356af9c37bfc315278198a452c55650f7db903c4ef263dc62e8ef31b0878c82a5a9e233d1a8184aee2e25cccde32b8d033cf |
C:\Users\Admin\Documents\ROBLOX\AutoSaves\Place_AutoRecovery_0_AutoRecovery_yInTkw.rbxl
| MD5 | 7c4e28c30fa135524d2273df2ecc8292 |
| SHA1 | e0e84698ed7182ad5c047ee5ba21d9622d0fd2fb |
| SHA256 | 32e54dc99c193c831ea45d1dc8b5c18a7fda2d69b1bdc71d79d61e8d23a02624 |
| SHA512 | 2b74336d94f0b51b4c07d1b506b928e895a40fcaa4bccb2e90f0010b83292c07f8bdcca76b44351f7fb33a54b94ebd241176761c149130d575a4b250ca8e4503 |
C:\Users\Admin\AppData\Local\Temp\Roblox\sounds\RBXEFF830E94CEC413A9B4F8BDA07707B2E
| MD5 | 67dea22f2e3c36ff181f0fddc6ae7f67 |
| SHA1 | c61d6f2bb20f0b17b63da5277d6d26b3016becd6 |
| SHA256 | 01ed4f609869c120bbc31eefcdf58c9c310f3480ef9d8bf33f6cbffd53ec7a53 |
| SHA512 | e50d24b6c1f22ec8ecdb4e7cd3fe31151ae23c818d5b3a9bdab6d4346de8870f6c75bb21d84fd14a4c3d7575c533605654837ed6540b3212d300109bdc679a98 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\fa7410b88528496eebb54ea535f7b51b
| MD5 | 6b130be076d108daaf61bf250d4b7d1f |
| SHA1 | ff62f13e0657e1f76d844bd60547334efdc49123 |
| SHA256 | b196782b9c2d5161586392b52ae0e6031d2fcaffd503bbdac4dc2be5f6bb4a4f |
| SHA512 | ffe379fcd00e6282d9340203fa62ba172193c1bbe85882853c24f10aeec43f946bade9b7f8434a51e0dc02b824d41548443d8f3c1fa90def499720647fec0383 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\c243b12ad7ef587c03acd6e7beca0df5
| MD5 | 864a7f97f5926190cc1fcef671d3a88b |
| SHA1 | 495b87b05317b1feb12ef5c0d1ef634f01b0feb1 |
| SHA256 | aaa0a861d0846a8f8306ad878b50343f5936a3aada398d01a5525479bced4536 |
| SHA512 | b865154ecd34d315aefccf64e42ad1d74dc6d7c7662e4a061daee88b75358333d23e131aa34e39be4de88752b07278afc4a07e83d0d7c612d9e0678911c46db2 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\f2e30d3b161a58948d86d332e498f4a5
| MD5 | a011820ee8789a645fbe9a5f02189a10 |
| SHA1 | ec434afcf8c0ccdb1d38bafc9d9b86067d5695a0 |
| SHA256 | 9aaf8be0d4dca8af69eba1d3dd215891443c6a3856b315dffc8a4705aabeee47 |
| SHA512 | bdb4bd263823eacccb58fc03dba01a0d9324f87519a3447a1145fc280f7bf15c94a99453a2f825f11e8a7e4ddf57eb54079535d72358984f2b0ee0a081b44102 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\595ca6c2ea42524146eb3dffcaed3a82
| MD5 | 6e290823c054cfea6911a028759716ec |
| SHA1 | dd2d128bad8de4bcb8df6b7dc6150da3c98b4d16 |
| SHA256 | 378ce3d78d3e53ae9a29ee877d8b3800176fbb1a56540f95be71604c7266728f |
| SHA512 | 0193d729d03c1d57d0335bd0ec26a51f52573a7919bf51a2914995b1a2c86c249c3b91c85cd44b034b4aa2c0836035eca7567b99400da3d5efb6adb7892cc268 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\fcf945cb1379a67c55875bda48ba1fb0
| MD5 | 6d7738f6530904547b564a95302a3fd7 |
| SHA1 | 2e13d7cf95a2d3c3c1bfc07df018fee45cffbda1 |
| SHA256 | 106d9ab89111cbda19abfadae33a2c8d8bacbfe2414f8666071a211b702d713b |
| SHA512 | 901ae007eea5f480509018f2e2be6c806307d2de7cbfe87db196eeca918698144bb264964ceab0841e9f9ae06e9ccff15e7f9340fc45474df9d67b5e30e80099 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\8cd47ee5e1bd5e5ecc3c82d06f7cc8bc
| MD5 | 9a895c016ffaba2a57e691e71bfd4d8e |
| SHA1 | 259d7ca7f6039951f3d83ad75d4c1aeefaabb03b |
| SHA256 | bd57f7c46d7e841bb4725b0d0e772982ecc1b07147b42a90cb8d4224396e1f2f |
| SHA512 | 50d35cf5d462636c8161e8628961bee6a56a1497c3f4856b93f5ed19c9b2ccc2514ac1a88253d1e9d4496ab2bbd9cb20cf81b9998265ea86d1a7ee02156af775 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\8b334beef7df5a2cf862b7372c568e23
| MD5 | a17a11072aa9f154bc13b9f9ff0fbdc6 |
| SHA1 | 4310476c67fdacd9c4cca0133a60c8e2c959fc5b |
| SHA256 | cf67840aa268dff7cc3513d7d0ec2247b9cf8eba37a0f3a7c901d6491a803105 |
| SHA512 | 9efda3df0e923ab1797db407feb00f233ab9144eee85810c88f43774578e18c8301ae6be9f435e5ee2c9beb1b539d1a7ee0139954c12c6ae2a6580a1dede026f |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5e18a20fa888a73695f052eeee0fde7b
| MD5 | fdb1cebe71e53d40b5d9966fd2ae075a |
| SHA1 | 7b89d8bd732c262bcf650b110bf22cd21617b3d8 |
| SHA256 | 8493768a194b77ab40aa58215946dca018be6b2dd9df8179f5b26c94aa3e4c82 |
| SHA512 | 5e8a2ab800322e74e6cc12967bd65537b89c5e6b1ddb214b220b1d2da423b1ab2cdc5f4d3c16356ea210e75b73e877a5cf2f3d3f209c00cd74c1f02f32182f97 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\226d8c705087f167f071ccb8f6026822
| MD5 | 2b1dec45d4ca6cf48afd9eeabe1b3db6 |
| SHA1 | cc25e7b66dfc12a4b06877430edda24414e9fe71 |
| SHA256 | 0a4384c6ce92fbd139f253049a366916a1b81c881143d5724af2fde3d90fcfc9 |
| SHA512 | bab82af1951b85edcd27c7b46a039373dc5c2203b4f2ae9f41617052819567cecc4ddb44e72593fc8aa3e95631f0a32d1ce45d10a09494c9d369164ee47133a9 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\7355109984590782794b57390696c35d
| MD5 | 6fde6c98032ced303ef18853a7f3b563 |
| SHA1 | 487bbb540d385de6c415817ce0a83114f9c3224d |
| SHA256 | ed03c7d50849ceac33a8ee6df285bf87752c98ff23fbb91c12d2b06c749d6462 |
| SHA512 | 9d51d7f154e98bc9fcb6eade1e7e06fe769095fc9074c8498124bfe0075a8b61e8b83eb5eef2f33dcfc8c09e0a82c5a0aa12300b2403b4ce5407dfa639ba4489 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\751752b038ed5ef56e9e73b782b08131
| MD5 | 961e8d0598ae7ddf0202b0d4eae71eeb |
| SHA1 | 296967682d6a7421c1d55e4b20454775925b519d |
| SHA256 | da79dba418726c24dc3ff5e3754bc332f716f3087d60b30b19e8d66edf80333d |
| SHA512 | bcf5d44a913707bf0d2f69cd3877e7dff736eec7653f6afd16fd69a9828ea6200697e0099179f2987d67c79172a503ce3f688983e328b6a1fd1c80470591ef9b |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\168d02b7921a49bfeab00cf70d7c5d9e
| MD5 | 0ae6365c1949f61a81378302c6d7a183 |
| SHA1 | b19338be823c112960d1548fb24097ca42100c82 |
| SHA256 | 88776be0eb8b4d921ea25aabfef5a38f0b915e2c7e157f382788e0c280f257c2 |
| SHA512 | 70091c14194d7c11a5d0ce914f1aaeb5c26b47544b8bba59a7dba3fde55cb6ffeaaf98cf39a7bc95fdac567c9b9534ac2112c791a6a62386a02594f6a9f5396a |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\d5146db2f8201b78bbe18970a595a253
| MD5 | c9d7a5449c2416cea3dc4b8697273ad2 |
| SHA1 | 452f66798b4f15ae1c77aa6c20247d202fc09fa1 |
| SHA256 | 2b94005f0e346190d6ba38deb3763858acbdae197a6a200f0c7c1220f5f5644a |
| SHA512 | dd637977954052362cf59ab76b8d707243d519398fc51e188ebbd882d4b82abd3cb18f80d0faced0fcd37d06373748ebe493faa0b45b12d41f0af1700c6ece89 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX8EDE901DA70E4BC3B0DB5C983EA28B0D
| MD5 | 0b62c869e1e4e394c4d980c149741eba |
| SHA1 | a26b25b0cd77f761bbbe727587890e135e512306 |
| SHA256 | cf230de22d3c89ed0afbbf905ea2d67427cfcc97404cea54845ced8b4cd8d4d6 |
| SHA512 | c905b0a82612b033fc8f674d0828094ba5737dff9864e95dcd768b660710f83ec3617688beec2ee4fd6c1ca31eec8d2d70df9868273cc79a59d0346be83986d2 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBXDFF8374E44C54697842FC18A9531B6EE
| MD5 | 9de52d85b06da1acd48afa0d6d1d19aa |
| SHA1 | 6683b9c8eabeb1f315873fa6bcdfaaafa9353ad6 |
| SHA256 | 8b231ef4bd7d12979f583d8c1b89c66ae7e379d6557a1bb6bfeffcafc15f1a2b |
| SHA512 | f3c1210177102ad92dc8661720f12f4c6aed3a86991b59c823471464feb2eed41cc1512acc864cdace009852380701c20a694fdc0311d5a023c2b9298979c8fd |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5965db33c00199c8da043230c1beea49
| MD5 | 3ae9eece15951e58cb3c3333675f16bd |
| SHA1 | f68f72eb957241ed71bf15acf71d515361c70398 |
| SHA256 | 262a1a8b853e44e5ea0f8a61549527c9d7ad4a61c43fe03c062297251ca0ef2f |
| SHA512 | c1c4a46bae66037adce49c680b42c91f8a8f3b91fa21da308db6e0070c605f0b6a072922adb7978c11b83912faa5c82fd134d3a38ad7b34842de4c0514dadb3b |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\774ad174c53c04e6b1a29c22a5f6e32e
| MD5 | 99bec00bfc46f3e950ee281f6c95acbb |
| SHA1 | 38ab6e7d03e5a58a32fa8b93cdfcf4fc1a959e48 |
| SHA256 | df51d04572d489f40be555b7273f7ed2e772480f2827e3bda6213fa38c909328 |
| SHA512 | 04d346260c3083e318e1b7025e78693f97ab7da9511927efe02e9dad7c96755df7b3dec8bafd175c53514bef532c24846b8e9c429ab0f7942bb9adcadb2c757d |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\22b19b20581c5f62166a73f4ed0991fb
| MD5 | 908169b22541e44d56f5d1909909805e |
| SHA1 | 40f82ea8fdfd3295706176ce7ba412e753f8eeab |
| SHA256 | d52f23e90b859cc5787fcd15679a6c5ac79ea5bc9b03d5f58e6a67f57afe5bfd |
| SHA512 | b4fef403d66bc05f31fc0929d38f44ac15ff6f2d3cb02160073a9d939ba28e985fa77521e558ece1c4ffc73c720c63ff263ae14adb2ec7b19d0cdde82513efcb |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\3d56eba3a93d78d2894db1222fd3d761
| MD5 | 2bf5ec84b00457829b29234293136fb3 |
| SHA1 | d8637a4c5ce61c9d460951a0706cedd1f52b749a |
| SHA256 | c3ca3f679195ea7d40e1889d895e0fa78b95c2cc64bbe325f57de96430dbca8b |
| SHA512 | e98aaebb04644759cbd7d8daf93973e88b678776ffe47ad4507a85910cac4ae7fe68b3bc1f441567711de6454e504797d090a66ec1a9bf0f444ac7f9429333fa |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBX18F949E8F0A349F8AA3235272C36C7D0
| MD5 | 934a11b8eaef18e6790e660f167b251b |
| SHA1 | 1195e4573af3ac1c966de8210b162d76f57df7e4 |
| SHA256 | 8a8ffcca05368fdf6f8941aa5ebf50c565c4946e660dac731827703d5d36665a |
| SHA512 | 7b9ec190b7cbdaa40921a775beb6cc245f9e92b12785d0c1a9fc6285a996a809a2c80546a099fbdf5e2628404e4cedc2ab652f3e02c27012fd2fb3ea6d1ddaa1 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\576c7360d7dbf5c209ea184dee932ce8
| MD5 | 8b87e00e15e8b22c07fe61343b921def |
| SHA1 | 5275488ffd82741832f38ed90f0ba311e06a8c67 |
| SHA256 | e9bbf61c79723b15b5210f18154f102fc48902e154ef8feea2527b78e5941103 |
| SHA512 | 0aa79e6ac8b69bbfa10dd41ea6200ef2ba9c7354969a74deacbc36e5cdd79093d6f592aecf35280beef8fb51a520ad0f80a44d76e63135c1e2f5fb19bdd4ba23 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e60894907471600db01872a1741a0bdd
| MD5 | 5bc34a1c60d2a4bbe7441e8307189156 |
| SHA1 | 136eea02e3c374521146b9f530ad9c1151e20a37 |
| SHA256 | 563d0ba1f9dde1fa635ee6f29925712b5a162396d7681d8b4dae1fffabcf5626 |
| SHA512 | 5c542b3aa5f8036901247fee55c187958546966a9dc6b34c291af2d63fe0c3c8f92f3d87466e02e3b124f4972b1558a743e927520dc9c3fc5256ee8d066aafe6 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e508bcc64367cf9b98fe28c4255655a9
| MD5 | 82b21f9bd843529c51bc0e290ca119e5 |
| SHA1 | 697c8e0ec246effbf2d047870b81f701756b591f |
| SHA256 | a7f86e25dfed056d6c9833e367cb58dec30c5707046b9941edb54726c78620d6 |
| SHA512 | 8e1ecbea17605f90660dff9c3918bf0ca7a4f661611ca0796bb875098f15d1c1e3dc595a0337162c26ff78949aa66c27f883a71c5c8077f9c29faca1c92c4889 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\4bdacebda49ebc2c2d118b7ade154ab8
| MD5 | 46fe622ae1ed5e04c8e870d2955b0b5b |
| SHA1 | b53f9d01b0b5eed94f7e1efa209fc6fbc95e9006 |
| SHA256 | 3f64186c98498258f668809710386563ba357ebe3f72afe8da26681539ba6254 |
| SHA512 | bc03f8d6cbd1b1dc2a5d0c444d840dfafe51af93fc09b8393f921d5c1e26b58145280d4d51086c3ab9c4938191221c08f3636ad9f317ba718a45fe265b17f723 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b36482b1edea43f2633ea464f06858ab
| MD5 | d6f5e76b38b611737bea4df7021a180a |
| SHA1 | 180495d2c8f89bc65cea42c5cbf343e0f3e0db47 |
| SHA256 | cb53664e949e16db8ddb57ebb8146b13b785a6f57b9feaf12109670963efea8b |
| SHA512 | bda67757d47ae3e15b5278a8fdca0a73c1aaee595a27e664a936085ff742dca717b3a1981340589d0a270ea93cf3ccf05f61872fe006c33bd52dad8d61301789 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0da1eff9a99725e6873478bb53e6ad07
| MD5 | 20a9b87070a921eb6ca606f4b49e4ee5 |
| SHA1 | 500f261fd7bbcdaf2b4b2a3a6fa6f0cc69836e49 |
| SHA256 | 0cafb5b24a63bf21914494b4800b2ab0aaadadf01fd5413b85ba98b573b8cd61 |
| SHA512 | 65279869345c2add4d752e8db9b2b5d57f2f21f7441559a76a8c1dad56c8759a37bcc0741bb96164e874fa8062e89e2c200816625328126e019b377e79a973f3 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0e72d04ad553b3d0c14270c19eab2986
| MD5 | 71998edfcaf6236c9cbb0100558e9e10 |
| SHA1 | 6efcd23ccc8e4db8814e5a2e6df0db27e198ba81 |
| SHA256 | eba46b16e0d6b6402fb3c4ae1ddb02615263f553b1102c0ff9c7d1b939f30754 |
| SHA512 | c81c7c5c19fcd4999b9b0a7abdf044621ebd75fc6ab4058472a7e61af90f2fa021e64040e179e98ab7d31bec33ffe042d93025ea01dccfccd014fa0f72588bde |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\912f5fc3f8ee84a59c48c411e53edbb1
| MD5 | c77201c032a8d835884aaef460a86426 |
| SHA1 | 65082a70376eceba181d6a51f0398813e9e3c8dd |
| SHA256 | 6d97a18d7dd1a3971760a44b5c85aef291e6338c1e926ebabca6f5fe31c675d9 |
| SHA512 | c66c74ed3df2b1f39f047cb8ae6ef52275b0a3ba2e631ee78ab5af54122fd8a2fcd9dbb9a4d8a70585f50edfd16ab95e4200ec2e3599c28adb8289a8e61afa21 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\84757e79ec2d4ea81334496509b1a323
| MD5 | 1c289c14c895dfdf05610074041c670e |
| SHA1 | 75ec8d8c4bf89b0d0ba0c1a3487c11988019e975 |
| SHA256 | 7041f621e57bb76b41d4b329081403cc6bd5a161f8a45ef494f90942762ebbe6 |
| SHA512 | 04c7d00b7225f604b32a9428860bde90a0a432044878c1060b638761ab8aba20dd41b8ff98e38f98687b587818a13a7f95f32da5ca839956ae56da54dfe3b079 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\RBXD58834CB39B648548832A5084CE29FE1
| MD5 | b04c0dc18c7d55cd67b193981117e8e5 |
| SHA1 | de1b8da5292626c82c5369243ab17e1fe87819e8 |
| SHA256 | 0e9e0d48cb004bf17d389dc2d43451e7c45546210703bf2c36048568477f538a |
| SHA512 | e6a2aea601a6cc021d9537fd56eaf034dbc5932f9dfeca57fa69921733af8d1c22fa4997a596f2895ca60a9a064ace6a135a8c5893381595521da9cdcfcfbef4 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\bbd32ecc5c32b11bcd2509d541b5579d
| MD5 | fcf7972a3c5bd7a9a8239778acbeef31 |
| SHA1 | ee81b0e3c6d7d6599776bc1d18c207d5264299c2 |
| SHA256 | 6854ba55b5f4061656e4660ceb37ef25a108dff6f96167c5b2a67e291ee9f56c |
| SHA512 | 48eea8ec572bd641c02e860baa0a11c47f65f1f450ca6be43f3502dc8294d9ac6d495ba3268990a867a271a6e2753aa2d2b80bd84bdf77d99cd1c6446a4e0209 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\767fd1c86a6438f2df71a3ad990afaac
| MD5 | 11d79fcd364666231e07a3693eb7b835 |
| SHA1 | ccd9a6431544391141c55a752576e10d2d7ef340 |
| SHA256 | 0e529c84e74548c38c8af6a6130ae1ef4f38978fe24ac015312699c80b7b1516 |
| SHA512 | 3f7f2e68d136a449d2ba7b60a920b7db998d6ba70ec5238bc93eea1798ff224df81de5c8f95ef99c9955660db1cfed80f502caf614c074effdcf36ddc70529e3 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\0aaf6f7317997d554f4a87946e18f4bd
| MD5 | b7fcabc842e34093c2d79eddb9b0a14b |
| SHA1 | a6ac7bc76d847debd8851693a34c9d4652770ec9 |
| SHA256 | ea654e6a85aae695ed6a83519d28e14c497685a7d9a1e3113de375dfad9c0105 |
| SHA512 | 30bd3f1a0f400ec09fb702f60da46d66415fcfbeb38f0c4ccba33ad9ec0f31c536dfa514ab06a7f4fe96b7685195a69f9d30caca2244dda3ec8866193f2ce26c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\373eb9f859dfb4f553b19748d262bbb1
| MD5 | e6ac2d485aad3b98341b7d126a034c04 |
| SHA1 | 4193eed9387a9645f6cb6323b48f31d4ae7096c7 |
| SHA256 | 05defb267e9ef077e09014672106fb227f7166552fbabb131ca26195fbd32b90 |
| SHA512 | 18ec7a42adabfd627061a45546b2499f9cd51650ee7d3d64b1c5eac1920771f093da37656ae8a07cbff974ef8f1328eb74392d87d6aca52da0d8dffbef4fc700 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b2f20103cac5461a1d3547c6e14d7587
| MD5 | 1b9490b907af8da1fcdcca50c8f65b90 |
| SHA1 | cc193d424cf6411e6354fa24ab94a1edfd252cf4 |
| SHA256 | 7332f2665454eadc72aa894f2dbbe8369ed53b1462c8951d2c0f3e1f09616397 |
| SHA512 | bbc0bd3e165b69997bce74bf28349edd89dc8e7509457c8a40df3de21745f3e63d0026101b4a31bcdebe0411a620168b49ec0f0431b7ed2315f92e346cf458b9 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e81489ca248da128fe61473200c5d020
| MD5 | 520ab766bca67603b739d14545224a36 |
| SHA1 | f4034ed446290fc46ec6c34c2477b55d6a07476e |
| SHA256 | c7a8d3923046b6f77cedd9fe94b6dddb725568999a48265e7457c67ede70df5a |
| SHA512 | a13593c5e7f348838561d4afbd8cbb15fb413af7db59f462b0fb87727dca3393b8d1a470b18cfbae8161755f5558b84a23f7d814578882fb1c0fb51a11d0f2b1 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e91043f7393d8df20ba8d27e796875d4
| MD5 | 636cf4edf429497b2f383f3300be47f0 |
| SHA1 | efde4f6f6e770065c5f81369ec1f93d7fe12c271 |
| SHA256 | 52a6ac9a8a929297951fa93a34df88cfc47af72642ea7b1682358854a6212156 |
| SHA512 | 729f7d68d0cdf6f3ad384b90716c68620f7defacd7c084d829bbb1c6189daa4bd3542636bc0f410a81176878b4327ba9592d6cdcd156a3d09bd425b8cd762776 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\5a6e72c60dbb9f47a2ca09f528e22320
| MD5 | 41a325b7d4b4cd1a55c4a7f5ea72ee5f |
| SHA1 | f1fc12efd2a981f62b2ffc98d1bf7698c96d3c75 |
| SHA256 | 359d0ab2fcee837460c647a4430f1d2ea430c82ba241571652a2400e02d7e447 |
| SHA512 | 07ed7fc1f356210dcef269fb9af705761e3c55d111db85538b365fc1cec71f9aeb6b84a45c0708d1bef823b89e20bc12654d401dddc1d37c1f0f8d9625837fc1 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\eb9ee8cc819203f05d7637ede0beeb9e
| MD5 | a56419bc5591c9df7bdf253e676b255e |
| SHA1 | 9612185390e998ac3565e7c757f8cca6b9b59872 |
| SHA256 | f1335ea78520b8a7d35be3023d35c753c284ac25e749a829050ac047d6b62ceb |
| SHA512 | f028a91defe8354edf28097deb334fe212581ace1f5758e4b5ebad940609cbd17d6c09caa1c86afd9033120329248c08694830b1bc8b84572554cae33224b185 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e628708210857eedae1e15dedde2b0e9
| MD5 | 4d56158ef4894e8a90a712c7bb83f344 |
| SHA1 | 799f080b7fbbdfc974a15b9d7b674835480178a4 |
| SHA256 | 431d99c76df973fa3bd4332eb9ae76b3c7eca9cdd9d2fb2826452a754a50730d |
| SHA512 | 1be664d4093aa473227e4cd85de979189ad8ad55c4f896395a4bedd415afbfa44b7ecf32b0c2987c2e34ab46cdb0d001975ef54b43e96e22114320dc761dd907 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\2b30553b07e18a0d003e4a1bebbd61a6
| MD5 | 09c26f8cac35fb8e115d32ac102e5f16 |
| SHA1 | 7bf890275ed4c9e158ab1bb2c2af6505cfd54f89 |
| SHA256 | 751554fba217c8e1876d769d3909a63fb3f3dd7fa4ba9a9e7baf0f75e22e3f3e |
| SHA512 | e608500fd78d4a687adfdb9bd69160b44ec3ef564c16fd7cb5e4517f9d2acc64254d3f7bb3d95db27bcab0b01af668ad92c4b7b258ce8a54804a0ba491c39303 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\612637e2bd4f4bb37655abf718961693
| MD5 | 616d0c52e0ef136c2f8b8b77377062c3 |
| SHA1 | c4e0a6ec4e086c245b3c875a63163b73887a2750 |
| SHA256 | 1df73596560f9bafd032d4b0aed20f1786ae5f5dceeccc9366e5eda8ad174628 |
| SHA512 | f3c55d1b0c57f053bed557087110404374da0a996976428bb56c442fb73a80f9e57e99c06db6f55c024722cca8bb6006aac27ec46c1e9c8ea4db2716d51bb26d |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\554149bb50d82e476d8024535fe169aa
| MD5 | 9dd646d41968926843693c0143cf48d0 |
| SHA1 | 7d34e1eb33178f572b6558a4dccf448f4b88c96c |
| SHA256 | c764e8c3eee83026e101337dfe15761e2bd2fd79ca123b91652e1d4b0ef1c915 |
| SHA512 | 617d1558aed5da0a0a4e5aaf76a5f5e004b494cd448ee4f9ce468498e9445af053e6418c7273297076d65eea2782f26e1981d5b58daeaf02db7ea9e36a43934a |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b3002ba810fd3dad730f64dabe06055c
| MD5 | 8647672359f63aa2ba975d707185e278 |
| SHA1 | 9d8dc7750b803b2d5d6ca624b44609c05e359b33 |
| SHA256 | 01c312a920d09eacad3def988b53110ae518a291903422b5e21e46b6e7ea020b |
| SHA512 | ab60d25de8010b3d151a6e2f31f7902eaad55087e1a1d3a7b9bdc481278d0ca68ae4351e12ecd07dc21c92cbf00950d79bbc7d70fa27d769624d105a0fcbdc69 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\15aa102399debb391f38fc5d43f516e3
| MD5 | 2c2421dac112a9f08f76a83c57b9be7a |
| SHA1 | a7dffecabf5cb14b28ab1edf58d77a60859ec7cc |
| SHA256 | 8578fb02c9c6ed2c0996ea5bedfaa1c86d13b5528a4929f5c5fa58d7b9fba7e4 |
| SHA512 | 233f0c1c578412e787a5e4c469bd853a0aedf897d1363eef729c6148fea7c75078f6af0c93a4ae27c90e4f805c9b9cb873d163ba4a42bf8ad54665cdd7882127 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b17bf7b17725fd2991e666a447ba335e
| MD5 | d59f92d94370dae20818a6c9276ee464 |
| SHA1 | 00ee82bb5c4047c628372cb0476fa088e78badff |
| SHA256 | 96ab5afa8bd06356447cc97969dcfd08b8121cc6fabe1d23bdf5c07722c9d515 |
| SHA512 | 8c616b95f7d5b848471690082c583f8f64db4736593f22a6db15f3bc7f75df854525d6380eddaf8d72e77178976bd7dab0ee1cc398d4820925f0b7378c345837 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\25899a90c7cc48a4445f95530828429b
| MD5 | 73fc04ad82b32a023d9dad583389ba51 |
| SHA1 | 6a6766e7ad471e3413b25e3280dfbf2b8bea4b85 |
| SHA256 | 340611deb4612a9602d6a5474347b93522e3b0dda29066d6ec756dbb32029b57 |
| SHA512 | ec6a0b0cf269923d65eacbbfa58a8d32c3cf0c565e32b20fe5ff80def360c01f0e42e2f2fe47686690cfa5e1237fc0a85f82e2ade914ad522e7fe2dde5f174a2 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\c44daeb46ad8bd1a496998a640c77b47
| MD5 | 23e6cb2942e5b2a3bb7c75cfafb45440 |
| SHA1 | 5a75dcbe56ccf2413ab5966964cd48c40483855d |
| SHA256 | 477e431f4cd8994b51cbd3f5813e155a1c20494e1fdd9d3c7f96b3682736ee69 |
| SHA512 | 5ef3c228255023e9e13b6f8b13e510ef139f00d94a92541a84f1d780163a421501b0074f4033155755d385167ebb24864389bb3ef76e77b5ef8e721864ccc86a |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\d85e8570fc43b4d444193e0c1225bd79
| MD5 | 9f6143bd48e89e0706ac1280f06229eb |
| SHA1 | 8fc299926ef3ecdb8087e1d44782cf502024f6b1 |
| SHA256 | c9fafa762246c06ef15e98437c1789b5adfa61b3aa7ddddd0abc1b588b795f57 |
| SHA512 | 40bf93315afe60612cfc2379844e325c5d74c84edaf01e5a9875126d73ed2c5e0af9fa384777d94cf3bccba1c690e6ebb78d68ebc497beca27abedc2f469970c |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b3f692949652f0471893c77f9496d15b
| MD5 | 309694506a96de053ad11a13bd28538d |
| SHA1 | 2e5ebbeb484a103b46221691bcbf9059d237bd20 |
| SHA256 | bb03b0e6a4ea12c1ea31613a7781444f22e913c6de10faad59d108843d200617 |
| SHA512 | ec5b6a54aad033b1cb9e35af707832e78750f71bccaada6f536721696d21eadf508253bf53015f2159e447466eb833bc4402242c279e09fd432727d1301a844d |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\a2f01eb7a4a4966d9cbe25f05155189c
| MD5 | 286120f54763b876b570eeaa81a48481 |
| SHA1 | 8d358b0cc8b337e002bda352ddcc65fa3746b37f |
| SHA256 | 0968a31832a539d69331c2d385509a8f96c9453c21d6314502aaadf6495a52d8 |
| SHA512 | 9e630f9fb9f1a9a8c4eb0f88dc1e4c4d32312e56e9c975aac308792e75c5dd3220d019c1084e28dac6edd9f5079b7d67f3fd7f79c23fab952854986a92f20cac |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e2ad0f4d94a678d0b3b42bafa36b89ae
| MD5 | d15ea25ae38c4c21c8e2285250b09fb2 |
| SHA1 | d2d33ab800f1dc0b1c4f13eef2a05e19b981a76b |
| SHA256 | c744d841131f10dff209a1460c61994ba38f2ac208b35e5377e338d0c606a125 |
| SHA512 | f8c4fd7d970762cafd5279e40748293cda5b996a785cbcb7c19ad0ca6b0772bb917b3514a7402d8ee45d62bda5f1d19cf219c6f048a878368c00a5de448b453d |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\62df5184ae1f060c81401754ada047ae
| MD5 | 80696c7595540638b24e76d1557af8ba |
| SHA1 | 8d58e475d0a3c629e5e4781eac657faf6d9ca22b |
| SHA256 | 7bbb75c1d5624f35dbfc6f31ef170d3aeb92d1058ddc0784ad3f3b560412378e |
| SHA512 | 951013b48cdf1d5d071f161e100359022c300c41d9d32c5f96bea7613d94cc45fa609f7a9187214333611fefd0376bcb401d77ed9cde07ba4a5cb0211ef16d95 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\a97fd9175850260741b74f919cc409d1
| MD5 | db1eabf353e9e9d193f15131888505e1 |
| SHA1 | f0383c6d4ce197c11605b1d2d69797799680ec42 |
| SHA256 | 3045e626203e23090b4dacf13fb80118deefadeb110b206f8bd7fed4fa88dfb5 |
| SHA512 | 91cab538eba6c3e18ebc61242ccab59d367ba2e75120e88b1fbeb1da7c890f31bf5b2d24349e6d2cc4db53646f21c1100a666c245302118257c087723692e815 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\febbcb5915310bc3b8058391378f832c
| MD5 | b4d7994909cf1dc455e9b0c3f9c45641 |
| SHA1 | 78622e6ba3e6aa1243ade852a7b8b5efbeead4de |
| SHA256 | a990ecb0d9158ca6fad031aa274af66d7ecb5a59743d1dbe6ee1227afd19b3ae |
| SHA512 | 904b1ca6cab5ef11344d001b5f2ebd50fee48777eff413a86629204dcf841b06bcf185c01b7b76f0cad8a5e62dd17d5cfb026f5a95b3bb521027ae7947a6d41d |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\ff9a60ec2d57604105a3a09130a4a4b6
| MD5 | b2bf951020c8c23c4aace10e4a3e7511 |
| SHA1 | 84a24501e034b083917560736d6e466e61f40418 |
| SHA256 | 35fda1d60e1c3c184d484bc80d0dfe5430750aaf0cb849b43d681acf79e7d541 |
| SHA512 | e3bd8c2ac48ecd815b2fa71c3c0c4f450447cc5166aae5235b2b906ecee02ce0bd2de3ae9871404d1456bfcf929614991fea6083b1c61cbadffdeec3cdce4ef7 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\90ba59f60ed0fa6e2744da18f6b9aab6
| MD5 | 78597cf7ca49787ffa824131d9d2b196 |
| SHA1 | dcee1175ea2f3ec558bfad0baa73dcc4c0107ea8 |
| SHA256 | 53749cd382c7356a26df2111b6e91596a65cb0e9db2da4a458f17d0beb188753 |
| SHA512 | 574238b44785382a63c57c7bb2888836adf249beed8cbb7fbe20c69d27b66c02894bd989350e72ef209d6972e73d17c0f469c0deb2c7e5f65db4a9fc4f949be5 |
C:\Users\Admin\AppData\Local\Roblox\OTAPlugins\OTADataCache.json
| MD5 | 11a17ccab96a24de7ffcaef84e378fcc |
| SHA1 | 73f18d2438e46d1006506ae6edd754e17ea25106 |
| SHA256 | 05858b9864ab11fee682bb6e6028b56d6328dca077041f58f2989f24ae14d9c1 |
| SHA512 | e3d6fee7cfb04e5b03c0782b5f647032fe948ce2a85e225b0cdecd8f2729e6ef055caf171e0cdaef50179f3e90d01a1589af44a61415889f5b4cb18db6f6b348 |
C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json
| MD5 | dbfdd2feb18197a4d14d1dcb3df8f0cb |
| SHA1 | c498b98088b8cfe721974d27ed378c1825cb2951 |
| SHA256 | f057ea69b7f72f0af873c9cf1e5f7a1d0322303a6197c3c7685189d154b2fcdd |
| SHA512 | 78f8387dbf8b813ca9a4c8cdcc33a37ecb00969835531a466c64bb7ae029d065cb303a2e2be9ac83f8cba3e34f643b42caa0220d7ce2e5024729da9f07669582 |
C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json
| MD5 | d1a1a68e44e827d70079a5bf729a2608 |
| SHA1 | a02f2f1126e095550f3323efbe33cad83acc0051 |
| SHA256 | d169c67242fb1c77e1f524107c449d7667b390fcc2bb930d11120b1f605decd6 |
| SHA512 | e2c1c04f7ae79224cf47992c0015eb6278890889f7cb4a0423aad119d6c7f094c5fe8808068beaa2d89a9eb91687a83254d811efd5b419691356a4663fd538d6 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\a69cb57746105c17e5ffc24141320a40
| MD5 | e304b20b9ad1596ed700b3a772eda6e0 |
| SHA1 | 06cce004b98cfe26eebe94fa5c2970d04c4fa910 |
| SHA256 | 379a98d1e9bbf2f6b14592f062fd2a105b2890fe3b471d148600f94f83f3f06a |
| SHA512 | c575d3b3bffeacc1cb797491c44a4cefb739cc4aca18d0cfe6a1487503a633cd4fc9b6141cb8eb9831e48211804d54c29107a73524789c4ab3803e9b7afea65e |
C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json
| MD5 | e434aa2734b3b9e81853d3ac0040acd1 |
| SHA1 | 7e28f94b0d1f68241c4772c20f978002cef85979 |
| SHA256 | 65a9bfce4ae10dcd28fc549f399798cc3cba869d15cc250749e7356cc048e1ea |
| SHA512 | 80e495d79abcd58f9b81365157d9f30a4de63fb3057a01b9aebdc531bf6f105d1b0c6f347d149a791e12b0f5c436621678d06656bba99f644d0c871422702d2f |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\53d827d30453e92ea03c8733cb48667c
| MD5 | 664ae18354e58b2d852a7b8399e6e708 |
| SHA1 | e35d12cf96f15531a46201b412a3867245a46bec |
| SHA256 | b5ba16a3e7c5871bdcd4c73f38c5b26541004ba5d6359f25b9003f9748277a9f |
| SHA512 | d93a39b1685a48ef389e73ab7c4953d18ec141099232f0de20040261906cc93cd9503c3cc561e56308a458ab81198a8220f6431ca51069f121b42c932135c292 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\85140613b74777b5ee2cc331328d0ff7
| MD5 | 7ae274566eaa3b3c6df1956bc4d460fa |
| SHA1 | f649839650a04a11e17c54a9520c4fa99843d38d |
| SHA256 | df81fa025d4dd2ae0920d0f266f19eb419f5e85855effe333114cc68ece56ff5 |
| SHA512 | e3d98097901f134f3e6bb9bd4e46c68155c50d9402b59b46bbf3c745ac27cb9c96977dc879f9995c94832f5f2e5e92bbdf446cb735ab5e9d66c462b6c0021423 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b0cd0725ce628c802aea646becfd46a5
| MD5 | b7c03229a5a8d6586e4532281bf1bcf6 |
| SHA1 | e2cf4dcb1a5ed9ec90882b05fd92a1cb2d9b7031 |
| SHA256 | 2f68626defe72fe2f0f653e4f329dc40a4da28ec0b6805b7e372df74503490e4 |
| SHA512 | 4b33587bd1e348c0c3c90ab22556c1a1634c9c16a7986d5ca92cf409a6bc9a2d4ef6ff29f1c56fbaeea7ea42b9e6bcac980f3a13869c7321dfa94b3d4c68498b |
C:\Users\Admin\Documents\ROBLOX\AutoSaves\Place_AutoRecovery_0.rbxl.lock
| MD5 | 478e5d8499f6cd22df53c3007d79e1dd |
| SHA1 | a2bef4a1d3b697a490b965c4df7947069215746b |
| SHA256 | 81eec1b337c19b2e247fa9ed40795c94d816084c797b5d8393d3b8be28b416fc |
| SHA512 | c32fc0d54907de766b532e284fa0b9d01b9161639a7d52543759833acd370dd2d46ec26272d27a1b0ac3764ea3650cf7f70c394ff9f05fc4b6b29a8253f1993d |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\af1a57c19bc4786caf5e6b37d4fad1cd
| MD5 | 881642b23990f0f1a67189854f575852 |
| SHA1 | b52d1ccec50657df86788bb8f306672a0bec4c53 |
| SHA256 | c011b028a4379cb8f69336cbb6ec3febfae496482fa707398d723f2a33e55756 |
| SHA512 | 90fc23f11d5f11e7cca76a507145e25e6bbb1966b250c91c30208ecf2afd002ecd2074a8f4249ef4e617939524b2c876f30b16e65affc9e400af5d10131bd77e |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\6308009873b6e28576872a25a9dcd1a8
| MD5 | 284e354391e3141408b2887edd497667 |
| SHA1 | 62c5ac5131fe621b3d906f8282ef464b917de830 |
| SHA256 | c1133a2876c1404884046b367a7249a3161c9710677fc65ce76983698efc77a1 |
| SHA512 | a2c51e760fd06c7b5c3765beb7a7648a46ba187364b07538d16f5afba9977db079e2e27033ad47ce21c8b17c70906ae6fc8181b4b31eba6963a2ee7a4c451fd2 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\e6b482665e130d2c6c4c2f7990354e75
| MD5 | 8a5c141138aa2c360133f94c8bf31d3a |
| SHA1 | a7de3e08e7a9ee29e6dd49630ee3fd507f2c5ea0 |
| SHA256 | f606e0eb5cf0bccc93270b05af2913f7a3f9c2805b26a4d87094a6ceb071bcad |
| SHA512 | a8ecdabc0813fec394c340d51facf4e730e9c19299218a000f6012de78cc91aa0a9be22e5e0f67bbb5423d7dab9e1f902b4e71dff483c2c5aad0d310a1f58e66 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\b9b8330fbe1e9c0ed3747d27e31e2960
| MD5 | 687630676c2e4db207debde7fcfa6667 |
| SHA1 | 6e240c56f97165777a34bc0d8d1d452b2387d22a |
| SHA256 | 827ba246a572356588dfbd73a113a59cdf126bfd1d1bfa5a6199f5e961979da7 |
| SHA512 | c1ae5e787abe3ec64b96f311ce438b44844f8f60e5911b092d36819885114f472230c24c971e85d5a78247af9cc80155c331a8e2edaf19e7d89851827913cd50 |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\00017aecdf8bcdf3fa8898c25225bef2
| MD5 | 35d3624369da9303e6f61af3e99374ce |
| SHA1 | 57c2245bef25de90532c3e8704348017870f3e36 |
| SHA256 | 273e3a88b1f7eeeaa321b1a90f26a6b6704affd44d5017161780455c003e0bd0 |
| SHA512 | 4857e3b90d5be65b1fd6f4fd29290d6b0a23953d5ad6fdf4d98c57f4323e18563517df148cc72c35764b97e255183a432c309dc652bdff670014d6a1d9b8bb4a |
C:\Users\Admin\AppData\Local\Temp\Roblox\http\397d69adf7e99bb671075432af507ad1
| MD5 | cbec6cf22a54211665c282c83232eb23 |
| SHA1 | 9082c7c2df230cab124696474916ad71a7f7b017 |
| SHA256 | cc7cea4fe17c915f6b75b65e38fcd3c3cd6f036a739bf2c72114bd0721a6beb6 |
| SHA512 | e57dfe5c00f2927546c8f2f4d6ea56ebbf86b98269ea9052881314cad3ac907c3c780950593360938ff7c096595da7e5f92399e4605d584dcc14e8a9054f3d47 |
C:\Users\Admin\AppData\Local\Roblox\4155035591\InstalledPlugins\0\settings.json
| MD5 | f6474f5fae6b52c763bd9d7a192d4dd5 |
| SHA1 | cff008be2c72b4a53a1b855428b087013cddf1ba |
| SHA256 | 57a4a021f5e20638b36b0166a744fe8237a4618ad5ca2e1965b00a9b20a18809 |
| SHA512 | 71cb6797dc0176c6f236b171c45b50d5be5a058eeb6c8d9e9f0dbaa9d6e1b1475ace3ebed433c747deac63587c6865a67af50c680bc42fde2ddec4d5aa94010a |